SUSE-SU-2015:1421-1

Details

Description of the patch:

Xen was updated to fix the following security issues:

CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344)
CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device model (XSA-140, bsc#939712)

Affected Packages

xen

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-doc-html

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-doc-pdf

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-kmp-default

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-kmp-pae

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-kmp-trace

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18_2.6.32.59_0.19-29.1

xen-libs

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-tools

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

xen-tools-domU

SUSE Linux Enterprise Server 11 SP1SUSE Linux Enterprise Server 11 SP1-LTSS

Fixed in:

4.0.3_21548_18-29.1

References

ADVISORY

https://bugzilla.suse.com/938344

ADVISORY

https://bugzilla.suse.com/939712

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2015-August/001547.html

ADVISORY

https://www.suse.com/security/cve/CVE-2015-5154/

ADVISORY

https://www.suse.com/security/cve/CVE-2015-5165/

WEB

https://www.suse.com/support/security/rating/

ADVISORY

https://www.suse.com/support/update/announcement/2015/suse-su-20151421-1/