Scientific Linux 7: SLSA-2014:1801-1 Moderate: Shim Heap Overflow Fix

Date: Tue, 10 Feb 2015 09:37:35 -0600
Reply-To: Pat Riehecky 
Sender: Security Errata for Scientific Linux
 
From: Pat Riehecky 
Subject: FASTBUGS for SL 7x x86_64 now available
MIME-Version: 1.0

The following FASTBUGS have been uploaded to

x86_64:
libvirt-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-client-1.1.1-29.el7_0.7.i686.rpm
libvirt-client-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-config-network-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-config-nwfilter-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-interface-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-lxc-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-network-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-nodedev-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-nwfilter-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-qemu-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-secret-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-driver-storage-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-kvm-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-daemon-lxc-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-devel-1.1.1-29.el7_0.7.i686.rpm
libvirt-devel-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-docs-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-lock-sanlock-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-login-shell-1.1.1-29.el7_0.7.x86_64.rpm
libvirt-python-1.1.1-29.el7_0.7.x86_64.rpm
resource-agents-3.9.5-26.el7_0.7.x86_64.rpm
tzdata-2015a-1.el7.noarch.rpm
tzdata-java-2015a-1.el7.noarch.rpm
Date: Tue, 10 Feb 2015 21:57:39 +0000
Reply-To: scientific-linux-users@
Sender: Security Errata for Scientific Linux
 
From: Connie Sieh 
Subject: Security ERRATA Moderate: shim on SL7.x x86_64
MIME-Version: 1.0

Synopsis: Moderate: shim security update
Advisory ID: SLSA-2014:1801-1
Issue Date: 2014-11-04
CVE Numbers: CVE-2014-3675
 CVE-2014-3676
 CVE-2014-3677
--

A heap-based buffer overflow flaw was found the way shim parsed certain
IPv6 addresses. If IPv6 network booting was enabled, a malicious server
could supply a crafted IPv6 address that would cause shim to crash or,
potentially, execute arbitrary code. (CVE-2014-3676)

An out-of-bounds memory write flaw was found in the way shim processed
certain Machine Owner Keys (MOKs). A local attacker could potentially use
this flaw to execute arbitrary code on the system. (CVE-2014-3677)

An out-of-bounds memory read flaw was found in the way shim parsed certain
IPv6 packets. A specially crafted DHCPv6 packet could possibly cause shim
to crash, preventing the system from booting if IPv6 booting was enabled.
(CVE-2014-3675)

The system must be rebooted for this update to take effect.
--

SL7
 x86_64
 mokutil-0.7-8.el7_0.x86_64.rpm
 shim-0.7-8.el7_0.x86_64.rpm
 shim-debuginfo-0.7-8.el7_0.x86_64.rpm
 shim-unsigned-0.7-8.el7_0.x86_64.rpm

- Scientific Linux Development Team