Audit Linux privileges now to limit compromise, escalation, and system-wide damage. Review Linux Privileges×

Alerts This Week
Warning Icon 1 501
Alerts This Week
Warning Icon 1 501

SUSE Linux Enterprise 11 SP1: 2012:1162-1 Important: Xen DoS Threats

suse
Calendar Grey September 13, 2012
Scroller Suse
Essential SUSE patch addresses various Xen vulnerabilities to ensure dependable performance after installation. Find out the specifics!
An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one errata is no...

Summary

XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3496: xen: XENMEM_populate_physmap DoS vulnerability (XSA-14) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Also the following bugs have been fixed: * pvscsi support of attaching Luns - bnc#776995 Security Issue references: * CVE-2012-3496 * CVE-2012-3494 * CVE-2012-3515 Indications: Everyone using XEN should update. Patch Instructions:

Topics%20covered

Topics Covered

security advisory DoS threat bug fixes important update SUSE Linux Enterprise Xen security hypercall issue

References

#776995 #777084 #777090 #777091

Cross- CVE-2012-3494 CVE-2012-3496 CVE-2012-3515

Affected Products:

SUSE Linux Enterprise Server 11 SP1 LTSS

https://www.suse.com/security/cve/CVE-2012-3494.html

https://www.suse.com/security/cve/CVE-2012-3496.html

https://www.suse.com/security/cve/CVE-2012-3515.html

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

https://login.microfocus.com/nidp/app/login?sid=0

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2012:1162-1
Rating: important

Topics%20covered

Topics Covered

security advisory DoS threat bug fixes important update SUSE Linux Enterprise Xen security hypercall issue

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.