SUSE update for xen

SA50625

CVE-2012-2625, CVE-2012-3432, CVE-2012-3433, CVE-2012-3494, CVE-2012-3495, CVE-2012-3496, CVE-2012-3498, CVE-2012-3515

17 Sep 2012

Less Critical

Vendor Patch

Local system

DoS (Denial of Service)

This includes vulnerabilities ranging from excessive resource consumption (e.g. causing a system to use a lot of memory) to crashing an application or an entire system.

Privilege escalation

This covers vulnerabilities where a user is able to conduct certain tasks with the privileges of other users or administrative users.

This typically includes cases where a local user on a client or server system can gain access to the administrator or root account thus taking full control of the system.

SUSE has issued an update for xen. This fixes multiple vulnerabilities, which can be exploited by malicious, local users in a guest virtual machine to cause a DoS (Denial of Service) and potentially gain escalated privileges.

For more information:
SA49184
SA49789
SA50191
SA50472

Apply updated packages via the zypper package manager.

openSUSE-SU-2012:1172-1:
http://lists.opensuse.org/opensuse-security-announce/2012-09/msg00017.html