[Oraclevm-errata] OVMSA-2014-0080 Important: Oracle VM 3.3 libXfont security update

Errata Announcements for Oracle VM oraclevm-errata at oss.oracle.com
Mon Nov 24 10:55:53 PST 2014

Oracle VM Security Advisory OVMSA-2014-0080

The following updated rpms for Oracle VM 3.3 have been uploaded to the 
Unbreakable Linux Network:



Description of changes:

- CVE-2014-0209: integer overflow of allocations in font metadata file 
parsing (bug 1163602, bug 1163601)
- CVE-2014-0210: unvalidated length fields when parsing xfs protocol 
replies (bug 1163602, bug 1163601)
- CVE-2014-0211: integer overflows calculating memory needs for xfs 
replies (bug 1163602, bug 1163601)

- cve-2013-6462.patch: sscanf overflow (bug 1049684)
- sscanf-hardening.patch: Some other sscanf hardening fixes (1049684)

More information about the Oraclevm-errata mailing list