Skip to content
OpenAdvisories
Medium ELSA-2015-0301 1 CVE

Moderate: hivex security, bug fix, and enhancement update (Oracle Linux 7)

Published Mar 9, 2015 · Updated Mar 9, 2015

Summary

[1.3.10-5.7]
- Fix: 'Argument list too long' when using virt-v2v on Windows guest
with French copy of Citrix installed
related: rhbz#1145056

[1.3.10-5.6]
- Fix: typo in man page
resolves: rhbz#1099286

[1.3.10-5.4]
- Fix: hivex missing checks for small/truncated files
resolves: rhbz#1158992

[1.3.10-5.3]
- Fix: hivexml generates 'Argument list too long' error.
resolves: rhbz#1145056

[1.3.10-5.2]
- Resolves: rhbz#1125544

[1.3.10-5.1]
- Rebase to hivex 1.3.10.
resolves: rhbz#1023978

Fixed packages 7

ReleasePackageFixed in
Oracle Linux · 7 hivex 0:1.3.10-5.7.el7
Oracle Linux · 7 hivex-devel 0:1.3.10-5.7.el7
Oracle Linux · 7 ocaml-hivex 0:1.3.10-5.7.el7
Oracle Linux · 7 ocaml-hivex-devel 0:1.3.10-5.7.el7
Oracle Linux · 7 perl-hivex 0:1.3.10-5.7.el7
Oracle Linux · 7 python-hivex 0:1.3.10-5.7.el7
Oracle Linux · 7 ruby-hivex 0:1.3.10-5.7.el7

Vulnerabilities 1

  • Unscored —

    lib/handle.c in Hivex before 1.3.11 allows local users to execute arbitrary code and gain privileges via a small hive f…