FEDORA-2015-efc1d7ba5e — security update for xen

stable

xen-4.5.1-9.fc22

FEDORA-2015-efc1d7ba5e created by myoung 10 years ago for Fedora 22

ui/vnc: limit client_cut_text msg payload size [CVE-2015-5239] (#1259504), e1000: Avoid infinite loop in processing transmit descriptor [CVE-2015-6815] (#1260224), net: add checks to validate ring buffer pointers [CVE-2015-5279] (#1263278), net: avoid infinite loop when receiving packets [CVE-2015-5278] (#1263281), qemu buffer overflow in virtio-serial [CVE-2015-5745] (#1251354)

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2015-efc1d7ba5e

This update has been submitted for testing by myoung.

10 years ago

This update has been pushed to testing.

10 years ago

mhayden commented & provided feedback 10 years ago

karma

Works for me.

This update has been submitted for stable by myoung.

10 years ago

This update has been pushed to stable.

10 years ago

Please log in to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

10 years ago

in testing

10 years ago

in stable

10 years ago

Builds

xen-4.5.1-9.fc22

BZ#1251157 CVE-2015-5745 kernel: qemu buffer overflow in virtio-serial

BZ#1251354 CVE-2015-5745 xen: kernel: qemu buffer overflow in virtio-serial [fedora-all]

BZ#1256661 CVE-2015-5278 qemu: Infinite loop in ne2000_receive() function

BZ#1256672 CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

BZ#1257735 CVE-2015-5239 qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg()

BZ#1259504 CVE-2015-5239 xen: qemu-kvm: Integer overflow in vnc_client_read() and protocol_client_msg() [fedora-all]

BZ#1260076 CVE-2015-6815 qemu: net: e1000: infinite loop issue

BZ#1260224 xen: Qemu: net: e1000: infinite loop issue [fedora-all]

BZ#1263278 CVE-2015-5279 xen: qemu: Heap overflow vulnerability in ne2000_receive() function [fedora-all]

BZ#1263281 CVE-2015-5278 xen: qemu: Infinite loop in ne2000_receive() function [fedora-all]

xen-4.5.1-9.fc22

Automated Test Results

None