Advisories » MGASA-2015-0002

Updated libvirt packages fix CVE-2014-8136

Publication date: 05 Jan 2015
Modification date: 05 Jan 2015
Type: security
Affected Mageia releases : 4
CVE: CVE-2014-8136

Description

Updated libvirt packages fix security vulnerability:

The qemuDomainMigratePerform and qemuDomainMigrateFinish2 functions in
qemu/qemu_driver.c in libvirt do not unlock the domain when an ACL check
fails, which allow local users to cause a denial of service via unspecified
vectors (CVE-2014-8136).
                

References

• https://bugs.mageia.org/show_bug.cgi?id=14887
• http://www.gentoo.org/security/en/glsa/glsa-201412-36.xml
• https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2014-8136

SRPMS

4/core

• libvirt-1.2.1-1.4.mga4