| Description: | The Xen package contains the tools for managing the virtual machine monitor in Red Hat Enterprise Linux virtualization.
A flaw was found affecting the VNC server code in QEMU. On a fullyvirtualized guest VM, where qemu monitor mode is enabled, a user who had access to the VNC server could gain the ability to read arbitrary files as root in the host filesystem. (CVE-2007-0998)
In addition to disabling qemu monitor mode, the following bugs were also fixed:
Fix IA64 fully virtualized (VTi) shadow page table mode initialization.
Fix network bonding in balanced-rr mode. Without this update, a network path loss could result in packet loss.
Users of Xen should update to these erratum packages containing backported patches which correct these issues.
|