Pkg xen devel - Jun 2008 - Bug#487097: xen-unstable: multiple security issues

Source: xen-unstable
Version: 3.3-unstable+hg17602-1
Severity: grave
Tags: security, patch

Hi,
the following CVE (Common Vulnerabilities & Exposures) ids were
published for xen-unstable.

CVE-2008-1943[0]:
| Buffer overflow in the backend of XenSource Xen Para Virtualized Frame
| Buffer (PVFB) 3.0 through 3.1.2 allows local users to cause a denial
| of service (crash) and possibly execute arbitrary code via a crafted
| description of a shared framebuffer.

CVE-2008-1944[1]:
| Buffer overflow in the backend framebuffer of XenSource Xen
| Para-Virtualized Framebuffer (PVFB) Message 3.0 through 3.0.3 allows
| local users to cause a denial of service (SDL crash) and possibly
| execute arbitrary code via "bogus screen updates," related to
missing
| validation of the "format of messages."

CVE-2008-1952[2]:
| ** RESERVED **
| This candidate has been reserved by an organization or individual that
| will use it when announcing a new security problem.  When the
| candidate has been publicized, the details for this candidate will be
| provided.

If you fix the vulnerabilities please also make sure to include the
CVE ids in your changelog entry.

For further information see:

[0] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1943
    http://security-tracker.debian.net/tracker/CVE-2008-1943
[1] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1944
    http://security-tracker.debian.net/tracker/CVE-2008-1944
[2] http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2008-1952
    http://security-tracker.debian.net/tracker/CVE-2008-1952

These issues are fixed within the following patch for fedora:
http://cvs.fedoraproject.org/viewcvs/rpms/xen/F-9/xen-pvfb-validate-fb.patch?view=markup

Kind regards,
Thomas.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20080619/dd4b7f68/attachment.pgp

Hi,
please note that CVE-2008-1952 does not apply to 
3.3-unstable+hg17602-1 as the vulnerable code was introduced 
in changeset 17630.

Cheers
Nico

-- 
Nico Golde - http://www.ngolde.de - nion at jabber.ccc.de - GPG: 0x73647CFF
For security reasons, all text in this mail is double-rot13 encrypted.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 197 bytes
Desc: not available
Url :
http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20080619/0f3faf3a/attachment.pgp

hi,

I'm sorry!

The CVE-2008-1952 doesn't affect you, so please disregard it :)

Kind regards,
Thomas.

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 189 bytes
Desc: Digital signature
Url :
http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20080619/400fa824/attachment.pgp

Your message dated Thu, 19 Jun 2008 20:06:20 +0200
with message-id <20080619180620.GB1871 at wavehammer.waldi.eu.org>
and subject line Re: [Pkg-xen-devel] Bug#487097: xen-unstable: multiple security
issues
has caused the Debian Bug report #487097,
regarding xen-unstable: multiple security issues
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner at bugs.debian.org
immediately.)


-- 
487097: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=487097
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems
-------------- next part --------------
An embedded message was scrubbed...
From: Thomas =?utf-8?Q?Bl=C3=A4sing?= <thomasbl at pool.math.tu-berlin.de>
Subject: xen-unstable: multiple security issues
Date: Thu, 19 Jun 2008 16:59:33 +0200
Size: 3854
Url:
http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20080619/386dfde7/attachment-0002.eml
-------------- next part --------------
An embedded message was scrubbed...
From: Bastian Blank <waldi at debian.org>
Subject: Re: [Pkg-xen-devel] Bug#487097: xen-unstable: multiple security
	issues
Date: Thu, 19 Jun 2008 20:06:20 +0200
Size: 2429
Url:
http://lists.alioth.debian.org/pipermail/pkg-xen-devel/attachments/20080619/386dfde7/attachment-0003.eml