-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3262-1 security@xxxxxxxxxx http://www.debian.org/security/ Moritz Muehlenhoff May 18, 2015 http://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : xen CVE ID : CVE-2015-3456 Jason Geffner discovered a buffer overflow in the emulated floppy disk drive, resulting in the potential execution of arbitrary code. This only affects HVM guests. For the oldstable distribution (wheezy), this problem has been fixed in version 4.1.4-3+deb7u6. The stable distribution (jessie) is already fixed through the qemu update provided as DSA-3259-1. We recommend that you upgrade your xen packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIcBAEBAgAGBQJVWlmFAAoJEBDCk7bDfE42kJ8P/19JKf/RGTVTSso/DG4kuc0D weEDWC+6NEya0IsJ99EDfPoela9pTRnJOzbzyD9ifeSwy8L4W3jKueEJV36Cna5a F+AMJ4vbxQE8FHr/IQc60xEgYlPgXuXi7rp16VkPuntdouZ5YDMrO7fky42jvikE IFu0FKvIMMuviGJdW1lsQQCC50+QyRy+mvEg2FPE+r6fdP52PGbDUzhR2mL9xQfN a3zV7iWRc5CeE6gqvl4qBOczrnQqU+ew5H5AkrwMinp5JM/plcLvd9zpLs+qylKj xEiez51vbvao1nFpae1nBeNsVNTE0oEW8JzNep0zGf65Hli8RACpbM/CEvTSZ6GX fYw7Xd0aAn8g5CX4dHr95GoNVOBub6WjeVRIu3S6e5LSbDOnfxxucHDJPDRKov5u umTgCc9xigcb0Ia9SZj4tlqS6AwOM+E6ohtzvoyjjTohcY9GYNfmilTJyVm0XalM qo2RAhwo8ASTQ5g3uMGapAvJ1tDYUjg++Mri6G3KFDgVWyFXRj/z7kg0yhTfj6Xf zIFnoeZ4+yakOw+qwEZz48E2FH7SlsCUsP8UPqSIgmF/vm2/VrK48DDiSylcWUD8 9aS0jFKTxvOmHpJwZClY/RXK46yYwNgK2GeKmlkJhzWJd5XnHBSqWHeFj9oat6Ap x1GH2l1Duos6ppg2Z0BB =DW5p -----END PGP SIGNATURE-----
