Errata overview
Errata ID 274
Date 2015-01-21
Source package xen-4.1
Fixed in version 4.1.3-18.44.201412051509
Description
This update fixes the following security issues:
- Missing privilege level checks in x86 emulation of far branches
  (CVE-2014-8595)
- Insufficient restrictions on certain MMU update hypercalls (CVE-2014-8594)
- Page reference leak in MMU_MACHPHYS_UPDATE handling (CVE-2014-9030)
- Insufficient bounding of "REP MOVS" to MMIO emulated inside the hypervisor
  allows denial of service (CVE-2014-8867)
- Excessive checking in compatibility mode hypercall argument translation
  allows denial of service (CVE-2014-8866)
This update addresses the following issues:
- Fix decoding of hexadecimal escaped characters in description.
Additional notes
CVE ID CVE-2014-8595
CVE-2014-8594
CVE-2014-9030
CVE-2014-8867
CVE-2014-8866
UCS Bug number #36872
#36098