Red Hat Security AdvisoryRHSA-2014:0103
libvirt security and bug fix update
Released 2014-01-28 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-client-0.10.2-29.el6_5.3, libvirt-python-0.10.2-29.el6_5.3
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-devel-0.10.2-29.el6_5.3, libvirt-lock-sanlock-0.10.2-29.el6_5.3
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-client-0.10.2-29.el6_5.3, libvirt-python-0.10.2-29.el6_5.3
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-devel-0.10.2-29.el6_5.3, libvirt-lock-sanlock-0.10.2-29.el6_5.3
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-client-0.10.2-29.el6_5.3, libvirt-client-0.10.2-29.el6_5.3.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-lock-sanlock-0.10.2-29.el6_5.3
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-client-0.10.2-29.el6_5.3, libvirt-devel-0.10.2-29.el6_5.3 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-0.10.2-29.el6_5.3, libvirt-lock-sanlock-0.10.2-29.el6_5.3
Fixes 2 records
Priority LOW 31
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is att…
CVSS 2.0MEDIUM 6.8· Adjacent network · No auth · Interaction — · EPSS 0.00593 · Published 2014-01-24 · Partial fix CWE-362
Priority LOW 21
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.
CVSS 2.0LOW 3.3· Adjacent network · No auth · Interaction — · EPSS 0.02343 · Published 2014-01-24 · Partial fix CWE-362
