SUSE-SU-2015:1421-1

Details

Xen was updated to fix the following security issues:

CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344)
CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model (XSA-140, bsc#939712)

Affected Packages

xen

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-doc-html

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-doc-pdf

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-kmp-default

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-kmp-pae

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-kmp-trace

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-libs

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-tools

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-tools-domU

SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

References

REPORT

https://bugzilla.suse.com/938344

REPORT

https://bugzilla.suse.com/939712

WEB

https://www.suse.com/security/cve/CVE-2015-5154

WEB

https://www.suse.com/security/cve/CVE-2015-5165

ADVISORY

https://www.suse.com/support/update/announcement/2015/suse-su-20151421-1/