Security Bulletin: A vulnerability in lcms affects PowerKVM (CVE-2013-7455)

Summary PowerKVM is affected by a vulnerability in Little CMS lcms. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2013-7455 DESCRIPTION: Little CMS could allow a remote attacker to execute arbitrary code on the system, caused by a double-free error in the DefaultICCintents...

Security Bulletin: Vulnerabilities in Mozilla Firefox libgraphite affect PowerKVM (CVE-2016-1521, CVE-2016-1522, CVE-2016-1523, CVE-2016-1526)

Summary PowerKVM is affected by vulnerabilities in Mozilla Firefox libgraphite graphite2. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-1521 DESCRIPTION: Libgraphite, as used in Mozilla Firefox, could allow a remote attacker to execute arbitrary code on the system,...

Security Bulletin: Vulnerabilities in Mozilla Firefox Network Security Services affect PowerKVM (CVE-2016-1978,CVE-2016-1979)

Summary PowerKVM is affected by vulnerabilities in Mozilla Firefox Network Security Services NSS. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-1978 DESCRIPTION: Mozilla Firefox could allow a remote attacker to execute arbitrary code on the system, caused by a...

Security Bulletin: Vulnerabilities in MIT Kerberos affect PowerKVM (CVE-2015-8629,CVE-2015-8630,CVE-2015-8631)

Summary PowerKVM is affected by vulnerabilities in MIT Kerberos krb5. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-8629 DESCRIPTION: MIT Kerberos could allow a remote authenticated attacker to obtain sensitive information, caused by a null termination in the...

Security Bulletin: Vulnerabilities in the Apache HTTP Server affect PowerKVM (CVE-2015-3183,CVE-2015-3185)

Summary PowerKVM is affected by vulnerabilities in the Apache HTTP Server httpd. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3183 DESCRIPTION: Apache HTTP Server is vulnerable to HTTP request smuggling, caused by a chunk header parsing flaw in the aprbrigadeflatten...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect PowerKVM

Summary OpenSSL vulnerabilities were disclosed on March 3, 2016 and May 3, 2016 by the OpenSSL Project. OpenSSL is used by PowerKVM, which has addressed the applicable CVEs. Vulnerability Details CVEID: CVE-2016-2105 DESCRIPTION: OpenSSL is vulnerable to a heap-based buffer overflow, caused by...

Security Bulletin: Vulnerabilities in git affect PowerKVM (CVE-2016-2315, CVE-2016-2324)

Summary PowerKVM is affected by vulnerabilities in git. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-2315 DESCRIPTION: GIT is vulnerable to a heap-based buffer overflow, caused by improper bounds checking. By pushing a specially-crafted repository, a remote...

Security Bulletin: Vulnerabilities in NetworkManager affect PowerKVM (CVE-2015-0272,CVE-2015-2924)

Summary PowerKVM is affected by vulnerabilities in NetworkManager. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-0272 DESCRIPTION: GNOME NetworkManager is vulnerable to a denial of service. A remote attacker could exploit this vulnerability using a specially crafted M...

Security Bulletin: Vulnerabilities in ISC Bind affect PowerKVM (CVE-2016-1285, CVE-2016-1286)

Summary PowerKVM is affected by vulnerabilities in ISC Bind. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2016-1286 DESCRIPTION: ISC BIND is vulnerable to a denial of service, caused by an error when parsing signature records for DNAME resource records. A remote attacker...

Security Bulletin: A vulnerability in libssh2 affects PowerKVM (CVE-2016-0787)

Summary PowerKVM is affected by a vulnerability in libssh2. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-0787 DESCRIPTION: libssh2 could provide weaker than expected security, caused by a type confusion error during the SSHv2 handshake resulting in the generation of a...

Security Bulletin: A vulnerability in nss-util affects PowerKVM (CVE-2016-1950)

Summary PowerKVM is affected by a vulnerability in nss-util. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2016-1950 DESCRIPTION: Mozilla Firefox is vulnerable to a heap-based buffer overflow, caused by improper bounds checking when the Network Security Services NSS libraries...

Security Bulletin: A vulnerability in strongSwan affects PowerKVM (CVE-2015-8023)

Summary PowerKVM is affected by a vulnerability in strongSwan. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-8023 DESCRIPTION: strongSwan could allow a remote attacker to bypass security restrictions, caused by the failure to properly validate local state by the server...

Security Bulletin: Vulnerabilities in OpenLDAP affect PowerKVM (CVE-2015-3276, CVE-2015-6908)

Summary PowerKVM is affected by two vulnerabilities in OpenLDAP. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-3276 DESCRIPTION: OpenLDAP could allow a remote attacker to bypass security restrictions, caused by the failure to properly parse OpenSSL-style cipher string...

Security Bulletin: A vulnerability in git affects PowerKVM (CVE-2015-7545)

Summary PowerKVM is affected by a vulnerability in git. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-7545 DESCRIPTION: GIT could allow a remote attacker to execute arbitrary commands on the system, caused by the failure to properly handle recursive clones of git...

Security Bulletin: Multiple vulnerabilities in Python affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in Python. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2013-1752 DESCRIPTION: Python SSL module is vulnerable to denial of service, caused by an unlimited readline function call. A remote attacker could exploit this...

Security Bulletin: A vulnerability in PolicyKit (polkit) affects PowerKVM (CVE-2015-3256)

Summary PowerKVM is affected by a vulnerability in PolicyKit polkit. This vulnerability is now fixed. Vulnerability Details CVEID: CVE-2015-3256 DESCRIPTION: PolicyKit polkit is vulnerable to a denial of service, caused by an error related to javascript rule evaluation. A local attacker could...

Security Bulletin: Multiple vulnerabilities in OpenSSL affect PowerKVM

Summary OpenSSL vulnerabilities were disclosed on March 1, 2016 by the OpenSSL Project. OpenSSL is used by PowerKVM. PowerKVM has addressed the applicable CVEs including the “DROWN: Decrypting RSA with Obsolete and Weakened eNcryption" vulnerability. Vulnerability Details CVEID: CVE-2016-0800...

Security Bulletin: Multiple vulnerabilities in Network Time Protocol (NTP) affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in Network Time Protocol NTP. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-9297 DESCRIPTION: Network Time Protocol NTP Project NTP daemon ntpd could allow a remote attacker to conduct spoofing attacks, caused by...

Security Bulletin: Multiple vulnerabilities in libxml2 affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in libxml2. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2015-1819 DESCRIPTION: Libxml is vulnerable to a denial of service, caused by an XML External Entity Injection XXE error in the xmlreader when processing XML...

Security Bulletin: Multiple vulnerabilities in file affect PowerKVM

Summary PowerKVM is affected by several vulnerabilities in file. These vulnerabilities are now fixed. Vulnerability Details CVEID: CVE-2014-3587 DESCRIPTION: PHP is vulnerable to a denial of service, caused by an incomplete fix related to the cdfreadpropertyinfo function. A remote attacker could...