Summary: | <app-emulation/xen-4.7.3: page transfer may allow PV guest to elevate privilege | ||
---|---|---|---|
Product: | Gentoo Security | Reporter: | Christopher Díaz Riveros (RETIRED) <chrisadr> |
Component: | Vulnerabilities | Assignee: | Gentoo Security <security> |
Status: | RESOLVED FIXED | ||
Severity: | major | CC: | xen |
Priority: | Normal | ||
Version: | unspecified | ||
Hardware: | All | ||
OS: | Linux | ||
URL: | https://xenbits.xen.org/xsa/advisory-217.html | ||
Whiteboard: | B1 [glsa cve] | ||
Package list: | Runtime testing required: | --- | |
Bug Depends on: | 624128 | ||
Bug Blocks: |
Description
Christopher Díaz Riveros (RETIRED)
2017-07-07 14:46:11 UTC
commit 7a8fc554850ee501e1ad705b4154874adf102947 Author: Yixun Lan <dlan@gentoo.org> Date: Wed Jul 12 15:15:52 2017 +0800 app-emulation/xen: security bump fix XSA-217,218,219,220,221,222,223,224,225 Gentoo-Bug: 624112,624114,624116,624118,624120,624122,624124,624126,624130 Package-Manager: Portage-2.3.6, Repoman-2.3.2 :100644 100644 6534404116c... 49df2654a33... M app-emulation/xen/Manifest :000000 100644 00000000000... f66bd1b70f8... A app-emulation/xen/xen-4.7.3.ebuild :000000 100644 00000000000... bf73951bc39... A app-emulation/xen/xen-4.8.1-r2.ebuild Thank you Yixun Lan Arches please let us know when all is stable New GLSA Request filed. Maintainer(s), please drop the vulnerable version(s). This issue was resolved and addressed in GLSA 201710-17 at https://security.gentoo.org/glsa/201710-17 by GLSA coordinator Aaron Bauman (b-man). |