Follow @Openwall on Twitter for new release announcements and other news
[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]
Date: Tue, 02 Feb 2010 18:15:54 +0800
From: Eugene Teo <eugene@...hat.com>
To: oss-security@...ts.openwall.com
CC: Thomas Biege <thomas@...e.de>
Subject: Re: KVM possible security issues fixed

On 02/02/2010 05:59 PM, Thomas Biege wrote:
> Hello,
> the following was listed in the changelog of kvm
> - slirp: fix use-after-free
> - usb-linux.c: fix buffer overflow

Josh wrote some notes here:
https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2010-0297

> - fix potential stack corruption saving MSRs (Eduardo Habkost)

I did not investigate this as it was already fixed in Red Hat Enterprise 
Linux 5 before we saw the changelog.

> Looks like these are security issues. Does someone know more about?
> Any details about exploitability etc.

Thanks, Eugene
-- 
Eugene Teo / Red Hat Security Response Team

Powered by blists - more mailing lists

Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.

Confused about mailing lists and their use? Read about mailing lists on Wikipedia and check out these guidelines on proper formatting of your messages.