ELSA-2008-0194

ELSA-2008-0194 - xen security and bug fix update

Type:	SECURITY
Impact:	IMPORTANT
Release Date:	2008-05-13

Description

[3.0.3-41.el5_1.5]
- Disable QEMU image format auto-detection CVE-2008-2004 (rhbz #444700)

[3.0.3-41.el5_1.4]
- Fix PVFB to validate frame buffer description (rhbz #443376)
- Fix PVFB to cope with bogus update requests (rhbz #368931)

[3.0.3-41.el5_1.3]
- Fix QEMU buffer overflow CVE-2007-5730 (rhbz #360381)
- Fix QEMU block device extents checking CVE-2008-0928 (rhbz #433560)

[3.0.3-41.el5_1.2]
- Fix FV O_DIRECT flushing (rhbz #435495)

[3.0.3-41.el5_1.1]
- Fixed xenbaked tmpfile flaw (CVE-2007-3919) (rhbz #350421)

Related CVEs

CVE-2007-3919

CVE-2007-5730

CVE-2008-1943

CVE-2008-0928

CVE-2008-1944

CVE-2008-2004

Updated Packages

Release/Architecture	Filename	sha256	Superseded By Advisory	Channel Label
Oracle Linux 5 (i386)	xen-3.0.3-41.el5_1.5.src.rpm	865b1401c0f36bcac27a6b0c93802057c6744bc5dbdd8de17a0389d2a182f59f	ELSA-2016-2963	el5_u1_i386_patch
	xen-3.0.3-41.el5_1.5.i386.rpm	25f267d59fdc599bce4516567a63245fa3eb7bcc006c711092ad44fd923c81e5	ELSA-2016-2963	el5_u1_i386_patch
	xen-devel-3.0.3-41.el5_1.5.i386.rpm	dd4d92829a22e696faa0f3cdc0ca3f0daaf7f6d7a6ef8f24c1a5caebaf170806	ELSA-2016-2963	el5_u1_i386_patch
	xen-libs-3.0.3-41.el5_1.5.i386.rpm	1e95f1a73b6314643d710e7c5b4c04fd90455f2f05c529f325ada99ce4e3d6fa	ELSA-2016-2963	el5_u1_i386_patch
Oracle Linux 5 (x86_64)	xen-3.0.3-41.el5_1.5.src.rpm	865b1401c0f36bcac27a6b0c93802057c6744bc5dbdd8de17a0389d2a182f59f	ELSA-2016-2963	el5_u1_x86_64_patch
	xen-3.0.3-41.el5_1.5.x86_64.rpm	98999beb665df12aa8f9a39b8f2ea0d126d23c7e311f882985e0b79e8d2acbc0	ELSA-2016-2963	el5_u1_x86_64_patch
	xen-devel-3.0.3-41.el5_1.5.i386.rpm	dd4d92829a22e696faa0f3cdc0ca3f0daaf7f6d7a6ef8f24c1a5caebaf170806	ELSA-2016-2963	el5_u1_x86_64_patch
	xen-devel-3.0.3-41.el5_1.5.x86_64.rpm	f68e034b825681dd9bfe08fb669c3865129eeab50be6b77ea3dbe63bda3f1a28	ELSA-2016-2963	el5_u1_x86_64_patch
	xen-libs-3.0.3-41.el5_1.5.i386.rpm	1e95f1a73b6314643d710e7c5b4c04fd90455f2f05c529f325ada99ce4e3d6fa	ELSA-2016-2963	el5_u1_x86_64_patch
	xen-libs-3.0.3-41.el5_1.5.x86_64.rpm	418f9fd78cf060e54dfc4ad85994d0d9fc076508af5898794e5798c14e1c56bb	ELSA-2016-2963	el5_u1_x86_64_patch

This page is generated automatically and has not been checked for errors or omissions. For clarification or corrections please contact the Oracle Linux ULN team