FEDORA-2016-e1784417af — security update for xen

stable

xen-4.5.2-7.fc22

FEDORA-2016-e1784417af created by myoung 8 years ago for Fedora 22

PV superpage functionality missing sanity checks [XSA-167, CVE-2016-1570] VMX: intercept issue with INVLPG on non-canonical address [XSA-168, CVE-2016-1571] Qemu: pci: null pointer dereference issue CVE-2015-7549 qemu: DoS by infinite loop in ehci_advance_state CVE-2015-8558 qemu: Heap-based buffer overrun during VM migration CVE-2015-8666 Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call CVE-2015-8744 qemu: Support reading IMR registers on bar0 CVE-2015-8745 Qemu: net: vmxnet3: host memory leakage CVE-2015-8567 CVE-2015-8568 Qemu: net: ne2000: OOB memory access in ioport r/w functions CVE-2015-8743

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-e1784417af

This update has been submitted for testing by myoung.

8 years ago

This update has been pushed to testing.

8 years ago

This update has been submitted for stable by myoung.

8 years ago

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

xen-4.5.2-7.fc22

BZ#1264929 CVE-2015-8743 Qemu: net: ne2000: OOB memory access in ioport r/w functions

BZ#1270871 CVE-2015-8744 Qemu: net: vmxnet3: incorrect l2 header validation leads to a crash via assert(2) call

BZ#1270876 CVE-2015-8745 Qemu: net: vmxnet3: reading IMR registers leads to a crash via assert(2) call

BZ#1277983 CVE-2015-8558 Qemu: usb: infinite loop in ehci_advance_state results in DoS

BZ#1283722 CVE-2015-8666 Qemu: acpi: heap based buffer overrun during VM migration

BZ#1289816 CVE-2015-8568 CVE-2015-8567 Qemu: net: vmxnet3: host memory leakage

BZ#1289817 CVE-2015-8567 CVE-2015-8568 xen: Qemu: net: vmxnet3: host memory leakage [fedora-all]

BZ#1291137 CVE-2015-7549 Qemu: pci: null pointer dereference issue

BZ#1291139 CVE-2015-7549 xen: Qemu: pci: null pointer dereference issue [fedora-all]

BZ#1291310 CVE-2015-8558 xen: qemu: DoS by infinite loop in ehci_advance_state [fedora-all]

BZ#1294028 CVE-2015-8666 xen: qemu: Heap-based buffer overrun during VM migration [fedora-all]

BZ#1294788 CVE-2015-8743 xen: Qemu: net: ne2000: OOB memory access in ioport r/w functions [fedora-all]

BZ#1295441 CVE-2015-8744 xen: qemu: Incorrect l2 header validation causes crash for packets shorter than 22 bytes [fedora-all]

BZ#1295443 CVE-2015-8745 xen: qemu: Support reading IMR registers on bar0 [fedora-all]

BZ#1296539 CVE-2016-1570 xen: PV superpage functionality missing sanity checks

BZ#1296544 CVE-2016-1571 xen: Intercept issue with INVLPG on non-canonical address causing host to crash

BZ#1300342 CVE-2016-1571 xen: Intercept issue with INVLPG on non-canonical address causing host to crash [fedora-all]

BZ#1300345 CVE-2016-1570 xen: PV superpage functionality missing sanity checks [fedora-all]

xen-4.5.2-7.fc22

Automated Test Results

None