Bug 757126 – <app-emulation/xen-{4.13.2-r2,4.14.0-r6}: stack corruption from XSA-346 change

• Status: RESOLVED FIXED
• Product: Gentoo Security

[Description Tomáš Mózes 2020-11-27 10:05:26 UTC]

https://xenbits.xen.org/xsa/advisory-355.html

[Comment 1 Larry the Git Cow 2020-11-27 16:55:55 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=d529fbaa79ab4069951c33f7f3ec43dd5567fc84

commit d529fbaa79ab4069951c33f7f3ec43dd5567fc84
Author:     Tomáš Mózes <[e-mail]>
AuthorDate: 2020-11-27 10:21:48 +0000
Commit:     Thomas Deutschmann <[e-mail]>
CommitDate: 2020-11-27 16:55:48 +0000

    app-emulation/xen: add upstream patch for XSA-355
    
    Bug: https://bugs.gentoo.org/757126
    Signed-off-by: Tomáš Mózes <[e-mail]>
    Signed-off-by: Thomas Deutschmann <[e-mail]>

 app-emulation/xen/Manifest             |   2 +
 app-emulation/xen/xen-4.13.2-r2.ebuild | 165 +++++++++++++++++++++++++++++++++
 app-emulation/xen/xen-4.14.0-r6.ebuild | 165 +++++++++++++++++++++++++++++++++
 3 files changed, 332 insertions(+)

[Comment 2 John Helmert III 2020-11-27 17:55:26 UTC]

Please proceed with stabilization when ready.

[Comment 3 Tomáš Mózes 2020-12-03 05:51:26 UTC]

Please proceed with stabilization.

[Comment 4 Sam James 2020-12-03 07:59:41 UTC]

amd64 done

all arches done

[Comment 5 Sam James 2020-12-03 08:11:09 UTC]

Please cleanup.

[Comment 6 Larry the Git Cow 2020-12-03 20:34:30 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=836f37bf62fe8f8a364224703fd61437215d3d82

commit 836f37bf62fe8f8a364224703fd61437215d3d82
Author:     Tomáš Mózes <[e-mail]>
AuthorDate: 2020-12-03 10:53:41 +0000
Commit:     Thomas Deutschmann <[e-mail]>
CommitDate: 2020-12-03 20:34:22 +0000

    app-emulation/xen: drop vulnerable
    
    Bug: https://bugs.gentoo.org/757126
    Signed-off-by: Tomáš Mózes <[e-mail]>
    Closes: https://github.com/gentoo/gentoo/pull/18485
    Signed-off-by: Thomas Deutschmann <[e-mail]>

 app-emulation/xen/Manifest             |   1 -
 app-emulation/xen/xen-4.13.2-r1.ebuild | 165 ---------------------------------
 2 files changed, 166 deletions(-)

[addCollapseLink(7, 1, 'Toggle comment display'); Comment 7 NATTkA bot 2021-02-04 22:29:03 UTC Comment hidden (obsolete)]

Unable to check for sanity:

> no match for package: app-emulation/xen-4.13.2-r2

[Comment 8 NATTkA bot 2021-04-01 20:12:13 UTC]

Unable to check for sanity:

> no match for package: app-emulation/xen-4.13.2-r2

[Comment 9 Larry the Git Cow 2024-02-04 07:17:09 UTC]

The bug has been referenced in the following commit(s):

https://gitweb.gentoo.org/data/glsa.git/commit/?id=3f8db3fdbc2235dee30f5c1ea206584ecabbe484

commit 3f8db3fdbc2235dee30f5c1ea206584ecabbe484
Author:     GLSAMaker <[e-mail]>
AuthorDate: 2024-02-04 07:16:20 +0000
Commit:     Hans de Graaff <[e-mail]>
CommitDate: 2024-02-04 07:16:59 +0000

    [ GLSA 202402-07 ] Xen: Multiple Vulnerabilities
    
    Bug: https://bugs.gentoo.org/754105
    Bug: https://bugs.gentoo.org/757126
    Bug: https://bugs.gentoo.org/826998
    Bug: https://bugs.gentoo.org/837575
    Bug: https://bugs.gentoo.org/858122
    Bug: https://bugs.gentoo.org/876790
    Bug: https://bugs.gentoo.org/879031
    Bug: https://bugs.gentoo.org/903624
    Bug: https://bugs.gentoo.org/905389
    Bug: https://bugs.gentoo.org/915970
    Signed-off-by: GLSAMaker <[e-mail]>
    Signed-off-by: Hans de Graaff <[e-mail]>

 glsa-202402-07.xml | 112 +++++++++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 112 insertions(+)