stable

xen-4.5.2-5.fc22

FEDORA-2015-08e4af5a20 created by myoung 10 years ago for Fedora 22

eepro100: Prevent two endless loops [CVE-2015-8345] (#1285215), pcnet: fix rx buffer overflow [CVE-2015-7512], ui: vnc: avoid floating point exception [CVE-2015-8504], additional patch for [XSA-158, CVE-2015-8338] long running memory operations on ARM [XSA-158, CVE-2015-8338] XENMEM_exchange error handling issues [XSA-159, CVE-2015-8339, CVE-2015-8340] libxl leak of pv kernel and initrd on error [XSA-160, CVE-2015-8341]


heap buffer overflow vulnerability in pcnet emulator [XSA-162, CVE-2015-7504], virtual PMU is unsupported [XSA-163]

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-08e4af5a20

This update has been submitted for testing by myoung.

10 years ago

This update has obsoleted xen-4.5.2-3.fc22, and has inherited its bugs and notes.

10 years ago

myoung edited this update.

10 years ago

This update has been pushed to testing.

10 years ago
User Icon filiperosset commented & provided feedback 10 years ago
karma

no regressions noted

This update has reached 7 days in testing and can be pushed to stable now if the maintainer wishes

10 years ago

This update has been submitted for stable by myoung.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata
Type
security
Karma
1
Signed
Content Type
RPM
Test Gating
Autopush Settings
Unstable by Karma
-3
Stable by Karma
3
Stable by Time
disabled
Dates
submitted
10 years ago
in testing
10 years ago
in stable
10 years ago
modified
10 years ago
BZ#1261461 CVE-2015-7504 Qemu: net: pcnet: heap overflow vulnerability in pcnet_receive
0
0
BZ#1284911 CVE-2015-8338 xen: Long running memory operations on ARM cause DoS
0
0
BZ#1284919 CVE-2015-8339 CVE-2015-8340 xen: XENMEM_exchange error handling may cause DoS to host
0
0
BZ#1284933 CVE-2015-8341 xen: libxl leak of PV kernel can cause OOM condition
0
0
BZ#1285061 CVE-2015-7512 Qemu: net: pcnet: buffer overflow in non-loopback mode
0
0
BZ#1285213 CVE-2015-8345 Qemu: net: eepro100: infinite loop in processing command block list
0
0
BZ#1285215 CVE-2015-8345 xen: Qemu: net: eepro100: infinite loop in processing command block list [fedora-all]
0
0
BZ#1285350 xen: Virtual Performance Measurement Unit feature is unsupported
0
0
BZ#1285351 xen: Virtual Performance Measurement Unit feature is unsupported [fedora-all]
0
0
BZ#1286544 CVE-2015-7504 xen: Qemu: net: pcnet: heap overflow vulnerability in pcnet_receive [fedora-all]
0
0
BZ#1286563 CVE-2015-7512 xen: Qemu: net: pcnet: buffer overflow in non-loopback mode [fedora-all]
0
0
BZ#1289544 CVE-2015-8504 xen: Qemu: ui: vnc: avoid floating point exception [fedora-all]
0
0
BZ#1289568 CVE-2015-8338 CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 xen: various flaws [fedora-all]
0
0

Automated Test Results