Advisories » MGASA-2018-0186

Updated libvirt packages fix CVE-2018-1064

Publication date: 29 Mar 2018
Modification date: 29 Mar 2018
Type: security
Affected Mageia releases : 6
CVE: CVE-2018-1064

Description

Updated libvirt package fixes security vulnerability:

It was discovered that libvirt had a potential denial of service reading from 
QEMU guest agent (CVE-2018-1064).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=22777
• https://libvirt.org/git/?p=libvirt.git;a=commit;h=fbf31e1a4cd19d6f6e33e0937a009775cd7d9513
• https://www.debian.org/security/2018/dsa-4137
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-1064

SRPMS

6/core

• libvirt-3.10.0-1.2.mga6