Fedora 20 : libvirt-1.1.3.3-1.fc20 (2014-1042)

Rebased to version 1.1.3.3 - Fix crash in virDBusAddWatch bz 885445 - Cleanup migration ports when migration is cancelled bz 1018530 - Fix virt-login-shell bz 1054479 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to libvirtd crash bz 1054206, bz 1048631 - CVE-2013-6436...

DEBIAN-CVE-2013-4400

virt-login-shell in libvirt 1.1.2 through 1.1.3 allows local users to overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments...

CVE-2013-4400

CVE-2013-4400 affects libvirt up to 1.1.3 (1.1.2–1.1.3). Local users can overwrite arbitrary files and possibly gain privileges via unspecified environment variables or command-line arguments in virt-login-shell. Public references in multiple advisories confirm affected versions and a need to upg...

libguestfs security, bug fix, and enhancement update

1:1.20.11-2 - Fix CVE-2013-4419: insecure temporary directory handling for guestfish's network socket resolves: rhbz1019737 1:1.20.11-1 - Rebase to libguestfs 1.20.11. resolves: rhbz958183 - Remove buildnet: builds now detect network automatically. - The rhel-6.x branches containing the patches...

[SECURITY] Fedora 18 Update: libguestfs-1.20.12-1.fc18

Libguestfs is a library for accessing and modifying guest disk images. Amongst the things this is good for: making batch configuration changes to guests, getting disk used/free statistics see also: virt-df, migrating between virtualization systems see also: virt-p2v, performing partial backups,...

[SECURITY] Fedora 18 Update: libguestfs-1.20.12-1.fc18

Libguestfs is a library for accessing and modifying guest disk images. Amongst the things this is good for: making batch configuration changes to guests, getting disk used/free statistics see also: virt-df, migrating between virtualization systems see also: virt-p2v, performing partial backups,...

Moderate: Red Hat Security Advisory: Red Hat Storage Console 2.1 security update

Updated Red Hat Storage Console packages that fix one security issue, various bugs, and add enhancements are now available for Red Hat Storage Server 2.1. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System CVSS base...

kernel security and bug fix update

2.6.32-358.18.1 - x86 perf/x86: Fix offcorersp valid mask for SNB/IVB Nikola Pajkovsky 971314 971315 CVE-2013-2146 - net br: fix schedule while atomic issue in brfeaturesrecompute Jiri Pirko 990464 980876 - scsi isci: Fix a race condition in the SSP task management path David Milburn 990470 97860...

kernel security and bug fix update

2.6.32-358.14.1 - x86 apic: Add probe for apicflat Prarit Bhargava 975086 953342 2.6.32-358.13.1 - wireless b43: stop format string leaking into error msgs John Linville 971387 971389 CVE-2013-2852 - pci make sriov work with hotplug remove Takahiro MUNEDA 973555 965002 - net rtnl: fix info leak o...

Oracle Linux 6 : kernel (ELSA-2012-0862)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0862 advisory. - security fix compile error in commoncap.c Eric Paris 806726 CVE-2012-2123 - security fcaps: clear the same personality flags as suid when fcaps are...

Oracle Linux 5 : kernel (ELSA-2011-0004)

The remote Oracle Linux 5 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2011-0004 advisory. - virt xen: fix netback hotplug regression in xenbus fix Laszlo Ersek 636412 635999 CVE-2010-3699 - misc posix-cpu-timers: workaround for mt exec...

Oracle Linux 6 : kernel (ELSA-2013-0630)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2013-0630 advisory. - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 - x86 msr: Add capabilities chec...

Oracle Linux 6 : kernel (ELSA-2012-0350)

The remote Oracle Linux 6 host has packages installed that are affected by multiple vulnerabilities as referenced in the ELSA-2012-0350 advisory. - fs xfs: Fix missing xfsiunlock on error recovery path in xfsreadlink Carlos Maiolino 749161 694702 CVE-2011-4077 - fs xfs: Fix memory corruption in...

kernel security, bug fix, and enhancement update

2.6.32-358.11.1 - kernel perf: fix perfsweventenabled array out-of-bound access Petr Matousek 962793 962794 CVE-2013-2094 2.6.32-358.10.1 - scsi be2iscsi : Fix the NOP-In handling code path Nikola Pajkovsky 955504 947550 - scsi be2iscsi: Fix memory leak in control path of driver Rob Evers 955504...

kernel security and bug fix update

2.6.32-358.6.1 - virt kvm: accept unaligned MSRKVMSYSTEMTIME writes Petr Matousek 917020 917021 CVE-2013-1796 - char tty: hold lock across tty buffer finding and buffer filling Prarit Bhargava 928686 901780 - net tcp: fix for zero packetsinflight was too broad Thomas Graf 927309 920794 - net tcp:...

kernel security and bug fix update

kernel 2.6.18-348.4.1 - virt xen-netback: backports Andrew Jones 910884 910885 CVE-2013-0216 - virt xen-netback: netifschedulable should take a netif Andrew Jones 910884 910885 CVE-2013-0216 - virt pciback: rate limit error mess from pcibackenablemsi Igor Mammedov 910876 910877 CVE-2013-0231 - ne...

1

kernel 2.6.18-348.4.1.0.1 - oprofile x86, mm: Add getuserpagesfast orabug 14277030 - oprofile export getuserpagesfast function orabug 14277030 - oprofile oprofile, x86: Fix nmi-unsafe callgraph support orabug 14277030 - oprofile oprofile: use KMNMI slot for kmapatomic orabug 14277030 - oprofile...

CVE-2013-1798

The CVE-2013-1798 entry concerns the Linux kernel’s ioapic_read_indirect() in virt/kvm/ioapic.c up to version 3.8.4. A particular sequence of invalid IOAPIC_REG_SELECT/IOAPIC_REG_WINDOW operations can allow a privileged guest OS user to read sensitive host memory or trigger a host OOPS, per multi...

kernel security and bug fix update

2.6.32-358.2.1 - kernel utrace: ensure archptrace/ptracerequest can never race with SIGKILL Oleg Nesterov 912073 912074 CVE-2013-0871 2.6.32-358.1.1 - netdrv mlx4: Set number of msix vectors under SRIOV mode to firmware defaults Michal Schmidt 911663 904726 - netdrv mlx4: Fix bridged vSwitch...

RHEL 6 : virt-v2v (RHSA-2011:1615)

The remote Redhat Enterprise Linux 6 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2011:1615 advisory. - virt-v2v: vnc password protection is missing after vm conversion CVE-2011-1773 Note that Nessus has not tested for this issue but has instead relie...