openSUSE Leap 42.2: 2017:2916-1 Important Xen DoS Advisory

This update for xen fixes several issues:

These security issues were fixed:

- CVE-2017-5526: The ES1370 audio device emulation support was vulnerable

to a memory leakage issue allowing a privileged user inside the guest to

cause a DoS and/or potentially crash the Qemu process on the host

(bsc#1059777)

- CVE-2017-15593: Missing cleanup in the page type system allowed a

malicious or buggy PV guest to cause DoS (XSA-242 bsc#1061084)

- CVE-2017-15592: A problem in the shadow pagetable code allowed a

malicious or buggy HVM guest to cause DoS or cause hypervisor memory

corruption potentially allowing the guest to escalate its privilege

(XSA-243 bsc#1061086)

- CVE-2017-15594: Problematic handling of the selector fields in the

Interrupt Descriptor Table (IDT) allowed a malicious or buggy x86 PV

guest to escalate its privileges or cause DoS (XSA-244 bsc#1061087)

- CVE-2017-15591: Missing checks in the handling of DMOPs...