Update to xen 4.2.1. VT-d interrupt remapping source validation flaw [XSA-33,CVE-2012-5634]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

XEN was updated to fix various bugs and security issues :

Security issues fixed :

  - bnc#800275 - CVE-2013-0153: xen: interrupt remap entries     shared and old ones not cleared on AMD IOMMUs

  - bnc#797523 - CVE-2012-6075: qemu / kvm-qemu: e1000     overflows under some conditions

  - bnc#797031 - Xen Security Advisory 37 (CVE-2013-0154) -     Hypervisor crash due to incorrect ASSERT (debug build     only)

  - bnc#794316 - CVE-2012-5634: xen: VT-d interrupt     remapping source validation flaw (XSA-33) 

Bugs fixed :

  - Upstream patches from Jan 26536-xenoprof-div-by-0.patch     26578-AMD-IOMMU-replace-BUG_ON.patch     26656-x86-fix-null-pointer-dereference-in-intel_get_exte     nded_msrs.patch     26659-AMD-IOMMU-erratum-746-workaround.patch     26660-x86-fix-CMCI-injection.patch     26672-vmx-fix-handling-of-NMI-VMEXIT.patch     26673-Avoid-stale-pointer-when-moving-domain-to-another-     cpupool.patch     26676-fix-compat-memory-exchange-op-splitting.patch     26677-x86-make-certain-memory-sub-ops-return-valid-value     s.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch     26679-x86-defer-processing-events-on-the-NMI-exit-path.p     atch     26683-credit1-Use-atomic-bit-operations-for-the-flags-st     ructure.patch     26692-x86-MSI-fully-protect-MSI-X-table.patch

  - bnc#805094 - xen hot plug attach/detach fails modified     blktap-pv-cdrom.patch

  - bnc#802690 - domain locking can prevent a live migration     from completing modified xend-domain-lock.patch

  - bnc#797014 - no way to control live migrations     26547-tools-xc_fix_logic_error_in_stdiostream_progress.p     atch     26548-tools-xc_handle_tty_output_differently_in_stdiostr     eam_progress.patch     26549-tools-xc_turn_XCFLAGS__into_shifts.patch     26550-tools-xc_restore_logging_in_xc_save.patch     26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patc     h     26675-tools-xentoollog_update_tty_detection_in_stdiostre     am_progress.patch     xen.migrate.tools-xc_print_messages_from_xc_save_with_xc
    _report.patch     xen.migrate.tools-xc_document_printf_calls_in_xc_restore     .patch     xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirt     y.patch     xen.migrate.tools_set_migration_constraints_from_cmdline     .patch     xen.migrate.tools_add_xm_migrate_--log_progress_option.p     atch

  - remove old patches: xen.xc.progress.patch     xen.xc_save.details.patch     xen.migration.abort_if_busy.patch

  - bnc#806736: enabling xentrace crashes hypervisor     26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.pat     ch

  - Upstream patches from Jan     26287-sched-credit-pick-idle.patch     26501-VMX-simplify-CR0-update.patch     26502-VMX-disable-SMEP-when-not-paging.patch     26516-ACPI-parse-table-retval.patch (Replaces     CVE-2013-0153-xsa36.patch)     26517-AMD-IOMMU-clear-irtes.patch (Replaces     CVE-2013-0153-xsa36.patch)     26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch     (Replaces CVE-2013-0153-xsa36.patch)     26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces     CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch     26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces     CVE-2013-0153-xsa36.patch)

  - bnc#798188 - Add $network to xend initscript     dependencies

  - bnc#797014 - no way to control live migrations

  - fix logic error in stdiostream_progress     xen.xc.progress.patch

  - restore logging in xc_save xen.xc_save.details.patch

  - add options to control migration tunables

    --max_iters, --max_factor, --abort_if_busy     xen.migration.abort_if_busy.patch

  - bnc#799694 - Unable to dvd or cdrom-boot DomU after     xen-tools update Fixed with update to Xen version 4.1.4

  - bnc#800156 - L3: HP iLo Generate NMI function not     working in XEN kernel 26440-x86-forward-SERR.patch

  - Upstream patches from Jan     26404-x86-forward-both-NMI-kinds.patch     26427-x86-AMD-enable-WC+.patch

  - bnc#793927 - Xen VMs with more than 2 disks randomly     fail to start 25590-hotplug-locking.patch     25595-hotplug-locking.patch 26079-hotplug-locking.patch

  - Upstream patches from Jan     26332-x86-compat-show-guest-stack-mfn.patch     26333-x86-get_page_type-assert.patch (Replaces     CVE-2013-0154-xsa37.patch)     26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces     CVE-2012-5634-xsa33.patch)     26370-libxc-x86-initial-mapping-fit.patch

  - Update to Xen 4.1.4 c/s 23432 

  - Update xenpaging.guest-memusage.patch add rule for     xenmem to avoid spurious build failures

  - Upstream patches from Jan 26179-PCI-find-next-cap.patch     26183-x86-HPET-masking.patch     26188-x86-time-scale-asm.patch     26200-IOMMU-debug-verbose.patch     26203-x86-HAP-dirty-vram-leak.patch     26229-gnttab-version-switch.patch (Replaces     CVE-2012-5510-xsa26.patch)     26230-x86-HVM-limit-batches.patch (Replaces     CVE-2012-5511-xsa27.patch)     26231-memory-exchange-checks.patch (Replaces     CVE-2012-5513-xsa29.patch)     26232-x86-mark-PoD-error-path.patch (Replaces     CVE-2012-5514-xsa30.patch)     26233-memop-order-checks.patch (Replaces     CVE-2012-5515-xsa31.patch)     26235-IOMMU-ATS-max-queue-depth.patch     26272-x86-EFI-makefile-cflags-filter.patch     26294-x86-AMD-Fam15-way-access-filter.patch     CVE-2013-0154-xsa37.patch

  - Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify     the EFI Makefile to do additional filtering.
    EFI-makefile-cflags-filter.patch

The remote OracleVM system is missing necessary patches to address critical security updates :

  - VT-d: fix interrupt remapping source validation for     devices behind legacy bridges Using SVT_VERIFY_BUS here     doesn't make sense  native Linux also uses     SVT_VERIFY_SID_SQ here instead. (CVE-2012-5634)

xen 4.2.1 に更新してください。VT-d 割り込みリマッピングソース検証の欠陥 [XSA-33、CVE-2012-5634]

注意：Tenable Network Security は、前述の記述ブロックを Fedora セキュリティアドバイザリから直接抽出しています。Tenable では、できる限り新たな問題を持ち込まないように、自動的に整理して書式設定するようにしています。

リモートの OracleVM システムに、重要なセキュリティ更新に対処するために必要なパッチがありません。

- VT-d：レガシーブリッジの後ろのデバイスの再マッピングソース検証の割り込みが、修正されます。ここで SVT_VERIFY_BUS を使用することは意味がありません。ネイティブ Linux もここで、代わりに SVT_VERIFY_SID_SQ を使用します。（CVE-2012-5634）

XEN が更新され、多様なバグやセキュリティ問題が修正されました：

修正されたセキュリティの課題：

- bnc#800275 - CVE-2013-0153：xen：割り込みリマップエントリが共有され、古いものは AMD IOMMU で消去されません

- bnc#797523 - CVE-2012-6075：qemu / kvm-qemu：e1000 が状況によってはオーバーフローします

- bnc#797031 - Xen セキュリティアドバイザリ 37（CVE-2013-0154）- 不適切な ASSERT によるハイパーバイザーのクラッシュ（デバッグビルドのみ）

- bnc#794316 - CVE-2012-5634：xen：VT-d 割り込みリマッピングソース検証の欠陥（XSA-33）

修正されたバグ：

- Jan からの Upstream パッチ 26536-xenoprof-div-by-0.patch 26578-AMD-IOMMU-replace-BUG_ON.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_exte nded_msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another- cpupool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-value s.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-st ructure.patch 26692-x86-MSI-fully-protect-MSI-X-table.patch

- bnc#805094 - xen ホットプラグアタッチ/デタッチが、修正された blktap-pv-cdrom.patch で失敗します

- bnc#802690 - ドメインロッキングが、修正された xend-domain-lock.patch からのライブ移行を回避できます

- bnc#797014 - ライブ移行をコントロールする方法がありません 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostr eam_progress.patch 26549-tools-xc_turn_XCFLAGS__into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch 26675-tools-xentoollog_update_tty_detection_in_stdiostre am_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc
 _report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore .patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirt y.patch xen.migrate.tools_set_migration_constraints_from_cmdline .patch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch

- 古いパッチを削除します：xen.xc.progress.patch xen.xc_save.details.patch xen.migration.abort_if_busy.patch

- bnc#806736：xentrace がハイパーバイザー 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch をクラッシュするのを有効化します

- Jan からの Upstream パッチ 26287-sched-credit-pick-idle.patch 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch 26516-ACPI-parse-table-retval.patch（CVE-2013-0153-xsa36.patch を置換） 26517-AMD-IOMMU-clear-irtes.patch（CVE-2013-0153-xsa36.patch を置換） 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch （CVE-2013-0153-xsa36.patch を置換）26519-AMD-IOMMU-perdev-intremap-default.patch （CVE-2013-0153-xsa36.patch を置換） 26526-pvdrv-no-devinit.patch 26531-AMD-IOMMU-IVHD-special-missing.patch （CVE-2013-0153-xsa36.patch を置換）

- bnc#798188 - xend initscript の依存関係に $network を追加します

- bnc#797014 - ライブ移行をコントロールする方法がありません

- stdiostream_progress xen.xc.progress.patch の論理エラーを修正します

- xc_save xen.xc_save.details.patch のロギングを復元します

- 移行調整を制御するオプションを追加します

--max_iters, --max_factor, --abort_if_busy xen.migration.abort_if_busy.patch

- bnc#799694 - xen-tools の更新後に DVD または CDROM の起動 DomU を使用できません Xen バージョン 4.1.4 への更新で修正しました

- bnc#800156 - L3：HP iLo の NMI 生成機能が XEN カーネル 26440-x86-forward-SERR.patch で機能していません

- Jan からの Upstream パッチ 26404-x86-forward-both-NMI-kinds.patch 26427-x86-AMD-enable-WC+.patch

- bnc#793927 - 2 つを超えるディスクのある Xen VM が 25590-hotplug-locking.patch 25595-hotplug-locking.patch 26079-hotplug-locking.patch を起動するのにランダムで失敗します

- Jan からの Upstream パッチ 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch（CVE-2013-0154-xsa37.patch を置換）26340-VT-d-intremap-verify-legacy-bridge.patch （CVE-2012-5634-xsa33.patch を置換） 26370-libxc-x86-initial-mapping-fit.patch

- Xen 4.1.4 c/s 23432 への更新

- xenpaging.guest-memusage.patch を更新します 偽造のビルド失敗を回避するために xenmem のルールを追加します

- Jan からの Upstream パッチ 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch（CVE-2012-5510-xsa26.patch を置換）26230-x86-HVM-limit-batches.patch（CVE-2012-5511-xsa27.patch を置換）26231-memory-exchange-checks.patch（CVE-2012-5513-xsa29.patch を置換）26232-x86-mark-PoD-error-path.patch（CVE-2012-5514-xsa30.patch を置換）26233-memop-order-checks.patch（CVE-2012-5515-xsa31.patch を置換）26235-IOMMU-ATS-max-queue-depth.patch 26272-x86-EFI-makefile-cflags-filter.patch 26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch

- 23614-x86_64-EFI-boot.patch の c/s 25751 を復元します。EFI Makefile を修正して、追加のフィルタリングを実行します。
 EFI-makefile-cflags-filter.patch

xen 4.2.1 的更新。VT-d 中斷重新對應來源驗證瑕疵 [XSA-33、CVE-2012-5634]

請注意，Tenable Network Security 已直接從 Fedora 安全性公告擷取前置描述區塊。Tenable 已盡量在不造成其他問題的前提下，嘗試自動清理並將其格式化。

遠端 OracleVM 系統缺少可解決重要安全性更新的必要修補程式：

- VT-d：針對舊版橋接器後的裝置，修正中斷的重新對應來源驗證。在這裡使用 SVT_VERIFY_BUS 不甚合理。原生 Linux 在這裡也會改用 SVT_VERIFY_SID_SQ。(CVE-2012-5634)

XEN 已更新，可修正各種錯誤和安全性問題：

修正的安全性問題：

- bnc#800275 - CVE-2013-0153：xen：中斷重新對應共用項目和 AMD IOMMU 上尚未清除的舊項目

- bnc#797523 - CVE-2012-6075：qemu / kvm-qemu：e1000 在某些情況下會溢位

- bnc#797031 - Xen 安全性公告 37 (CVE-2013-0154) - Hypervisor 因 ASSERT 不正確而損毀 (僅限除錯版本)

- bnc#794316 - CVE-2012-5634：xen：VT-d 中斷重新對應來源驗證瑕疵 (XSA-33)

修正的錯誤：

- 來自 Jan 的上游修補程式 26536-xenoprof-div-by-0.patch 26578-AMD-IOMMU-replace-BUG_ON.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_exte nded_msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another- cpupool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-values.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.patch 26683-credit1-Use-atomic-bit-operations-for-the-flags-st ructure.patch 26692-x86-MSI-fully-protect-MSI-X-table.patch

- bnc#805094 - xen 熱插拔連結/中斷連結無法處理修改的 blktap-pv-cdrom.patch

- bnc#802690 - 網域鎖定可阻止即時移轉完成修改的 xend-domain-lock.patch

- bnc#797014 - 無法控制即時移轉 26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch 26548-tools-xc_handle_tty_output_differently_in_stdiostream_progress.patch 26549-tools-xc_turn_XCFLAGS__into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch 26675-tools-xentoollog_update_tty_detection_in_stdiostream_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc
 _report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore.patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirty.patch xen.migrate.tools_set_migration_constraints_from_cmdline.patch xen.migrate.tools_add_xm_migrate_--log_progress_option.patch

- 移除舊版修補程式：xen.xc.progress.patch xen.xc_save.details.patch xen.migration.abort_if_busy.patch

- bnc#806736：啟用 xentrace 會損毀 hypervisor 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.patch

- 來自 Jan 的上游修補程式 26287-sched-credit-pick-idle.patch 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch 26516-ACPI-parse-table-retval.patch (取代 CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch (取代 CVE-2013-0153-xsa36.patch) 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (取代 CVE-2013-0153-xsa36.patch) 26519-AMD-IOMMU-perdev-intremap-default.patch (取代 CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch 26531-AMD-IOMMU-IVHD-special-missing.patch (取代 CVE-2013-0153-xsa36.patch)

- bnc#798188 - 新增 $network 至 xend initscript 相依性

- bnc#797014 - 無法控制即時移轉

- 修正 stdiostream_progress xen.xc.progress.patch 中的邏輯錯誤

- 還原 xc_save xen.xc_save.details.patch 中的登入

- 新增選項以控制移轉可調諧項目

--max_iters、--max_factor、--abort_if_busy xen.migration.abort_if_busy.patch

- bnc#799694 - 在 xen-tool 更新後無法執行 dvd 或 cdrom-boot DomU。修正 4.1.4 版的 Xen 更新

- bnc#800156 - L3：XEN 核心中的 HP iLo Generate NMI 函式無法運作於 26440-x86-forward-SERR.patch

- 來自 Jan 的上游修補程式 26404-x86-forward-both-NMI-kinds.patch 26427-x86-AMD-enable-WC+.patch

- bnc#793927 - 具有超過 2 個磁碟的 Xen VM 有時會無法啟動 25590-hotplug-locking.patch 25595-hotplug-locking.patch 26079-hotplug-locking.patch

- 來自 Jan 的上游修補程式 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch (取代 CVE-2013-0154-xsa37.patch) 26340-VT-d-intremap-verify-legacy-bridge.patch (取代 CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch

- 更新至 Xen 4.1.4 c/s 23432

- 更新 xenpaging.guest-memusage.patch 新增 xenmem 規則以避免假性版本失敗

- 來自 Jan 的上游修補程式 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch (取代 CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch (取代 CVE-2012-5511-xsa27.patch) 26231-memory-exchange-checks.patch (Replaces CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch (取代 CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch (取代 CVE-2012-5515-xsa31.patch) 26235-IOMMU-ATS-max-queue-depth.patch 26272-x86-EFI-makefile-cflags-filter.patch 26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch

- 還原 23614-x86_64-EFI-boot.patch 中的 c/s 25751。修改 EFI Makefile 以進行其他篩選。
 EFI-makefile-cflags-filter.patch

更新到 xen 4.2.1。VT-d 中断重映射源验证缺陷 [XSA-33、CVE-2012-5634]

请注意，Tenable Network Security 已直接从 Fedora 安全公告中提取上述描述块。Tenable 已尝试在不引入其他问题的情况下尽可能进行了自动整理和排版。

远程 OracleVM 系统缺少必要修补程序来解决关键安全更新：

- VT-d：修复传统桥接之后的设备的中断重映射源验证在此处使用 SVT_VERIFY_BUS 毫无意义本地 Linux 还会在此处改为使用 SVT_VERIFY_SID_SQ。(CVE-2012-5634)

XEN 已更新，修复了多种缺陷和安全问题：

修复的安全问题：

- bnc#800275 - CVE-2013-0153：xen：AMD IOMMU 上共享的中断重映射条目和未清除的旧条目

- bnc#797523 - CVE-2012-6075：qemu / kvm-qemu：在某些情况下发生 e1000 溢出

- bnc#797031 - Xen 安全公告 37 (CVE-2013-0154) - 因 ASSERT 不正确而导致管理程序崩溃（仅针对调试版本）

- bnc#794316 - CVE-2012-5634：xen：VT-d 中断重映射源验证缺陷 (XSA-33)

修复的缺陷：

- Jan 提供的上游修补程序 26536-xenoprof-div-by-0.patch 26578-AMD-IOMMU-replace-BUG_ON.patch 26656-x86-fix-null-pointer-dereference-in-intel_get_exte nded_msrs.patch 26659-AMD-IOMMU-erratum-746-workaround.patch 26660-x86-fix-CMCI-injection.patch 26672-vmx-fix-handling-of-NMI-VMEXIT.patch 26673-Avoid-stale-pointer-when-moving-domain-to-another- cpupool.patch 26676-fix-compat-memory-exchange-op-splitting.patch 26677-x86-make-certain-memory-sub-ops-return-valid-value s.patch 26678-SEDF-avoid-gathering-vCPU-s-on-pCPU0.patch 26679-x86-defer-processing-events-on-the-NMI-exit-path.p atch 26683-credit1-Use-atomic-bit-operations-for-the-flags-st ructure.patch 26692-x86-MSI-fully-protect-MSI-X-table.patch

- bnc#805094 - xen 热插拔附加/分离修改失败 blktap-pv-cdrom.patch

- bnc#802690 - 域锁定可阻止实时迁移完成修改的 xend-domain-lock.patch

- bnc#797014 - 无法控制实时迁移 26547-tools-xc_fix_logic_error_in_stdiostream_progress.p atch 26548-tools-xc_handle_tty_output_differently_in_stdiostr eam_progress.patch 26549-tools-xc_turn_XCFLAGS__into_shifts.patch 26550-tools-xc_restore_logging_in_xc_save.patch 26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patc h 26675-tools-xentoollog_update_tty_detection_in_stdiostre am_progress.patch xen.migrate.tools-xc_print_messages_from_xc_save_with_xc
 _report.patch xen.migrate.tools-xc_document_printf_calls_in_xc_restore .patch xen.migrate.tools-xc_rework_xc_save.cswitch_qemu_logdirt y.patch xen.migrate.tools_set_migration_constraints_from_cmdline .patch xen.migrate.tools_add_xm_migrate_--log_progress_option.p atch

- 删除旧的修补程序：xen.xc.progress.patch xen.xc_save.details.patch xen.migration.abort_if_busy.patch

- bnc#806736: 使 xentrace 造成管理程序崩溃 26686-xentrace_fix_off-by-one_in_calculate_tbuf_size.pat ch

- Jan 提供的上游修补程序 26287-sched-credit-pick-idle.patch 26501-VMX-simplify-CR0-update.patch 26502-VMX-disable-SMEP-when-not-paging.patch 26516-ACPI-parse-table-retval.patch（取代 CVE-2013-0153-xsa36.patch） 26517-AMD-IOMMU-clear-irtes.patch（取代 CVE-2013-0153-xsa36.patch） 26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch（取代 CVE-2013-0153-xsa36.patch） 26519-AMD-IOMMU-perdev-intremap-default.patch（取代 CVE-2013-0153-xsa36.patch） 26526-pvdrv-no-devinit.patch 26531-AMD-IOMMU-IVHD-special-missing.patch（取代 CVE-2013-0153-xsa36.patch）

- bnc#798188 - 向 xend initscript 依存关系中添加 $network

- bnc#797014 - 无法控制实时迁移

- 修复 stdiostream_progress 中的逻辑错误 xen.xc.progress.patch

- 还原 xc_save 中的日志记录 xen.xc_save.details.patch

- 添加控制迁移可调参数的选项

--max_iters、--max_factor、--abort_if_busy xen.migration.abort_if_busy.patch

- bnc#799694 - xen-tools 更新后无法进行 dvd 或 cdrom-boot DomU 已通过更新到 Xen 4.1.4 版进行修复

- bnc#800156 - L3：HP iLo 生成不在 XEN 内核 26440-x86-forward-SERR.patch 中运行的 NMI 函数

- Jan 提供的上游修补程序 26404-x86-forward-both-NMI-kinds.patch 26427-x86-AMD-enable-WC+.patch

- bnc#793927 - 具有 2 个以上磁盘的 Xen VM 启动时随机出现失败 25590-hotplug-locking.patch 25595-hotplug-locking.patch 26079-hotplug-locking.patch

- Jan 提供的上游修补程序 26332-x86-compat-show-guest-stack-mfn.patch 26333-x86-get_page_type-assert.patch（取代 CVE-2013-0154-xsa37.patch） 26340-VT-d-intremap-verify-legacy-bridge.patch（取代 CVE-2012-5634-xsa33.patch） 26370-libxc-x86-initial-mapping-fit.patch

- 更新到 Xen 4.1.4 c/s 23432

- 更新 xenmem 的 xenpaging.guest-memusage.patch 添加规则，以避免虚假构建失败。

- Jan 提供的上游修补程序 26179-PCI-find-next-cap.patch 26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch 26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch 26229-gnttab-version-switch.patch（取代 CVE-2012-5510-xsa26.patch） 26230-x86-HVM-limit-batches.patch（取代 CVE-2012-5511-xsa27.patch） 26231-memory-exchange-checks.patch（取代 CVE-2012-5513-xsa29.patch） 26232-x86-mark-PoD-error-path.patch（取代 CVE-2012-5514-xsa30.patch） 26233-memop-order-checks.patch（取代 CVE-2012-5515-xsa31.patch） 26235-IOMMU-ATS-max-queue-depth.patch 26272-x86-EFI-makefile-cflags-filter.patch 26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch

- 还原 23614-x86_64-EFI-boot.patch 中的 c/s 25751。修改 EFI 生成文件以执行附加过滤。
 EFI-makefile-cflags-filter.patch

ID	Name	Product	Family	Published	Updated	Severity
63653	Fedora 18 : xen-4.2.1-3.fc18 (2013-0627)	Nessus	Fedora Local Security Checks	1/23/2013	1/11/2021	medium
74966	openSUSE Security Update : xen (openSUSE-SU-2013:0636-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
79494	OracleVM 3.0 : xen (OVMSA-2013-0002)	Nessus	OracleVM Local Security Checks	11/26/2014	1/4/2021	medium
63653	Fedora 18：xen-4.2.1-3.fc18（2013-0627）	Nessus	Fedora Local Security Checks	1/23/2013	1/11/2021	medium
79494	OracleVM 3.0：xen （OVMSA-2013-0002）	Nessus	OracleVM Local Security Checks	11/26/2014	1/4/2021	medium
74966	openSUSE セキュリティ更新：xen（openSUSE-SU-2013:0636-1）	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
63653	Fedora 18：xen-4.2.1-3.fc18 (2013-0627)	Nessus	Fedora Local Security Checks	1/23/2013	1/11/2021	medium
79494	OracleVM 3.0：xen (OVMSA-2013-0002)	Nessus	OracleVM Local Security Checks	11/26/2014	1/4/2021	medium
74966	openSUSE 安全性更新：xen (openSUSE-SU-2013:0636-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high
63653	Fedora 18：xen-4.2.1-3.fc18 (2013-0627)	Nessus	Fedora Local Security Checks	1/23/2013	1/11/2021	medium
79494	OracleVM 3.0：xen (OVMSA-2013-0002)	Nessus	OracleVM Local Security Checks	11/26/2014	1/4/2021	medium
74966	openSUSE 安全更新：xen (openSUSE-SU-2013:0636-1)	Nessus	SuSE Local Security Checks	6/13/2014	1/19/2021	high

Detections

Analytics

Plugins Search

medium

high

medium

medium

medium

high

medium

medium

high

medium

medium

high