| Description: | Description:
The remote host is missing an update to xen
announced via advisory FEDORA-2007-713.
This package contains the Xen hypervisor and Xen tools, needed to
run virtual machines on x86 systems, together with the kernel-xen*
packages. Information on how to use Xen can be found at the Xen
project pages.
Virtualisation can be used to run multiple versions or multiple
Linux distributions on one system, or to test untrusted applications
in a sandboxed environment.
Update Information:
Fixes a security flaw in pygrub handling of config files and
a denial-of-service case in ne2k NIC for QEMU.
* Wed Sep 26 2007 Chris Lalancette - 3.0.3-12.fc6
- QEmu cirrus bitblit bounds check - CVE-2007-1320 (rhbz #238723)
- QEmu NE2000 overflow check - CVE-2007-1321 (rhbz #238723)
- Pygrub guest escape - CVE-2007-4993
* Wed Aug 1 2007 Markus Armbruster - 3.0.3-11.fc6
- VNC keymap fixes
- Fix race conditions in LibVNCServer on client disconnect (bz 240012)
* Thu Jun 21 2007 Markus Armbruster - 3.0.3-10.fc6
- Create xend-debug.log with sane permissions (bz 219868)
Solution: Apply the appropriate updates.
This update can be downloaded from:
http://download.fedora.redhat.com/pub/fedora/linux/core/updates/6/
This update can be installed with the 'yum' update program. Use 'yum update
package-name' at the command line. For more information, refer to 'Managing
Software with yum,' available at http://fedora.redhat.com/docs/yum/.
http://www.securityspace.com/smysecure/catid.html?in=FEDORA-2007-713
Risk factor : High
CVSS Score:
7.2
|
