Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 596
Alerts This Week
Warning Icon 1 596

Fedora 22: 2015-6f6b79efe2 Critical: Xen Multiple Memory Issues

fedora
Calendar Grey November 10, 2015
Dist Fedora Esm H88
The Fedora 22 xen upgrade responds to numerous security concerns and weaknesses that impact the performance of virtual machines.
nine security updates CVE-2015-7969 CVE-2015-7970 CVE-2015-7813 CVE-2015-7814 CVE-2015-7812 CVE-2015-7971 CVE-2015-7835 CVE-2015-7972

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

nine security updates CVE-2015-7969 CVE-2015-7970 CVE-2015-7813 CVE-2015-7814 CVE-2015-7812 CVE-2015-7971 CVE-2015-7835 CVE-2015-7972

Topics%20covered

Topics Covered

security advisory critical Fedora memory issue xen virtual machine

Change Log

References


[ 1 ] Bug #1272519 - CVE-2015-7969 xen: leak of main per-domain vcpu pointer array https://bugzilla.redhat.com/show_bug.cgi?id=1272519 [ 2 ] Bug #1272529 - CVE-2015-7970 xen: Long latency populate-on-demand operation is not preemptible on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1272529 [ 3 ] Bug #1271626 - CVE-2015-7813 xen: Various unimplemented hypercalls log without rate limiting on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271626 [ 4 ] Bug #1271630 - CVE-2015-7814 xen: Race between domain destruction and memory allocation decrease on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271630 [ 5 ] Bug #1271621 - CVE-2015-7812 xen: Host crash when preempting a multicall on ARM https://bugzilla.redhat.com/show_bug.cgi?id=1271621 [ 6 ] Bug #1272525 - CVE-2015-7971 xen: Some pmu and profiling hypercalls log without rate limiting on x86 https://bugzilla.redhat.com/show_bug.cgi?id=1272525 [ 7 ] Bug #1271971 - CV...

Read the Full Advisory

Update Instructions

This update can be installed with the "yum" update program. Use su -c 'yum update xen' at the command line. For more information, refer to "Managing Software with yum", available at .

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xen
Product: Fedora 22
Version: 4.5.1
Release: 14.fc22
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory critical Fedora memory issue xen virtual machine

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.