SUSE-SU-2016:2507-1: important: Security update for xen
sle-security-updates at lists.suse.com
sle-security-updates at lists.suse.com
Wed Oct 12 07:11:00 MDT 2016
SUSE Security Update: Security update for xen
______________________________________________________________________________
Announcement ID: SUSE-SU-2016:2507-1
Rating: important
References: #966467 #970135 #971949 #988675 #990970 #991934
#992224 #993507 #994136 #994421 #994625 #994761
#994772 #994775 #995785 #995789 #995792 #997731
Cross-References: CVE-2016-6258 CVE-2016-6833 CVE-2016-6834
CVE-2016-6835 CVE-2016-6836 CVE-2016-6888
CVE-2016-7092 CVE-2016-7093 CVE-2016-7094
CVE-2016-7154
Affected Products:
SUSE Linux Enterprise Software Development Kit 11-SP4
SUSE Linux Enterprise Server 11-SP4
SUSE Linux Enterprise Debuginfo 11-SP4
______________________________________________________________________________
An update that solves 10 vulnerabilities and has 8 fixes is
now available.
Description:
This update for xen fixes several issues.
These security issues were fixed:
- CVE-2016-7092: The get_page_from_l3e function in arch/x86/mm.c in Xen
allowed local 32-bit PV guest OS administrators to gain host OS
privileges via vectors related to L3 recursive pagetables (bsc#995785)
- CVE-2016-7093: Xen allowed local HVM guest OS administrators to
overwrite hypervisor memory and consequently gain host OS privileges by
leveraging mishandling of instruction pointer truncation during
emulation (bsc#995789)
- CVE-2016-7094: Buffer overflow in Xen allowed local x86 HVM guest OS
administrators on guests running with shadow paging to cause a denial of
service via a pagetable update (bsc#995792)
- CVE-2016-7154: Use-after-free vulnerability in the FIFO event channel
code in Xen allowed local guest OS administrators to cause a denial of
service (host crash) and possibly execute arbitrary code or obtain
sensitive information via an invalid guest frame number (bsc#997731)
- CVE-2016-6836: VMWARE VMXNET3 NIC device allowed privileged user inside
the guest to leak information. It occured while processing transmit(tx)
queue, when it reaches the end of packet (bsc#994761)
- CVE-2016-6888: A integer overflow int the VMWARE VMXNET3 NIC device
support, during the initialisation of new packets in the device, could
have allowed a privileged user inside guest to crash the Qemu instance
resulting in DoS (bsc#994772)
- CVE-2016-6833: A use-after-free issue in the VMWARE VMXNET3 NIC device
support allowed privileged user inside guest to crash the Qemu instance
resulting in DoS (bsc#994775)
- CVE-2016-6835: Buffer overflow in the VMWARE VMXNET3 NIC device support,
causing an OOB read access (bsc#994625)
- CVE-2016-6834: A infinite loop during packet fragmentation in the VMWARE
VMXNET3 NIC device support allowed privileged user inside guest to crash
the Qemu instance resulting in DoS (bsc#994421)
- CVE-2016-6258: The PV pagetable code in arch/x86/mm.c in Xen allowed
local 32-bit PV guest OS administrators to gain host OS privileges by
leveraging fast-paths for updating pagetable entries (bsc#988675)
These non-security issues were fixed:
- bsc#993507: virsh detach-disk failing to detach disk
- bsc#991934: Xen hypervisor crash in csched_acct
- bsc#992224: During boot of Xen Hypervisor, Failed to get contiguous
memory for DMA
- bsc#970135: New virtualization project clock test randomly fails on Xen
- bsc#994136: Unplug also SCSI disks in qemu-xen-traditional for upstream
unplug protocol
- bsc#994136: xen_platform: unplug also SCSI disks in qemu-xen
- bsc#971949: xl: Support (by ignoring) xl migrate --live. xl migrations
are always live
- bsc#990970: Add PMU support for Intel E7-8867 v4 (fam=6, model=79)
- bsc#966467: Live Migration SLES 11 SP3 to SP4 on AMD
Patch Instructions:
To install this SUSE Security Update use YaST online_update.
Alternatively you can run the command listed for your product:
- SUSE Linux Enterprise Software Development Kit 11-SP4:
zypper in -t patch sdksp4-xen-12782=1
- SUSE Linux Enterprise Server 11-SP4:
zypper in -t patch slessp4-xen-12782=1
- SUSE Linux Enterprise Debuginfo 11-SP4:
zypper in -t patch dbgsp4-xen-12782=1
To bring your system up-to-date, use "zypper patch".
Package List:
- SUSE Linux Enterprise Software Development Kit 11-SP4 (i586 x86_64):
xen-devel-4.4.4_08-40.2
- SUSE Linux Enterprise Server 11-SP4 (i586 x86_64):
xen-kmp-default-4.4.4_08_3.0.101_80-40.2
xen-libs-4.4.4_08-40.2
xen-tools-domU-4.4.4_08-40.2
- SUSE Linux Enterprise Server 11-SP4 (x86_64):
xen-4.4.4_08-40.2
xen-doc-html-4.4.4_08-40.2
xen-libs-32bit-4.4.4_08-40.2
xen-tools-4.4.4_08-40.2
- SUSE Linux Enterprise Server 11-SP4 (i586):
xen-kmp-pae-4.4.4_08_3.0.101_80-40.2
- SUSE Linux Enterprise Debuginfo 11-SP4 (i586 x86_64):
xen-debuginfo-4.4.4_08-40.2
xen-debugsource-4.4.4_08-40.2
References:
https://www.suse.com/security/cve/CVE-2016-6258.html
https://www.suse.com/security/cve/CVE-2016-6833.html
https://www.suse.com/security/cve/CVE-2016-6834.html
https://www.suse.com/security/cve/CVE-2016-6835.html
https://www.suse.com/security/cve/CVE-2016-6836.html
https://www.suse.com/security/cve/CVE-2016-6888.html
https://www.suse.com/security/cve/CVE-2016-7092.html
https://www.suse.com/security/cve/CVE-2016-7093.html
https://www.suse.com/security/cve/CVE-2016-7094.html
https://www.suse.com/security/cve/CVE-2016-7154.html
https://bugzilla.suse.com/966467
https://bugzilla.suse.com/970135
https://bugzilla.suse.com/971949
https://bugzilla.suse.com/988675
https://bugzilla.suse.com/990970
https://bugzilla.suse.com/991934
https://bugzilla.suse.com/992224
https://bugzilla.suse.com/993507
https://bugzilla.suse.com/994136
https://bugzilla.suse.com/994421
https://bugzilla.suse.com/994625
https://bugzilla.suse.com/994761
https://bugzilla.suse.com/994772
https://bugzilla.suse.com/994775
https://bugzilla.suse.com/995785
https://bugzilla.suse.com/995789
https://bugzilla.suse.com/995792
https://bugzilla.suse.com/997731
More information about the sle-security-updates
mailing list