gpp_maybe Security update for xen

slessp4-xen-12007

xen was updated to fix two security issues. These security issues were fixed: - CVE-2015-3259: xl command line config handling stack overflow (bsc#935634, XSA-137). - CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344). This non-security issue was fixed: - Kdump did not work in a XEN environment (bsc#925466).

• Release Date
  Jul 17 2015
• References
  Bugzilla: 925466, 935634, 938344
  CVEs: CVE-2015-5154, CVE-2015-3259
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server 11.4 i586

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.4.2_10-5.1 lock src

  xen-kmp-default
  Xen para-virtual device drivers for fully virtualized guests

  4.4.2_10_3.0.101_63-5.1 lock rpm

  xen-kmp-pae
  Xen para-virtual device drivers for fully virtualized guests

  4.4.2_10_3.0.101_63-5.1 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.4.2_10-5.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.4.2_10-5.1 lock rpm

SUSE Linux Enterprise Server for SAP All-in-One 11.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.4.2_10-5.1 lock rpm lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.4.2_10-5.1 lock rpm

  xen-kmp-default
  Xen para-virtual device drivers for fully virtualized guests

  4.4.2_10_3.0.101_63-5.1 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.4.2_10-5.1 lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.4.2_10-5.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.4.2_10-5.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.4.2_10-5.1 lock rpm