Alerts This Week
Warning Icon 1 659
Alerts This Week
Warning Icon 1 659

openSUSE: SU-2016:0123-1 Important: Memory Leak And Denial Of Service

opensuse
Calendar Grey January 14, 2016
Dist Opensuse Esm H88
Critical patch released for Xen in openSUSE addressing 14 vulnerabilities, improving overall protection against potential attacks.
An update that fixes 14 vulnerabilities is now available

Description

This update for xen fixes the following security issues:

- CVE-2015-8568 CVE-2015-8567: xen: qemu: net: vmxnet3: host memory

leakage (boo#959387)

- CVE-2015-8550: xen: paravirtualized drivers incautious about shared

memory contents (XSA-155, boo#957988)

- CVE-2015-8558: xen: qemu: usb: infinite loop in ehci_advance_state

results in DoS (boo#959006)

- CVE-2015-7549: xen: qemu pci: null pointer dereference issue (boo#958918)

- CVE-2015-8504: xen: qemu: ui: vnc: avoid floating point exception

(boo#958493)

- CVE-2015-8554: xen: qemu-dm buffer overrun in MSI-X handling (XSA-164,

boo#958007)

- CVE-2015-8555: xen: information leak in legacy x86 FPU/XMM

initialization (XSA-165, boo#958009)

- boo#958523: xen: ioreq handling possibly susceptible to multiple read

issue (XSA-166)

- CVE-2015-5307: xen: x86: CPU lockup during fault delivery (XSA-156,

boo#954018)

- CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory security issue DoS important memory leak xen openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.2:

zypper in -t patch openSUSE-2016-35=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.2 (i586 x86_64):

xen-debugsource-4.4.3_08-36.1

xen-devel-4.4.3_08-36.1

xen-libs-4.4.3_08-36.1

xen-libs-debuginfo-4.4.3_08-36.1

xen-tools-domU-4.4.3_08-36.1

xen-tools-domU-debuginfo-4.4.3_08-36.1

- openSUSE 13.2 (x86_64):

xen-4.4.3_08-36.1

xen-doc-html-4.4.3_08-36.1

xen-kmp-default-4.4.3_08_k3.16.7_29-36.1

xen-kmp-default-debuginfo-4.4.3_08_k3.16.7_29-36.1

xen-kmp-desktop-4.4.3_08_k3.16.7_29-36.1

xen-kmp-desktop-debuginfo-4.4.3_08_k3.16.7_29-36.1

xen-libs-32bit-4.4.3_08-36.1

xen-libs-debuginfo-32bit-4.4.3_08-36.1

xen-tools-4.4.3_08-36.1

xen-tools-debuginfo-4.4.3_08-36.1

References

https://www.suse.com/security/cve/CVE-2015-5307.html

https://www.suse.com/security/cve/CVE-2015-7504.html

https://www.suse.com/security/cve/CVE-2015-7549.html

https://www.suse.com/security/cve/CVE-2015-8339.html

https://www.suse.com/security/cve/CVE-2015-8340.html

https://www.suse.com/security/cve/CVE-2015-8341.html

https://www.suse.com/security/cve/CVE-2015-8345.html

https://www.suse.com/security/cve/CVE-2015-8504.html

https://www.suse.com/security/cve/CVE-2015-8550.html

https://www.suse.com/security/cve/CVE-2015-8554.html

https://www.suse.com/security/cve/CVE-2015-8555.html

https://www.suse.com/security/cve/CVE-2015-8558.html

https://www.suse.com/security/cve/CVE-2015-8567.html

https://www.suse.com/security/cve/CVE-2015-8568.html

https://bugzilla.suse.com/show_bug.cgi?id=954018

https://bugzilla.suse.com/show_bug.cgi?id=956408

https://bugzilla.suse.com/show_bug.cgi?id=956409

https://bugzilla.suse.com/show_bug.cgi?id=956411

https://bugzilla.suse.com/show_bug.cgi?id=956592

https://bugzilla.suse.com/show_b...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:0123-1
Rating: important
Affected Products: openSUSE 13.2 .

Topics%20covered

Topics Covered

security advisory security issue DoS important memory leak xen openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here