openSUSE Security Update : libvirt (openSUSE-2016-943)

This update for libvirt fixes the following issues : - Update to libvirt 1.2.18.4 stable release - Inherit many upstream bug fixes, including CVE-2016-5008 boo987527. For details, see http://wiki.libvirt.org/page/MaintenanceReleases - virsh: improve waiting for block job readines boo989755...

Ubuntu: Security Advisory (USN-3047-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Ubuntu 14.04 LTS / 16.04 LTS : QEMU vulnerabilities (USN-3047-1)

The remote Ubuntu 14.04 LTS / 16.04 LTS host has packages installed that are affected by multiple vulnerabilities as referenced in the USN-3047-1 advisory. Li Qiang discovered that QEMU incorrectly handled 53C9X Fast SCSI controller emulation. A privileged attacker inside the guest could use this...

USN-3047-1: QEMU vulnerabilities

Li Qiang discovered that QEMU incorrectly handled 53C9X Fast SCSI controller emulation. A privileged attacker inside the guest could use this issue to cause QEMU to crash, resulting in a denial of service, or possibly execute arbitrary code on the host. In the default installation, when QEMU is...

SUSE-SU-2016:1944-1 Security update for libvirt

This update for libvirt fixes the following issues: Security issues fixed: - CVE-2016-5008: empty VNC password disables authentication bsc987527 Bugs fixed: - bsc970906: Fixed a race condition in xenstore event handling. - bsc952889: Change hap setting to align with Xen behavior. - Fixed 'make...

Fedora Update for libvirt FEDORA-2016-65cc608ebe

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora Update for libvirt FEDORA-2016-7b7e16a39e

The remote host is missing an update for the SPDX-FileCopyrightText: 2016 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

Fedora 23 : libvirt (2016-7b7e16a39e)

Rebased to version 1.2.18.4 - CVE-2016-5008: Setting empty VNC password allows access to unauthorized users bz 1351516 Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website. Tenable has attempted to automatically clean and...

[SECURITY] Fedora 23 Update: libvirt-1.2.18.4-1.fc23

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

Fedora 24 : libvirt (2016-65cc608ebe)

Rebased to version 1.3.3.2 - Fix xen default video device config bz 1336629 - Don't reject duplicate disk serials bz 1349895 - Fix LXC cgroup name mismatch bz 1350139 - Fix managed save/restore with VM USB Keyboard bz 1353222 - Missing dep on systemd-container bz 1355784 - CVE-2016-5008: Setting...

[SECURITY] Fedora 24 Update: libvirt-1.3.3.2-1.fc24

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux and other OSes. The main package includes the libvirtd server exporting the virtualization support...

openSUSE Security Update : libvirt (openSUSE-2016-875)

This update for libvirt fixes the following issue : - CVE-2016-5008: empty VNC password disables authentication boo987527 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-875. The...

openSUSE Security Update : libvirt (openSUSE-2016-874)

This update for libvirt fixes the following issues : - CVE-2016-5008: empty VNC password disables authentication boo987527 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update openSUSE-2016-874. Th...

CVE-2016-5008

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

CVE-2016-5008

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

DEBIAN-CVE-2016-5008

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

Authentication flaw

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

CVE-2016-5008

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

CVE-2016-5008

libvirt before 2.0.0 improperly disables password checking when the password on a VNC server is set to an empty string, which allows remote attackers to bypass authentication and establish a VNC session by connecting to the server...

CVE-2016-5008

CVE-2016-5008 affects libvirt prior to 2.0.0, where setting the VNC password to an empty string fails to disable authentication, allowing an unauthenticated remote attacker to establish a VNC session. The root cause is improper disabling of password checking for VNC when the password is empty. Do...