FEDORA-2015-015aec3bf2 — security update for xen

stable

xen-4.4.3-4.fc21

FEDORA-2015-015aec3bf2 created by myoung 9 years ago for Fedora 21

ui/vnc: limit client_cut_text msg payload size [CVE-2015-5239] (#1259504), e1000: Avoid infinite loop in processing transmit descriptor [CVE-2015-6815] (#1260224), net: add checks to validate ring buffer pointers [CVE-2015-5279] (#1263278), net: avoid infinite loop when receiving packets [CVE-2015-5278] (#1263281), qemu buffer overflow in virtio-serial [CVE-2015-5745] (#1251354)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-015aec3bf2

This update has been submitted for testing by myoung.

9 years ago

This update has been pushed to testing.

9 years ago

This update has been submitted for stable by myoung.

9 years ago

This update has been pushed to stable.

9 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

9 years ago

in testing

9 years ago

in stable

9 years ago

Builds

xen-4.4.3-4.fc21

BZ#1251157 CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial

BZ#1251354 CVE-2015-5745 xen: kernel: qemu buffer overflow in virtio-serial [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1257735 CVE-2015-5239 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

BZ#1259504 CVE-2015-5239 xen: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() [fedora-all]

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260224 xen: Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1263278 CVE-2015-5279 xen: qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1263281 CVE-2015-5278 xen: qemu: Infinite loop in ne2000_receive() function [fedora-all]

xen-4.4.3-4.fc21

Automated Test Results

None