Red Hat Security Advisory: rhev-hypervisor6 security and bug fix update
An updated rhev-hypervisor6 package that fixes multiple security issues and various bugs is now available. The Red Hat Security Response Team has rated this update as having important security impact. Common Vulnerability Scoring System (CVSS) base scores, which give detailed severity ratings, are available for each vulnerability from the CVE links in the References section.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2012-0029US | high7.4 | — | ||
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denia… | ||||
| CVE-2011-4619US | medium5.0 | — | ||
The Server Gated Cryptography (SGC) implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly handle handshake restarts, which allows remote attackers to caus… | ||||
| CVE-2011-4577US | medium4.3 | — | ||
OpenSSL before 0.9.8s and 1.x before 1.0.0f, when RFC 3779 support is enabled, allows remote attackers to cause a denial of service (assertion failure) via an X.509 certificate con… | ||||
| CVE-2011-4576US | medium5.0 | — | ||
The SSL 3.0 implementation in OpenSSL before 0.9.8s and 1.x before 1.0.0f does not properly initialize data structures for block cipher padding, which might allow remote attackers… | ||||
references
External citations — patches, advisories, analysis.
- http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Virtualization/3.0/html/Technical_Notes/external
- https://access.redhat.com/errata/RHSA-2012:0109self
- https://access.redhat.com/security/updates/classification/#importantexternal
- 771775external
- 771778external
- 771780external
- 772075external
- 781472external
remediations (12)
- Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.src as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.src as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.src as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-0:6.2-20120209.0.el6_2.src as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-tools-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-tools-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-tools-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109 - Fixedrhev-hypervisor6-tools-0:6.2-20120209.0.el6_2.noarch as a component of RHEV Hypervisor for RHEL-6
Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/kb/docs/DOC-11259
https://access.redhat.com/errata/RHSA-2012:0109
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan