Security Announcements (Historical): Difference between revisions
From Xen
Jump to navigationJump to search
(Add categories) |
(Add references to xen-4.[01]-testing.hg fixes) |
||
| Line 14: | Line 14: | ||
; Fixes |
; Fixes |
||
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/c79aae866ad8 23034:c79aae866ad8] |
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/c79aae866ad8 23034:c79aae866ad8] |
||
: xen-4.1-testing.hg: [http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/842aed720b84 22993:842aed720b84] |
|||
: xen-4.0-testing.hg: [http://xenbits.xen.org/hg/xen-4.0-testing.hg/rev/ee088a0b5cb8 21461:ee088a0b5cb8] |
|||
= XSA-2 PV kernel validation vulnerabilities = |
= XSA-2 PV kernel validation vulnerabilities = |
||
| Line 27: | Line 27: | ||
; Fixes |
; Fixes |
||
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/d9982136d8fa 23322:d9982136d8fa] |
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/d9982136d8fa 23322:d9982136d8fa] |
||
: xen-4.1-testing.hg: [http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/e2e575f8b5d9 23042:e2e575f8b5d9] |
|||
: xen-4.0-testing.hg: [http://xenbits.xen.org/hg/xen-4.0-testing.hg/rev/c2adc059e931 21482:c2adc059e931] |
|||
= XSA-3 VT-d (PCI passthrough) MSI = |
= XSA-3 VT-d (PCI passthrough) MSI = |
||
| Line 38: | Line 40: | ||
; Fixes |
; Fixes |
||
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/cc91832a02c7 23337:cc91832a02c7] |
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/cc91832a02c7 23337:cc91832a02c7] |
||
: xen-4.1-testing.hg: [http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/ed630a821de1 23046:ed630a821de1] |
|||
: xen-4.0-testing.hg: [http://xenbits.xen.org/hg/xen-4.0-testing.hg/rev/b85a9e58ec3a 21485:b85a9e58ec3a] |
|||
= XSA-4 Xen 3.3 vaddr validation = |
= XSA-4 Xen 3.3 vaddr validation = |
||
| Line 48: | Line 52: | ||
: http://lists.xen.org/archives/html/xen-devel/2011-09/msg00119.html |
: http://lists.xen.org/archives/html/xen-devel/2011-09/msg00119.html |
||
; Fixes |
; Fixes |
||
: xen-unstable: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/72edc40e2942 23800:72edc40e2942] |
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/72edc40e2942 23800:72edc40e2942] |
||
: ''nb: although the off-by-one error was fixed in the above changeset on versions of Xen prior to 3.3 were vulnerable due to this error. |
|||
= XSA-5 IOMMU Fault Live lock = |
= XSA-5 IOMMU Fault Live lock = |
||
| Line 59: | Line 64: | ||
: http://lists.xen.org/archives/html/xen-devel/2011-08/msg00450.html |
: http://lists.xen.org/archives/html/xen-devel/2011-08/msg00450.html |
||
; Fixes |
; Fixes |
||
: xen-unstable: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/537ed3b74b3f 23762:537ed3b74b3f] |
: xen-unstable.hg: [http://xenbits.xen.org/hg/xen-unstable.hg/rev/537ed3b74b3f 23762:537ed3b74b3f] |
||
: xen-4.1-testing.hg: [http://xenbits.xen.org/hg/xen-4.1-testing.hg/rev/84e3706df07a 23112:84e3706df07a] |
|||
: xen-4.0-testing.hg: [http://xenbits.xen.org/hg/xen-4.0-testing.hg/rev/789ff1a462b8 21535:789ff1a462b8] |
|||
<!-- Template: |
<!-- Template: |
||
Revision as of 17:18, 12 December 2011
The following security advisories have been made in accordance with the xen.org security problem response process.
Please contact security@xen.org if you wish to disclose a security vulnerability.
XSA-1 Host crash due to failure to correctly validate PV kernel execution state.
- Date
- 14 March 2011
- References
- CVE-2011-1166
- Advisory
- Cannot specify user mode execution without specifying user-mode pagetables. Failure to validate this allows a malicious or buggy 64 bit PV guest to crash the host.
- nb: predates vulnerability handling process and therefore no formal announcement
- Fixes
- xen-unstable.hg: 23034:c79aae866ad8
- xen-4.1-testing.hg: 22993:842aed720b84
- xen-4.0-testing.hg: 21461:ee088a0b5cb8
XSA-2 PV kernel validation vulnerabilities
- Date
- 9 May 2011
- References
- CVE-2011-1583
- Advisory
- http://lists.xen.org/archives/html/xen-devel/2011-05/msg00483.html
- Fixes
- xen-unstable.hg: 23322:d9982136d8fa
- xen-4.1-testing.hg: 23042:e2e575f8b5d9
- xen-4.0-testing.hg: 21482:c2adc059e931
XSA-3 VT-d (PCI passthrough) MSI
- Date
- 12 May 2011
- References
- CVE-2011-1898
- Advisory
- http://lists.xen.org/archives/html/xen-devel/2011-05/msg00687.html
- Fixes
- xen-unstable.hg: 23337:cc91832a02c7
- xen-4.1-testing.hg: 23046:ed630a821de1
- xen-4.0-testing.hg: 21485:b85a9e58ec3a
XSA-4 Xen 3.3 vaddr validation
- Date
- 2 September 2011
- References
- CVE-2011-2901
- Advisory
- http://lists.xen.org/archives/html/xen-devel/2011-09/msg00119.html
- Fixes
- xen-unstable.hg: 23800:72edc40e2942
- nb: although the off-by-one error was fixed in the above changeset on versions of Xen prior to 3.3 were vulnerable due to this error.
XSA-5 IOMMU Fault Live lock
- Date
- 12 August 2011
- References
- CVE-2011-3131
- Advisory
- http://lists.xen.org/archives/html/xen-devel/2011-08/msg00450.html
- Fixes
- xen-unstable.hg: 23762:537ed3b74b3f
- xen-4.1-testing.hg: 23112:84e3706df07a
- xen-4.0-testing.hg: 21535:789ff1a462b8
