Red Hat Security AdvisoryRHSA-2014:0914
libvirt security and bug fix update
Released 2014-07-22 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libvirt-1.1.1-29.el7_0.1, libvirt-client-1.1.1-29.el7_0.1, libvirt-daemon-1.1.1-29.el7_0.1 +12
- Red Hat Enterprise Linux Client Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.1, libvirt-devel-1.1.1-29.el7_0.1, libvirt-docs-1.1.1-29.el7_0.1 +2
- Red Hat Enterprise Linux ComputeNode (v. 7) libvirt-1.1.1-29.el7_0.1, libvirt-client-1.1.1-29.el7_0.1
- Red Hat Enterprise Linux ComputeNode Optional (v. 7) libvirt-1.1.1-29.el7_0.1, libvirt-daemon-1.1.1-29.el7_0.1, libvirt-daemon-config-network-1.1.1-29.el7_0.1 +16
- Red Hat Enterprise Linux Server (v. 7) libvirt-1.1.1-29.el7_0.1, libvirt-client-1.1.1-29.el7_0.1, libvirt-client-1.1.1-29.el7_0.1.ppc +16
- Red Hat Enterprise Linux Server Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.1, libvirt-lock-sanlock-1.1.1-29.el7_0.1, libvirt-login-shell-1.1.1-29.el7_0.1
- Red Hat Enterprise Linux Workstation (v. 7) libvirt-1.1.1-29.el7_0.1, libvirt-client-1.1.1-29.el7_0.1, libvirt-daemon-1.1.1-29.el7_0.1 +14
- Red Hat Enterprise Linux Workstation Optional (v. 7) libvirt-daemon-lxc-1.1.1-29.el7_0.1, libvirt-lock-sanlock-1.1.1-29.el7_0.1, libvirt-login-shell-1.1.1-29.el7_0.1
Fixes 2 records
Priority LOW 11
libvirt 0.7.5 through 1.2.x before 1.2.5 allows local users to cause a denial of service (read block and hang) via a crafted XML document containing an XML external entity declaration in conjunction with an entity refere…
CVSS 2.0LOW 1.9· Local · No auth · Interaction — · EPSS 0.0056 · Published 2014-08-03 · Partial fix CWE-20
Priority LOW 8
libvirt 1.0.0 through 1.2.x before 1.2.5, when fine grained access control is enabled, allows local users to read arbitrary files via a crafted XML document containing an XML external entity declaration in conjunction wi…
CVSS 2.0LOW 1.2· Local · No auth · Interaction — · EPSS 0.00529 · Published 2014-08-03 · Partial fix CWE-20
