Alerts This Week
Warning Icon 1 537
Alerts This Week
Warning Icon 1 537

openSUSE 13.1: openSUSE-SU-2016:0124-1 Important: DoS Issues

opensuse
Calendar Grey January 14, 2016
Dist Opensuse Esm H88
Important openSUSE Security Patch for xen resolves 15 vulnerabilities and offers guidance for secure deployment.
An update that solves 15 vulnerabilities and has one errata is now available.

Description

This update for xen fixes the following security issues:

- CVE-2015-8550: paravirtualized drivers incautious about shared memory

contents (XSA-155, boo#957988)

- CVE-2015-8558: qemu: usb: infinite loop in ehci_advance_state results in

DoS (boo#959006)

- CVE-2015-7549: qemu pci: null pointer dereference issue (boo#958918)

- CVE-2015-8504: qemu: ui: vnc: avoid floating point exception (boo#958493)

- CVE-2015-8554: qemu-dm buffer overrun in MSI-X handling (XSA-164,

boo#958007)

- CVE-2015-8555: information leak in legacy x86 FPU/XMM initialization

(XSA-165, boo#958009)

- boo#958523 xen: ioreq handling possibly susceptible to multiple read

issue (XSA-166)

- CVE-2015-8345: xen: qemu: net: eepro100: infinite loop in processing

command block list (boo#956832)

- boo#956592: xen: virtual PMU is unsupported (XSA-163)

- CVE-2015-8339, CVE-2015-8340: xen: XENMEM_exchange error handling issues

(XSA-159, boo#956408)

-...

Read the Full Advisory

Topics%20covered

Topics Covered

security advisory buffer overrun DoS patch important xen openSUSE

Patch

Patch Instructions:

To install this openSUSE Security Update use YaST online_update.

Alternatively you can run the command listed for your product:

- openSUSE 13.1:

zypper in -t patch openSUSE-2016-34=1

To bring your system up-to-date, use "zypper patch".

Package List

- openSUSE 13.1 (i586 x86_64):

xen-debugsource-4.3.4_10-53.1

xen-devel-4.3.4_10-53.1

xen-kmp-default-4.3.4_10_k3.11.10_29-53.1

xen-kmp-default-debuginfo-4.3.4_10_k3.11.10_29-53.1

xen-kmp-desktop-4.3.4_10_k3.11.10_29-53.1

xen-kmp-desktop-debuginfo-4.3.4_10_k3.11.10_29-53.1

xen-libs-4.3.4_10-53.1

xen-libs-debuginfo-4.3.4_10-53.1

xen-tools-domU-4.3.4_10-53.1

xen-tools-domU-debuginfo-4.3.4_10-53.1

- openSUSE 13.1 (x86_64):

xen-4.3.4_10-53.1

xen-doc-html-4.3.4_10-53.1

xen-libs-32bit-4.3.4_10-53.1

xen-libs-debuginfo-32bit-4.3.4_10-53.1

xen-tools-4.3.4_10-53.1

xen-tools-debuginfo-4.3.4_10-53.1

xen-xend-tools-4.3.4_10-53.1

xen-xend-tools-debuginfo-4.3.4_10-53.1

- openSUSE 13.1 (i586):

xen-kmp-pae-4.3.4_10_k3.11.10_29-53.1

xen-kmp-pae-debuginfo-4.3.4_10_k3.11.10_29-53.1

References

https://www.suse.com/security/cve/CVE-2015-5307.html

https://www.suse.com/security/cve/CVE-2015-7311.html

https://www.suse.com/security/cve/CVE-2015-7504.html

https://www.suse.com/security/cve/CVE-2015-7549.html

https://www.suse.com/security/cve/CVE-2015-7970.html

https://www.suse.com/security/cve/CVE-2015-8104.html

https://www.suse.com/security/cve/CVE-2015-8339.html

https://www.suse.com/security/cve/CVE-2015-8340.html

https://www.suse.com/security/cve/CVE-2015-8341.html

https://www.suse.com/security/cve/CVE-2015-8345.html

https://www.suse.com/security/cve/CVE-2015-8504.html

https://www.suse.com/security/cve/CVE-2015-8550.html

https://www.suse.com/security/cve/CVE-2015-8554.html

https://www.suse.com/security/cve/CVE-2015-8555.html

https://www.suse.com/security/cve/CVE-2015-8558.html

https://bugzilla.suse.com/947165

https://bugzilla.suse.com/950704

https://bugzilla.suse.com/954018

https://bugzilla.suse.com/954405

https://bugzilla.suse.com/956408

https://bugzilla.suse.com/956409

https://bugzilla.suse.com/95...

Read the Full Advisory

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: openSUSE-SU-2016:0124-1
Rating: important
Affected Products: openSUSE 13.1 le.

Topics%20covered

Topics Covered

security advisory buffer overrun DoS patch important xen openSUSE

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Related News

Your message here