Hello community,

here is the log from the commit of package patchinfo.2310 for 
openSUSE:13.1:Update checked in at 2013-12-16 10:51:50
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:13.1:Update/patchinfo.2310 (Old)
 and      /work/SRC/openSUSE:13.1:Update/.patchinfo.2310.new (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Package is "patchinfo.2310"

Changes:
--------
New Changes file:

NO CHANGES FILE!!!

New:
----
  _patchinfo

++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++

Other differences:
------------------
++++++ _patchinfo ++++++
<patchinfo>
  <issue id="851386" tracker="bnc">VUL-0: CVE-2013-6375: xen: XSA-78: 
Insufficient TLB flushing in VT-d (iommu) code</issue>
  <issue id="845520" tracker="bnc">VUL-0: CVE-2013-4416: XSA-72: xen: ocaml 
xenstored mishandles oversized message replies</issue>
  <issue id="851749" tracker="bnc">Xen service file does not call xend 
properly</issue>
  <issue id="849668" tracker="bnc">VUL-0: CVE-2013-4554: EMBARGOED: xen: 
XSA-76: Hypercalls exposed to privilege rings 1 and 2 of HVM guests</issue>
  <issue id="848657" tracker="bnc">VUL-0: xen: CVE-2013-4494: XSA-73: Lock 
order reversal between page allocation and grant table locks</issue>
  <issue id="849665" tracker="bnc">VUL-0: CVE-2013-4551: xen: XSA-75: Host 
crash due to guest VMX instruction execution</issue>
  <issue id="849667" tracker="bnc">VUL-0: CVE-2013-4553: EMBARGOED: xen: 
XSA-74: Lock order reversal between page_alloc_lock and mm_rwlock</issue>
  <issue id="CVE-2013-4416" tracker="cve" />
  <issue id="CVE-2013-4494" tracker="cve" />
  <issue id="CVE-2013-4554" tracker="cve" />
  <issue id="CVE-2013-4553" tracker="cve" />
  <issue id="CVE-2013-4551" tracker="cve" />
  <category>security</category>
  <rating>moderate</rating>
  <packager>charlesa</packager>
  <description>
Xen was updated to 4.3.1 and also to fix various security issues and bugs:

- bnc#851749 - Xen service file does not call xend properly
  xend.service 

- Add missing requires to pciutils package for xend-tools

- bnc#851386 - xen: XSA-78: Insufficient TLB flushing in VT-d (iommu) code

- Make -devel package depend on libuuid-devel, since libxl.h
  includes uuid.h

- bnc#849667 - CVE-2013-4553: xen: XSA-74: Lock order reversal between
  page_alloc_lock and mm_rwlock

- bnc#849665 - CVE-2013-4551: xen: XSA-75: Host crash due to guest VMX 
instruction execution

- bnc#849668 - CVE-2013-4554: xen: XSA-76: Hypercalls exposed to privilege
  rings 1 and 2 of HVM guests

- bnc#848657 - xen: CVE-2013-4494: XSA-73: Lock order
  reversal between page allocation and grant table locks

- Update to Xen 4.3.1 

- bnc#845520 - CVE-2013-4416: xen: ocaml xenstored
  mishandles oversized message replies
  </description>
  <summary>xen: security and bugfix update</summary>
  <reboot_needed/>
</patchinfo>
-- 
To unsubscribe, e-mail: opensuse-commit+unsubscr...@opensuse.org
For additional commands, e-mail: opensuse-commit+h...@opensuse.org

Reply via email to