Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 600382 (CVE-2016-9377, CVE-2016-9378, CVE-2016-9379, CVE-2016-9380, CVE-2016-9381, CVE-2016-9382, CVE-2016-9383, CVE-2016-9384, CVE-2016-9385, CVE-2016-9386, XSA-191, XSA-192, XSA-193, XSA-194, XSA-195, XSA-196, XSA-197, XSA-198) - <app-emulation/xen-4.6.4-r1: Multiple vulnerabilities (XSA-{191-198})
Summary: <app-emulation/xen-4.6.4-r1: Multiple vulnerabilities (XSA-{191-198})
Status: RESOLVED FIXED
Alias: CVE-2016-9377, CVE-2016-9378, CVE-2016-9379, CVE-2016-9380, CVE-2016-9381, CVE-2016-9382, CVE-2016-9383, CVE-2016-9384, CVE-2016-9385, CVE-2016-9386, XSA-191, XSA-192, XSA-193, XSA-194, XSA-195, XSA-196, XSA-197, XSA-198
Product: Gentoo Security
Classification: Unclassified
Component: Vulnerabilities (show other bugs)
Hardware: All Linux
: Normal normal
Assignee: Gentoo Security
URL:
Whiteboard: B1 [glsa cve]
Keywords:
Depends on:
Blocks:
 
Reported: 2016-11-21 09:48 UTC by Aaron Bauman (RETIRED)
Modified: 2016-12-31 16:17 UTC (History)
1 user (show)

See Also:
Package list:
Runtime testing required: ---

Attachments
Add an attachment (proposed patch, testcase, etc.)

Note You need to log in before you can comment on or make changes to this bug.
Description Aaron Bauman (RETIRED) gentoo-dev 2016-11-21 09:48:03 UTC 
Details inbound...
Comment 1 Aaron Bauman (RETIRED) gentoo-dev 2016-11-21 09:56:01 UTC 
dlan has all patches staged and ready to push once the embargo is lifted.  Bug contains highest severity rating.
Comment 2 Yixun Lan archtester gentoo-dev 2016-11-22 12:49:32 UTC 
fixed at version:
app-emulation/xen-tools-4.6.4-r1
app-emulation/xen-tools-4.7.1-r1

app-emulation/xen-4.6.4-r1
app-emulation/xen-4.7.1-r1

https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=82b8b15c1a208e5ddf328b45379485ce05a8a42a
https://gitweb.gentoo.org/repo/gentoo.git/commit/?id=26d6129e0ba6eb72b12ec47528c8bcf5a108707a
Comment 3 Yixun Lan archtester gentoo-dev 2016-11-22 13:01:36 UTC 
Arches, please test and mark stable:
=app-emulation/xen-4.6.4-r1
Target keyword only: "amd64"

=app-emulation/xen-pvgrub-4.6.4
=app-emulation/xen-tools-4.6.4-r1
Target keywords: "amd64 x86"
Comment 4 Agostino Sarubbo gentoo-dev 2016-11-26 10:37:20 UTC 
amd64 stable
Comment 5 Agostino Sarubbo gentoo-dev 2016-11-26 10:45:02 UTC 
x86 stable.

Maintainer(s), please cleanup.
Security, please add it to the existing request, or file a new one.
Comment 7 GLSAMaker/CVETool Bot gentoo-dev 2016-12-31 16:17:34 UTC 
This issue was resolved and addressed in
 GLSA 201612-56 at https://security.gentoo.org/glsa/201612-56
by GLSA coordinator Thomas Deutschmann (whissi).