Red Hat Security AdvisoryRHSA-2014:0560
libvirt security and bug fix update
Released 2014-05-27 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Desktop (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-client-0.10.2-29.el6_5.8, libvirt-python-0.10.2-29.el6_5.8
- Red Hat Enterprise Linux Desktop Optional (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-devel-0.10.2-29.el6_5.8, libvirt-lock-sanlock-0.10.2-29.el6_5.8
- Red Hat Enterprise Linux HPC Node (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-client-0.10.2-29.el6_5.8, libvirt-python-0.10.2-29.el6_5.8
- Red Hat Enterprise Linux HPC Node Optional (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-devel-0.10.2-29.el6_5.8, libvirt-lock-sanlock-0.10.2-29.el6_5.8
- Red Hat Enterprise Linux Server (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-client-0.10.2-29.el6_5.8, libvirt-client-0.10.2-29.el6_5.8.ppc +3
- Red Hat Enterprise Linux Server Optional (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-lock-sanlock-0.10.2-29.el6_5.8
- Red Hat Enterprise Linux Workstation (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-client-0.10.2-29.el6_5.8, libvirt-devel-0.10.2-29.el6_5.8 +1
- Red Hat Enterprise Linux Workstation Optional (v. 6) libvirt-0.10.2-29.el6_5.8, libvirt-lock-sanlock-0.10.2-29.el6_5.8
Fixes 1 record
Priority LOW 11
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity refere…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0056 · Published 2014-08-03 · Partial fix CWE-20
