openSUSE Security Update : XEN (openSUSE-SU-2012:1572-1)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

openSUSE Security Update : xen (openSUSE-SU-2014:0483-1)

Xen was updated to fix various bugs and security issues : Update to Xen version 4.2.4 c/s 26280. - bnc861256 - CVE-2014-1950: xen: XSA-88: use-after-free in xccpupoolgetinfo under memory pressure. fix included with update - bnc863297: xend/pvscsi: recognize also SCSI CDROM devices - bnc858496 -...

openSUSE Security Update : Xen (openSUSE-SU-2012:1174-1)

Security Update for Xen Following fixes were done : - bnc776995 - attaching scsi control luns with pvscsi - xend/pvscsi: fix passing of SCSI control LUNs xen-bug776995-pvscsi-no-devname.patch - xend/pvscsi: fix usage of persistant device names for SCSI devices...

Design/Logic Flaw

Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module XSM is enabled, uses the wrong ordering of operations when extending the per-domain event channel tracking table, which causes a use-after-free and allows local guest kernels to injec...

Potential use of freed memory in event channel operations

ISSUE DESCRIPTION Wrong ordering of operations upon extending the per-domain event channel tracking table can cause a pointer to freed memory to be left in place, when the hypervisor is under memory pressure and XSM Xen Security Module is enabled. IMPACT Malicious guest kernels could inject...

SUSE-SU-2015:0944-1 Security update for Xen

XEN has been updated to fix various bugs and security issues: CVE-2013-0153: XSA 36 To avoid an erratum in early hardware, the Xen AMD IOMMU code by default choose to use a single interrupt remapping table for the whole system. This sharing implied that any guest with a passed through PCI device...

xen multiple security vulnerabilities

Multiple DoS conditions...

[SECURITY] [DSA 2582-1] xen security update

------------------------------------------------------------------------- Debian Security Advisory DSA-2582-1 [email protected] http://www.debian.org/security/ Yves-Alexis Perez December 07, 2012 http://www.debian.org/security/faq -...

XEN: security and bugfix update (important)

This security update of XEN fixes various bugs and security issues. - Upstream patch 26088-xend-xml-filesize-check.patch - bnc787163 - CVE-2012-4544: xen: Domain builder Out-of- memory due to malicious kernel/ramdisk XSA 25 CVE-2012-4544-xsa25.patch - bnc779212 - CVE-2012-4411: XEN / qemu: guest...

SUSE-SU-2015:0940-1 Security update for Xen

This update fixes the following security issues in Xen: CVE-2012-5510: Grant table version switch list corruption vulnerability XSA-26 CVE-2012-5511: Several HVM operations do not validate the range of their inputs XSA-27 CVE-2012-5513: XENMEMexchange may overwrite hypervisor memory XSA-29...

CentOS Update for xen CESA-2009:1472 centos5 i386

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

RedHat Update for xen RHSA-2011:0496-01

The remote host is missing an update for the SPDX-FileCopyrightText: 2011 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription scriptxrefname:"URL",...

xen security and bug fix update

3.0.3-64.el52.9 - More fixes for Xenstore unsafe data access CVE-2008-4405, rhbz 464817 - Fix block-detach regression due to CVE-2008-4405, rhbz 473882 3.0.3-64.el52.8 - Remove unneccessary patch & rebuild 3.0.3-64.el52.7 - Fix reboots after CVE-2008-4405 changes rhbz 471588 3.0.3-64.el52.6 -...

[Backports-security-announce] Security Update for xen-3

Frederik Schüler uploaded new packages for xen-3 which fixed the following security problems: CVE-2008-0928, Debian Bug 469649, 469654, 469662, 469666 Qemu 0.9.1 and earlier does not perform range checks for block device read or write requests, which allows guest host users with root privileges t...

CVE-2008-3687

Heap-based buffer overflow in the flasksecuritylabel function in Xen 3.3, when compiled with the XSM:FLASK module, allows unprivileged domain users domU to execute arbitrary code via the flaskop hypercall...

xen security update

CentOS Errata and Security Advisory CESA-2008:0194 Updated xen packages that fix several security issues and a bug are now available for Red Hat Enterprise Linux 5. This update has been rated as having important security impact by the Red Hat Security Response Team. The xen packages contain tools...

Security: some HVM domain can access another domain memory.

Xen 3.x, possibly before 3.1.2, when running on IA64 systems, does not check the RID value for movtorr, which allows a VTi domain to read memory of other domains...