1. Home
  2. Security Advisories
  3. SUSE
  4. SUSE-SU-2018:2037-1

[SUSE-SU-2018:2037-1] Security update for xen

Severity Moderate
Affected Packages 11
CVEs 5
Info Packages References Vulnerabilities

Security update for xen

This update for xen fixes the following issues:

Security issues fixed:

  • CVE-2018-12617: Fix integer overflow that causes segmentation fault in qmp_guest_file_read() with g_malloc() (bsc#1098744).
  • CVE-2018-3665: Fix Lazy FP Save/Restore issue (XSA-267) (bsc#1095242).
  • CVE-2018-11806: Fix heap buffer overflow while reassembling fragmented datagrams (bsc#1096224).
  • CVE-2018-12891: Fix possible Denial of Service (DoS) via certain PV MMU operations that affect the entire host (XSA-264) (bsc#1097521).
  • CVE-2018-12893: Fix crash/Denial of Service (DoS) via safety check (XSA-265) (bsc#1097522).

Bug fixes:

  • bsc#1079730: Fix failed 'write' lock.
  • bsc#1027519: Add upstream patches from January.
Package Affected Version
pkg:rpm/suse/xen?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-tools?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-tools-domU?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-tools-domU?arch=i586&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-libs?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-libs?arch=i586&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-libs-32bit?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
pkg:rpm/suse/xen-kmp-pae?arch=i586&distro=sles-11&sp=4 < 4.4.4_34_3.0.101_108.57-61.32.1
pkg:rpm/suse/xen-kmp-default?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34_3.0.101_108.57-61.32.1
pkg:rpm/suse/xen-kmp-default?arch=i586&distro=sles-11&sp=4 < 4.4.4_34_3.0.101_108.57-61.32.1
pkg:rpm/suse/xen-doc-html?arch=x86_64&distro=sles-11&sp=4 < 4.4.4_34-61.32.1
ID
SUSE-SU-2018:2037-1
Severity
moderate
URL
https://www.suse.com/support/update/announcement/2018/suse-su-20182037-1/
Published
2018-07-23T08:47:34
(6 years ago)
Modified
2018-07-23T08:47:34
(6 years ago)
Rights
Copyright 2024 SUSE LLC. All rights reserved.
Other Advisories
Type Package URL Namespace Name / Product Version Distribution / Platform Arch Patch / Fix
Affected pkg:rpm/suse/xen?arch=x86_64&distro=sles-11&sp=4 suse xen < 4.4.4_34-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-tools?arch=x86_64&distro=sles-11&sp=4 suse xen-tools < 4.4.4_34-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-tools-domU?arch=x86_64&distro=sles-11&sp=4 suse xen-tools-domU < 4.4.4_34-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-tools-domU?arch=i586&distro=sles-11&sp=4 suse xen-tools-domU < 4.4.4_34-61.32.1 sles-11 i586
Affected pkg:rpm/suse/xen-libs?arch=x86_64&distro=sles-11&sp=4 suse xen-libs < 4.4.4_34-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-libs?arch=i586&distro=sles-11&sp=4 suse xen-libs < 4.4.4_34-61.32.1 sles-11 i586
Affected pkg:rpm/suse/xen-libs-32bit?arch=x86_64&distro=sles-11&sp=4 suse xen-libs-32bit < 4.4.4_34-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-kmp-pae?arch=i586&distro=sles-11&sp=4 suse xen-kmp-pae < 4.4.4_34_3.0.101_108.57-61.32.1 sles-11 i586
Affected pkg:rpm/suse/xen-kmp-default?arch=x86_64&distro=sles-11&sp=4 suse xen-kmp-default < 4.4.4_34_3.0.101_108.57-61.32.1 sles-11 x86_64
Affected pkg:rpm/suse/xen-kmp-default?arch=i586&distro=sles-11&sp=4 suse xen-kmp-default < 4.4.4_34_3.0.101_108.57-61.32.1 sles-11 i586
Affected pkg:rpm/suse/xen-doc-html?arch=x86_64&distro=sles-11&sp=4 suse xen-doc-html < 4.4.4_34-61.32.1 sles-11 x86_64
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories Exploits PoC Pubblication Date Modification Date
# CVE Description CVSS EPSS EPSS Trend (30 days) Affected Products Weaknesses Security Advisories PoC Pubblication Date Modification Date