xen-3.0.3-135.2.0.1.AXS3

This package contains the Xen tools and management daemons needed to run virtual machines on x86, x86_64, and ia64 systems. Information on how to use Xen can be found at the Xen project pages.
The Xen system also requires the Xen hypervisor and domain-0 kernel, which can be found in the kernel-xen* package.
Virtualization can be used to run multiple operating systems on one physical system, for purposes of hardware consolidation, hardware abstraction, or to test untrusted applications in a sandboxed environment.
Security issues fixed with this release:
• CVE-2012-0029
Heap-based buffer overflow in the process_tx_desc function in the e1000 emulation (hw/e1000.c) in qemu-kvm 0.12, and possibly other versions, allows guest OS users to cause a denial of service (QEMU crash) and possibly execute arbitrary code via crafted legacy mode packets.
Fixed bugs:
• Adding support for jumbo frames when creating a bridge introduced network device expansions that worked correctly with the default configuration but could cause network setup failures if a user-defined network script was used. This has been fixed: network succeeds even if a user-defined script is used.
• If timestamp logging for the Xen hypervisor console daemon (xenconsoled) was enabled by using both the XENCONSOLED_TIMESTAMP_HYPERVISOR_LOG and XENCONSOLED_TIMESTAMP_GUEST_LOG options in /etc/sysconfig/xend, the daemon could crash if the guest sent a lot of information to its serial console in a short time and the guest woudl then freeze. Timestamp logging is now disabled by default.