Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
98
security advisorymoderateRed HatRed Hat Enterprise Linux 5 RHSA-2013:0241-01 Moderate: Xen Out-Of-Memory
Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xen security update Advisory ID: RHSA-2013:0241-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2013:0241.html Issue date: 2013-02-07 CVE Names: CVE-2012-4544 ==================================================================== 1. Summary: Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Multi OS (v. 5 client) - i386, x86_64 RHEL Virtualization (v. 5 server) - i386, ia64, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Red Hat Enterprise Linux. A flaw was found in the way libxc, the Xen control library, handled excessively large kernel and ramdisk images when starting new guests. A privileged guest user in a para-virtualized guest (a DomU) could create a crafted kernel or ramdisk image that, when attempting to use it during guest start, could result in an out-of-memory condition in the privileged domain (the Dom0). (CVE-2012-4544) Red Hat would like to thank the Xen project for reporting this issue. All users of xen are advised to upgrade to these updated packages, which correct this issue. After installing the updated packages, the xendservice must be restarted for this update to take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 870412 - CVE-2012-4544 xen: Xen domain builder Out-of-memory due to malicious kernel/ramdisk 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-libs-3.0.3-142.el5_9.1.i386.rpm x86_64: xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.x86_64.rpm xen-libs-3.0.3-142.el5_9.1.i386.rpm xen-libs-3.0.3-142.el5_9.1.x86_64.rpm RHEL Desktop Multi OS (v. 5 client): Source: i386: xen-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-devel-3.0.3-142.el5_9.1.i386.rpm x86_64: xen-3.0.3-142.el5_9.1.x86_64.rpm xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.x86_64.rpm xen-devel-3.0.3-142.el5_9.1.i386.rpm xen-devel-3.0.3-142.el5_9.1.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-libs-3.0.3-142.el5_9.1.i386.rpm ia64: xen-debuginfo-3.0.3-142.el5_9.1.ia64.rpm xen-libs-3.0.3-142.el5_9.1.ia64.rpm x86_64: xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.x86_64.rpm xen-libs-3.0.3-142.el5_9.1.i386.rpm xen-libs-3.0.3-142.el5_9.1.x86_64.rpm RHEL Virtualization (v. 5server): Source: i386: xen-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-devel-3.0.3-142.el5_9.1.i386.rpm ia64: xen-3.0.3-142.el5_9.1.ia64.rpm xen-debuginfo-3.0.3-142.el5_9.1.ia64.rpm xen-devel-3.0.3-142.el5_9.1.ia64.rpm x86_64: xen-3.0.3-142.el5_9.1.x86_64.rpm xen-debuginfo-3.0.3-142.el5_9.1.i386.rpm xen-debuginfo-3.0.3-142.el5_9.1.x86_64.rpm xen-devel-3.0.3-142.el5_9.1.i386.rpm xen-devel-3.0.3-142.el5_9.1.x86_64.rpm These packages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key#package 7. References: https://access.redhat.com/security/cve/CVE-2012-4544 https://access.redhat.com/security/updates/classification#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact Copyright 2013 Red Hat, Inc. . Ubuntu unveils significant security update for kernel packages tackling severe memory exhaustion vulnerabilities. Discover further details here.. Red Hat Enterprise, xen security, memory update, linux administration, kernel management. . LinuxSecurity.com Team
Feb 07, 2013
Red Hat
98
security advisorymoderateRed HatRed Hat Enterprise Linux 5: RHSA-2012:1130-01 Moderate: Xen Security Update
Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate [More...]. ==================================================================== Red Hat Security Advisory Synopsis: Moderate: xen security update Advisory ID: RHSA-2012:1130-01 Product: Red Hat Enterprise Linux Advisory URL: https://access.redhat.com/errata/RHSA-2012:1130.html Issue date: 2012-07-31 CVE Names: CVE-2012-2625 ==================================================================== 1. Summary: Updated xen packages that fix one security issue are now available for Red Hat Enterprise Linux 5. The Red Hat Security Response Team has rated this update as having moderate security impact. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available from the CVE link in the References section. 2. Relevant releases/architectures: RHEL Desktop Multi OS (v. 5 client) - i386, x86_64 RHEL Virtualization (v. 5 server) - i386, ia64, x86_64 Red Hat Enterprise Linux (v. 5 server) - i386, ia64, x86_64 Red Hat Enterprise Linux Desktop (v. 5 client) - i386, x86_64 3. Description: The xen packages contain administration tools and the xend service for managing the kernel-xen kernel for virtualization on Red Hat Enterprise Linux. A flaw was found in the way the pyGrub boot loader handled compressed kernel images. A privileged guest user in a para-virtualized guest (a DomU) could use this flaw to create a crafted kernel image that, when attempting to boot it, could result in an out-of-memory condition in the privileged domain (the Dom0). (CVE-2012-2625) Red Hat would like to thank Xinli Niu for reporting this issue. All users of xen are advised to upgrade to these updated packages, which contain a backported patch to correct this issue. After installing the updated packages, the xend service must be restarted for this updateto take effect. 4. Solution: Before applying this update, make sure all previously-released errata relevant to your system have been applied. This update is available via the Red Hat Network. Details on how to use the Red Hat Network to apply this update are available at https://access.redhat.com/knowledge/articles/11258 5. Bugs fixed (http://bugzilla.redhat.com/): 821676 - CVE-2012-2625 xen: pv bootloader doesn't check the size of the bzip2 or lzma compressed kernel 6. Package List: Red Hat Enterprise Linux Desktop (v. 5 client): Source: i386: xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-libs-3.0.3-135.el5_8.4.i386.rpm x86_64: xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.x86_64.rpm xen-libs-3.0.3-135.el5_8.4.i386.rpm xen-libs-3.0.3-135.el5_8.4.x86_64.rpm RHEL Desktop Multi OS (v. 5 client): Source: i386: xen-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-devel-3.0.3-135.el5_8.4.i386.rpm x86_64: xen-3.0.3-135.el5_8.4.x86_64.rpm xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.x86_64.rpm xen-devel-3.0.3-135.el5_8.4.i386.rpm xen-devel-3.0.3-135.el5_8.4.x86_64.rpm Red Hat Enterprise Linux (v. 5 server): Source: i386: xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-libs-3.0.3-135.el5_8.4.i386.rpm ia64: xen-debuginfo-3.0.3-135.el5_8.4.ia64.rpm xen-libs-3.0.3-135.el5_8.4.ia64.rpm x86_64: xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.x86_64.rpm xen-libs-3.0.3-135.el5_8.4.i386.rpm xen-libs-3.0.3-135.el5_8.4.x86_64.rpm RHEL Virtualization (v. 5 server): Source: i386: xen-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-devel-3.0.3-135.el5_8.4.i386.rpm ia64: xen-3.0.3-135.el5_8.4.ia64.rpm xen-debuginfo-3.0.3-135.el5_8.4.ia64.rpm xen-devel-3.0.3-135.el5_8.4.ia64.rpm x86_64: xen-3.0.3-135.el5_8.4.x86_64.rpm xen-debuginfo-3.0.3-135.el5_8.4.i386.rpm xen-debuginfo-3.0.3-135.el5_8.4.x86_64.rpm xen-devel-3.0.3-135.el5_8.4.i386.rpm xen-devel-3.0.3-135.el5_8.4.x86_64.rpm Thesepackages are GPG signed by Red Hat for security. Our key and details on how to verify the signature are available from https://access.redhat.com/security/team/key/#package 7. References: https://access.redhat.com/security/cve/CVE-2012-2625 https://access.redhat.com/security/updates/classification/#moderate 8. Contact: The Red Hat security contact is . More contact details at https://access.redhat.com/security/team/contact/ Copyright 2012 Red Hat, Inc. . Ubuntu has released crucial patches for kernel components tackling CVE-2013-1503, enhancing security in cloud environments.. Red Hat Update, Xen Security, Linux Advisory, Kernel Management. . LinuxSecurity.com Team
Jul 31, 2012
Red Hat
98
security advisoryRed Hatbug fixRed Hat Linux 7.2: RHBA-2003:144 & 143 Moderate Bug Fix Advisory Retraction
We have retracted two bug fix advisories that affected only the S/390 architecture of Red Hat Linux 7.2.. We have retracted two bug fix advisories that affected only the S/390 architecture of Red Hat Linux 7.2. The advisory RHBA-2003:144 provided a bug fix kernel update, and RHBA-2003:143 provided a bug fix modutils update. Both advisories and the associated errata packages have been removed. Mark - -- Mark J Cox / Red Hat Security Response Team . We rescinded two advisories affecting the S/390 platform in Red Hat Linux 7.2. Major updates were removed.. Red Hat Linux, Kernel Bug Fixes, Security Updates, S390 Architecture. . Severity: Important. LinuxSecurity.com Team
Jun 06, 2003
•Important
Red Hat
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!