similar to: CVE-2015-3456 / XSA-133 / "Venom" @ Debian Xen

On 15/05/2015 09:41, Sebastian Pipping wrote: > * I noticed that [1] says 4.4.1-9 not to be vulnerable ("fixed") > but according to the Debian Changelog [2] 4.4.1-9 appeared > in Debian before XSA-133 was published and > xen_4.4.1-9.debian.tar.xz [3] does not seem to contain > any XSA-133 patch. Could you elaborate why 4.4.1-9 is not affected? This would

xen-4.4.2-2, available from the virt6-testing repository, includes the fix for this issue. Note that Xen actually does attempt to disable the floppy disk for HVM domains by default, but due to a bug in qemu, the floppy disk only partially disabled; enough functionality to exploit this bug remains. This should be available from the normal xen4 repositories sometime this afternoon. -George

Mapping stable-security to proposed-updates. Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 05 Mar 2015 13:36:37 +0200 Source: xen Binary: xen-docs-4.1 libxen-4.1 libxenstore3.0 libxen-dev xenstore-utils libxen-ocaml libxen-ocaml-dev xen-utils-common xen-utils-4.1 xen-hypervisor-4.1-amd64 xen-system-amd64 xen-hypervisor-4.1-i386 xen-system-i386 Architecture:

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Wed, 05 Mar 2015 13:36:37 +0200 Source: xen Binary: xen-docs-4.1 libxen-4.1 libxenstore3.0 libxen-dev xenstore-utils libxen-ocaml libxen-ocaml-dev xen-utils-common xen-utils-4.1 xen-hypervisor-4.1-amd64 xen-system-amd64 xen-hypervisor-4.1-i386 xen-system-i386 Architecture: source all amd64 Version: 4.1.4-3+deb7u5

I have a Samba 2.2.0 PDC set up running Linux and I have a Windows 2000 client computer. The Win2k computer can join the domain, but no one can log in. Everytime I try to logon with the Win2k computer, it says that the account is disabled. I can use the account to browse shares and mount the home directory from the PDC. I have added the account to a group on the Win2k computer. I found the

Processing commands for control at bugs.debian.org: > reassign 780227 src:xen Bug #780227 [xen-hypervisor-4.1-amd64] XSA-123 / CVE-2015-2151 Hypervisor memory corruption due to x86 emulator flaw Bug reassigned from package 'xen-hypervisor-4.1-amd64' to 'src:xen'. No longer marked as found in versions xen/4.1.4-1 and xen/4.1.4-3+deb7u4. No longer marked as fixed in versions

flight 14679 xen-4.1-testing real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/14679/ Failures :-/ but no regressions. Regressions which are regarded as allowable (not blocking): test-amd64-amd64-xl-pcipt-intel 8 debian-fixup fail like 14675 test-amd64-amd64-xl-sedf 11 guest-localmigrate fail REGR. vs. 14675 Tests which did not succeed, but are not

flight 14586 xen-unstable real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/14586/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-amd64-pv 3 host-install(3) broken REGR. vs. 14565 test-amd64-amd64-xl-qemuu-winxpsp3 10 guest-saverestore.2 fail REGR. vs. 14565 test-amd64-amd64-win 3

flight 14916 xen-unstable real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/14916/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-amd64-pv 15 guest-stop fail REGR. vs. 14856 test-amd64-i386-xl 14 guest-localmigrate/x10 fail REGR. vs. 14856 test-amd64-i386-xend-winxpsp3 7

Source: xen Version: 4.6.0-1 Severity: important Dear Maintainer, I attempted to create a HVM domU - using a config that previously worked on xen 4.4 (on Jessie). When I execute "xl create <vm config>", I get: Parsing config from router.internal.tomjepp.uk xc: error: Could not open kernel image '/usr/lib/xen/boot/hvmloader' (2 = No such file or directory): Internal

flight 16875 linux-linus real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/16875/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-amd64-xl 15 guest-stop fail REGR. vs. 12557 test-amd64-i386-xl 15 guest-stop fail REGR. vs. 12557 test-amd64-i386-xl-credit2 15 guest-stop

flight 16260 xen-4.2-testing real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/16260/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-i386-i386-xl 5 xen-boot fail REGR. vs. 16228 test-i386-i386-xl-qemuu-winxpsp3 5 xen-boot fail REGR. vs. 16228 test-i386-i386-win 5

flight 16014 xen-unstable real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/16014/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-i386-xl-credit2 14 guest-localmigrate/x10 fail REGR. vs. 15643-bisect test-amd64-i386-xl-multivcpu 14 guest-localmigrate/x10 fail REGR. vs. 16012-bisect Tests which are failing

flight 18782 xen-4.1-testing real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/18782/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-i386-xl-winxpsp3-vcpus1 12 guest-localmigrate/x10 fail REGR. vs. 18748 Regressions which are regarded as allowable (not blocking): test-amd64-amd64-xl-sedf 12 guest-saverestore.2

flight 15418 linux-3.0 real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/15418/ Failures :-/ but no regressions. Regressions which are regarded as allowable (not blocking): test-amd64-amd64-xl-sedf 5 xen-boot fail like 15383 test-amd64-amd64-xl-sedf-pin 10 guest-saverestore fail REGR. vs. 15383 Tests which did not succeed, but are not blocking:

Accepted: -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 1.8 Date: Sun, 21 Sep 2014 10:45:47 +0200 Source: xen Binary: libxen-4.4 libxenstore3.0 libxen-dev xenstore-utils xen-utils-common xen-utils-4.4 xen-hypervisor-4.4-amd64 xen-system-amd64 xen-hypervisor-4.4-arm64 xen-system-arm64 xen-hypervisor-4.4-armhf xen-system-armhf Architecture: source all Version: 4.4.1-1 Distribution:

flight 17968 xen-unstable real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/17968/ Failures :-/ but no regressions. Tests which did not succeed, but are not blocking: test-amd64-amd64-xl-pcipt-intel 9 guest-start fail never pass test-amd64-amd64-xl-qemut-win7-amd64 13 guest-stop fail never pass test-amd64-amd64-xl-qemuu-winxpsp3 13 guest-stop

flight 22144 xen-4.3-testing real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/22144/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: build-armhf 2 host-install(2) broken in 22138 REGR. vs. 22042 build-i386 3 host-build-prep fail in 22138 REGR. vs. 22042 Tests which are failing intermittently

flight 19846 xen-4.1-testing real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/19846/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-i386-pair 16 guest-start fail REGR. vs. 19177 test-i386-i386-pair 16 guest-start fail REGR. vs. 19177 build-armhf-pvops 1

flight 19723 xen-unstable real [real] http://www.chiark.greenend.org.uk/~xensrcts/logs/19723/ Regressions :-( Tests which did not succeed and are blocking, including tests which could not be run: test-amd64-amd64-pv 9 guest-start fail REGR. vs. 19708 test-amd64-i386-xend-winxpsp3 8 guest-saverestore fail REGR. vs. 19708 test-amd64-i386-pv 9