[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Fwd: [ubuntu/precise-security] xen (Accepted)

Happened to spot (forwarded below) Ubuntu released 'their' fix
for the qemu VGA exploit amongst others...

I note in particular they decided on including a patch of some
form r.e. for XSA-060 ... Even though debian marked this as
"Hardware design flaw, no software solution" according to the
debian security-tracker page...........
Wonder whats' going on there...

Hope that helps anyway,


-------- Forwarded Message --------
Subject: [ubuntu/precise-security] xen (Accepted)
Date: Tue, 14 Jun 2016 10:36:16 -0000
From: Marc Deslauriers <marc.deslauriers@canonical.com>
Reply-To: Marc Deslauriers <marc.deslauriers@canonical.com>
To: precise-changes@lists.ubuntu.com

xen ( precise-security; urgency=low

  * Applying Xen Security Advisories:
    - CVE-2013-2212 / XSA-060
      * VMX: disable EPT when !cpu_has_vmx_pat
      * VMX: remove the problematic set_uc_mode logic
      * VMX: fix cr0.cd handling
    - CVE-2016-3158, CVE-2016-3159 / XSA-172
      * x86: fix information leak on AMD CPUs
    - CVE-2016-3960 / XSA-173
      * x86: limit GFNs to 32 bits for shadowed superpages.
      * x86/HVM: correct CPUID leaf 80000008 handling
    - CVE-2016-4480 / XSA-176
      * x86/mm: fully honor PS bits in guest page table walks
    - CVE-2016-3710 / XSA-179 (qemu traditional)
      * vga: fix banked access bounds checking
      * vga: add vbe_enabled() helper
      * vga: factor out vga register setup
      * vga: update vga register setup on vbe changes
      * vga: make sure vga register setup for vbe stays intact
    - CVE-2014-3672 / XSA-180 (qemu traditional)
      * main loop: Big hammer to fix logfile disk DoS in Xen setups

Date: 2016-06-14 09:35:20.148875+00:00
Changed-By: Stefan Bader <stefan.bader@canonical.com>
Signed-By: Marc Deslauriers <marc.deslauriers@canonical.com>

Sorry, changesfile not available.
Precise-changes mailing list
Modify settings or unsubscribe at: https://lists.ubuntu.com/mailman/listinfo/precise-changes

Reply to: