Alerts This Week
Warning Icon 1 525
Alerts This Week
Warning Icon 1 525

openSUSE 13.1: 2014:1281-1 Important: Xen Security Updates

opensuse
Calendar Grey October 9, 2014
Dist Opensuse Esm H88
This enhancement rectifies vital vulnerabilities and glitches within Fedora's kernel, bolstering system integrity and performance.
An update that solves 10 vulnerabilities and has four fixes An update that solves 10 vulnerabilities and has four fixes An update that solves 10 vulnerabilities and has four fixes ...

Description

XEN was updated to fix security issues and bugs.

Security issues fixed:

- bnc#897657 - CVE-2014-7188: XSA-108 Improper MSR range used for x2APIC

emulation

- bnc#895802 - CVE-2014-7156: XSA-106: Missing privilege level checks in

x86 emulation of software interrupts

- bnc#895799 - CVE-2014-7155: XSA-105: Missing privilege level checks in

x86 HLT, LGDT, LIDT, and LMSW emulation

- bnc#895798 - CVE-2014-7154: XSA-104: Race condition in

HVMOP_track_dirty_vram

- bnc#864801 - CVE-2013-4540: qemu: zaurus: buffer overrun on invalid

state load

- bnc#875668 - CVE-2014-3124: XSA-92: HVMOP_set_mem_type allows invalid

P2M entries to be created

- bnc#878841 - CVE-2014-3967, CVE-2014-3968: XSA-96: Xen: Vulnerabilities

in HVM MSI injection

- bnc#880751 - CVE-2014-4021: XSA-100: Hypervisor heap contents leaked to

guests

- bnc#842006 - CVE-2013-4344: XSA-65: xen: qemu SCSI REPORT LUNS buffer

overflow

Other bugs fixed:

...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security update bug fix important security issues xen openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.1:

zypper in -t patch openSUSE-2014-580

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.1 (i586 x86_64):

xen-debugsource-4.3.2_02-27.1

xen-devel-4.3.2_02-27.1

xen-kmp-default-4.3.2_02_k3.11.10_21-27.1

xen-kmp-default-debuginfo-4.3.2_02_k3.11.10_21-27.1

xen-kmp-desktop-4.3.2_02_k3.11.10_21-27.1

xen-kmp-desktop-debuginfo-4.3.2_02_k3.11.10_21-27.1

xen-libs-4.3.2_02-27.1

xen-libs-debuginfo-4.3.2_02-27.1

xen-tools-domU-4.3.2_02-27.1

xen-tools-domU-debuginfo-4.3.2_02-27.1

- openSUSE 13.1 (x86_64):

xen-4.3.2_02-27.1

xen-doc-html-4.3.2_02-27.1

xen-libs-32bit-4.3.2_02-27.1

xen-libs-debuginfo-32bit-4.3.2_02-27.1

xen-tools-4.3.2_02-27.1

xen-tools-debuginfo-4.3.2_02-27.1

xen-xend-tools-4.3.2_02-27.1

xen-xend-tools-debuginfo-4.3.2_02-27.1

- openSUSE 13.1 (i586):

xen-kmp-pae-4.3.2_02_k3.11.10_21-27.1

xen-kmp-pae-debuginfo-4.3.2_02_k3.11.10_21-27.1

References

https://www.suse.com/security/cve/CVE-2013-4344.html

https://www.suse.com/security/cve/CVE-2013-4540.html

https://www.suse.com/security/cve/CVE-2014-3124.html

https://www.suse.com/security/cve/CVE-2014-3967.html

https://www.suse.com/security/cve/CVE-2014-3968.html

https://www.suse.com/security/cve/CVE-2014-4021.html

https://www.suse.com/security/cve/CVE-2014-7154.html

https://www.suse.com/security/cve/CVE-2014-7155.html

https://www.suse.com/security/cve/CVE-2014-7156.html

https://www.suse.com/security/cve/CVE-2014-7188.html

https://bugzilla.suse.com/show_bug.cgi?id=798770

https://bugzilla.suse.com/show_bug.cgi?id=820873

https://bugzilla.suse.com/show_bug.cgi?id=842006

https://bugzilla.suse.com/show_bug.cgi?id=864801

https://bugzilla.suse.com/show_bug.cgi?id=865682

https://bugzilla.suse.com/show_bug.cgi?id=875668

https://bugzilla.suse.com/show_bug.cgi?id=878841

https://bugzilla.suse.com/show_bug.cgi?id=880751

https://bugzilla.suse.com/show_bug.cgi?id=882127

https://bugzilla.suse.com/show_bug.cgi?id=895798...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2014:1281-1
Rating: important
Affected Products: openSUSE 13.1

Topics%20covered

Topics Covered

security advisory security update bug fix important security issues xen openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here