[SECURITY] [DSA 3519-1] xen security update

2016-03-1721:52:03

lists.debian.org

8.2 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

HIGH

User Interaction

NONE

Scope

CHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.0/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H

5.7 Medium

CVSS2

Access Vector

LOCAL

Access Complexity

LOW

Authentication

SINGLE

Confidentiality Impact

PARTIAL

Integrity Impact

PARTIAL

Availability Impact

COMPLETE

AV:L/AC:L/Au:S/C:P/I:P/A:C

0.001 Low

EPSS

Percentile

28.4%

JSON

Debian Security Advisory DSA-3519-1 [email protected]
https://www.debian.org/security/ Moritz Muehlenhoff
March 17, 2016 https://www.debian.org/security/faq

Package : xen
CVE ID : CVE-2015-8339 CVE-2015-8340 CVE-2015-8341 CVE-2015-8550
CVE-2015-8555 CVE-2016-1570 CVE-2016-1571 CVE-2016-2270
CVE-2016-2271

Multiple security issues have been found in the Xen virtualisation
solution, which may result in denial of service or information disclosure.

The oldstable distribution (wheezy) will be updated in a separate DSA.

For the stable distribution (jessie), these problems have been fixed in
version 4.4.1-9+deb8u4.

For the unstable distribution (sid), these problems will be fixed soon.

We recommend that you upgrade your xen packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]

OSVersionArchitecturePackageVersionFilename
Debian7i386multipath-modules-3.2.0-4-486-di< 3.2.73-2+deb7u2multipath-modules-3.2.0-4-486-di_3.2.73-2+deb7u2_i386.deb
Debian8mipselusb-serial-modules-3.16.0-4-sb1-bcm91250a-di< 3.16.7-ckt20-1+deb8u2usb-serial-modules-3.16.0-4-sb1-bcm91250a-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian8mipselpata-modules-3.16.0-4-loongson-2e-di< 3.16.7-ckt20-1+deb8u2pata-modules-3.16.0-4-loongson-2e-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian8powerpcuinput-modules-3.16.0-4-powerpc64-di< 3.16.7-ckt20-1+deb8u2uinput-modules-3.16.0-4-powerpc64-di_3.16.7-ckt20-1+deb8u2_powerpc.deb
Debian7i386ext2-modules-3.2.0-4-686-pae-di< 3.2.73-2+deb7u2ext2-modules-3.2.0-4-686-pae-di_3.2.73-2+deb7u2_i386.deb
Debian7armhfloop-modules-3.2.0-4-mx5-di< 3.2.73-2+deb7u2loop-modules-3.2.0-4-mx5-di_3.2.73-2+deb7u2_armhf.deb
Debian8armhfqemu-system-arm< 1:2.1+dfsg-12+deb8u5aqemu-system-arm_1:2.1+dfsg-12+deb8u5a_armhf.deb
Debian7mipsfuse-modules-3.2.0-4-4kc-malta-di< 3.2.73-2+deb7u2fuse-modules-3.2.0-4-4kc-malta-di_3.2.73-2+deb7u2_mips.deb
Debian8mipselscsi-core-modules-3.16.0-4-4kc-malta-di< 3.16.7-ckt20-1+deb8u2scsi-core-modules-3.16.0-4-4kc-malta-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian8kfreebsd-i386qemu-system-sparc< 1:2.1+dfsg-12+deb8u5aqemu-system-sparc_1:2.1+dfsg-12+deb8u5a_kfreebsd-i386.deb

OS	Version	Architecture	Package	Version	Filename
Debian	7	i386	multipath-modules-3.2.0-4-486-di	< 3.2.73-2+deb7u2	multipath-modules-3.2.0-4-486-di_3.2.73-2+deb7u2_i386.deb
Debian	8	mipsel	usb-serial-modules-3.16.0-4-sb1-bcm91250a-di	< 3.16.7-ckt20-1+deb8u2	usb-serial-modules-3.16.0-4-sb1-bcm91250a-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian	8	mipsel	pata-modules-3.16.0-4-loongson-2e-di	< 3.16.7-ckt20-1+deb8u2	pata-modules-3.16.0-4-loongson-2e-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian	8	powerpc	uinput-modules-3.16.0-4-powerpc64-di	< 3.16.7-ckt20-1+deb8u2	uinput-modules-3.16.0-4-powerpc64-di_3.16.7-ckt20-1+deb8u2_powerpc.deb
Debian	7	i386	ext2-modules-3.2.0-4-686-pae-di	< 3.2.73-2+deb7u2	ext2-modules-3.2.0-4-686-pae-di_3.2.73-2+deb7u2_i386.deb
Debian	7	armhf	loop-modules-3.2.0-4-mx5-di	< 3.2.73-2+deb7u2	loop-modules-3.2.0-4-mx5-di_3.2.73-2+deb7u2_armhf.deb
Debian	8	armhf	qemu-system-arm	< 1:2.1+dfsg-12+deb8u5a	qemu-system-arm_1:2.1+dfsg-12+deb8u5a_armhf.deb
Debian	7	mips	fuse-modules-3.2.0-4-4kc-malta-di	< 3.2.73-2+deb7u2	fuse-modules-3.2.0-4-4kc-malta-di_3.2.73-2+deb7u2_mips.deb
Debian	8	mipsel	scsi-core-modules-3.16.0-4-4kc-malta-di	< 3.16.7-ckt20-1+deb8u2	scsi-core-modules-3.16.0-4-4kc-malta-di_3.16.7-ckt20-1+deb8u2_mipsel.deb
Debian	8	kfreebsd-i386	qemu-system-sparc	< 1:2.1+dfsg-12+deb8u5a	qemu-system-sparc_1:2.1+dfsg-12+deb8u5a_kfreebsd-i386.deb