SUSE-SU-2013:1867-1: moderate: Security update for Xen

[sle-security-updates at lists.suse.com]

   SUSE Security Update: Security update for Xen
______________________________________________________________________________

Announcement ID:    SUSE-SU-2013:1867-1
Rating:             moderate
References:         #840997 #848657 
Cross-References:   CVE-2013-4494
Affected Products:
                    SUSE Linux Enterprise Software Development Kit 11 SP2
                    SUSE Linux Enterprise Server 11 SP2 for VMware
                    SUSE Linux Enterprise Server 11 SP2
                    SUSE Linux Enterprise Desktop 11 SP2
______________________________________________________________________________

   An update that solves one vulnerability and has one errata
   is now available.

Description:


   Xen has been updated to fix a security issue and a bug:

   * CVE-2013-4494: XSA-73: A lock order reversal between
   page allocation and grant table locks could lead to host
   crashes or even host code execution.

   A non-security bug has also been fixed:

   * It is possible to start a VM twice on the same node
   (bnc#840997)

   Security Issue references:

   * CVE-2013-4494
   <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-4494
   >


Special Instructions and Notes:

   Please reboot the system after installing this update.

Patch Instructions:

   To install this SUSE Security Update use YaST online_update.
   Alternatively you can run the command listed for your product:

   - SUSE Linux Enterprise Software Development Kit 11 SP2:

      zypper in -t patch sdksp2-xen-201311-8577

   - SUSE Linux Enterprise Server 11 SP2 for VMware:

      zypper in -t patch slessp2-xen-201311-8577

   - SUSE Linux Enterprise Server 11 SP2:

      zypper in -t patch slessp2-xen-201311-8577

   - SUSE Linux Enterprise Desktop 11 SP2:

      zypper in -t patch sledsp2-xen-201311-8577

   To bring your system up-to-date, use "zypper patch".


Package List:

   - SUSE Linux Enterprise Software Development Kit 11 SP2 (i586 x86_64):

      xen-devel-4.1.6_04-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 for VMware (i586 x86_64):

      xen-kmp-trace-4.1.6_04_3.0.101_0.5-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (i586 x86_64):

      xen-kmp-default-4.1.6_04_3.0.101_0.5-0.5.1
      xen-kmp-trace-4.1.6_04_3.0.101_0.5-0.5.1
      xen-libs-4.1.6_04-0.5.1
      xen-tools-domU-4.1.6_04-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (x86_64):

      xen-4.1.6_04-0.5.1
      xen-doc-html-4.1.6_04-0.5.1
      xen-doc-pdf-4.1.6_04-0.5.1
      xen-libs-32bit-4.1.6_04-0.5.1
      xen-tools-4.1.6_04-0.5.1

   - SUSE Linux Enterprise Server 11 SP2 (i586):

      xen-kmp-pae-4.1.6_04_3.0.101_0.5-0.5.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586 x86_64):

      xen-kmp-default-4.1.6_04_3.0.101_0.5-0.5.1
      xen-kmp-trace-4.1.6_04_3.0.101_0.5-0.5.1
      xen-libs-4.1.6_04-0.5.1
      xen-tools-domU-4.1.6_04-0.5.1

   - SUSE Linux Enterprise Desktop 11 SP2 (x86_64):

      xen-4.1.6_04-0.5.1
      xen-doc-html-4.1.6_04-0.5.1
      xen-doc-pdf-4.1.6_04-0.5.1
      xen-libs-32bit-4.1.6_04-0.5.1
      xen-tools-4.1.6_04-0.5.1

   - SUSE Linux Enterprise Desktop 11 SP2 (i586):

      xen-kmp-pae-4.1.6_04_3.0.101_0.5-0.5.1


References:

   http://support.novell.com/security/cve/CVE-2013-4494.html
   https://bugzilla.novell.com/840997
   https://bugzilla.novell.com/848657
   http://download.novell.com/patch/finder/?keywords=e2b4f1fdb40f6617a5fe27add20f67f0