openSUSE Security Update : libvirt (openSUSE-SU-2011:0317-1)

libvirtd could mix errors from several threads leading to a crash CVE-2011-1486. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4321. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0274-1)

libvirt was updated to fix some bugs and security issues : Security issues fixed : - Fix crash on error paths of message dispatching, CVE-2013-0170 bnc800976 - security: Fix libvirtd crash possibility CVE-2012-4423 bnc780432 Also bugs were fixed : - qemu: Fix probing for guest capabilities...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0317-1)

libvirtd could mix errors from several threads leading to a crash CVE-2011-1486. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4321. The text description of this plugin is C SUSE LLC...

openSUSE Security Update : libvirt (openSUSE-SU-2012:0347-1)

This collective update 2012/02 for Xen provides fixes for the following reports : Xen === - 649209: Fix Xen live migrations being slow - 683580: Fix hangs during boot up after the message 'Enabled directed EOI with ioapicackold on! - 691256: unable to open a connection to the XEN Hypervisor -...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0268-1)

This update fixes the following security and non security issues with libvirt : - bnc857492: Fix libvirtd crash when hot-plugging disks for qemu domains CVE-2013-6458 - bnc858817: Don't crash if a connection closes early CVE-2014-1447 - bnc858824: avoid crashing libvirtd when calling virsh...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0900-1)

libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call CVE-2011-2511. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4836. The text description of this...

openSUSE Security Update : libvirt (openSUSE-SU-2013:0275-1)

Update to libvirt 0.9.11.9 stable release - Fixes CVE-2013-0170 by including cherry picked master commit 46532e3e, bnc800976 - Fix starting lxc VM e.g from OpenStack bnc793900 and rh858104 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0900-1)

libvirtd could crash if bogus parameters where passed to the VirDomainGetVcpus call CVE-2011-2511. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4836. The text description of this...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0311-1)

several API calls did not honor the read-only flag connections. Attackers could exploit that to modify the state of the system or potentially execute code CVE-2011-1146. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0674-1)

This update fixes the following issues with libvirt : - bnc875694: Fix migration with QEMU 1.6. QEMU 1.6.0 introduced new migration status: setup. Libvirt does not expect such string in QMP and refuses to migrate with error 'unexpected migration status in setup' - Patch to prevent expansion of...

SuSE 11.3 Security Update : libvirt (SAT Patch Number 9203)

libvirt has been patched to fix two security issues. Further information is available at http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2014-0179 and http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2013-6456 These security issues have been fixed : - Unsafe parsing of XML documents allows...

openSUSE Security Update : libvirt (openSUSE-SU-2011:0643-1)

A regression re-introduced automatic disk probing again which potentially allowed to uses to access arbitrary files CVE-2011-2178. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and package checks in this plugin were extracted from openSUSE Security Update libvirt-4712...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0593-1)

libvirt was updated to fix various bugs and security issues : CVE-2013-7336: libvirt: unprivileged user can crash libvirtd during spice migration CVE-2013-6456: unsafe usage of paths under /proc/$PID/root Bugfixes for libvirt client killed on reboot shutdown. bnc852005 Also notify systemd when we...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0010-1)

CVE-2013-6436: Fix crashes in lxc memtune code, one of which results in DoS f8c1cb90-CVE-2013-6436.patch, 9faf3f29-LXC-memtune.patch bnc854486 - Backported upstream patch to fix LXC container failing start. bnc855239 - Building with polkit support requires polkit-devel bnc854144 %NASLMINLEVEL...

openSUSE Security Update : libvirt (openSUSE-SU-2013:1549-1)

libvirt was updated to fix 2 security issues : CVE-2013-4311: Add support for using 3-arg pkcheck syntax for process, which previously could be used for race conditions to gain privileges. CVE-2013-4296: Fix crash in remoteDispatchDomainMemoryStats %NASLMINLEVEL 70300 C Tenable Network Security,...

openSUSE Security Update : libvirt (openSUSE-SU-2013:1550-1)

libvirt was updated to fix security issues and bugs : Security issues fixed: CVE-2013-4311: Add support for using 3-arg pkcheck syntax for process to avoid race conditions. CVE-2013-4296: Fix a crash denial of service in remoteDispatchDomainMemoryStats CVE-2013-5651: Fix virBitmapParse to avoid...

openSUSE Security Update : libvirt (openSUSE-SU-2014:0270-1)

This update fixes the following security issues with libvirt : - bnc857492: Fix libvirtd crash when hot-plugging disks for qemu domains CVE-2013-6458 - bnc858817: Don't crash if a connection closes early CVE-2014-1447 %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The descriptive text and...

CentOS 6 : qemu-kvm (CESA-2014:0743)

Updated qemu-kvm packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring System CVSS base scores, which give detailed severit...

qemu security update

CentOS Errata and Security Advisory CESA-2014:0743 Updated qemu-kvm packages that fix multiple security issues and two bugs are now available for Red Hat Enterprise Linux 6. The Red Hat Security Response Team has rated this update as having Moderate security impact. Common Vulnerability Scoring...

RHEL 6 : qemu-kvm (RHSA-2014:0743)

The remote Redhat Enterprise Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2014:0743 advisory. KVM Kernel-based Virtual Machine is a full virtualization solution for Linux on AMD64 and Intel 64 systems. The qemu-kvm package provides th...