Alerts This Week
Warning Icon 1 619
Alerts This Week
Warning Icon 1 619

openSUSE 12.1: 2012:1172-1 Critical: Xen Denial Of Service

opensuse
Calendar Grey September 14, 2012
Dist Opensuse Esm H88
Important patch for openSUSE correcting 8 vulnerabilities in Xen, strengthening overall system protection.
An update that solves 8 vulnerabilities and has three fixes An update that solves 8 vulnerabilities and has three fixes An update that solves 8 vulnerabilities and has three fixes ...

Description

Security Update for Xen

Following bug and security fixes were applied:

- bnc#776995 - attaching scsi control luns with pvscsi

- xend/pvscsi: fix passing of SCSI control LUNs

xen-bug776995-pvscsi-no-devname.patch

- xend/pvscsi: fix usage of persistant device names for

SCSI devices xen-bug776995-pvscsi-persistent-names.patch

- xend/pvscsi: update sysfs parser for Linux 3.0

xen-bug776995-pvscsi-sysfs-parser.patch

- bnc#777090 - CVE-2012-3494: xen: hypercall set_debugreg

vulnerability (XSA-12) CVE-2012-3494-xsa12.patch

- bnc#777088 - CVE-2012-3495: xen: hypercall

physdev_get_free_pirq vulnerability (XSA-13)

CVE-2012-3495-xsa13.patch

- bnc#777091 - CVE-2012-3496: xen: XENMEM_populate_physmap

DoS vulnerability (XSA-14) CVE-2012-3496-xsa14.patch

- bnc#777086 - CVE-2012-3498: xen: PHYSDEVOP_map_pirq index

vulnerability (XSA-16) CVE-2012-3498-xsa16.patch

- bnc#777084 - CVE-2012-3515: xen: Qemu VT100 emulation

vulnerability...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory denial of service software update important openSUSE Xen

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 12.1:

zypper in -t patch openSUSE-2012-597

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 12.1 (i586 x86_64):

xen-debugsource-4.1.3_01-1.13.1

xen-devel-4.1.3_01-1.13.1

xen-kmp-default-4.1.3_01_k3.1.10_1.16-1.13.1

xen-kmp-default-debuginfo-4.1.3_01_k3.1.10_1.16-1.13.1

xen-kmp-desktop-4.1.3_01_k3.1.10_1.16-1.13.1

xen-kmp-desktop-debuginfo-4.1.3_01_k3.1.10_1.16-1.13.1

xen-libs-4.1.3_01-1.13.1

xen-libs-debuginfo-4.1.3_01-1.13.1

xen-tools-domU-4.1.3_01-1.13.1

xen-tools-domU-debuginfo-4.1.3_01-1.13.1

- openSUSE 12.1 (x86_64):

xen-4.1.3_01-1.13.1

xen-doc-html-4.1.3_01-1.13.1

xen-doc-pdf-4.1.3_01-1.13.1

xen-libs-32bit-4.1.3_01-1.13.1

xen-libs-debuginfo-32bit-4.1.3_01-1.13.1

xen-tools-4.1.3_01-1.13.1

xen-tools-debuginfo-4.1.3_01-1.13.1

- openSUSE 12.1 (ia64):

xen-libs-debuginfo-x86-4.1.3_01-1.13.1

xen-libs-x86-4.1.3_01-1.13.1

- openSUSE 12.1 (i586):

xen-kmp-pae-4.1.3_01_k3.1.10_1.16-1.13.1

xen-kmp-pae-debuginfo-4.1.3_01_k3.1.10_1.16-1.13.1

References

https://www.suse.com/security/cve/CVE-2012-2625.html

https://www.suse.com/security/cve/CVE-2012-3432.html

https://www.suse.com/security/cve/CVE-2012-3433.html

https://www.suse.com/security/cve/CVE-2012-3494.html

https://www.suse.com/security/cve/CVE-2012-3495.html

https://www.suse.com/security/cve/CVE-2012-3496.html

https://www.suse.com/security/cve/CVE-2012-3498.html

https://www.suse.com/security/cve/CVE-2012-3515.html

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

Severity
critical
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:1172-1
Rating: important
Affected Products: openSUSE 12.1

Topics%20covered

Topics Covered

security advisory denial of service software update important openSUSE Xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here