This update fixes the following security issues in xen :

  - CVE-2012-5513: XENMEM_exchange may overwrite hypervisor     memory (XSA-29)

  - CVE-2012-5515: Several memory hypercall operations allow     invalid extent order values (XSA-31)

Also the following bugs have been fixed and upstream patches have been applied: 26134-x86-shadow-invlpg-check.patch

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

The remote OracleVM system is missing necessary patches to address critical security updates : please see Oracle VM Security Advisory OVMSA-2015-0068 for details.

XEN has been updated to fix various bugs and security issues :

  - (XSA 36) To avoid an erratum in early hardware, the Xen     AMD IOMMU code by default choose to use a single     interrupt remapping table for the whole system. This     sharing implied that any guest with a passed through PCI     device that is bus mastering capable can inject     interrupts into other guests, including domain 0. This     has been disabled for AMD chipsets not capable of it.
    (CVE-2013-0153)

  - qemu: The e1000 had overflows under some conditions,     potentially corrupting memory. (CVE-2012-6075)

  - (XSA 37) Hypervisor crash due to incorrect ASSERT (debug     build only). (CVE-2013-0154)

  - (XSA-33) A VT-d interrupt remapping source validation     flaw was fixed. Also the following bugs have been fixed     :. (CVE-2012-5634)

  - xen hot plug attach/detach fails. (bnc#805094)

  - domain locking can prevent a live migration from     completing. (bnc#802690)

  - no way to control live migrations. (bnc#797014)

  - fix logic error in stdiostream_progress

  - restore logging in xc_save

  - add options to control migration tunables

  - enabling xentrace crashes hypervisor. (bnc#806736)

  - Upstream patches from Jan     26287-sched-credit-pick-idle.patch     26501-VMX-simplify-CR0-update.patch     26502-VMX-disable-SMEP-when-not-paging.patch     26516-ACPI-parse-table-retval.patch (Replaces     CVE-2013-0153-xsa36.patch)     26517-AMD-IOMMU-clear-irtes.patch (Replaces     CVE-2013-0153-xsa36.patch)     26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch     (Replaces CVE-2013-0153-xsa36.patch)     26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces     CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch     26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces     CVE-2013-0153-xsa36.patch)

  - Add $network to xend initscript dependencies.
    (bnc#798188)

  - Unable to dvd or cdrom-boot DomU after xen-tools update     Fixed with update to Xen version 4.1.4. (bnc#799694)

  - L3: HP iLo Generate NMI function not working in XEN     kernel. (bnc#800156)

  - Upstream patches from Jan     26404-x86-forward-both-NMI-kinds.patch     26427-x86-AMD-enable-WC+.patch

  - Xen VMs with more than 2 disks randomly fail to start.
    (bnc#793927)

  - Upstream patches from Jan     26332-x86-compat-show-guest-stack-mfn.patch     26333-x86-get_page_type-assert.patch (Replaces     CVE-2013-0154-xsa37.patch)     26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces     CVE-2012-5634-xsa33.patch)     26370-libxc-x86-initial-mapping-fit.patch

  - Update to Xen 4.1.4 c/s 23432

  - Update xenpaging.guest-memusage.patch add rule for     xenmem to avoid spurious build failures

  - Upstream patches from Jan 26179-PCI-find-next-cap.patch     26183-x86-HPET-masking.patch     26188-x86-time-scale-asm.patch     26200-IOMMU-debug-verbose.patch     26203-x86-HAP-dirty-vram-leak.patch     26229-gnttab-version-switch.patch (Replaces     CVE-2012-5510-xsa26.patch)     26230-x86-HVM-limit-batches.patch (Replaces     CVE-2012-5511-xsa27.patch)     26231-memory-exchange-checks.patch (Replaces     CVE-2012-5513-xsa29.patch)     26232-x86-mark-PoD-error-path.patch (Replaces     CVE-2012-5514-xsa30.patch)     26233-memop-order-checks.patch (Replaces     CVE-2012-5515-xsa31.patch)     26235-IOMMU-ATS-max-queue-depth.patch     26272-x86-EFI-makefile-cflags-filter.patch     26294-x86-AMD-Fam15-way-access-filter.patch     CVE-2013-0154-xsa37.patch

  - Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify     the EFI Makefile to do additional filtering.

This update of XEN fixes various denial of service bugs.

  - bnc#789945 - CVE-2012-5510: xen: Grant table version     switch list corruption vulnerability (XSA-26)

  - bnc#789944 - CVE-2012-5511: xen: Several HVM operations     do not validate the range of their inputs (XSA-27)

  - bnc#789940 - CVE-2012-5512: xen: HVMOP_get_mem_access     crash / HVMOP_set_mem_access information leak (XSA-28)

  - bnc#789951 - CVE-2012-5513: xen: XENMEM_exchange may     overwrite hypervisor memory (XSA-29)

  - bnc#789948 - CVE-2012-5514: xen: Missing unlock in     guest_physmap_mark_populate_on_demand() (XSA-30)

  - bnc#789950 - CVE-2012-5515: xen: Several memory     hypercall operations allow invalid extent order values     (XSA-31)

  - bnc#789988 - FATAL PAGE FAULT in hypervisor     (arch_do_domctl)     25931-x86-domctl-iomem-mapping-checks.patch

  - Upstream patches from Jan     26132-tmem-save-NULL-check.patch     26134-x86-shadow-invlpg-check.patch     26148-vcpu-timer-overflow.patch (Replaces     CVE-2012-4535-xsa20.patch)     26149-x86-p2m-physmap-error-path.patch (Replaces     CVE-2012-4537-xsa22.patch)     26150-x86-shadow-unhook-toplevel-check.patch (Replaces     CVE-2012-4538-xsa23.patch)     26151-gnttab-compat-get-status-frames.patch (Replaces     CVE-2012-4539-xsa24.patch)

  - bnc#777628 - guest 'disappears' after live migration     Updated block-dmmd script

  - Fix exception in balloon.py and osdep.py     xen-max-free-mem.diff

  - bnc#792476 - efi files missing in latest XEN update     Revert c/s 25751 EFI Makefile changes in     23614-x86_64-EFI-boot.patch

ID	名称	产品	系列	发布时间	最近更新时间	严重程度
83569	SUSE SLED10 / SLES10 Security Update : Xen (SUSE-SU-2012:1606-1)	Nessus	SuSE Local Security Checks	2015/5/20	2021/1/19	medium
84140	OracleVM 3.2 : xen (OVMSA-2015-0068) (POODLE) (Venom)	Nessus	OracleVM Local Security Checks	2015/6/12	2021/1/4	low
65797	SuSE 11.2 Security Update : Xen (SAT Patch Number 7492)	Nessus	SuSE Local Security Checks	2013/4/4	2021/1/19	high
74852	openSUSE Security Update : xen (openSUSE-SU-2012:1685-1)	Nessus	SuSE Local Security Checks	2014/6/13	2021/1/19	medium

检测

插件搜索

medium

low

high

medium