Security update for xen (important)

2017-10-0212:10:12

lists.opensuse.org

0.001 Low

EPSS

Percentile

25.2%

JSON

This update for xen fixes several issues.

These security issues were fixed:

CVE-2017-14316: Missing bound check in function alloc_heap_pages for
an internal array allowed attackers using crafted hypercalls to execute
arbitrary code within Xen (XSA-231, bsc#1056278)
CVE-2017-14317: A race in cxenstored may have cause a double-free
allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281).
CVE-2017-14319: An error while handling grant mappings allowed malicious
or buggy x86 PV guest to escalate its privileges or crash the hypervisor
(XSA-234, bsc#1056282).

OSVersionArchitecturePackageVersionFilename
SUSE Linux Enterprise Server LTSS11.3i586xen-tools-domu< 4.2.5_21-45.8.1xen-tools-domU-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Point of Sale11.3i586xen-kmp-pae< 4.2.5_21_3.0.101_0.47.105-45.8.1xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.8.1.i586.rpm
SUSE Linux Enterprise Debuginfo11.3x86_64xen-debugsource< 4.2.5_21-45.8.1xen-debugsource-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS11.3i586xen-libs< 4.2.5_21-45.8.1xen-libs-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Point of Sale11.3i586xen-libs< 4.2.5_21-45.8.1xen-libs-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Server LTSS11.3x86_64xen< 4.2.5_21-45.8.1xen-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo11.3i586xen-debugsource< 4.2.5_21-45.8.1xen-debugsource-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Server LTSS11.3x86_64xen-doc-pdf< 4.2.5_21-45.8.1xen-doc-pdf-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS11.3x86_64xen-doc-html< 4.2.5_21-45.8.1xen-doc-html-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Point of Sale11.3i586xen-tools-domu< 4.2.5_21-45.8.1xen-tools-domU-4.2.5_21-45.8.1.i586.rpm

OS	Version	Architecture	Package	Version	Filename
SUSE Linux Enterprise Server LTSS	11.3	i586	xen-tools-domu	< 4.2.5_21-45.8.1	xen-tools-domU-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Point of Sale	11.3	i586	xen-kmp-pae	< 4.2.5_21_3.0.101_0.47.105-45.8.1	xen-kmp-pae-4.2.5_21_3.0.101_0.47.105-45.8.1.i586.rpm
SUSE Linux Enterprise Debuginfo	11.3	x86_64	xen-debugsource	< 4.2.5_21-45.8.1	xen-debugsource-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS	11.3	i586	xen-libs	< 4.2.5_21-45.8.1	xen-libs-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Point of Sale	11.3	i586	xen-libs	< 4.2.5_21-45.8.1	xen-libs-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Server LTSS	11.3	x86_64	xen	< 4.2.5_21-45.8.1	xen-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Debuginfo	11.3	i586	xen-debugsource	< 4.2.5_21-45.8.1	xen-debugsource-4.2.5_21-45.8.1.i586.rpm
SUSE Linux Enterprise Server LTSS	11.3	x86_64	xen-doc-pdf	< 4.2.5_21-45.8.1	xen-doc-pdf-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Server LTSS	11.3	x86_64	xen-doc-html	< 4.2.5_21-45.8.1	xen-doc-html-4.2.5_21-45.8.1.x86_64.rpm
SUSE Linux Enterprise Point of Sale	11.3	i586	xen-tools-domu	< 4.2.5_21-45.8.1	xen-tools-domU-4.2.5_21-45.8.1.i586.rpm