Description
xen was updated to fix the following security issues:
* CVE-2015-5165: QEMU leak of uninitialized heap memory in rtl8139 device
model (bsc#939712, XSA-140)
* CVE-2015-5166: Use after free in QEMU/Xen block unplug protocol
(bsc#939709, XSA-139)
* CVE-2015-2751: Certain domctl operations could have be used to lock up
the host (bsc#922709, XSA-127)
* CVE-2015-3259: xl command line config handling stack overflow
(bsc#935634, XSA-137)
* CVE-2015-4164: DoS through iret hypercall handler (bsc#932996, XSA-136)
* CVE-2015-5154: Host code execution via IDE subsystem CD-ROM (bsc#938344)