shield Security update for xen

SUSE-SLE-DESKTOP-12-2015-162

Xen was updated 4.4.2_01 to address three security issues and functional bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible (XSA-125, CVE-2015-2752, bnc#922705) - Unmediated PCI command register access in qemu (XSA-126, CVE-2015-2756, bnc#922706) - Certain domctl operations may be abused to lock up the host (XSA-127, CVE-2015-2751, bnc#922709) The following non-security bugs were fixed: - xen dmesg contains bogus output in early boot (bnc#923758) - Xentop doesn't display disk statistics for VMs using qdisks (bnc#921842) The following functionality was enabled: - Enable spice support in qemu for x86_64 - Add Qxl vga support

• Release Date
  Apr 1 2015
• References
  Bugzilla: 922705, 922706, 922709, 921842, 923758
  CVEs: CVE-2015-2756, CVE-2015-2752, CVE-2015-2751
• Type
  security
• Severity
  moderate

cloud_download Downloads

SUSE Linux Enterprise Desktop 12 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.4.2_02-15.1 lock rpm lock src

  xen-kmp-default
  Xen para-virtual device drivers for fully virtualized guests

  4.4.2_02_k3.12.38_44-15.1 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.4.2_02-15.1 lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.4.2_02-15.1 lock rpm