Date: Tue, 18 Mar 2014 10:17:15 -0400 (EDT) From: cve-assign@...re.org To: pmatouse@...hat.com Cc: cve-assign@...re.org, oss-security@...ts.openwall.com, libvirt-security@...hat.com, eblake@...hat.com, berrange@...hat.com Subject: Re: CVE request -- libvirt: unprivileged user can crash libvirtd during spice migration -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 > Upstream fix: > http://libvirt.org/git/?p=libvirt.git;a=commit;h=484cc321 Use CVE-2013-7336. > (this issue was reported to libvirt-security mailing list in the year > 2k13 so might need 2k13 CVE) http://libvirt.org/securityprocess.html says the libvirt-security mailing list is "while this email address is backed by a mailing list, it is invitation only." The date of a report to a private list does not directly affect the date portion of a CVE ID. However, there was an apparently public commit in 2013 that mentioned "the daemon crashed." - -- CVE assignment team, MITRE CVE Numbering Authority M/S M300 202 Burlington Road, Bedford, MA 01730 USA [ PGP key available through http://cve.mitre.org/cve/request_id.html ] -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.14 (SunOS) iQEcBAEBAgAGBQJTKFS/AAoJEKllVAevmvmsQo4H/izs/JxyMWwWqc4s5IDV5vXt mTgCBHrzOxHqo9X1VsaKYCsFwjccS/LZcGuQOwkuLZzZwilfzxhzwbFHqQITigbG RrLeAdXFofCUrrzZsgpuh8xr/PKBr1f2mzJxPmjDIcfdaLzHcZBb57YCIxdCYqGY muohfA9G67STmVKY5jKfP9Obpe/pmINIrUWC10ATQdk7qJdDiITveCSX3LDqTyOl O3w1OlLjKc99nWFQN4b4I0CCSFIOA91A6EDwW9hrY3vDRIMsqdDf/RilFn/vaUkd Ih5D5wmpKWy1zXvmX/XF0FsqYrpCagNoA5iAZYjtntCaD/r1BAijlINGKcARo/s= =1aqs -----END PGP SIGNATURE-----
Powered by blists - more mailing lists
Please check out the Open Source Software Security Wiki, which is counterpart to this mailing list.
Powered by Openwall GNU/*/Linux - Powered by OpenVZ