Advisories » MGASA-2014-0060

Updated qemu package fixes security vulnerability

Publication date: 12 Feb 2014
Modification date: 12 Feb 2014
Type: security
Affected Mageia releases : 4
CVE: CVE-2013-4377

Description

Sibiao Luo discovered that QEMU incorrectly handled device hot-unplugging.
A local user could possibly use this flaw to cause a denial of service
(CVE-2013-4377).

Additionally, qemu has been updated to 1.6.2, fixing several other bugs.
                

References

• https://bugs.mageia.org/show_bug.cgi?id=12494
• http://lists.nongnu.org/archive/html/qemu-stable/2013-12/msg00148.html
• http://www.ubuntu.com/usn/usn-2092-1/
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4377

SRPMS

4/core

• qemu-1.6.2-1.mga4