Bug 37956

Summary:	xen: Multiple issues (3.2)
Product:	UCS	Reporter:	Moritz Muehlenhoff <jmm>
Component:	Security updates	Assignee:	Moritz Muehlenhoff <jmm>
Status:	CLOSED FIXED	QA Contact:	Janek Walkenhorst <walkenhorst>
Severity:	normal
Priority:	P5
Version:	UCS 3.2
Target Milestone:	UCS 3.2-5-errata
Hardware:	Other
OS:	Linux
What kind of report is it?:	---	What type of bug is this?:	---
Who will be affected by this bug?:	---	How will those affected feel about the bug?:	---
User Pain:		Enterprise Customer affected?:
School Customer affected?:		ISV affected?:
Waiting Support:		Flags outvoted (downgraded) after PO Review:
Ticket number:		Bug group (optional):
Max CVSS v3 score:

Description Moritz Muehlenhoff

2015-03-06 12:30:08 CET

Information leak through version information hypercall (CVE-2015-2045)
Information leak via internal x86 system device emulation (CVE-2015-2044)

Comment 1 Moritz Muehlenhoff

2015-03-11 07:27:17 CET

Hypervisor memory corruption due to x86 emulator flaw (CVE-2015-2151)

Comment 2 Moritz Muehlenhoff

2015-03-11 11:27:49 CET

fixed packages have been built. Tests with a UCS instance and a Windows 7 instance were fine.

YAML: 2015-03-11-xen-4.1.yaml

Comment 3 Janek Walkenhorst

2015-03-11 13:47:01 CET

Advisory: OK
Tests (amd64): OK

Comment 4 Janek Walkenhorst

2015-03-11 17:06:49 CET

<http://errata.univention.de/ucs/3.2/294.html>