Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2015:1894-1 Final 1 1 2015-10-29T16:40:59Z current 2015-10-29T16:40:59Z 2015-10-29T16:40:59Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen xen was updated to version 4.4.3 to fix nine security issues. These security issues were fixed: - CVE-2015-4037: The slirp_smb function in net/slirp.c created temporary files with predictable names, which allowed local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program (bsc#932267). - CVE-2014-0222: Integer overflow in the qcow_open function allowed remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image (bsc#877642). - CVE-2015-7835: Uncontrolled creation of large page mappings by PV guests (bsc#950367). - CVE-2015-7311: libxl in Xen did not properly handle the readonly flag on disks when using the qemu-xen device model, which allowed local guest users to write to a read-only disk image (bsc#947165). - CVE-2015-5239: Integer overflow in vnc_client_read() and protocol_client_msg() (bsc#944463). - CVE-2015-6815: With e1000 NIC emulation support it was possible to enter an infinite loop (bsc#944697). - CVE-2015-7969: Leak of main per-domain vcpu pointer array leading to denial of service (bsc#950703). - CVE-2015-7969: Leak of per-domain profiling- related vcpu pointer array leading to denial of service (bsc#950705). - CVE-2015-7971: Some pmu and profiling hypercalls log without rate limiting (bsc#950706). These non-security issues were fixed: - bsc#907514: Bus fatal error: SLES 12 sudden reboot has been observed - bsc#910258: SLES12 Xen host crashes with FATAL NMI after shutdown of guest with VT-d NIC - bsc#918984: Bus fatal error: SLES11-SP4 sudden reboot has been observed - bsc#923967: Partner-L3: Bus fatal error: SLES11-SP3 sudden reboot has been observed - bnc#901488: Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores - bsc#945167: Running command: xl pci-assignable-add 03:10.1 secondly show errors - bsc#949138: Setting vcpu affinity under Xen causes libvirtd abort - bsc#949549: xm create hangs when maxmen value is enclosed in quotes The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). sdksp4-xen-12184,sledsp4-xen-12184,slessp4-xen-12184 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ Link for SUSE-SU-2015:1894-1 https://lists.opensuse.org/opensuse-security-announce/2015-11/msg00005.html E-Mail link for SUSE-SU-2015:1894-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/877642 SUSE Bug 877642 https://bugzilla.suse.com/901488 SUSE Bug 901488 https://bugzilla.suse.com/907514 SUSE Bug 907514 https://bugzilla.suse.com/910258 SUSE Bug 910258 https://bugzilla.suse.com/918984 SUSE Bug 918984 https://bugzilla.suse.com/923967 SUSE Bug 923967 https://bugzilla.suse.com/932267 SUSE Bug 932267 https://bugzilla.suse.com/944463 SUSE Bug 944463 https://bugzilla.suse.com/944697 SUSE Bug 944697 https://bugzilla.suse.com/945167 SUSE Bug 945167 https://bugzilla.suse.com/947165 SUSE Bug 947165 https://bugzilla.suse.com/949138 SUSE Bug 949138 https://bugzilla.suse.com/949549 SUSE Bug 949549 https://bugzilla.suse.com/950367 SUSE Bug 950367 https://bugzilla.suse.com/950703 SUSE Bug 950703 https://bugzilla.suse.com/950705 SUSE Bug 950705 https://bugzilla.suse.com/950706 SUSE Bug 950706 https://www.suse.com/security/cve/CVE-2014-0222/ SUSE CVE CVE-2014-0222 page https://www.suse.com/security/cve/CVE-2015-4037/ SUSE CVE CVE-2015-4037 page https://www.suse.com/security/cve/CVE-2015-5239/ SUSE CVE CVE-2015-5239 page https://www.suse.com/security/cve/CVE-2015-6815/ SUSE CVE CVE-2015-6815 page https://www.suse.com/security/cve/CVE-2015-7311/ SUSE CVE CVE-2015-7311 page https://www.suse.com/security/cve/CVE-2015-7835/ SUSE CVE CVE-2015-7835 page https://www.suse.com/security/cve/CVE-2015-7969/ SUSE CVE CVE-2015-7969 page https://www.suse.com/security/cve/CVE-2015-7971/ SUSE CVE CVE-2015-7971 page SUSE Linux Enterprise Desktop 11 SP4 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server for SAP Applications 11 SP4 SUSE Linux Enterprise Software Development Kit 11 SP4 xen-devel-4.4.3_02-26.2 xen-4.4.3_02-26.2 xen-doc-html-4.4.3_02-26.2 xen-kmp-default-4.4.3_02_3.0.101_65-26.2 xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 xen-libs-4.4.3_02-26.2 xen-libs-32bit-4.4.3_02-26.2 xen-tools-4.4.3_02-26.2 xen-tools-domU-4.4.3_02-26.2 xen-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-doc-html-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-kmp-default-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-libs-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-libs-32bit-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-tools-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-tools-domU-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Desktop 11 SP4 xen-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-doc-html-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-default-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-libs-32bit-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-tools-domU-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server 11 SP4 xen-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-doc-html-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-kmp-default-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-libs-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-libs-32bit-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-tools-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-tools-domU-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Server for SAP Applications 11 SP4 xen-devel-4.4.3_02-26.2 as a component of SUSE Linux Enterprise Software Development Kit 11 SP4 Integer overflow in the qcow_open function in block/qcow.c in QEMU before 1.7.2 allows remote attackers to cause a denial of service (crash) via a large L2 table in a QCOW version 1 image. CVE-2014-0222 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 moderate 5.5 AV:A/AC:L/Au:S/C:N/I:N/A:C To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2014-0222.html CVE-2014-0222 https://bugzilla.suse.com/1072223 SUSE Bug 1072223 https://bugzilla.suse.com/877642 SUSE Bug 877642 https://bugzilla.suse.com/950367 SUSE Bug 950367 https://bugzilla.suse.com/964925 SUSE Bug 964925 The slirp_smb function in net/slirp.c in QEMU 2.3.0 and earlier creates temporary files with predictable names, which allows local users to cause a denial of service (instantiation failure) by creating /tmp/qemu-smb.*-* files before the program. CVE-2015-4037 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-4037.html CVE-2015-4037 https://bugzilla.suse.com/932267 SUSE Bug 932267 https://bugzilla.suse.com/950367 SUSE Bug 950367 Integer overflow in the VNC display driver in QEMU before 2.1.0 allows attachers to cause a denial of service (process crash) via a CLIENT_CUT_TEXT message, which triggers an infinite loop. CVE-2015-5239 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-5239.html CVE-2015-5239 https://bugzilla.suse.com/944463 SUSE Bug 944463 https://bugzilla.suse.com/950367 SUSE Bug 950367 The process_tx_desc function in hw/net/e1000.c in QEMU before 2.4.0.1 does not properly process transmit descriptor data when sending a network packet, which allows attackers to cause a denial of service (infinite loop and guest crash) via unspecified vectors. CVE-2015-6815 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-6815.html CVE-2015-6815 https://bugzilla.suse.com/944697 SUSE Bug 944697 https://bugzilla.suse.com/950367 SUSE Bug 950367 libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device model, which allows local guest users to write to a read-only disk image. CVE-2015-7311 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-7311.html CVE-2015-7311 https://bugzilla.suse.com/947165 SUSE Bug 947165 https://bugzilla.suse.com/950367 SUSE Bug 950367 The mod_l2_entry function in arch/x86/mm.c in Xen 3.4 through 4.6.x does not properly validate level 2 page table entries, which allows local PV guest administrators to gain privileges via a crafted superpage mapping. CVE-2015-7835 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-7835.html CVE-2015-7835 https://bugzilla.suse.com/940929 SUSE Bug 940929 https://bugzilla.suse.com/947159 SUSE Bug 947159 https://bugzilla.suse.com/950367 SUSE Bug 950367 Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to cause a denial of service (memory consumption) via a large number of "teardowns" of domains with the vcpu pointer array allocated using the (1) XEN_DOMCTL_max_vcpus hypercall or the xenoprofile state vcpu pointer array allocated using the (2) XENOPROF_get_buffer or (3) XENOPROF_set_passive hypercall. CVE-2015-7969 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-7969.html CVE-2015-7969 https://bugzilla.suse.com/950703 SUSE Bug 950703 https://bugzilla.suse.com/950705 SUSE Bug 950705 Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hypercalls, which allows local guests to cause a denial of service via a sequence of crafted (1) HYPERCALL_xenoprof_op hypercalls, which are not properly handled in the do_xenoprof_op function in common/xenoprof.c, or (2) HYPERVISOR_xenpmu_op hypercalls, which are not properly handled in the do_xenpmu_op function in arch/x86/cpu/vpmu.c. CVE-2015-7971 SUSE Linux Enterprise Desktop 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Desktop 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-doc-html-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-default-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-kmp-pae-4.4.3_02_3.0.101_65-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-32bit-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-libs-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-4.4.3_02-26.2 SUSE Linux Enterprise Server for SAP Applications 11 SP4:xen-tools-domU-4.4.3_02-26.2 SUSE Linux Enterprise Software Development Kit 11 SP4:xen-devel-4.4.3_02-26.2 low To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2015/suse-su-20151894-1/ https://www.suse.com/security/cve/CVE-2015-7971.html CVE-2015-7971 https://bugzilla.suse.com/950706 SUSE Bug 950706