Red Hat Security Advisory: rhev-hypervisor6 security update

Fixed packages 1

Vulnerabilities 2

• Unscored —
  CVE-2014-0077

  drivers/vhost/net.c in the Linux kernel before 3.13.10, when mergeable buffers are disabled, does not properly validate…

  linux linux Debian Ubuntu
  Apr 14, 2014
• Unscored —
  CVE-2014-0224 Public exploit EPSS 95%

  OpenSSL before 0.9.8za, 1.0.0 before 1.0.0m, and 1.0.1 before 1.0.1h does not properly restrict processing of ChangeCip…

  openssl openssl openssl098 Debian Ubuntu
  Jun 5, 2014

References

• article
  https://access.redhat.com/security/updates/classification/#important
• article
  https://access.redhat.com/site/articles/904433
• article
  https://access.redhat.com/site/solutions/906913
• article
  https://access.redhat.com/site/documentation/en-US/Red_Hat_Enterprise_Virtualization/3.3/html/Administration_Guide/chap-Updating_the_Red_Hat_Enterprise_Virtualization_Environment.html#Updating_Red_Hat_Enterprise_Virtualization_Hypervisors1
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1064440
• report
  https://bugzilla.redhat.com/show_bug.cgi?id=1103586
• advisory
  https://security.access.redhat.com/data/csaf/v2/advisories/2014/rhsa-2014_0629.json
• report
  https://access.redhat.com/security/cve/CVE-2014-0077
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0077
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0077
• report
  https://access.redhat.com/security/cve/CVE-2014-0224
• article
  https://access.redhat.com/security/vulnerabilities/OpenSSL-CCS-Injection
• advisory
  https://www.cve.org/CVERecord?id=CVE-2014-0224
• advisory
  https://nvd.nist.gov/vuln/detail/CVE-2014-0224
• article
  https://access.redhat.com/site/solutions/905793
• article
  https://www.openssl.org/news/secadv_20140605.txt