FEDORA-2015-efc1d7ba5e — security update for xen

stable

xen-4.5.1-9.fc22

FEDORA-2015-efc1d7ba5e created by myoung 7 years ago for Fedora 22

ui/vnc: limit client_cut_text msg payload size [CVE-2015-5239] (#1259504), e1000: Avoid infinite loop in processing transmit descriptor [CVE-2015-6815] (#1260224), net: add checks to validate ring buffer pointers [CVE-2015-5279] (#1263278), net: avoid infinite loop when receiving packets [CVE-2015-5278] (#1263281), qemu buffer overflow in virtio-serial [CVE-2015-5745] (#1251354)

How to install

sudo dnf upgrade --refresh --advisory=FEDORA-2015-efc1d7ba5e

This update has been submitted for testing by myoung.

7 years ago

This update has been pushed to testing.

7 years ago

mhayden commented & provided feedback 7 years ago

karma

Works for me.

This update has been submitted for stable by myoung.

7 years ago

This update has been pushed to stable.

7 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Builds

xen-4.5.1-9.fc22

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

7 years ago

in testing

7 years ago

in stable

7 years ago

BZ#1251157 CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial

BZ#1251354 CVE-2015-5745 xen: kernel: qemu buffer overflow in virtio-serial [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1257735 CVE-2015-5239 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

BZ#1259504 CVE-2015-5239 xen: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() [fedora-all]

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260224 xen: Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1263278 CVE-2015-5279 xen: qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1263281 CVE-2015-5278 xen: qemu: Infinite loop in ne2000_receive() function [fedora-all]

xen-4.5.1-9.fc22

Automated Test Results

None