Synopsis

Important: xen security update

Type/Severity

Security Advisory: Important

Topic

Updated xen packages that fix one security issue are now available for Red
Hat Enterprise Linux 5.

Red Hat Product Security has rated this update as having Important security
impact. A Common Vulnerability Scoring System (CVSS) base score, which
gives a detailed severity rating, is available from the CVE link in the
References section.

Description

The xen packages contain administration tools and the xend service for
managing the kernel-xen kernel for virtualization on Red Hat Enterprise
Linux.

A heap buffer overflow flaw was found in the way QEMU's NE2000 NIC
emulation implementation handled certain packets received over the network.
A privileged user inside a guest could use this flaw to crash the QEMU
instance (denial of service) or potentially execute arbitrary code on the
host. (CVE-2015-5279)

Red Hat would like to thank Qinghao Tang of QIHU 360 Inc. for reporting
this issue.

All xen users are advised to upgrade to these updated packages, which
contain a backported patch to correct this issue. After installing the
updated packages, all running fully-virtualized guests must be restarted
for this update to take effect.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 5 x86_64
• Red Hat Enterprise Linux Server 5 ia64
• Red Hat Enterprise Linux Server 5 i386
• Red Hat Enterprise Linux Workstation 5 x86_64
• Red Hat Enterprise Linux Workstation 5 i386
• Red Hat Enterprise Linux Desktop 5 x86_64
• Red Hat Enterprise Linux Desktop 5 i386
• Red Hat Enterprise Linux Server from RHUI 5 x86_64
• Red Hat Enterprise Linux Server from RHUI 5 i386

Fixes

• BZ - 1256672 - CVE-2015-5279 qemu: Heap overflow vulnerability in ne2000_receive() function

CVEs

• CVE-2015-5279

References

• https://access.redhat.com/security/updates/classification/#important

Red Hat Enterprise Linux Server 5

SRPM
xen-3.0.3-147.el5_11.src.rpm	SHA-256: 5ead9a8c177cadcd5d45087a4b2a131e815d7f9d2721e3a369cc4204c7bd303d
x86_64
xen-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 7b603e780f61044fcb4bdf28a8b29106107670292e3cf4f128f73a7859ee41fd
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-devel-3.0.3-147.el5_11.i386.rpm	SHA-256: 9bd984088f2de220108d7d3f1af45e22d1ed282c75e40b91f6114d0cf69fefa8
xen-devel-3.0.3-147.el5_11.x86_64.rpm	SHA-256: d6b30d99f4d044e2af33bafe524d2e25b775862c403043d6246aabe88860fb44
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812
xen-libs-3.0.3-147.el5_11.x86_64.rpm	SHA-256: df88d9504059ea8db596fea9c3341455adb8e93cbedcb3b1c046ba32c5cfb417
ia64
xen-3.0.3-147.el5_11.ia64.rpm	SHA-256: 3fc95f59b1ae07aa1b53b0df8702849db82d41c3b135741ced4b3e5c47c6c2ee
xen-debuginfo-3.0.3-147.el5_11.ia64.rpm	SHA-256: 3b31b7d3c41730d8f1b72ed80d7e86294064dc441adc8106a13d8d9cae3154fb
xen-debuginfo-3.0.3-147.el5_11.ia64.rpm	SHA-256: 3b31b7d3c41730d8f1b72ed80d7e86294064dc441adc8106a13d8d9cae3154fb
xen-devel-3.0.3-147.el5_11.ia64.rpm	SHA-256: eebdbd664e1adc481c91f8009baf36ba76e783306c0c0c7e3a0afbb05efdc665
xen-libs-3.0.3-147.el5_11.ia64.rpm	SHA-256: 9753c6f3a0a19a8398e8c30deb1c8c9635f7c83fd7f03e09575408cd68da78f6
i386
xen-3.0.3-147.el5_11.i386.rpm	SHA-256: b5ce0e2acb82683aba37822768ee1ae8ee42dc8f0596604bc307d1675c49a658
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-devel-3.0.3-147.el5_11.i386.rpm	SHA-256: 9bd984088f2de220108d7d3f1af45e22d1ed282c75e40b91f6114d0cf69fefa8
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812

Red Hat Enterprise Linux Workstation 5

SRPM
xen-3.0.3-147.el5_11.src.rpm	SHA-256: 5ead9a8c177cadcd5d45087a4b2a131e815d7f9d2721e3a369cc4204c7bd303d
x86_64
xen-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 7b603e780f61044fcb4bdf28a8b29106107670292e3cf4f128f73a7859ee41fd
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-devel-3.0.3-147.el5_11.i386.rpm	SHA-256: 9bd984088f2de220108d7d3f1af45e22d1ed282c75e40b91f6114d0cf69fefa8
xen-devel-3.0.3-147.el5_11.x86_64.rpm	SHA-256: d6b30d99f4d044e2af33bafe524d2e25b775862c403043d6246aabe88860fb44
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812
xen-libs-3.0.3-147.el5_11.x86_64.rpm	SHA-256: df88d9504059ea8db596fea9c3341455adb8e93cbedcb3b1c046ba32c5cfb417
i386
xen-3.0.3-147.el5_11.i386.rpm	SHA-256: b5ce0e2acb82683aba37822768ee1ae8ee42dc8f0596604bc307d1675c49a658
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-devel-3.0.3-147.el5_11.i386.rpm	SHA-256: 9bd984088f2de220108d7d3f1af45e22d1ed282c75e40b91f6114d0cf69fefa8
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812

Red Hat Enterprise Linux Desktop 5

SRPM
xen-3.0.3-147.el5_11.src.rpm	SHA-256: 5ead9a8c177cadcd5d45087a4b2a131e815d7f9d2721e3a369cc4204c7bd303d
x86_64
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812
xen-libs-3.0.3-147.el5_11.x86_64.rpm	SHA-256: df88d9504059ea8db596fea9c3341455adb8e93cbedcb3b1c046ba32c5cfb417
i386
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812

Red Hat Enterprise Linux Server from RHUI 5

SRPM
xen-3.0.3-147.el5_11.src.rpm	SHA-256: 5ead9a8c177cadcd5d45087a4b2a131e815d7f9d2721e3a369cc4204c7bd303d
x86_64
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-debuginfo-3.0.3-147.el5_11.x86_64.rpm	SHA-256: 37253d421d821b183547f7991ad0561e171d1028df569de6210c7d1dbfdb8dc4
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812
xen-libs-3.0.3-147.el5_11.x86_64.rpm	SHA-256: df88d9504059ea8db596fea9c3341455adb8e93cbedcb3b1c046ba32c5cfb417
i386
xen-debuginfo-3.0.3-147.el5_11.i386.rpm	SHA-256: 55267e635b636414e30413762b1e9a40b172625c098b25dacdfd34317abf61e5
xen-libs-3.0.3-147.el5_11.i386.rpm	SHA-256: dc4d4172b4312da6d309e8712f8b719d669668b60d16b319eecdb4794c266812