Lucene search

K
suseSuseSUSE-SU-2015:1479-2
HistorySep 02, 2015 - 7:09 p.m.

Security update for xen (important)

2015-09-0219:09:33
lists.opensuse.org
13

0.013 Low

EPSS

Percentile

84.1%

xen was updated to fix the following security issues:

  • CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device
    model (bsc#939712, XSA-140)
  • CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol
    (bsc#939709, XSA-139)
  • CVE-2015-2751: Certain domctl operations could have be used to lock up
    the host (bsc#922709, XSA-127)
  • CVE-2015-3259: xl command line config handling stack overflow
    (bsc#935634, XSA-137)
  • CVE-2015-4164: DoS through iret hypercall handler (bsc#932996, XSA-136)
  • CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344)