Bug#686966: marked as done (unblock: xen/4.1.3-2)
Your message dated Sat, 08 Sep 2012 14:05:21 +0100
with message-id <1347109521.8753.34.camel@jacala.jungle.funky-badger.org>
and subject line Re: Bug#686966: unblock: xen/4.1.3-2
has caused the Debian Bug report #686966,
regarding unblock: xen/4.1.3-2
to be marked as done.
This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.
(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)
--
686966: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=686966
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: release.debian.org
Severity: normal
User: release.debian.org@packages.debian.org
Usertags: unblock
Please unblock xen/4.1.3-2. It includes only security fixes.
xen (4.1.3-2) unstable; urgency=medium
* Don't allow writing reserved bits in debug register.
CVE-2012-3494
* Fix error handling in interrupt assignment.
CVE-2012-3495
* Don't trigger bug messages on invalid flags.
CVE-2012-3496
* Check array bounds in interrupt assignment.
CVE-2012-3498
* Properly check bounds while setting the cursor in qemu.
CVE-2012-3515
* Disable monitor in qemu by default.
CVE-2012-4411
unblock xen/4.1.3-2
-- System Information:
Debian Release: wheezy/sid
APT prefers testing
APT policy: (990, 'testing'), (500, 'unstable'), (1, 'experimental')
Architecture: amd64 (x86_64)
Foreign Architectures: i386
Kernel: Linux 3.5-trunk-amd64 (SMP w/4 CPU cores)
Locale: LANG=de_DE.UTF-8, LC_CTYPE=de_DE.UTF-8 (charmap=UTF-8)
Shell: /bin/sh linked to /bin/dash
--- End Message ---
--- Begin Message ---
On Fri, 2012-09-07 at 21:10 +0200, Bastian Blank wrote:
> xen (4.1.3-2) unstable; urgency=medium
>
> * Don't allow writing reserved bits in debug register.
> CVE-2012-3494
> * Fix error handling in interrupt assignment.
> CVE-2012-3495
> * Don't trigger bug messages on invalid flags.
> CVE-2012-3496
> * Check array bounds in interrupt assignment.
> CVE-2012-3498
> * Properly check bounds while setting the cursor in qemu.
> CVE-2012-3515
> * Disable monitor in qemu by default.
> CVE-2012-4411
Unblocked; thanks.
Regards,
Adam
--- End Message ---
Reply to: