Security Bulletin: Vulnerabilities in Python affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in Python. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1061 DESCRIPTION: Python is vulnerable to a denial of service, caused by catastrophic backtracking in the difflib.ISLINEJUNK method. A remote attacker coul...

Security Bulletin: Vulnerabilities in GNU binutils affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GNU binutils. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-13033 DESCRIPTION: GNU Binutils is vulnerable to a denial of service, caused by an error in the bfdelfparseattributes in elf-attrs.c and bfdmalloc in...

Security Bulletin: Vulnerabilities in GnuTLS affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in GnuTLS. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-10846 DESCRIPTION: GnuTLS could allow a local authenticated attacker to obtain sensitive information, caused by a cache-based side channel issue. By using ...

Security Bulletin: A vulnerability in setup affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the setup project package. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-1113 DESCRIPTION: Setup Project could allow a remote attacker to bypass security restrictions, caused by an issue with adding /sbin/nologin...

Security Bulletin: Vulnerabilities in krb5 affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in krb5. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-5730 DESCRIPTION: MIT krb5 could allow a remote authenticated attacker to bypass security restrictions, caused by a flaw in the LDAP Kerberos database. By...

Security Bulletin: Vulnerabilities in curl affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in curl. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000301 DESCRIPTION: curl is vulnerable to a denial of service, caused by heap-based buffer over-read. By sending a specially crafted RTSP response, a remote...

Security Bulletin: Vulnerabilities in the Linux Kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux Kernel. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1066 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by a NULL pointer dereference in the...

Security Bulletin: PowerKVM has released fixes in response to the vulnerabilities known as Foreshadow

Summary PowerKVM is affected by vulnerabilities in the Linux kernel. IBM has now addressed these vulnerabilities. Note that, although the CVE descriptions do not reference POWER, POWER CPUs are afftected. Vulnerability Details CVEID: CVE-2018-3620 DESCRIPTION: Multiple Intel CPU''s could allow a...

Security Bulletin: Vulnerabilities in the Linux kernel affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the Linux kernel . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-15116 DESCRIPTION: Linux Kernel is vulnerable to a denial of service, caused by NULL pointer dereference in the rngapireset function in...

Security Bulletin: Vulnerabilities in glibc affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in the GNU C Library aka glibc or libc6. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2018-1000001 DESCRIPTION: Glibc could allow a local attacker to execute arbitrary code on the system, caused by a buffer underflow...

Security Bulletin: A vulnerability in Python affects PowerKVM

Summary PowerKVM is affected by a vulnerability in Python. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2016-2183 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an error in the DES/3DES cipher, used as a part of the...

Security Bulletin: Vulnerabilities in docker affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in docker. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-14992 DESCRIPTION: Docker-CE Also known as Moby is vulnerable to a denial of service, caused by the lack of content verification. By using a...

Security Bulletin: A vulnerability in git affects PowerKVM

Summary PowerKVM is affected by a vulnerability in git. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-11235 DESCRIPTION: Git could allow a remote attacker to execute arbitrary code on the system, caused by improper validation of submodule "names" supplied via the...

Security Bulletin: A vulnerability in PostgreSQL affects PowerKVM

Summary PowerKVM is affected by a vulnerability in PostgreSQL. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10915 DESCRIPTION: PostgreSQL could allow a remote attacker to bypass security restrictions, caused by an issue with improperly resting internal state in...

Security Bulletin: A vulnerability in policycoreutils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in policycoreutils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-1063 DESCRIPTION: Policycoreutils could allow a local authenticated attacker to launch a symlink attack. Context relabeling of filesystems creates...

Security Bulletin: A vulnerability in yum-utils affects PowerKVM

Summary PowerKVM is affected by a vulnerability in yum-utils. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-10897 DESCRIPTION: reposync could allow a remote attacker to traverse directories on the system, caused by the improper sanitation of paths in remote...

Security Bulletin: A vulnerability in gnupg2 affects PowerKVM

Summary PowerKVM is affected by a vulnerability in gnupg2. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2018-12020 DESCRIPTION: GnuPG could allow a remote attacker to conduct spoofing attacks, caused by the improper handling of the original filename during decryption...

Security Bulletin: Vulnerabilities in libXpm, libXdmcp, and libICE affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in libXpm, libXdmcp, and libICE . IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-3738 DESCRIPTION: OpenSSL could allow a remote attacker to obtain sensitive information, caused by an overflow bug in the AVX2...

Security Bulletin: Vulnerabilities in krb5 affect PowerKVM

Summary PowerKVM is affected by vulnerabilities in MIT Kerberos 5 krb5. IBM has now addressed these vulnerabilities. Vulnerability Details CVEID: CVE-2017-11368 DESCRIPTION: MIT Kerberos 5 is vulnerable to a denial of service, caused by a KDC assertion failure. By sending a specially-crafted...

Security Bulletin: A vulnerability in gcc affects PowerKVM

Summary PowerKVM is affected by a vulnerability in the GNU Compiler Collection GCC. IBM has now addressed this vulnerability. Vulnerability Details CVEID: CVE-2017-11671 DESCRIPTION: GNU Compiler Collection GCC could provide weaker than expected security, caused by a flaw in the ix86expandbuiltin...