| Revision Date: | 2013-07-15 | Version: | 1 |
| Title: | Security update for Xen |
| Description: |
The Xen hypervisor and toolset has been updated to 4.2.2_06 to fix various bugs and security issues:
The following security issues have been addressed:
* CVE-2013-2194: Various integer overflows in the ELF loader were fixed. (XSA-55) * CVE-2013-2195: Various pointer dereferences issues in the ELF loader were fixed. (XSA-55) * CVE-2013-2196: Various other problems in the ELF loader were fixed. (XSA-55) * CVE-2013-2078: A Hypervisor crash due to missing exception recovery on XSETBV was fixed. (XSA-54) * CVE-2013-2077: A Hypervisor crash due to missing exception recovery on XRSTOR was fixed. (XSA-53) * CVE-2013-2211: libxl allowed guest write access to sensitive console related xenstore keys. (XSA-57) * CVE-2013-2076: An information leak on XSAVE/XRSTOR capable AMD CPUs (XSA-52) was fixed, where parts of this state could leak to other VMs.
Also the following bugs have been fixed:
* performance issues in mirror lvm (bnc#801663) * aacraid driver panics mapping INT A when booting kernel-xen (bnc#808085) * Fully Virtualized Windows VM install failed on Ivy Bridge platforms with Xen kernel (bnc#808269) * Did not boot with i915 graphics controller with VT-d enabled (bnc#817210)
Security Issue references:
* CVE-2013-2194 * CVE-2013-2195 * CVE-2013-2196
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 801663
808085
808269
817210
820917
820919
820920
823011
823608
CVE-2013-2194
CVE-2013-2195
CVE-2013-2196
|
| Platform(s): | SUSE Linux Enterprise Desktop 11 SP3
| Product(s): | |
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information
xen-4.2.2_06-0.7.1 is installed
OR xen-doc-html-4.2.2_06-0.7.1 is installed
OR xen-doc-pdf-4.2.2_06-0.7.1 is installed
OR xen-kmp-default-4.2.2_06_3.0.82_0.7-0.7.1 is installed
OR xen-kmp-pae-4.2.2_06_3.0.82_0.7-0.7.1 is installed
OR xen-libs-4.2.2_06-0.7.1 is installed
OR xen-libs-32bit-4.2.2_06-0.7.1 is installed
OR xen-tools-4.2.2_06-0.7.1 is installed
OR xen-tools-domU-4.2.2_06-0.7.1 is installed
|