Security update for Xen

Announcement ID:	SUSE-SU-2015:0613-1
Rating:	important
References:	bsc#861318 bsc#882089 bsc#895528 bsc#901488 bsc#903680 bsc#904255 bsc#906996 bsc#910254 bsc#910681 bsc#912011 bsc#918995 bsc#918998 bsc#919098 bsc#919464 bsc#919663
Cross-References:	CVE-2014-3615 CVE-2014-9065 CVE-2014-9066 CVE-2015-0361 CVE-2015-2044 CVE-2015-2045 CVE-2015-2151 CVE-2015-2152
CVSS scores:
Affected Products:	SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server for SAP Applications 12 SUSE Linux Enterprise Software Development Kit 12

An update that solves eight vulnerabilities and has seven security fixes can now be installed.

Description:

The XEN hypervisor received updates to fix various security issues and bugs.

The following security issues were fixed: - CVE-2015-2151: XSA-123: A hypervisor memory corruption due to x86 emulator flaw. - CVE-2015-2045: XSA-122: Information leak through version information hypercall. - CVE-2015-2044: XSA-121: Information leak via internal x86 system device emulation. - CVE-2015-2152: XSA-119: HVM qemu was unexpectedly enabling emulated VGA graphics backends. - CVE-2014-3615: Information leakage when guest sets high graphics resolution. - CVE-2015-0361: XSA-116: A xen crash due to use after free on hvm guest teardown. - CVE-2014-9065, CVE-2014-9066: XSA-114: xen: p2m lock starvation.

Also the following bugs were fixed: - bnc#919098 - XEN blktap device intermittently fails to connect - bnc#882089 - Windows 2012 R2 fails to boot up with greater than 60 vcpus - bnc#903680 - Problems with detecting free loop devices on Xen guest startup - bnc#861318 - xentop reports "Found interface vif101.0 but domain 101 does not exist." - Update seabios to rel-1.7.3.1 which is the correct version for Xen 4.4 - Enhancement to virsh/libvirtd "send-key" command The xen side small fix. (FATE#317240) - bnc#901488 - Intel ixgbe driver assigns rx/tx queues per core resulting in irq problems on servers with a large amount of CPU cores - bnc#910254 - SLES11 SP3 Xen VT-d igb NIC doesn't work - Add domain_migrate_constraints_set API to Xend's http interface (FATE#317239) - Restore missing fixes from block-dmmd script - bnc#904255 - XEN boot hangs in early boot on UEFI system - bsc#912011 - high ping latency after upgrade to latest SLES11SP3 on xen Dom0 - Fix missing banner by restoring the figlet program.

Special Instructions and Notes:

• Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Desktop 12
  zypper in -t patch SUSE-SLE-DESKTOP-12-2015-147=1
• SUSE Linux Enterprise Software Development Kit 12
  zypper in -t patch SUSE-SLE-SDK-12-2015-147=1
• SUSE Linux Enterprise Server 12
  zypper in -t patch SUSE-SLE-SERVER-12-2015-147=1
• SUSE Linux Enterprise Server for SAP Applications 12
  zypper in -t patch SUSE-SLE-SERVER-12-2015-147=1

Package List:

• SUSE Linux Enterprise Desktop 12 (x86_64)
  • xen-4.4.1_10-9.1
  • xen-kmp-default-4.4.1_10_k3.12.36_38-9.1
  • xen-libs-debuginfo-32bit-4.4.1_10-9.1
  • xen-libs-debuginfo-4.4.1_10-9.1
  • xen-libs-4.4.1_10-9.1
  • xen-kmp-default-debuginfo-4.4.1_10_k3.12.36_38-9.1
  • xen-debugsource-4.4.1_10-9.1
  • xen-libs-32bit-4.4.1_10-9.1
• SUSE Linux Enterprise Software Development Kit 12 (x86_64)
  • xen-debugsource-4.4.1_10-9.1
  • xen-devel-4.4.1_10-9.1
• SUSE Linux Enterprise Server 12 (x86_64)
  • xen-doc-html-4.4.1_10-9.1
  • xen-tools-4.4.1_10-9.1
  • xen-tools-domU-4.4.1_10-9.1
  • xen-4.4.1_10-9.1
  • xen-kmp-default-4.4.1_10_k3.12.36_38-9.1
  • xen-libs-debuginfo-32bit-4.4.1_10-9.1
  • xen-libs-debuginfo-4.4.1_10-9.1
  • xen-tools-domU-debuginfo-4.4.1_10-9.1
  • xen-libs-4.4.1_10-9.1
  • xen-tools-debuginfo-4.4.1_10-9.1
  • xen-kmp-default-debuginfo-4.4.1_10_k3.12.36_38-9.1
  • xen-debugsource-4.4.1_10-9.1
  • xen-libs-32bit-4.4.1_10-9.1
• SUSE Linux Enterprise Server for SAP Applications 12 (x86_64)
  • xen-doc-html-4.4.1_10-9.1
  • xen-tools-4.4.1_10-9.1
  • xen-tools-domU-4.4.1_10-9.1
  • xen-4.4.1_10-9.1
  • xen-kmp-default-4.4.1_10_k3.12.36_38-9.1
  • xen-libs-debuginfo-32bit-4.4.1_10-9.1
  • xen-libs-debuginfo-4.4.1_10-9.1
  • xen-tools-domU-debuginfo-4.4.1_10-9.1
  • xen-libs-4.4.1_10-9.1
  • xen-tools-debuginfo-4.4.1_10-9.1
  • xen-kmp-default-debuginfo-4.4.1_10_k3.12.36_38-9.1
  • xen-debugsource-4.4.1_10-9.1
  • xen-libs-32bit-4.4.1_10-9.1

References:

• https://www.suse.com/security/cve/CVE-2014-3615.html
• https://www.suse.com/security/cve/CVE-2014-9065.html
• https://www.suse.com/security/cve/CVE-2014-9066.html
• https://www.suse.com/security/cve/CVE-2015-0361.html
• https://www.suse.com/security/cve/CVE-2015-2044.html
• https://www.suse.com/security/cve/CVE-2015-2045.html
• https://www.suse.com/security/cve/CVE-2015-2151.html
• https://www.suse.com/security/cve/CVE-2015-2152.html
• https://bugzilla.suse.com/show_bug.cgi?id=861318
• https://bugzilla.suse.com/show_bug.cgi?id=882089
• https://bugzilla.suse.com/show_bug.cgi?id=895528
• https://bugzilla.suse.com/show_bug.cgi?id=901488
• https://bugzilla.suse.com/show_bug.cgi?id=903680
• https://bugzilla.suse.com/show_bug.cgi?id=904255
• https://bugzilla.suse.com/show_bug.cgi?id=906996
• https://bugzilla.suse.com/show_bug.cgi?id=910254
• https://bugzilla.suse.com/show_bug.cgi?id=910681
• https://bugzilla.suse.com/show_bug.cgi?id=912011
• https://bugzilla.suse.com/show_bug.cgi?id=918995
• https://bugzilla.suse.com/show_bug.cgi?id=918998
• https://bugzilla.suse.com/show_bug.cgi?id=919098
• https://bugzilla.suse.com/show_bug.cgi?id=919464
• https://bugzilla.suse.com/show_bug.cgi?id=919663