Lucene search

K
suseSuseOPENSUSE-SU-2015:1094-1
HistoryJun 22, 2015 - 2:04 p.m.

Security update for xen (important)

2015-06-2214:04:51
lists.opensuse.org
6

0.051 Low

EPSS

Percentile

92.1%

Xen was updated to fix eight vulnerabilities.

The following vulnerabilities were fixed:

  • CVE-2015-2751: Certain domctl operations may be abused to lock up the
    host (XSA-127 boo#922709)
  • CVE-2015-4103: Potential unintended writes to host MSI message data
    field via qemu (XSA-128) (boo#931625)
  • CVE-2015-4104: PCI MSI mask bits inadvertently exposed to guests
    (XSA-129) (boo#931626)
  • CVE-2015-4105: Guest triggerable qemu MSI-X pass-through error messages
    (XSA-130) (boo#931627)
  • CVE-2015-4106: Unmediated PCI register access in qemu (XSA-131)
    (boo#931628)
  • CVE-2015-4163: GNTTABOP_swap_grant_ref operation misbehavior (XSA-134)
    (boo#932790)
  • CVE-2015-3209: heap overflow in qemu pcnet controller allowing guest to
    host escape (XSA-135) (boo#932770)
  • CVE-2015-4164: DoS through iret hypercall handler (XSA-136) (boo#932996)