Red Hat Security AdvisoryRHSA-2016:2576
libguestfs and virt-p2v security, bug fix, and enhancement update
Released 2016-11-03 · Red Hat rating Moderate · View on Red Hat →
Fixed in
- Red Hat Enterprise Linux Client (v. 7) libguestfs-1:1.32.7-3.el7, libguestfs-inspect-icons-1:1.32.7-3.el7, libguestfs-java-1:1.32.7-3.el7 +5
- Red Hat Enterprise Linux Client Optional (v. 7) libguestfs-bash-completion-1:1.32.7-3.el7, libguestfs-devel-1:1.32.7-3.el7, libguestfs-gfs2-1:1.32.7-3.el7 +14
- Red Hat Enterprise Linux Server (v. 7) libguestfs-1:1.32.7-3.el7, libguestfs-inspect-icons-1:1.32.7-3.el7, libguestfs-java-1:1.32.7-3.el7 +7
- Red Hat Enterprise Linux Server Optional (v. 7) libguestfs-bash-completion-1:1.32.7-3.el7, libguestfs-devel-1:1.32.7-3.el7, libguestfs-gfs2-1:1.32.7-3.el7 +14
- Red Hat Enterprise Linux Workstation (v. 7) libguestfs-1:1.32.7-3.el7, libguestfs-inspect-icons-1:1.32.7-3.el7, libguestfs-java-1:1.32.7-3.el7 +5
- Red Hat Enterprise Linux Workstation Optional (v. 7) libguestfs-bash-completion-1:1.32.7-3.el7, libguestfs-devel-1:1.32.7-3.el7, libguestfs-gfs2-1:1.32.7-3.el7 +14
Fixes 1 record
Priority MEDIUM 47
OCaml before 4.03.0 does not properly handle sign extensions, which allows remote attackers to conduct buffer overflow attacks or obtain sensitive information as demonstrated by a long string to the String.copy function.
CVSS 3.0CRITICAL 9.1· Network · No auth · No interaction · EPSS 0.05313 · Published 2016-06-13 · Fixed CWE-119
