xen - security update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2015-8339

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly hand back pages to a domai…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8340

  The memory_exchange function in common/memory.c in Xen 3.2.x through 4.6.x does not properly release locks, which might…

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8341

  The libxl toolstack library in Xen 4.1.x through 4.6.x does not properly release mappings of files used as kernels and …

  xen xen Debian Ubuntu
  Dec 17, 2015
• Unscored —
  CVE-2015-8550 Public exploit

  Xen, when used on a system providing PV backends, allows local guest OS administrators to cause a denial of service (ho…

  linux-raspi2 linux-hwe linux-azure linux-riscv Debian Ubuntu
  Apr 14, 2016
• Unscored —
  CVE-2015-8555

  Xen 4.6.x, 4.5.x, 4.4.x, 4.3.x, and earlier do not initialize x86 FPU stack and XMM registers when XSAVE/XRSTOR are not…

  xen xen Debian Ubuntu
  Apr 13, 2016
• Unscored —
  CVE-2016-1570

  The PV superpage functionality in arch/x86/mm.c in Xen 3.4.0, 3.4.1, and 4.1.x through 4.6.x allows local PV guests to …

  xen xen Debian Ubuntu
  Jan 22, 2016
• Unscored —
  CVE-2016-1571

  The paging_invlpg function in include/asm-x86/paging.h in Xen 3.3.x through 4.6.x, when using shadow mode paging or nes…

  xen xen Debian Ubuntu
  Jan 22, 2016
• Unscored —
  CVE-2016-2270

  Xen 4.6.x and earlier allows local guest administrators to cause a denial of service (host reboot) via vectors related …

  xen xen Debian Ubuntu
  Feb 19, 2016
• Unscored —
  CVE-2016-2271

  VMX in Xen 4.6.x and earlier, when using an Intel or Cyrix CPU, allows local HVM guest users to cause a denial of servi…

  xen xen Debian Ubuntu
  Feb 19, 2016