查看完整版本: Xensource正式发布4.0.1的补丁

Xensource正式发布4.0.1的补丁

This email is to notify you that XenSource has released an important Security Update for version 4.0.1 that is available for download.   For up-to-date information and announcements, please visit the XenSource Support Forums at:  [url]http://forums.xensource.com/[/url]

XenSource Security Update – Critical
Hotfix 2007-001 CA-9621

Summary:

A remote code execution security issue has been identified that could allow a user who has root access to a virtual machine running on that server to execute arbitrary commands within Domain 0.  

Affected Software:

            XenExpress 4.0.1
            XenServer 4.0.1
            XenEnterprise 4.0.1

XenSource strongly recommends that customers using XenExpress 4.0.1, XenServer 4.0.1, or XenEnterprise 4.0.1 apply the security update.

Instructions and Installation:  [url]http://www.xensource.com/Support/Pages/Hotfixes.aspx[/url]

For more information about product support resources, see [url]http://www.xensource.com/support/[/url]

Thank You,
The XenSource Team

[b]原因：[/b]
This security update fixes a vulnerability in the XenServer v4 line of products that can allow root escalation from virtual machines in domain 0.

This update is strongly recommended for all users.

一个安全补丁？
我不能在新机器上安装，由于网卡认不到。。