{"affected":[],"aliases":[],"details":"\nXEN has been updated to fix various bugs and security issues:\n\n    * \n\n      CVE-2013-0153: (XSA 36) To avoid an erratum in early hardware, the\n      Xen AMD IOMMU code by default choose to use a single interrupt\n      remapping table for the whole system. This sharing implied that any\n      guest with a passed through PCI device that is bus mastering capable\n      can inject interrupts into other guests, including domain 0. This has\n      been disabled for AMD chipsets not capable of it.\n\n    * \n\n      CVE-2012-6075: qemu: The e1000 had overflows under some conditions,\n      potentially corrupting memory.\n\n    * \n\n      CVE-2013-0154: (XSA 37) Hypervisor crash due to incorrect ASSERT\n      (debug build only)\n\n    * \n\n      CVE-2012-5634: (XSA-33) A VT-d interrupt remapping source validation\n      flaw was fixed.\n\nAlso the following bugs have been fixed:\n\n    * bnc#805094 - xen hot plug attach/detach fails\n    * bnc#802690 - domain locking can prevent a live migration from\n      completing\n    * bnc#797014 - no way to control live migrations\n          o fix logic error in stdiostream_progress\n          o restore logging in xc_save\n          o add options to control migration tunables\n    * bnc#806736: enabling xentrace crashes hypervisor\n    * Upstream patches from Jan 26287-sched-credit-pick-idle.patch\n      26501-VMX-simplify-CR0-update.patch\n      26502-VMX-disable-SMEP-when-not-paging.patch\n      26516-ACPI-parse-table-retval.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26517-AMD-IOMMU-clear-irtes.patch\n      (Replaces CVE-2013-0153-xsa36.patch)\n      26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n      26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces\n      CVE-2013-0153-xsa36.patch) 26526-pvdrv-no-devinit.patch\n      26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces\n      CVE-2013-0153-xsa36.patch)\n    * bnc#798188 - Add $network to xend initscript dependencies\n    * bnc#799694 - Unable to dvd or cdrom-boot DomU after xen-tools update\n      Fixed with update to Xen version 4.1.4\n    * bnc#800156 - L3: HP iLo Generate NMI function not working in XEN\n      kernel\n    * Upstream patches from Jan 26404-x86-forward-both-NMI-kinds.patch\n      26427-x86-AMD-enable-WC+.patch\n    * bnc#793927 - Xen VMs with more than 2 disks randomly fail to start\n    * Upstream patches from Jan 26332-x86-compat-show-guest-stack-mfn.patch\n      26333-x86-get_page_type-assert.patch (Replaces\n      CVE-2013-0154-xsa37.patch)\n      26340-VT-d-intremap-verify-legacy-bridge.patch (Replaces\n      CVE-2012-5634-xsa33.patch) 26370-libxc-x86-initial-mapping-fit.patch\n    * Update to Xen 4.1.4 c/s 23432\n    * Update xenpaging.guest-memusage.patch add rule for xenmem to avoid\n      spurious build failures\n    * Upstream patches from Jan 26179-PCI-find-next-cap.patch\n      26183-x86-HPET-masking.patch 26188-x86-time-scale-asm.patch\n      26200-IOMMU-debug-verbose.patch 26203-x86-HAP-dirty-vram-leak.patch\n      26229-gnttab-version-switch.patch (Replaces\n      CVE-2012-5510-xsa26.patch) 26230-x86-HVM-limit-batches.patch\n      (Replaces CVE-2012-5511-xsa27.patch)\n      26231-memory-exchange-checks.patch (Replaces\n      CVE-2012-5513-xsa29.patch) 26232-x86-mark-PoD-error-path.patch\n      (Replaces CVE-2012-5514-xsa30.patch) 26233-memop-order-checks.patch\n      (Replaces CVE-2012-5515-xsa31.patch)\n      26235-IOMMU-ATS-max-queue-depth.patch\n      26272-x86-EFI-makefile-cflags-filter.patch\n      26294-x86-AMD-Fam15-way-access-filter.patch CVE-2013-0154-xsa37.patch\n    * Restore c/s 25751 in 23614-x86_64-EFI-boot.patch. Modify the EFI\n      Makefile to do additional filtering.\n\nSecurity Issue references:\n\n    * CVE-2013-0153\n      <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2013-0153>\n    * CVE-2012-6075\n      <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-6075>\n    * CVE-2012-5634\n      <http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2012-5634>\n\n","id":"SUSE-SU-2015:0944-1","modified":"2013-03-13T11:27:38Z","published":"2013-03-13T11:27:38Z","references":[{"type":"ADVISORY","url":"https://www.suse.com/support/update/announcement/2015/suse-su-20150944-1/"},{"type":"REPORT","url":"https://bugzilla.suse.com/777628"},{"type":"REPORT","url":"https://bugzilla.suse.com/789940"},{"type":"REPORT","url":"https://bugzilla.suse.com/789944"},{"type":"REPORT","url":"https://bugzilla.suse.com/789945"},{"type":"REPORT","url":"https://bugzilla.suse.com/789948"},{"type":"REPORT","url":"https://bugzilla.suse.com/789950"},{"type":"REPORT","url":"https://bugzilla.suse.com/789951"},{"type":"REPORT","url":"https://bugzilla.suse.com/789988"},{"type":"REPORT","url":"https://bugzilla.suse.com/792476"},{"type":"REPORT","url":"https://bugzilla.suse.com/793927"},{"type":"REPORT","url":"https://bugzilla.suse.com/794316"},{"type":"REPORT","url":"https://bugzilla.suse.com/797014"},{"type":"REPORT","url":"https://bugzilla.suse.com/797031"},{"type":"REPORT","url":"https://bugzilla.suse.com/797523"},{"type":"REPORT","url":"https://bugzilla.suse.com/798188"},{"type":"REPORT","url":"https://bugzilla.suse.com/799694"},{"type":"REPORT","url":"https://bugzilla.suse.com/800156"},{"type":"REPORT","url":"https://bugzilla.suse.com/800275"},{"type":"REPORT","url":"https://bugzilla.suse.com/802690"},{"type":"REPORT","url":"https://bugzilla.suse.com/805094"},{"type":"REPORT","url":"https://bugzilla.suse.com/806736"},{"type":"REPORT","url":"https://bugzilla.suse.com/910441"},{"type":"REPORT","url":"https://bugzilla.suse.com/927967"},{"type":"REPORT","url":"https://bugzilla.suse.com/929339"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5510"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5511"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5512"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5513"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5514"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5515"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-5634"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2012-6075"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2013-0153"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-3340"},{"type":"WEB","url":"https://www.suse.com/security/cve/CVE-2015-3456"}],"related":["CVE-2012-5510","CVE-2012-5511","CVE-2012-5512","CVE-2012-5513","CVE-2012-5514","CVE-2012-5515","CVE-2012-5634","CVE-2012-6075","CVE-2013-0153","CVE-2015-3340","CVE-2015-3456"],"summary":"Security update for Xen","upstream":["CVE-2012-5510","CVE-2012-5511","CVE-2012-5512","CVE-2012-5513","CVE-2012-5514","CVE-2012-5515","CVE-2012-5634","CVE-2012-6075","CVE-2013-0153","CVE-2015-3340","CVE-2015-3456"]}