Alerts This Week
Warning Icon 1 626
Alerts This Week
Warning Icon 1 626

openSUSE 11.4: 2012:1174-1 Critical Update on Xen DoS Risks

opensuse
Calendar Grey September 14, 2012
Dist Opensuse Esm H88
The recent openSUSE patch tackles several security flaws in Xen, prioritizing system integrity. Prompt implementation is advised.
An update that solves 6 vulnerabilities and has two fixes An update that solves 6 vulnerabilities and has two fixes An update that solves 6 vulnerabilities and has two fixes is now...

Description

Security Update for Xen

Following fixes were done:

- bnc#776995 - attaching scsi control luns with pvscsi

- xend/pvscsi: fix passing of SCSI control LUNs

xen-bug776995-pvscsi-no-devname.patch

- xend/pvscsi: fix usage of persistant device names for

SCSI devices xen-bug776995-pvscsi-persistent-names.patch

- xend/pvscsi: update sysfs parser for Linux 3.0

xen-bug776995-pvscsi-sysfs-parser.patch

- bnc#777090 - VUL-0: CVE-2012-3494: xen: hypercall

set_debugreg vulnerability (XSA-12)

CVE-2012-3494-xsa12.patch

- bnc#777091 - VUL-0: CVE-2012-3496: xen:

XENMEM_populate_physmap DoS vulnerability (XSA-14)

CVE-2012-3496-xsa14.patch

- bnc#777084 - VUL-0: CVE-2012-3515: xen: Qemu VT100

emulation vulnerability (XSA-17) CVE-2012-3515-xsa17.patch

- bnc#744771 - VM with passed through PCI card fails to

reboot under dom0 load 24888-pci-release-devices.patch

- Upstream patches from Jan

25431-x86-EDD-MBR-sig-check.patch

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory critical update Denial of Service openSUSE Xen

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 11.4:

zypper in -t patch openSUSE-2012-596

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 11.4 (i586 x86_64):

xen-4.0.3_04-45.1

xen-debugsource-4.0.3_04-45.1

xen-devel-4.0.3_04-45.1

xen-doc-html-4.0.3_04-45.1

xen-doc-pdf-4.0.3_04-45.1

xen-kmp-default-4.0.3_04_k2.6.37.6_0.20-45.1

xen-kmp-default-debuginfo-4.0.3_04_k2.6.37.6_0.20-45.1

xen-kmp-desktop-4.0.3_04_k2.6.37.6_0.20-45.1

xen-kmp-desktop-debuginfo-4.0.3_04_k2.6.37.6_0.20-45.1

xen-libs-4.0.3_04-45.1

xen-libs-debuginfo-4.0.3_04-45.1

xen-tools-4.0.3_04-45.1

xen-tools-debuginfo-4.0.3_04-45.1

xen-tools-domU-4.0.3_04-45.1

xen-tools-domU-debuginfo-4.0.3_04-45.1

- openSUSE 11.4 (i586):

xen-kmp-pae-4.0.3_04_k2.6.37.6_0.20-45.1

xen-kmp-pae-debuginfo-4.0.3_04_k2.6.37.6_0.20-45.1

References

https://www.suse.com/security/cve/CVE-2012-2625.html

https://www.suse.com/security/cve/CVE-2012-3432.html

https://www.suse.com/security/cve/CVE-2012-3433.html

https://www.suse.com/security/cve/CVE-2012-3494.html

https://www.suse.com/security/cve/CVE-2012-3496.html

https://www.suse.com/security/cve/CVE-2012-3515.html

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2012:1174-1
Rating: important
Affected Products: openSUSE 11.4

Topics%20covered

Topics Covered

security advisory critical update Denial of Service openSUSE Xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here