Synopsis:   Moderate: libvirt security update
Issue date: 2011-05-02
CVE Names:  CVE-2011-1486

A flaw was found in the way libvirtd handled error reporting for concurrent
connections. A remote attacker able to establish read-only connections to
libvirtd on a server could use this flaw to crash libvirtd. (CVE-2011-1486)

libvirtd must be restarted ("service libvirtd restart")
for this update to take effect.


SL 5.x
     SRPMS:
         libvirt-0.8.2-15.el5_6.4.src.rpm

     i386:
         libvirt-0.8.2-15.el5_6.4.i386.rpm
         libvirt-devel-0.8.2-15.el5_6.4.i386.rpm
         libvirt-python-0.8.2-15.el5_6.4.i386.rpm

     x86_64:
         libvirt-0.8.2-15.el5_6.4.i386.rpm
         libvirt-0.8.2-15.el5_6.4.x86_64.rpm
         libvirt-devel-0.8.2-15.el5_6.4.i386.rpm
         libvirt-devel-0.8.2-15.el5_6.4.x86_64.rpm
         libvirt-python-0.8.2-15.el5_6.4.x86_64.rpm

SL 6.x
     SRPMS:
         libvirt-0.8.1-27.el6_0.6.src.rpm

     i386:
         libvirt-0.8.1-27.el6_0.6.i686.rpm
         libvirt-client-0.8.1-27.el6_0.6.i686.rpm
         libvirt-devel-0.8.1-27.el6_0.6.i686.rpm
         libvirt-python-0.8.1-27.el6_0.6.i686.rpm

     x86_64:
         libvirt-0.8.1-27.el6_0.6.x86_64.rpm
         libvirt-client-0.8.1-27.el6_0.6.i686.rpm
         libvirt-client-0.8.1-27.el6_0.6.x86_64.rpm
         libvirt-devel-0.8.1-27.el6_0.6.i686.rpm
         libvirt-devel-0.8.1-27.el6_0.6.x86_64.rpm
         libvirt-python-0.8.1-27.el6_0.6.x86_64.rpm

- Scientific Linux Development Team