Stay Secure with the Latest Linux Advisories

security advisoryDoS threatbug fixes

SUSE Linux Enterprise 11 SP1: 2012:1162-1 Important: Xen DoS Threats

An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one An update that solves three vulnerabilities and has one errata is now available. errata is now available.. SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1162-1 Rating: important References: #776995 #777084 #777090 #777091 Cross-References: CVE-2012-3494 CVE-2012-3496 CVE-2012-3515 Affected Products: SUSE Linux Enterprise Server 11 SP1 LTSS ______________________________________________________________________________ An update that solves three vulnerabilities and has one errata is now available. Description: XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3496: xen: XENMEM_populate_physmap DoS vulnerability (XSA-14) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Also the following bugs have been fixed: * pvscsi support of attaching Luns - bnc#776995 Security Issue references: * CVE-2012-3496 * CVE-2012-3494 * CVE-2012-3515 Indications: Everyone using XEN should update. Patch Instructions: To install this SUSE Security Update use YaST online_update. Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Server 11 SP1 LTSS: zypper in -t patch slessp1-xen-201209-6746 To bring your system up-to-date, use "zypper patch". Package List: - SUSE Linux Enterprise Server 11 SP1 LTSS (i586 x86_64): xen-4.0.3_21548_10-0.5.1 xen-doc-html-4.0.3_21548_10-0.5.1 xen-doc-pdf-4.0.3_21548_10-0.5.1 xen-kmp-default-4.0.3_21548_10_2.6.32.59_0.7-0.5.1 xen-kmp-trace-4.0.3_21548_10_2.6.32.59_0.7-0.5.1 xen-libs-4.0.3_21548_10-0.5.1 xen-tools-4.0.3_21548_10-0.5.1 xen-tools-domU-4.0.3_21548_10-0.5.1 - SUSE Linux Enterprise Server 11 SP1 LTSS (i586): xen-kmp-pae-4.0.3_21548_10_2.6.32.59_0.7-0.5.1 References: https://www.suse.com/security/cve/CVE-2012-3494.html https://www.suse.com/security/cve/CVE-2012-3496.html https://www.suse.com/security/cve/CVE-2012-3515.html https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 . Essential SUSE patch addresses various Xen vulnerabilities to ensure dependable performance after installation. Find out the specifics!. SUSE Security Update,Xen vulnerabilities,security issues. . Severity: Important. LinuxSecurity.com Team

Sep 13, 2012 •Important SuSE