Comment 2 for bug 891761

Revision history for this message
Steve Beattie (sbeattie) wrote :

Hi James,

Do you have any idea how the console is connecting to the KVM? There's a few different things in the update here that could be affecting it:

  - the fix for CVE-2011-3552 dropped the default number of allowed open UDP connections to 25
  - there were a couple of different issues around RMI where the restrictions were tightened (CVE-2011-3556, CVE-2011-3557)
  - the HttpsURLConnection class in some situations wasn't doing Security checks and thus was allowing connections that it shouldn't have been (CVE-2011-3560)

I can try to prepare some test packages with various fixes dropped to see if we can isolate it.