Hotfix XS62ESP1028 - For XenServer 6.2.0 Service Pack 1

Hotfix XS62ESP1028 - For XenServer 6.2.0 Service Pack 1
http://support.citrix.com/article/CTX142593

Windows用のXenToolsのアップデート。
ブルースクリーンの時のCrash-Dump用ドライバの修正（そんなのがあるんだね）とか、
前のXenToolsがキレイにUninstallできない問題の修正（まだダメなのね）とか。

Citrix XenServer Multiple Security Updates

Citrix XenServer Multiple Security Updates
http://support.citrix.com/article/CTX201145

Xenの修正の反映。

 CVE-2015-4106 (Medium): Unmediated PCI register access in qemu.
 CVE-2015-4163 (Medium): GNTTABOP_swap_grant_ref operation misbehavior.
 CVE-2015-4164 (Medium): vulnerability in the iret hypercall handler
 CVE-2015-2756 (Low): Unmediated PCI command register access in qemu
 CVE-2015-4103 (Low): Potential unintended writes to host MSI message data field via qemu.
 CVE-2015-4104 (Low): PCI MSI mask bits inadvertently exposed to guests.
 CVE-2015-4105 (Low): Guest triggerable qemu MSI-X pass-through error messages

Hotfix XS65ESP1004- For XenServer 6.5.0 Service Pack 1
https://support.citrix.com/article/CTX142538


Hotfix XS62ESP1027- For XenServer 6.2.0 Service Pack 1
https://support.citrix.com/article/CTX142536

Hotfix XS62ESP1024 - for XenServer 6.2.0 Service Pack 1

Hotfix XS62ESP1024 - for XenServer 6.2.0 Service Pack 1
http://support.citrix.com/article/CTX142496

Kernelを含むアップデート。
Hotfix XS62ESP1009 の件もあるからちょっと様子見したいところ。

PCIパススルー関連の脆弱性

[Xen-users] Xen Security Advisory 128 (CVE-2015-4103) - 
Potential unintended writes to host MSI message data field via qemu
http://lists.xen.org/archives/html/xen-users/2015-06/msg00011.html


[Xen-users] Xen Security Advisory 129 (CVE-2015-4104) - 
PCI MSI mask bits inadvertently exposed to guests
http://lists.xen.org/archives/html/xen-users/2015-06/msg00014.html


[Xen-users] Xen Security Advisory 130 (CVE-2015-4105) - 
Guest triggerable qemu MSI-X pass-through error messages
http://lists.xen.org/archives/html/xen-users/2015-06/msg00012.html

[Xen-users] Xen Security Advisory 131 (CVE-2015-4106) - 
Unmediated PCI register access in qemu
http://lists.xen.org/archives/html/xen-users/2015-06/msg00013.html


共通点：
・GuestからのDoSでHostがCrashする
・PCIパススルーをサポートするXen3.3以上
・HVMのみ。