-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian Security Advisory DSA-3390-1 security@xxxxxxxxxx https://www.debian.org/security/ Salvatore Bonaccorso November 02, 2015 https://www.debian.org/security/faq - ------------------------------------------------------------------------- Package : xen CVE ID : CVE-2015-7835 It was discovered that the code to validate level 2 page table entries is bypassed when certain conditions are satisfied. A malicious PV guest administrator can take advantage of this flaw to gain privileges via a crafted superpage mapping. For the oldstable distribution (wheezy), this problem has been fixed in version 4.1.4-3+deb7u9. For the stable distribution (jessie), this problem has been fixed in version 4.4.1-9+deb8u2. We recommend that you upgrade your xen packages. Further information about Debian Security Advisories, how to apply these updates to your system and frequently asked questions can be found at: https://www.debian.org/security/ Mailing list: debian-security-announce@xxxxxxxxxxxxxxxx -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQIbBAEBCgAGBQJWN6naAAoJEAVMuPMTQ89EJAUP+PTxbDcXdaWsxi1IHoF+JIBs y0IpdchA/L2QWQ57bcG2Uv2Z0fHsFprLNX6WNWz1rOSCXMdwYDDDtecmg4l1oRl2 ozmCg0Zy3KbuG83dBZNKcdAFuOPpccpuxy2uc93z63Xcb9hcmUrrXTtG+jcNvOKN mqWzp33ttqGBljP8EoK/yIy/P1jp8G4o3EoXAplkCQEoICHqCpiAbSU+AnHRxRcN wGcQHOMiBtld/Neu0+NSwzBQvpt2pEmtCPFHysc3+VHrTaYRlEXzhlMNet+klqQe wmrhAZUkW1FuMpcwAjXwQZ4S9kjvEGbsyacefAd6qWBzUhCJx8Lcz/ZvuXvZEmYk Xvu+sEqnWfQwUPefBejbEuC1TLQnYrmOrhBE1CwgoiVJEDiqPJ+Srd8llk5oueur omyJOS/gVQrSeQKaAeOhkCq4PTLUXS8V+BOHLDCQgXqfeS6FXvkKCL5g1dZsCM3W W9AeynQ//rtcJoehhcFxBge4rx/0g4OMrOyxWgXovvchDi3fAYQSIBz+JyjVDJiP VmOyo0eRSlOt2qFMlHtQGbAF44iUW+/aAejSp9Edp99apfbc6umGOhW6httEOoAZ LR68eq24PrJ8RkEyUjvpdHd4DE5T4YBPNPS19wb6Av3m5NQe9ySrVGPGHCmUbres SoSSlICiOGueda089nU= =zS7s -----END PGP SIGNATURE-----
