Scientific Linux 6: SLSA-2014:1873-1 Moderate: libvirt DoS and Leak

Date: Tue, 18 Nov 2014 09:12:39 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 7x x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

x86_64:
corosync-2.3.3-2.el7_0.1.x86_64.rpm
corosynclib-2.3.3-2.el7_0.1.i686.rpm
corosynclib-2.3.3-2.el7_0.1.x86_64.rpm
corosynclib-devel-2.3.3-2.el7_0.1.i686.rpm
corosynclib-devel-2.3.3-2.el7_0.1.x86_64.rpm
dracut-033-161.el7_0.173.x86_64.rpm
dracut-caps-033-161.el7_0.173.x86_64.rpm
dracut-config-generic-033-161.el7_0.173.x86_64.rpm
dracut-config-rescue-033-161.el7_0.173.x86_64.rpm
dracut-fips-033-161.el7_0.173.x86_64.rpm
dracut-fips-aesni-033-161.el7_0.173.x86_64.rpm
dracut-network-033-161.el7_0.173.x86_64.rpm
dracut-tools-033-161.el7_0.173.x86_64.rpm
ipa-admintools-3.3.3-28.el7_0.3.x86_64.rpm
ipa-client-3.3.3-28.el7_0.3.x86_64.rpm
ipa-python-3.3.3-28.el7_0.3.x86_64.rpm
ipa-server-3.3.3-28.el7_0.3.x86_64.rpm
ipa-server-trust-ad-3.3.3-28.el7_0.3.x86_64.rpm
kernel-3.10.0-123.9.3.el7.x86_64.rpm
kernel-abi-whitelists-3.10.0-123.9.3.el7.noarch.rpm
kernel-debug-3.10.0-123.9.3.el7.x86_64.rpm
kernel-debug-devel-3.10.0-123.9.3.el7.x86_64.rpm
kernel-devel-3.10.0-123.9.3.el7.x86_64.rpm
kernel-doc-3.10.0-123.9.3.el7.noarch.rpm
kernel-headers-3.10.0-123.9.3.el7.x86_64.rpm
kernel-tools-3.10.0-123.9.3.el7.x86_64.rpm
kernel-tools-libs-3.10.0-123.9.3.el7.x86_64.rpm
kernel-tools-libs-devel-3.10.0-123.9.3.el7.x86_64.rpm
kmod-hpsa-3.4.4_1_RH1-1.el7_0.x86_64.rpm
kmod-lpfc-10.2.8021.0-1.el7_0.x86_64.rpm
libipa_hbac-1.11.2-68.el7_0.6.i686.rpm
libipa_hbac-1.11.2-68.el7_0.6.x86_64.rpm
libipa_hbac-devel-1.11.2-68.el7_0.6.i686.rpm
libipa_hbac-devel-1.11.2-68.el7_0.6.x86_64.rpm
libipa_hbac-python-1.11.2-68.el7_0.6.x86_64.rpm
libsss_idmap-1.11.2-68.el7_0.6.i686.rpm
libsss_idmap-1.11.2-68.el7_0.6.x86_64.rpm
libsss_idmap-devel-1.11.2-68.el7_0.6.i686.rpm
libsss_idmap-devel-1.11.2-68.el7_0.6.x86_64.rpm
libsss_nss_idmap-1.11.2-68.el7_0.6.i686.rpm
libsss_nss_idmap-1.11.2-68.el7_0.6.x86_64.rpm
libsss_nss_idmap-devel-1.11.2-68.el7_0.6.i686.rpm
libsss_nss_idmap-devel-1.11.2-68.el7_0.6.x86_64.rpm
libsss_nss_idmap-python-1.11.2-68.el7_0.6.x86_64.rpm
mdadm-3.2.6-31.el7_0.2.x86_64.rpm
mokutil-0.7-8.el7_0.x86_64.rpm
perf-3.10.0-123.9.3.el7.x86_64.rpm
python-perf-3.10.0-123.9.3.el7.x86_64.rpm
python-sssdconfig-1.11.2-68.el7_0.6.noarch.rpm
resource-agents-3.9.5-26.el7_0.5.x86_64.rpm
scl-utils-20130529-9.el7_0.x86_64.rpm
scl-utils-build-20130529-9.el7_0.x86_64.rpm
setup-2.8.71-5.el7.noarch.rpm
shim-unsigned-0.7-8.el7_0.x86_64.rpm
sssd-1.11.2-68.el7_0.6.x86_64.rpm
sssd-ad-1.11.2-68.el7_0.6.x86_64.rpm
sssd-client-1.11.2-68.el7_0.6.i686.rpm
sssd-client-1.11.2-68.el7_0.6.x86_64.rpm
sssd-common-1.11.2-68.el7_0.6.i686.rpm
sssd-common-1.11.2-68.el7_0.6.x86_64.rpm
sssd-common-pac-1.11.2-68.el7_0.6.x86_64.rpm
sssd-ipa-1.11.2-68.el7_0.6.x86_64.rpm
sssd-krb5-1.11.2-68.el7_0.6.x86_64.rpm
sssd-krb5-common-1.11.2-68.el7_0.6.x86_64.rpm
sssd-ldap-1.11.2-68.el7_0.6.x86_64.rpm
sssd-proxy-1.11.2-68.el7_0.6.x86_64.rpm
sssd-tools-1.11.2-68.el7_0.6.x86_64.rpm
system-config-printer-1.4.1-19.el7.x86_64.rpm
system-config-printer-libs-1.4.1-19.el7.noarch.rpm
system-config-printer-udev-1.4.1-19.el7.x86_64.rpm
tzdata-2014i-1.el7.noarch.rpm
tzdata-java-2014i-1.el7.noarch.rpm
virt-who-0.8-15.el7_0.noarch.rpm
Date: Tue, 18 Nov 2014 09:50:26 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 6x i386, x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

i386:
389-ds-base-1.2.11.15-48.el6_6.i686.rpm
389-ds-base-devel-1.2.11.15-48.el6_6.i686.rpm
389-ds-base-libs-1.2.11.15-48.el6_6.i686.rpm
curl-7.19.7-40.el6_6.1.i686.rpm
debugmode-9.03.46-1.el6_6.1.i686.rpm
initscripts-9.03.46-1.el6_6.1.i686.rpm
iproute-2.6.32-33.el6_6.i686.rpm
iproute-devel-2.6.32-33.el6_6.i686.rpm
iproute-doc-2.6.32-33.el6_6.i686.rpm
java-1.6.0-openjdk-1.6.0.33-1.13.5.1.el6_6.i686.rpm
java-1.6.0-openjdk-demo-1.6.0.33-1.13.5.1.el6_6.i686.rpm
java-1.6.0-openjdk-devel-1.6.0.33-1.13.5.1.el6_6.i686.rpm
java-1.6.0-openjdk-javadoc-1.6.0.33-1.13.5.1.el6_6.i686.rpm
java-1.6.0-openjdk-src-1.6.0.33-1.13.5.1.el6_6.i686.rpm
java-1.8.0-openjdk-1.8.0.25-3.b17.el6_6.i686.rpm
java-1.8.0-openjdk-demo-1.8.0.25-3.b17.el6_6.i686.rpm
java-1.8.0-openjdk-devel-1.8.0.25-3.b17.el6_6.i686.rpm
java-1.8.0-openjdk-headless-1.8.0.25-3.b17.el6_6.i686.rpm
java-1.8.0-openjdk-javadoc-1.8.0.25-3.b17.el6_6.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.25-3.b17.el6_6.i686.rpm
libcurl-7.19.7-40.el6_6.1.i686.rpm
libcurl-devel-7.19.7-40.el6_6.1.i686.rpm
libvirt-0.10.2-46.el6_6.1.i686.rpm
libvirt-client-0.10.2-46.el6_6.1.i686.rpm
libvirt-devel-0.10.2-46.el6_6.1.i686.rpm
libvirt-python-0.10.2-46.el6_6.1.i686.rpm
nfs-utils-1.2.3-39.el6_5.4.i686.rpm
nss-softokn-3.14.3-18.el6_6.i686.rpm
nss-softokn-devel-3.14.3-18.el6_6.i686.rpm
nss-softokn-freebl-3.14.3-18.el6_6.i686.rpm
nss-softokn-freebl-devel-3.14.3-18.el6_6.i686.rpm
openssh-5.3p1-104.el6_6.1.i686.rpm
openssh-askpass-5.3p1-104.el6_6.1.i686.rpm
openssh-clients-5.3p1-104.el6_6.1.i686.rpm
openssh-ldap-5.3p1-104.el6_6.1.i686.rpm
openssh-server-5.3p1-104.el6_6.1.i686.rpm
openssl-1.0.1e-30.el6_6.4.i686.rpm
openssl-devel-1.0.1e-30.el6_6.4.i686.rpm
openssl-perl-1.0.1e-30.el6_6.4.i686.rpm
openssl-static-1.0.1e-30.el6_6.4.i686.rpm
pam_ssh_agent_auth-0.9.3-104.el6_6.1.i686.rpm
perl-5.10.1-136.el6_6.1.i686.rpm
perl-Archive-Extract-0.38-136.el6_6.1.i686.rpm
perl-Archive-Tar-1.58-136.el6_6.1.i686.rpm
perl-CGI-3.51-136.el6_6.1.i686.rpm
perl-Compress-Raw-Bzip2-2.021-136.el6_6.1.i686.rpm
perl-Compress-Raw-Zlib-2.021-136.el6_6.1.i686.rpm
perl-Compress-Zlib-2.021-136.el6_6.1.i686.rpm
perl-core-5.10.1-136.el6_6.1.i686.rpm
perl-CPAN-1.9402-136.el6_6.1.i686.rpm
perl-CPANPLUS-0.88-136.el6_6.1.i686.rpm
perl-devel-5.10.1-136.el6_6.1.i686.rpm
perl-Digest-SHA-5.47-136.el6_6.1.i686.rpm
perl-ExtUtils-CBuilder-0.27-136.el6_6.1.i686.rpm
perl-ExtUtils-Embed-1.28-136.el6_6.1.i686.rpm
perl-ExtUtils-MakeMaker-6.55-136.el6_6.1.i686.rpm
perl-ExtUtils-ParseXS-2.2003.0-136.el6_6.1.i686.rpm
perl-File-Fetch-0.26-136.el6_6.1.i686.rpm
perl-IO-Compress-Base-2.021-136.el6_6.1.i686.rpm
perl-IO-Compress-Bzip2-2.021-136.el6_6.1.i686.rpm
perl-IO-Compress-Zlib-2.021-136.el6_6.1.i686.rpm
perl-IO-Zlib-1.09-136.el6_6.1.i686.rpm
perl-IPC-Cmd-0.56-136.el6_6.1.i686.rpm
perl-libs-5.10.1-136.el6_6.1.i686.rpm
perl-Locale-Maketext-Simple-0.18-136.el6_6.1.i686.rpm
perl-Log-Message-0.02-136.el6_6.1.i686.rpm
perl-Log-Message-Simple-0.04-136.el6_6.1.i686.rpm
perl-Module-Build-0.3500-136.el6_6.1.i686.rpm
perl-Module-CoreList-2.18-136.el6_6.1.i686.rpm
perl-Module-Load-0.16-136.el6_6.1.i686.rpm
perl-Module-Load-Conditional-0.30-136.el6_6.1.i686.rpm
perl-Module-Loaded-0.02-136.el6_6.1.i686.rpm
perl-Module-Pluggable-3.90-136.el6_6.1.i686.rpm
perl-Object-Accessor-0.34-136.el6_6.1.i686.rpm
perl-Package-Constants-0.02-136.el6_6.1.i686.rpm
perl-Params-Check-0.26-136.el6_6.1.i686.rpm
perl-parent-0.221-136.el6_6.1.i686.rpm
perl-Parse-CPAN-Meta-1.40-136.el6_6.1.i686.rpm
perl-Pod-Escapes-1.04-136.el6_6.1.i686.rpm
perl-Pod-Simple-3.13-136.el6_6.1.i686.rpm
perl-suidperl-5.10.1-136.el6_6.1.i686.rpm
perl-Term-UI-0.20-136.el6_6.1.i686.rpm
perl-Test-Harness-3.17-136.el6_6.1.i686.rpm
perl-Test-Simple-0.92-136.el6_6.1.i686.rpm
perl-Time-HiRes-1.9721-136.el6_6.1.i686.rpm
perl-Time-Piece-1.15-136.el6_6.1.i686.rpm
perl-version-0.77-136.el6_6.1.i686.rpm
qemu-guest-agent-0.12.1.2-2.448.el6_6.i686.rpm
scl-utils-20120927-23.el6_5.i686.rpm
scl-utils-20120927-23.el6_6.i686.rpm
scl-utils-build-20120927-23.el6_5.i686.rpm
scl-utils-build-20120927-23.el6_6.i686.rpm
tuned-0.2.19-13.el6_6.1.noarch.rpm
tuned-profiles-sap-0.2.19-13.el6_6.1.noarch.rpm
tuned-profiles-sap-hana-0.2.19-13.el6_6.1.noarch.rpm
tuned-utils-0.2.19-13.el6_6.1.noarch.rpm
tzdata-2014i-1.el6.noarch.rpm
tzdata-2014j-1.el6.noarch.rpm
tzdata-java-2014i-1.el6.noarch.rpm
tzdata-java-2014j-1.el6.noarch.rpm
watchdog-5.6-4.el6_5.i686.rpm
watchdog-5.6-4.el6_6.i686.rpm
zsh-4.3.10-9.el6.i686.rpm
zsh-html-4.3.10-9.el6.i686.rpm

x86_64:
389-ds-base-1.2.11.15-48.el6_6.x86_64.rpm
389-ds-base-devel-1.2.11.15-48.el6_6.i686.rpm
389-ds-base-devel-1.2.11.15-48.el6_6.x86_64.rpm
389-ds-base-libs-1.2.11.15-48.el6_6.i686.rpm
389-ds-base-libs-1.2.11.15-48.el6_6.x86_64.rpm
curl-7.19.7-40.el6_6.1.x86_64.rpm
debugmode-9.03.46-1.el6_6.1.x86_64.rpm
initscripts-9.03.46-1.el6_6.1.x86_64.rpm
iproute-2.6.32-33.el6_6.x86_64.rpm
iproute-devel-2.6.32-33.el6_6.i686.rpm
iproute-devel-2.6.32-33.el6_6.x86_64.rpm
iproute-doc-2.6.32-33.el6_6.x86_64.rpm
java-1.6.0-openjdk-1.6.0.33-1.13.5.1.el6_6.x86_64.rpm
java-1.6.0-openjdk-demo-1.6.0.33-1.13.5.1.el6_6.x86_64.rpm
java-1.6.0-openjdk-devel-1.6.0.33-1.13.5.1.el6_6.x86_64.rpm
java-1.6.0-openjdk-javadoc-1.6.0.33-1.13.5.1.el6_6.x86_64.rpm
java-1.6.0-openjdk-src-1.6.0.33-1.13.5.1.el6_6.x86_64.rpm
java-1.8.0-openjdk-1.8.0.25-3.b17.el6_6.x86_64.rpm
java-1.8.0-openjdk-demo-1.8.0.25-3.b17.el6_6.x86_64.rpm
java-1.8.0-openjdk-devel-1.8.0.25-3.b17.el6_6.x86_64.rpm
java-1.8.0-openjdk-headless-1.8.0.25-3.b17.el6_6.x86_64.rpm
java-1.8.0-openjdk-javadoc-1.8.0.25-3.b17.el6_6.noarch.rpm
java-1.8.0-openjdk-src-1.8.0.25-3.b17.el6_6.x86_64.rpm
kmod-oracleasm-2.0.8-4.el6_6.x86_64.rpm
libcurl-7.19.7-40.el6_6.1.i686.rpm
libcurl-7.19.7-40.el6_6.1.x86_64.rpm
libcurl-devel-7.19.7-40.el6_6.1.i686.rpm
libcurl-devel-7.19.7-40.el6_6.1.x86_64.rpm
libvirt-0.10.2-46.el6_6.1.x86_64.rpm
libvirt-client-0.10.2-46.el6_6.1.i686.rpm
libvirt-client-0.10.2-46.el6_6.1.x86_64.rpm
libvirt-devel-0.10.2-46.el6_6.1.i686.rpm
libvirt-devel-0.10.2-46.el6_6.1.x86_64.rpm
libvirt-lock-sanlock-0.10.2-46.el6_6.1.x86_64.rpm
libvirt-python-0.10.2-46.el6_6.1.x86_64.rpm
nfs-utils-1.2.3-39.el6_5.4.x86_64.rpm
nss-softokn-3.14.3-18.el6_6.i686.rpm
nss-softokn-3.14.3-18.el6_6.x86_64.rpm
nss-softokn-devel-3.14.3-18.el6_6.i686.rpm
nss-softokn-devel-3.14.3-18.el6_6.x86_64.rpm
nss-softokn-freebl-3.14.3-18.el6_6.i686.rpm
nss-softokn-freebl-3.14.3-18.el6_6.x86_64.rpm
nss-softokn-freebl-devel-3.14.3-18.el6_6.i686.rpm
nss-softokn-freebl-devel-3.14.3-18.el6_6.x86_64.rpm
openssh-5.3p1-104.el6_6.1.x86_64.rpm
openssh-askpass-5.3p1-104.el6_6.1.x86_64.rpm
openssh-clients-5.3p1-104.el6_6.1.x86_64.rpm
openssh-ldap-5.3p1-104.el6_6.1.x86_64.rpm
openssh-server-5.3p1-104.el6_6.1.x86_64.rpm
openssl-1.0.1e-30.el6_6.4.i686.rpm
openssl-1.0.1e-30.el6_6.4.x86_64.rpm
openssl-devel-1.0.1e-30.el6_6.4.i686.rpm
openssl-devel-1.0.1e-30.el6_6.4.x86_64.rpm
openssl-perl-1.0.1e-30.el6_6.4.x86_64.rpm
openssl-static-1.0.1e-30.el6_6.4.x86_64.rpm
pam_ssh_agent_auth-0.9.3-104.el6_6.1.i686.rpm
pam_ssh_agent_auth-0.9.3-104.el6_6.1.x86_64.rpm
perl-5.10.1-136.el6_6.1.x86_64.rpm
perl-Archive-Extract-0.38-136.el6_6.1.x86_64.rpm
perl-Archive-Tar-1.58-136.el6_6.1.x86_64.rpm
perl-CGI-3.51-136.el6_6.1.x86_64.rpm
perl-Compress-Raw-Bzip2-2.021-136.el6_6.1.x86_64.rpm
perl-Compress-Raw-Zlib-2.021-136.el6_6.1.x86_64.rpm
perl-Compress-Zlib-2.021-136.el6_6.1.x86_64.rpm
perl-core-5.10.1-136.el6_6.1.x86_64.rpm
perl-CPAN-1.9402-136.el6_6.1.x86_64.rpm
perl-CPANPLUS-0.88-136.el6_6.1.x86_64.rpm
perl-devel-5.10.1-136.el6_6.1.i686.rpm
perl-devel-5.10.1-136.el6_6.1.x86_64.rpm
perl-Digest-SHA-5.47-136.el6_6.1.x86_64.rpm
perl-ExtUtils-CBuilder-0.27-136.el6_6.1.x86_64.rpm
perl-ExtUtils-Embed-1.28-136.el6_6.1.x86_64.rpm
perl-ExtUtils-MakeMaker-6.55-136.el6_6.1.x86_64.rpm
perl-ExtUtils-ParseXS-2.2003.0-136.el6_6.1.x86_64.rpm
perl-File-Fetch-0.26-136.el6_6.1.x86_64.rpm
perl-IO-Compress-Base-2.021-136.el6_6.1.x86_64.rpm
perl-IO-Compress-Bzip2-2.021-136.el6_6.1.x86_64.rpm
perl-IO-Compress-Zlib-2.021-136.el6_6.1.x86_64.rpm
perl-IO-Zlib-1.09-136.el6_6.1.x86_64.rpm
perl-IPC-Cmd-0.56-136.el6_6.1.x86_64.rpm
perl-libs-5.10.1-136.el6_6.1.i686.rpm
perl-libs-5.10.1-136.el6_6.1.x86_64.rpm
perl-Locale-Maketext-Simple-0.18-136.el6_6.1.x86_64.rpm
perl-Log-Message-0.02-136.el6_6.1.x86_64.rpm
perl-Log-Message-Simple-0.04-136.el6_6.1.x86_64.rpm
perl-Module-Build-0.3500-136.el6_6.1.x86_64.rpm
perl-Module-CoreList-2.18-136.el6_6.1.x86_64.rpm
perl-Module-Load-0.16-136.el6_6.1.x86_64.rpm
perl-Module-Load-Conditional-0.30-136.el6_6.1.x86_64.rpm
perl-Module-Loaded-0.02-136.el6_6.1.x86_64.rpm
perl-Module-Pluggable-3.90-136.el6_6.1.x86_64.rpm
perl-Object-Accessor-0.34-136.el6_6.1.x86_64.rpm
perl-Package-Constants-0.02-136.el6_6.1.x86_64.rpm
perl-Params-Check-0.26-136.el6_6.1.x86_64.rpm
perl-parent-0.221-136.el6_6.1.x86_64.rpm
perl-Parse-CPAN-Meta-1.40-136.el6_6.1.x86_64.rpm
perl-Pod-Escapes-1.04-136.el6_6.1.x86_64.rpm
perl-Pod-Simple-3.13-136.el6_6.1.x86_64.rpm
perl-suidperl-5.10.1-136.el6_6.1.x86_64.rpm
perl-Term-UI-0.20-136.el6_6.1.x86_64.rpm
perl-Test-Harness-3.17-136.el6_6.1.x86_64.rpm
perl-Test-Simple-0.92-136.el6_6.1.x86_64.rpm
perl-Time-HiRes-1.9721-136.el6_6.1.x86_64.rpm
perl-Time-Piece-1.15-136.el6_6.1.x86_64.rpm
perl-version-0.77-136.el6_6.1.x86_64.rpm
qemu-guest-agent-0.12.1.2-2.448.el6_6.x86_64.rpm
qemu-img-0.12.1.2-2.448.el6_6.x86_64.rpm
qemu-kvm-0.12.1.2-2.448.el6_6.x86_64.rpm
qemu-kvm-tools-0.12.1.2-2.448.el6_6.x86_64.rpm
scl-utils-20120927-23.el6_5.x86_64.rpm
scl-utils-20120927-23.el6_6.x86_64.rpm
scl-utils-build-20120927-23.el6_5.x86_64.rpm
scl-utils-build-20120927-23.el6_6.x86_64.rpm
tuned-0.2.19-13.el6_6.1.noarch.rpm
tuned-profiles-sap-0.2.19-13.el6_6.1.noarch.rpm
tuned-profiles-sap-hana-0.2.19-13.el6_6.1.noarch.rpm
tuned-utils-0.2.19-13.el6_6.1.noarch.rpm
tzdata-2014i-1.el6.noarch.rpm
tzdata-2014j-1.el6.noarch.rpm
tzdata-java-2014i-1.el6.noarch.rpm
tzdata-java-2014j-1.el6.noarch.rpm
watchdog-5.6-4.el6_5.x86_64.rpm
watchdog-5.6-4.el6_6.x86_64.rpm
xfsdump-3.0.4-4.el6_6.1.x86_64.rpm
zsh-4.3.10-9.el6.x86_64.rpm
zsh-html-4.3.10-9.el6.x86_64.rpm
Date: Tue, 18 Nov 2014 20:33:44 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: Security ERRATA Moderate: libvirt on SL6.x i386/x86_64
MIME-Version: 1.0

Synopsis: Moderate: libvirt security and bug fix update
Advisory ID: SLSA-2014:1873-1
Issue Date: 2014-11-18
CVE Numbers: CVE-2014-3633
 CVE-2014-3657
 CVE-2014-7823
--

An out-of-bounds read flaw was found in the way libvirt's
qemuDomainGetBlockIoTune() function looked up the disk index in a non-
persistent (live) disk configuration while a persistent disk configuration
was being indexed. A remote attacker able to establish a read-only
connection to libvirtd could use this flaw to crash libvirtd or,
potentially, leak memory from the libvirtd process. (CVE-2014-3633)

A denial of service flaw was found in the way libvirt's
virConnectListAllDomains() function computed the number of used domains. A
remote attacker able to establish a read-only connection to libvirtd could
use this flaw to make any domain operations within libvirt unresponsive.
(CVE-2014-3657)

It was found that when the VIR_DOMAIN_XML_MIGRATABLE flag was used, the
QEMU driver implementation of the virDomainGetXMLDesc() function could
bypass the restrictions of the VIR_DOMAIN_XML_SECURE flag. A remote
attacker able to establish a read-only connection to libvirtd could use
this flaw to leak certain limited information from the domain XML data.
(CVE-2014-7823)

This update also fixes the following bug:

When dumping migratable XML configuration of a domain, libvirt removes
some automatically added devices for compatibility with older libvirt
releases. If such XML is passed to libvirt as a domain XML that should be
used during migration, libvirt checks this XML for compatibility with the
internally stored configuration of the domain. However, prior to this
update, these checks failed because of devices that were missing (the same
devices libvirt removed). As a consequence, migration with user-supplied
migratable XML failed. Since this feature is used by OpenStack, migrating
QEMU/KVM domains with OpenStack always failed. With this update, before
checking domain configurations for compatibility, libvirt transforms both
user-supplied and internal configuration into a migratable form
(automatically added devices are removed) and checks those instead. Thus,
no matter whether the user-supplied configuration was generated as
migratable or not, libvirt does not err about missing devices, and
migration succeeds as expected.

After installing the updated packages, libvirtd will be restarted
automatically.
--

SL6
 x86_64
 libvirt-0.10.2-46.el6_6.2.x86_64.rpm
 libvirt-client-0.10.2-46.el6_6.2.i686.rpm
 libvirt-client-0.10.2-46.el6_6.2.x86_64.rpm
 libvirt-debuginfo-0.10.2-46.el6_6.2.i686.rpm
 libvirt-debuginfo-0.10.2-46.el6_6.2.x86_64.rpm
 libvirt-python-0.10.2-46.el6_6.2.x86_64.rpm
 libvirt-devel-0.10.2-46.el6_6.2.i686.rpm
 libvirt-devel-0.10.2-46.el6_6.2.x86_64.rpm
 libvirt-lock-sanlock-0.10.2-46.el6_6.2.x86_64.rpm
 i386
 libvirt-0.10.2-46.el6_6.2.i686.rpm
 libvirt-client-0.10.2-46.el6_6.2.i686.rpm
 libvirt-debuginfo-0.10.2-46.el6_6.2.i686.rpm
 libvirt-python-0.10.2-46.el6_6.2.i686.rpm
 libvirt-devel-0.10.2-46.el6_6.2.i686.rpm

- Scientific Linux Development Team