[ GLSA 201604-03 ] Xen

[GLSA]

Gentoo Linux Security Advisory

Title: Xen: Multiple vulnerabilities (GLSA 201604-03)
Severity: normal
Exploitable: local
Date: April 05, 2016
Bug(s): #445254, #513832, #547202, #549200, #549950, #550658, #553664, #553718, #555532, #556304, #561110, #564472, #564932, #566798, #566838, #566842, #567962, #571552, #571556, #574012
ID: 201604-03

Synopsis

Multiple vulnerabilities have been found in Xen, the worst of which
cause a Denial of Service.


Background

Xen is a bare-metal hypervisor.

Affected Packages

Package: app-emulation/xen
Vulnerable: < 4.6.0-r9
Unaffected: >= 4.6.0-r9
Unaffected: >= 4.5.2-r5 < 4.5.3
Architectures: All supported architectures

Package: app-emulation/xen-pvgrub
Vulnerable: < 4.6.0
Architectures: All supported architectures

Package: app-emulation/xen-tools
Vulnerable: < 4.6.0-r9
Unaffected: >= 4.6.0-r9
Unaffected: >= 4.5.2-r5 < 4.5.3
Architectures: All supported architectures

Package: app-emulation/pvgrub
Unaffected: >= 4.6.0
Unaffected: >= 4.5.2 < 4.5.3
Architectures: All supported architectures


Description

Multiple vulnerabilities have been discovered in Xen. Please review the
CVE identifiers referenced below for details.


Impact

A local attacker could possibly cause a Denial of Service condition or
obtain sensitive information.


Workaround

There is no known workaround at this time.

Resolution

All Xen 4.5 users should upgrade to the latest version: