Debian DLA-573-1 : qemu security update

Multiple vulnerabilities have been discovered in QEMU, a fast processor emulator. The Common Vulnerabilities and Exposures project identifies the following problems : CVE-2015-5239 Lian Yihan discovered that QEMU incorrectly handled certain payload messages in the VNC display driver. A malicious...

DLA-574-1 qemu-kvm - security update

Bulletin has no description...

xen-tools -- virtio: unbounded memory allocation issue

The Xen Project reports: A guest can submit virtio requests without bothering to wait for completion and is therefore not bound by virtqueue size... A malicious guest administrator can cause unbounded memory allocation in QEMU, which can cause an Out-of-Memory condition in the domain running qemu...

Object leak vulnerability for wildcard controller routes in Action Pack

Users that have a route that contains the string ":controller" are susceptible to objects being leaked globally which can lead to unbounded memory growth. To identify if your application is vulnerable, look for routes that contain ":controller". Internally, Action Pack keeps a map of "url...

Debian DSA-2468-1 : libjakarta-poi-java - unbounded memory allocation

It was discovered that Apache POI, a Java implementation of the Microsoft Office file formats, would allocate arbitrary amounts of memory when processing crafted documents. This could impact the stability of the Java virtual machine. %NASLMINLEVEL 70300 C Tenable Network Security, Inc. The...