[SECURITY] [DSA 2636-2] xen regression update

2013-03-0311:28:23

lists.debian.org

6.1 Medium

CVSS2

Attack Vector

ADJACENT_NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

COMPLETE

AV:A/AC:L/Au:N/C:N/I:N/A:C

6.5 Medium

AI Score

Confidence

Low

0.002 Low

EPSS

Percentile

62.2%

JSON

Debian Security Advisory DSA-2636-2 [email protected]
http://www.debian.org/security/ Moritz Muehlenhoff
March 03, 2013 http://www.debian.org/security/faq

Package : xen
Vulnerability : several
Problem type : remote
Debian-specific: no
CVE ID : CVE-2012-4544 CVE-2012-5511 CVE-2012-5634 CVE-2013-0153

A regression in combination with pygrub has been discovered. For the
stable distribution (squeeze), these problems have been fixed in version
4.0.1-5.8.

We recommend that you upgrade your xen packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: http://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian6amd64xenstore-utils< 4.0.1-5.7xenstore-utils_4.0.1-5.7_amd64.deb
Debian6amd64libxenstore3.0< 4.0.1-5.7libxenstore3.0_4.0.1-5.7_amd64.deb
Debian6i386xen-hypervisor-4.0-amd64< 4.0.1-5.7xen-hypervisor-4.0-amd64_4.0.1-5.7_i386.deb
Debian6i386xenstore-utils< 4.0.1-5.7xenstore-utils_4.0.1-5.7_i386.deb
Debian6i386xen-hypervisor-4.0-i386< 4.0.1-5.7xen-hypervisor-4.0-i386_4.0.1-5.7_i386.deb
Debian6amd64xen-utils-4.0< 4.0.1-5.7xen-utils-4.0_4.0.1-5.7_amd64.deb
Debian6amd64xen-hypervisor-4.0-amd64< 4.0.1-5.7xen-hypervisor-4.0-amd64_4.0.1-5.7_amd64.deb
Debian6amd64libxen-dev< 4.0.1-5.7libxen-dev_4.0.1-5.7_amd64.deb
Debian6i386libxen-dev< 4.0.1-5.7libxen-dev_4.0.1-5.7_i386.deb
Debian6allxen< 4.0.1-5.7xen_4.0.1-5.7_all.deb

OS	Version	Architecture	Package	Version	Filename
Debian	6	amd64	xenstore-utils	< 4.0.1-5.7	xenstore-utils_4.0.1-5.7_amd64.deb
Debian	6	amd64	libxenstore3.0	< 4.0.1-5.7	libxenstore3.0_4.0.1-5.7_amd64.deb
Debian	6	i386	xen-hypervisor-4.0-amd64	< 4.0.1-5.7	xen-hypervisor-4.0-amd64_4.0.1-5.7_i386.deb
Debian	6	i386	xenstore-utils	< 4.0.1-5.7	xenstore-utils_4.0.1-5.7_i386.deb
Debian	6	i386	xen-hypervisor-4.0-i386	< 4.0.1-5.7	xen-hypervisor-4.0-i386_4.0.1-5.7_i386.deb
Debian	6	amd64	xen-utils-4.0	< 4.0.1-5.7	xen-utils-4.0_4.0.1-5.7_amd64.deb
Debian	6	amd64	xen-hypervisor-4.0-amd64	< 4.0.1-5.7	xen-hypervisor-4.0-amd64_4.0.1-5.7_amd64.deb
Debian	6	amd64	libxen-dev	< 4.0.1-5.7	libxen-dev_4.0.1-5.7_amd64.deb
Debian	6	i386	libxen-dev	< 4.0.1-5.7	libxen-dev_4.0.1-5.7_i386.deb
Debian	6	all	xen	< 4.0.1-5.7	xen_4.0.1-5.7_all.deb