Security Bulletin: A vulnerability in expat affects PowerKVM

Summary PowerKVM is affected by a vulnerability in expat. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-0718 DESCRIPTION: Expat is vulnerable to a buffer overflow, caused by improper bounds checking when processing malformed XML data. By using the Expat library, ...

Security Bulletin: A vulnerability in GnuPG (gpg) affects PowerKVM

Summary PowerKVM is affected by a vulnerability in GnuPG gpg. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-6313 DESCRIPTION: GnuPG could provide weaker than expected security, caused by an error in the mixing functions when obtaining 4640 bits from the random...

Security Bulletin: A vulnerability in nettle affects PowerKVM

Summary PowerKVM is affected by a vulnerability in nettle. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-6489 DESCRIPTION: Nettle could allow a remote attacker to obtain sensitive information, caused by a cache-related side channel attack in the RSA and DSA...

Security Bulletin: Vulnerabilities in sudo affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in sudo. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-7032 DESCRIPTION: Sudo could allow a local authenticated attacker to execute arbitrary commands on the system, caused by the bypass of the sudo noexec...

Security Bulletin: Vulnerabilities in QEMU affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in QEMU. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5105 DESCRIPTION: QEMU, built with the MegaRAID SAS 8708EM2 Host Bus Adapter emulation support, is vulnerable to a denial of service, caused by a stack...

Security Bulletin: A vulnerability in wget affects PowerKVM

Summary PowerKVM is affected by a vulnerability in wget. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-4971 DESCRIPTION: GNU wget could allow a remote attacker to traverse directories on the system. An attacker could send a specially-crafted HTTP redirect message...

Security Bulletin: Vulnerabilities in PHP affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in PHP. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5399 DESCRIPTION: PHP could allow a remote attacker to execute arbitrary code on the system, caused by an out-of-bounds write in the bzread function...

Security Bulletin: Vulnerabilities in krb5 affect PowerKVM (CVE-2016-3119, CVE-2016-3120)

Summary PowerKVM is affected by vulnerabilities in MIT Kerberos krb5. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-3120 DESCRIPTION: MIT Kerberos is vulnerable to a denial of service, caused by a NULL pointer dereference in the validateasrequest function. By...

Security Bulletin: A vulnerability in DHCP affects PowerKVM (CVE-2016-5410)

Summary PowerKVM is affected by a vulnerability in the ISC DHCP Daemon. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-2774 DESCRIPTION: ISC DHCP is vulnerable to a denial of service, caused by the failure to limit the number of open TCP connections to the ports f...

Security Bulletin: A vulnerability in powerpc-utils-python affects PowerKVM (CVE-2014-8165)

Summary PowerKVM is affected by a vulnerability in powerpc-utils-python. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2014-8165 DESCRIPTION: powerpc-utils-python could allow a remote attacker to execute arbitrary code on the system, caused by the improper use of the...

Security Bulletin: Vulnerabilities in redis affect PowerKVM (CVE-2015-4335, CVE-2013-7458)

Summary PowerKVM is affected by vulnerabilities in redis. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-4335 DESCRIPTION: Redis could allow a remote attacker to bypass security restrictions, caused by the insecure loading of Lua bytcode by the loadstring...

Security Bulletin: A vulnerability in util-linux affects PowerKVM (CVE-2016-5011)

Summary PowerKVM is affected by a vulnerability in the util-linux package's libblkid library. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5011 DESCRIPTION: Util-linux is vulnerable to a denial of service, caused by an error when parsing Master Boot Record MBR...

Security Bulletin: A vulnerability in sudo affects PowerKVM (CVE-2016-7091)

Summary PowerKVM is affected by a vulnerability in the sudo package. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-7091 DESCRIPTION: The Sudo package could allow a local attacker to obtain sensitive information, caused by the preservation of the value of INPUTRC...

Security Bulletin: A vulnerability in fontconfig affects PowerKVM (CVE-2016-5384)

Summary PowerKVM is affected by a vulnerability in fontconfig. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-5384 DESCRIPTION: Fontconfig could allow a local attacker to execute arbitrary code on the system, caused by the lack of offsets validation. By using a...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-5195 DESCRIPTION: Linux Kernel could allow a local attacker to gain elevated privileges on the system, caused by a race condition when handling t...

Security Bulletin: Vulnerabilities in OpenSSL affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in OpenSSL. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-2177 DESCRIPTION: OpenSSL is vulnerable to a denial of service, caused by the incorrect use of pointer arithmetic for heap-buffer boundary checks...

Security Bulletin: Vulnerabilities in bind affect PowerKVM (CVE-2016-2776, CVE-2016-8864)

Summary PowerKVM is affected by vulnerabilities in ISC Bind. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2016-2776 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an assertion failure in buffer.c while a nameserver is building responses to a...

Security Bulletin: A vulnerability in Python-RSA affects PowerKVM (CVE-2016-1494)

Summary PowerKVM is affected by a vulnerability in the Python RSA library Python-RSA. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-1494 DESCRIPTION: Python Python-RSA could allow a remote attacker to conduct spoofing attacks, an error in the verify function. By...

Security Bulletin: Multiple vulnerabilities in qemu affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in qemu. These vulnerabilities have been addressed by IBM. Vulnerability Details CVEID: CVE-2016-5338 DESCRIPTION: Qemu, built with the ESP/NCR53C9x controller emulation support, is vulnerable to a denial of service, caused by an out of boun...

Security Bulletin: Vulnerabilities in libarchive affect PowerKVM

Summary PowerKVM is affected by numerous vulnerabilities in libarchive. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2015-8916 DESCRIPTION: libarchive is vulnerable to a denial of service, caused by a NULL pointer dereference error in RAR parser. By persuading a...