Lucene search

K
suseSuseSUSE-SU-2015:1479-1
HistorySep 02, 2015 - 6:09 p.m.

Security update for xen (important)

2015-09-0218:09:46
lists.opensuse.org
11

0.013 Low

EPSS

Percentile

84.1%

xen was updated to fix the following security issues:

  • CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device
    model (bsc#939712, XSA-140)
  • CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol
    (bsc#939709, XSA-139)
  • CVE-2015-2751: Certain domctl operations could have be used to lock up
    the host (bsc#922709, XSA-127)
  • CVE-2015-3259: xl command line config handling stack overflow
    (bsc#935634, XSA-137)
  • CVE-2015-4164: DoS through iret hypercall handler (bsc#932996, XSA-136)
  • CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344)