openSUSE Security Update : xen-201105 (openSUSE-SU-2011:0578-1)

medium Nessus Plugin ID 76048

Language:

New! Plugin Severity Now Using CVSS v3

The calculated severity for Plugins has been updated to use CVSS v3 by default. Plugins that do not have a CVSS v3 score will fall back to CVSS v2 for calculating severity. Severity display preferences can be toggled in the settings dropdown.

Synopsis

The remote openSUSE host is missing a security update.

Description

Collective May/2011 update for Xen

Xen :

 - 675363 - Random lockups with kernel-xen. Possibly graphics related.

 - 679344 - Xen: multi-vCPU pv guest may crash host

 - 681044 - update xenpaging.autostart.patch

 - 681302 - xm create -x <guest> returns 'ImportError: No module named ext'

 - 688473 - potential buffer overflow in tools

 - 691738 - Xen does not find device create with npiv block

vm-install :

 - 688757 - SLED10SP4 fully virtualized in SLES10SP4 XEN - kernel panic

 - 678152 - Xen: virt-manager: harmless block device admin actions on FV guests mess up network (VIF) device type ==> network lost.

 - 631680 - OpenSUSE 11.3 KVM install of windows xp fails on first reboot during installation.

Solution

Update the affected xen-201105 packages.

See Also

https://bugzilla.novell.com/show_bug.cgi?id=631680

https://bugzilla.novell.com/show_bug.cgi?id=675363

https://bugzilla.novell.com/show_bug.cgi?id=678152

https://bugzilla.novell.com/show_bug.cgi?id=679344

https://bugzilla.novell.com/show_bug.cgi?id=681044

https://bugzilla.novell.com/show_bug.cgi?id=681302

https://bugzilla.novell.com/show_bug.cgi?id=688473

https://bugzilla.novell.com/show_bug.cgi?id=688757

https://bugzilla.novell.com/show_bug.cgi?id=691238

https://bugzilla.novell.com/show_bug.cgi?id=691738

https://lists.opensuse.org/opensuse-updates/2011-05/msg00065.html

Plugin Details

Severity: Medium

ID: 76048

File Name: suse_11_4_xen-201105-110510.nasl

Version: 1.5

Type: local

Agent: unix

Published: 6/13/2014

Updated: 1/19/2021

Dependencies: ssh_get_info.nasl

Risk Information

VPR

Risk Factor: Medium

Score: 6

CVSS v2

Risk Factor: Medium

Base Score: 6.9

Vector: AV:L/AC:M/Au:N/C:C/I:C/A:C

Vulnerability Information

CPE: p-cpe:/a:novell:opensuse:vm-install, p-cpe:/a:novell:opensuse:xen, p-cpe:/a:novell:opensuse:xen-debugsource, p-cpe:/a:novell:opensuse:xen-devel, p-cpe:/a:novell:opensuse:xen-doc-html, p-cpe:/a:novell:opensuse:xen-doc-pdf, p-cpe:/a:novell:opensuse:xen-kmp-default, p-cpe:/a:novell:opensuse:xen-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-desktop, p-cpe:/a:novell:opensuse:xen-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-pae, p-cpe:/a:novell:opensuse:xen-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:xen-libs, p-cpe:/a:novell:opensuse:xen-libs-debuginfo, p-cpe:/a:novell:opensuse:xen-tools, p-cpe:/a:novell:opensuse:xen-tools-debuginfo, p-cpe:/a:novell:opensuse:xen-tools-domU, p-cpe:/a:novell:opensuse:xen-tools-domU-debuginfo, cpe:/o:novell:opensuse:11.4

Required KB Items: Host/local_checks_enabled, Host/SuSE/release, Host/SuSE/rpm-list, Host/cpu

Patch Publication Date: 5/10/2011

Reference Information

CVE: CVE-2011-1146, CVE-2011-1166, CVE-2011-1486, CVE-2011-1583