Security update for Xen
This update fixes the following security issues in Xen: * CVE-2012-5510: Grant table version switch list corruption vulnerability (XSA-26) * CVE-2012-5511: Several HVM operations do not validate the range of their inputs (XSA-27) * CVE-2012-5513: XENMEM_exchange may overwrite hypervisor memory (XSA-29) * CVE-2012-5514: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) * CVE-2012-5515: Several memory hypercall operations allow invalid extent order values (XSA-31) Also the following fix has been applied: * bnc#777628 - guest 'disappears' after live migration Updated block-dmmd script Security Issues references: * CVE-2012-5513 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513> * CVE-2012-5514 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514> * CVE-2012-5511 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511> * CVE-2012-5510 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510> * CVE-2012-5515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515>
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update fixes the following security issues in Xen: * CVE-2012-5510: Grant table version switch list corruption vulnerability (XSA-26) * CVE-2012-5511: Several HVM operations do not validate the range of their inputs (XSA-27) * CVE-2012-5513: XENMEM_exchange may overwrite hypervisor memory (XSA-29) * CVE-2012-5514: Missing unlock in guest_physmap_mark_populate_on_demand() (XSA-30) * CVE-2012-5515: Several memory hypercall operations allow invalid extent order values (XSA-31) Also the following fix has been applied: * bnc#777628 - guest 'disappears' after live migration Updated block-dmmd script Security Issues references: * CVE-2012-5513 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5513> * CVE-2012-5514 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5514> * CVE-2012-5511 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5511> * CVE-2012-5510 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5510> * CVE-2012-5515 <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5515>
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/777628
- https://bugzilla.suse.com/789944
- https://bugzilla.suse.com/789945
- https://bugzilla.suse.com/789948
- https://bugzilla.suse.com/789950
- https://bugzilla.suse.com/789951
- https://bugzilla.suse.com/826717
- https://bugzilla.suse.com/880751
- https://bugzilla.suse.com/895798
- https://bugzilla.suse.com/895799
- https://bugzilla.suse.com/895802
- https://bugzilla.suse.com/903850
- https://bugzilla.suse.com/903967
- https://bugzilla.suse.com/903970
- https://bugzilla.suse.com/905465
- https://bugzilla.suse.com/905467
- https://bugzilla.suse.com/906439
- https://bugzilla.suse.com/927967
- https://bugzilla.suse.com/929339
- https://www.suse.com/security/cve/CVE-2012-5510
- https://www.suse.com/security/cve/CVE-2012-5511
- https://www.suse.com/security/cve/CVE-2012-5513
- https://www.suse.com/security/cve/CVE-2012-5514
- https://www.suse.com/security/cve/CVE-2012-5515
- https://www.suse.com/security/cve/CVE-2013-3495
- https://www.suse.com/security/cve/CVE-2014-4021
- https://www.suse.com/security/cve/CVE-2014-7154
- https://www.suse.com/security/cve/CVE-2014-7155
- https://www.suse.com/security/cve/CVE-2014-7156
- https://www.suse.com/security/cve/CVE-2014-8594
- https://www.suse.com/security/cve/CVE-2014-8595
- https://www.suse.com/security/cve/CVE-2014-8866
- https://www.suse.com/security/cve/CVE-2014-8867
- https://www.suse.com/security/cve/CVE-2014-9030
- https://www.suse.com/security/cve/CVE-2015-3340
- https://www.suse.com/security/cve/CVE-2015-3456
- https://www.suse.com/support/update/announcement/2015/suse-su-20150940-1/