Описание
ELSA-2011-1401: xen security and bug fix update (MODERATE)
[3.0.3-132.el5_7.2]
- Release device backends before restarting guest on the destination machine (rhbz 743850)
- Fix SCSI buffer overflow and disable SCSI CD-ROMs (rhbz 736289)
[3.0.3-132.el5_7.1]
- hotplug: set netback/tap MTU to the same value as the bridge MTU (rhbz 738608)
- copy the MTU of the physical interface to the Xen bridge (rhbz 738610)
Обновленные пакеты
Oracle Linux 5
Oracle Linux ia64
xen
3.0.3-132.el5_7.2
xen-devel
3.0.3-132.el5_7.2
xen-libs
3.0.3-132.el5_7.2
Oracle Linux x86_64
xen
3.0.3-132.el5_7.2
xen-devel
3.0.3-132.el5_7.2
xen-libs
3.0.3-132.el5_7.2
Oracle Linux i386
xen
3.0.3-132.el5_7.2
xen-devel
3.0.3-132.el5_7.2
xen-libs
3.0.3-132.el5_7.2
Связанные CVE
Связанные уязвимости
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before ...
Buffer overflow in hw/scsi-disk.c in the SCSI subsystem in QEMU before 0.15.2, as used by Xen, might allow local guest users with permission to access the CD-ROM to cause a denial of service (guest crash) via a crafted SAI READ CAPACITY SCSI command. NOTE: this is only a vulnerability when root has manually modified certain permissions or ACLs.