xen - security update

Fixed packages 1

Vulnerabilities 13

• Critical 10.0
  CVE-2015-8104

  The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-3259

  Stack-based buffer overflow in the xl command line utility in Xen 4.1.x through 4.5.x allows local guest administrators…

  xen xen Debian Ubuntu
  Jul 16, 2015
• Unscored —
  CVE-2015-3340

  Xen 4.2.x through 4.5.x does not initialize certain fields, which allows certain remote service domains to obtain sensi…

  xen xen Debian Ubuntu
  Apr 28, 2015
• Unscored —
  CVE-2015-5307

  The KVM subsystem in the Linux kernel through 4.2.6, and Xen 4.3.x through 4.6.x, allows guest OS users to cause a deni…

  linux linux xen virtualbox Debian Ubuntu
  Nov 16, 2015
• Unscored —
  CVE-2015-6654

  The xenmem_add_to_physmap_one function in arch/arm/mm.c in Xen 4.5.x, 4.4.x, and earlier does not limit the number of p…

  xen xen Debian Ubuntu
  Sep 3, 2015
• Unscored —
  CVE-2015-7311

  libxl in Xen 4.1.x through 4.6.x does not properly handle the readonly flag on disks when using the qemu-xen device mod…

  xen xen Debian Ubuntu
  Oct 1, 2015
• Unscored —
  CVE-2015-7812

  The hypercall_create_continuation function in arch/arm/domain.c in Xen 4.4.x through 4.6.x allows local guest users to …

  xen xen Debian Ubuntu
  Nov 17, 2015
• Unscored —
  CVE-2015-7813

  Xen 4.4.x, 4.5.x, and 4.6.x does not limit the number of printk console messages when reporting unimplemented hypercall…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7814

  Race condition in the relinquish_memory function in arch/arm/domain.c in Xen 4.6.x and earlier allows local domains wit…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7969

  Multiple memory leaks in Xen 4.0 through 4.6.x allow local guest administrators or domains with certain permission to c…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7970

  The p2m_pod_emergency_sweep function in arch/x86/mm/p2m-pod.c in Xen 3.4.x, 3.5.x, and 3.6.x is not preemptible, which …

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7971

  Xen 3.2.x through 4.6.x does not limit the number of printk console messages when logging certain pmu and profiling hyp…

  xen xen Debian Ubuntu
  Oct 30, 2015
• Unscored —
  CVE-2015-7972

  The (1) libxl_set_memory_target function in tools/libxl/libxl.c and (2) libxl__build_post function in tools/libxl/libxl…

  xen xen Debian Ubuntu
  Oct 30, 2015