Articles / SuSE: New Xen packages fix …

SuSE: New Xen packages fix security issue

This update fixes a denial of service (Host Crash) in the XEN hypervisor. Updated packages are available from download.opensuse.org.

  SUSE Security Update: Security update for Xen
______________________________________________________________________________

Announcement ID:    SUSE-SU-2011:0983-1
Rating:             important
References:         #712038 
Cross-References:   CVE-2011-2901 CVE-2011-3131
Affected Products:
                   SUSE Linux Enterprise Server 10 SP4
                   SUSE Linux Enterprise Desktop 10 SP4
                   SLE SDK 10 SP4
______________________________________________________________________________

  An update that fixes two vulnerabilities is now available.

Description:


  This update fixes a denial of service (Host Crash) in the
  XEN hypervisor.  (CVE-2011-2901)

  Security Issue reference:

  * CVE-2011-2901
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-2901

  * CVE-2011-3131
  <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2011-3131


Indications:

  Please install this update.


Package List:

  - SUSE Linux Enterprise Server 10 SP4 (i586 x86_64):

     xen-3.2.3_17040_37-0.9.1
     xen-devel-3.2.3_17040_37-0.9.1
     xen-doc-html-3.2.3_17040_37-0.9.1
     xen-doc-pdf-3.2.3_17040_37-0.9.1
     xen-doc-ps-3.2.3_17040_37-0.9.1
     xen-kmp-debug-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-default-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-kdump-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-smp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-libs-3.2.3_17040_37-0.9.1
     xen-tools-3.2.3_17040_37-0.9.1
     xen-tools-domU-3.2.3_17040_37-0.9.1
     xen-tools-ioemu-3.2.3_17040_37-0.9.1

  - SUSE Linux Enterprise Server 10 SP4 (x86_64):

     xen-libs-32bit-3.2.3_17040_37-0.9.1

  - SUSE Linux Enterprise Server 10 SP4 (i586):

     xen-kmp-bigsmp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-kdumppae-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-vmi-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-vmipae-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1

  - SUSE Linux Enterprise Desktop 10 SP4 (i586 x86_64):

     xen-3.2.3_17040_37-0.9.1
     xen-devel-3.2.3_17040_37-0.9.1
     xen-doc-html-3.2.3_17040_37-0.9.1
     xen-doc-pdf-3.2.3_17040_37-0.9.1
     xen-doc-ps-3.2.3_17040_37-0.9.1
     xen-kmp-default-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-smp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-libs-3.2.3_17040_37-0.9.1
     xen-tools-3.2.3_17040_37-0.9.1
     xen-tools-domU-3.2.3_17040_37-0.9.1
     xen-tools-ioemu-3.2.3_17040_37-0.9.1

  - SUSE Linux Enterprise Desktop 10 SP4 (x86_64):

     xen-libs-32bit-3.2.3_17040_37-0.9.1

  - SUSE Linux Enterprise Desktop 10 SP4 (i586):

     xen-kmp-bigsmp-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1

  - SLE SDK 10 SP4 (i586 x86_64):

     xen-3.2.3_17040_37-0.9.1
     xen-devel-3.2.3_17040_37-0.9.1
     xen-kmp-debug-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-kmp-kdump-3.2.3_17040_37_2.6.16.60_0.89.2-0.9.1
     xen-libs-3.2.3_17040_37-0.9.1
     xen-tools-3.2.3_17040_37-0.9.1
     xen-tools-ioemu-3.2.3_17040_37-0.9.1

  - SLE SDK 10 SP4 (x86_64):

     xen-libs-32bit-3.2.3_17040_37-0.9.1


References:

  http://support.novell.com/security/cve/CVE-2011-2901.html
  http://support.novell.com/security/cve/CVE-2011-3131.html
  https://bugzilla.novell.com/712038
  http://download.novell.com/patch/finder/?keywords=1a3d8df4480b5a9e000bc582606a1bae
Screenshot

Project Spotlight

Kigo Video Converter Ultimate for Mac

A tool for converting and editing videos.

Screenshot

Project Spotlight

Kid3

An efficient tagger for MP3, Ogg/Vorbis, and FLAC files.