U radu programskog paketa Xen uočen je sigurnosni propust kojeg udaljeni napadač može iskoristiti za DoS napad (eng. Denial of Service).

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2011-7421
2011-05-25 01:56:09
--------------------------------------------------------------------------------

Name        : xen
Product     : Fedora 13
Version     : 3.4.3
Release     : 3.fc13
URL         : http://xen.org/
Summary     : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

gain privileged access to base domain, or access to xen
configuration info. Lack of error checking could allow DoS
attack from guest. [CVE-2011-1583]
--------------------------------------------------------------------------------
ChangeLog:

* Sat May 21 2011 Michael Young <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.4.3-3
- Overflows in kernel decompression can allow root on xen PV guest to gain
  privileged access to base domain, or access to xen configuration info.
  Lack of error checking could allow DoS attack from guest [CVE-2011-1583]
* Sun Jun 20 2010 Michael Young <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.4.3-2
- add patch to remove some old device creation code that doesn't
  work with the latest pvops kernels
- use official xen-3.4.3.tar.gz now there is one
* Tue Jun  1 2010 Michael Young <Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.> - 3.4.3-1
- update to 3.4.3 release including
    support for latest pv_ops kernels (possibly incomplete)
    should fix build problems (#565063) and crashes (#545307)
- replace Prereq: with Requires: in spec file
- drop static libraries (#556101)
--------------------------------------------------------------------------------

This update can be installed with the "yum" update program.  Use 
su -c 'yum update xen' at the command line.
For more information, refer to "Managing Software with yum",
available at http://docs.fedoraproject.org/yum/.

All packages are signed with the Fedora Project GPG key.  More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list
Ova e-mail adresa je zaštićena od spambota. Potrebno je omogućiti JavaScript da je vidite.
https://admin.fedoraproject.org/mailman/listinfo/package-announce