SUSE: 2015:0613-1 Important: Xen Memory Protection And Issues
suse
March 27, 2015
An update that solves 8 vulnerabilities and has 7 fixes is An update that solves 8 vulnerabilities and has 7 fixes is An update that solves 8 vulnerabilities and has 7 fixes is now...
Summary
The XEN hypervisor received updates to fix various security issues and bugs. The following security issues were fixed: - CVE-2015-2151: XSA-123: A hypervisor memory corruption due to x86 emulator flaw. - CVE-2015-2045: XSA-122: Information leak through version information hypercall. - CVE-2015-2044: XSA-121: Information leak via internal x86 system device emulation. - CVE-2015-2152: XSA-119: HVM qemu was unexpectedly enabling emulated VGA graphics backends. - CVE-2014-3615: Information leakage when guest sets high graphics resolution. - CVE-2015-0361: XSA-116: A xen crash due to use after free on hvm guest teardown. - CVE-2014-9065, CVE-2014-9066: XSA-114: xen: p2m lock starvation. Also the following bugs were fixed: - bnc#919098 - XEN blktap device intermittently fails to connect
References
#861318 #882089 #895528 #901488 #903680 #904255
#906996 #910254 #910681 #912011 #918995 #918998
#919098 #919464 #919663
Cross- CVE-2014-3615 CVE-2014-9065 CVE-2014-9066
CVE-2015-0361 CVE-2015-2044 CVE-2015-2045
CVE-2015-2151 CVE-2015-2152
Affected Products:
SUSE Linux Enterprise Software Development Kit 12
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Desktop 12
https://www.suse.com/security/cve/CVE-2014-3615.html
https://www.suse.com/security/cve/CVE-2014-9065.html
https://www.suse.com/security/cve/CVE-2014-9066.html
https://www.suse.com/security/cve/CVE-2015-0361.html
https://www.suse.com/security/cve/CVE-2015-2044.html
https://www.suse.com/security/cve/CVE-2015-2045.html
https://www.suse.com/security/cve/CVE-2015-2151.html
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: SUSE-SU-2015:0613-1
Rating: important
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!