openSUSE 安全性更新:XEN (openSUSE-SU-2012:1573-1)

high Nessus Plugin ID 74821

概要

遠端 openSUSE 主機缺少安全性更新。

說明

XEN 的此安全性更新可修正各種錯誤和安全性問題。

- 上游修補程式 26088-xend-xml-filesize-check.patch

- bnc#787163 - CVE-2012-4544:xen:網域建立器因惡意核心/ramdisk (XSA 25) 而記憶體不足 CVE-2012-4544-xsa25.patch

- bnc#779212 - CVE-2012-4411:XEN/qemu:來賓系統管理員可存取 qemu 監控主控台 (XSA-19) CVE-2012-4411-xsa19.patch

- bnc#786516 - CVE-2012-4535:xen:計時器溢位 DoS 弱點 CVE-2012-4535-xsa20.patch

- bnc#786518 - CVE-2012-4536:xen:pirq 範圍檢查 DoS 弱點 CVE-2012-4536-xsa21.patch

- bnc#786517 - CVE-2012-4537:xen:記憶體對應失敗 DoS 弱點 CVE-2012-4537-xsa22.patch

- bnc#786519 - CVE-2012-4538:xen:卸載空白 PAE 項目 DoS 弱點 CVE-2012-4538-xsa23.patch

- bnc#786520 - CVE-2012-4539:xen:授予表格 hypercall 無限迴圈 DoS 弱點 CVE-2012-4539-xsa24.patch

- bnc#784087 - L3:在 io_apic.c:129 的 Xen 錯誤 26102-x86-IOAPIC-legacy-not-first.patch

- 來自 Jan 的上游修補程式 26054-x86-AMD-perf-ctr-init.patch 26055-x86-oprof-hvm-mode.patch 26056-page-alloc-flush-filter.patch 26061-x86-oprof-counter-range.patch 26062-ACPI-ERST-move-data.patch 26063-x86-HPET-affinity-lock.patch 26093-HVM-PoD-grant-mem-type.patch

- 來自 Jan 的上游修補程式 25931-x86-domctl-iomem-mapping-checks.patch 25952-x86-MMIO-remap-permissions.patch

------------------------------------------------------------------- 2012 年 9 月 24 日星期一 16:41:58 CEST - [email protected]

- 使用 BuildRequires:gcc46 僅在 sles11sp2 或 12.1 中修正 11.4 中的版本

------------------------------------------------------------------- 2012 年 9 月 20 日星期四 10:03:40 MDT - [email protected]

- 來自 Jan 的上游修補程式 25808-domain_create-return-value.patch 25814-x86_64-set-debugreg-guest.patch 25815-x86-PoD-no-bug-in-non-translated.patch 25816-x86-hvm-map-pirq-range-check.patch 25833-32on64-bogus-pt_base-adjust.patch 25834-x86-S3-MSI-resume.patch 25835-adjust-rcu-lock-domain.patch 25836-VT-d-S3-MSI-resume.patch 25850-tmem-xsa-15-1.patch 25851-tmem-xsa-15-2.patch 25852-tmem-xsa-15-3.patch 25853-tmem-xsa-15-4.patch 25854-tmem-xsa-15-5.patch 25855-tmem-xsa-15-6.patch 25856-tmem-xsa-15-7.patch 25857-tmem-xsa-15-8.patch 25858-tmem-xsa-15-9.patch 25859-tmem-missing-break.patch 25860-tmem-cleanup.patch 25883-pt-MSI-cleanup.patch 25927-x86-domctl-ioport-mapping-range.patch 25929-tmem-restore-pool-version.patch

- bnc#778105 - 第一個 XEN-PV VM 無法衍生 xend:
增加磁碟在主機開機載入器中出現的等待時間。修改現有的 xen-domUloader.diff

- 來自 Jan 的上游修補程式 25752-ACPI-pm-op-valid-cpu.patch 25754-x86-PoD-early-access.patch 25755-x86-PoD-types.patch 25756-x86-MMIO-max-mapped-pfn.patch 25757-x86-EPT-PoD-1Gb-assert.patch 25764-x86-unknown-cpu-no-sysenter.patch 25765-x86_64-allow-unsafe-adjust.patch 25771-grant-copy-status-paged-out.patch 25773-x86-honor-no-real-mode.patch 25786-x86-prefer-multiboot-meminfo-over-e801.patch

- bnc#777890 - CVE-2012-3497:xen:多個 TMEM hypercall 弱點 (XSA-15) CVE-2012-3497-tmem-xsa-15-1.patch CVE-2012-3497-tmem-xsa-15-2.patch CVE-2012-3497-tmem-xsa-15-3.patch CVE-2012-3497-tmem-xsa-15-4.patch CVE-2012-3497-tmem-xsa-15-5.patch CVE-2012-3497-tmem-xsa-15-6.patch CVE-2012-3497-tmem-xsa-15-7.patch CVE-2012-3497-tmem-xsa-15-8.patch CVE-2012-3497-tmem-xsa-15-9.patch tmem-missing-break.patch

解決方案

更新受影響的 XEN 套件。

另請參閱

https://bugzilla.novell.com/show_bug.cgi?id=764077

https://bugzilla.novell.com/show_bug.cgi?id=771099

https://bugzilla.novell.com/show_bug.cgi?id=776755

https://bugzilla.novell.com/show_bug.cgi?id=777086

https://bugzilla.novell.com/show_bug.cgi?id=777090

https://bugzilla.novell.com/show_bug.cgi?id=777091

https://bugzilla.novell.com/show_bug.cgi?id=777890

https://bugzilla.novell.com/show_bug.cgi?id=778105

https://bugzilla.novell.com/show_bug.cgi?id=779212

https://bugzilla.novell.com/show_bug.cgi?id=784087

https://bugzilla.novell.com/show_bug.cgi?id=786516

https://bugzilla.novell.com/show_bug.cgi?id=786517

https://bugzilla.novell.com/show_bug.cgi?id=786518

https://bugzilla.novell.com/show_bug.cgi?id=786519

https://bugzilla.novell.com/show_bug.cgi?id=786520

https://bugzilla.novell.com/show_bug.cgi?id=787163

https://lists.opensuse.org/opensuse-updates/2012-11/msg00085.html

Plugin 詳細資訊

嚴重性: High

ID: 74821

檔案名稱: openSUSE-2012-812.nasl

版本: 1.4

類型: local

代理程式: unix

已發布: 2014/6/13

已更新: 2021/1/19

支援的感應器: Frictionless Assessment AWS, Frictionless Assessment Azure, Frictionless Assessment Agent, Nessus Agent, Nessus

風險資訊

VPR

風險因素: Medium

分數: 6.7

CVSS v2

風險因素: High

基本分數: 7.2

媒介: CVSS2#AV:L/AC:L/Au:N/C:C/I:C/A:C

弱點資訊

CPE: p-cpe:/a:novell:opensuse:xen, p-cpe:/a:novell:opensuse:xen-debugsource, p-cpe:/a:novell:opensuse:xen-devel, p-cpe:/a:novell:opensuse:xen-doc-html, p-cpe:/a:novell:opensuse:xen-doc-pdf, p-cpe:/a:novell:opensuse:xen-kmp-default, p-cpe:/a:novell:opensuse:xen-kmp-default-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-desktop, p-cpe:/a:novell:opensuse:xen-kmp-desktop-debuginfo, p-cpe:/a:novell:opensuse:xen-kmp-pae, p-cpe:/a:novell:opensuse:xen-kmp-pae-debuginfo, p-cpe:/a:novell:opensuse:xen-libs, p-cpe:/a:novell:opensuse:xen-libs-32bit, p-cpe:/a:novell:opensuse:xen-libs-debuginfo, p-cpe:/a:novell:opensuse:xen-libs-debuginfo-32bit, p-cpe:/a:novell:opensuse:xen-tools, p-cpe:/a:novell:opensuse:xen-tools-debuginfo, p-cpe:/a:novell:opensuse:xen-tools-domu, p-cpe:/a:novell:opensuse:xen-tools-domu-debuginfo, cpe:/o:novell:opensuse:12.2

必要的 KB 項目: Host/local_checks_enabled, Host/cpu, Host/SuSE/release, Host/SuSE/rpm-list

修補程式發佈日期: 2012/11/15

參考資訊

CVE: CVE-2007-0998, CVE-2012-2625, CVE-2012-2934, CVE-2012-3494, CVE-2012-3495, CVE-2012-3496, CVE-2012-3497, CVE-2012-3498, CVE-2012-3515, CVE-2012-4411, CVE-2012-4535, CVE-2012-4536, CVE-2012-4537, CVE-2012-4538, CVE-2012-4539, CVE-2012-4544

CWE: 264