Re: [Libvirt-Security] [oss-security] CVE-2013-2218 -- libvirt: crash when listing network interfaces with filters

[Kurt Seifried <kseifried () redhat com>]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 07/01/2013 01:06 PM, Eric Blake wrote:
> On 07/01/2013 12:49 PM, Kurt Seifried wrote:
> > On 07/01/2013 09:21 AM, Petr Matousek wrote:
> > > The virConnectListAllInterfaces method has a double-free of the
> > >  'struct netcf_if' object when any of the filtering flags cause
> > > an interface to be skipped over. For example when running the
> > > command 'virsh iface-list --inactive'
> >
> > > Upstream fix: 
> > > http://libvirt.org/git/?p=libvirt.git;a=commit;h=244e0b8cf15ca2ef48d82058e728656e6c4bad11
> >
> > >
References: https://bugzilla.redhat.com/show_bug.cgi?id=980112
> > > Thanks,
> >
> >
> > Please use CVE-2013-2229 for this issue.
>
> No, we already assigned CVE-2013-2218 to this issue.
> CVE-2013-2229 should be closed as a mistake, or reused for some
> other purpose.

Sorry that was really bad of me, totally didn't read the email, just
saw from Jan and though "derp. needs a cve". Please REJECT
CVE-2013-2229, duplicate assignment because Kurt isn't smarter than
the average bear.


- -- 
Kurt Seifried Red Hat Security Response Team (SRT)
PGP: 0x5E267993 A90B F995 7350 148F 66BF 7554 160D 4553 5E26 7993
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.13 (GNU/Linux)
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=Ispm
-----END PGP SIGNATURE-----