| Errata ID | 274 | 
|---|---|
| Date | 2015-01-21 | 
| Source package | xen-4.1 | 
| Fixed in version | 4.1.3-18.44.201412051509 | 
| Description | This update fixes the following security issues: - Missing privilege level checks in x86 emulation of far branches (CVE-2014-8595) - Insufficient restrictions on certain MMU update hypercalls (CVE-2014-8594) - Page reference leak in MMU_MACHPHYS_UPDATE handling (CVE-2014-9030) - Insufficient bounding of "REP MOVS" to MMIO emulated inside the hypervisor allows denial of service (CVE-2014-8867) - Excessive checking in compatibility mode hypercall argument translation allows denial of service (CVE-2014-8866) This update addresses the following issues: - Fix decoding of hexadecimal escaped characters in description.  | 
				
| Additional notes | |
| CVE ID | CVE-2014-8595 CVE-2014-8594 CVE-2014-9030 CVE-2014-8867 CVE-2014-8866  | 
  
| UCS Bug number | #36872 #36098  | 
  
