All Ubuntu package versions


AllRaringQuantalPreciseOneiricNattyLucidHardyAll PPAs
DashboardRecent Search QueriesSearch Statistics
Alphabetical listSearchBugs
Comments

Package "xen"

Name: xen

Description:

This package is just an umbrella for a group of other packages, it has no description.
Description samples from packages in group:

  • Public libs for Xen
  • Public headers and libs for Xen
  • OCaml libraries for controlling Xen
  • OCaml libraries for controlling Xen (devel package)
Latest version: 4.1.2-2ubuntu2.8
Release: precise (12.04)
Level: updates
Repository: main

Links

Save this URL for the latest version of "xen": http://www.ubuntuupdates.org/xen

All versions of this package Bug fixes
List of files in package Repository home page for package

Other versions of "xen" in Precise

RepositoryAreaVersion
base main 4.1.2-2ubuntu2
base universe 4.1.2-2ubuntu2
security universe 4.1.2-2ubuntu2.8
security main 4.1.2-2ubuntu2.8
updates universe 4.1.2-2ubuntu2.8

Packages in group

Deleted packages are displayed in grey.

libxen-4.1 libxen-dev libxen-ocaml libxen-ocaml-dev libxenstore3.0

Change Log

Version: 4.1.2-2ubuntu2.8 2013-04-29 22:07:01 UTC

  xen (4.1.2-2ubuntu2.8) precise-security; urgency=low

  * Applying Xen Security Advisories:
    - CVE-2013-1917 / XSA-44
      x86: clear EFLAGS.NT in SYSENTER entry path
    - CVE-2013-1919 / XSA-46
      x86: fix various issues with handling guest IRQs
    - CVE-2013-1920 / XSA-47
      defer event channel bucket pointer store until after XSM checks
 -- Stefan Bader <email address hidden> Thu, 11 Apr 2013 17:18:46 +0200
Source diff to previous version
CVE-2013-1917 Xen PV DoS vulnerability with SYSENTER
CVE-2013-1919 Several access permission issues with IRQs for unprivileged guests
CVE-2013-1920 Xen 4.2.x, 4.1.x, and earlier, when the hypervisor is running "under memory pressure" and the Xen Security Module (XSM) is enabled, uses the wrong or

Version: 4.1.2-2ubuntu2.7 2013-04-24 15:07:55 UTC

  xen (4.1.2-2ubuntu2.7) precise-proposed; urgency=low

  * Fix HVM VCPUs getting stuck on boot when host supports SMEP (LP: #1157757)
    - 0008-vmx-Simplify-cr0-update-handling-by-deferring-cr4-ch.patch
    - 0009-VMX-disable-SMEP-feature-when-guest-is-in-non-paging.patch
    - 0010-VMX-Always-disable-SMEP-when-guest-is-in-non-paging-.patch
 -- Stefan Bader <email address hidden> Mon, 08 Apr 2013 17:53:45 +0200
Source diff to previous version
1157757 [Regression] Stuck CPU1-x when booting as Xen HVM guest on certain Intel hosts

Version: 4.1.2-2ubuntu2.6 2013-02-05 15:07:00 UTC

  xen (4.1.2-2ubuntu2.6) precise-security; urgency=low

  * Applying Xen Security Advisories:
    - ACPI: acpi_table_parse() should return handler's error code
      CVE-2013-0153 / XSA-36
    - oxenstored incorrect handling of certain Xenbus ring states
      CVE-2013-0215 / XSA-38
  * xen-introduce-xzalloc.patch
    Cherry-picked from upstream xen stable-4.1 as prerequisite for XSA-36
  * xen-backport-per-device-vector-map.patch
    Cherry-picked from upstream xen stable-4.1 as prerequisite for XSA-36
    Also fixes issues on AMD systems which could cause Dom0 to loose disks
    under heavy I/O (because PCI-E devices could use the same IOAPIC vector
    as the SMBus).
 -- Stefan Bader <email address hidden> Wed, 30 Jan 2013 12:36:41 +0100
Source diff to previous version
CVE-2013-0153 RESERVED
CVE-2013-0215 RESERVED

Version: 4.1.2-2ubuntu2.5 2013-01-09 15:07:00 UTC

  xen (4.1.2-2ubuntu2.5) precise-security; urgency=low

  * Applying Xen Security Advisory:
    - VT-d: fix interrupt remapping source validation for devices behind
      legacy bridges
      CVE-2012-5634
  * Applying qemu security fixes:
    - e1000: Discard packets that are too long if !SBP and !LPE
      CVE-2012-6075
    - Discard packets longer than 16384 when !SBP to match the hardware
      behavior.
      CVE-2012-6075
 -- Stefan Bader <email address hidden> Mon, 07 Jan 2013 18:58:27 +0100
Source diff to previous version
CVE-2012-5634 RESERVED
CVE-2012-6075 qemu e1000 emulated device guest-side buffer overflow

Version: 4.1.2-2ubuntu2.4 2012-12-12 15:06:55 UTC

  xen (4.1.2-2ubuntu2.4) precise-security; urgency=low

  * SECURITY UPDATE: denial of service via MMIO regions
    - debian/patches/CVE-2012-3432.patch: don't leave emulator in an
      inconsistent state in xen/arch/x86/hvm/io.c.
    - CVE-2012-3432
  * SECURITY UPDATE: denial of service via excessive shared page search
    time during the p2m teardown
    - debian/patches/CVE-2012-3433.patch: only check for shared pages while
      any exist on teardown in xen/arch/x86/mm/p2m.c.
    - CVE-2012-3433
  * SECURITY UPDATE: denial of service via DR7 reserved bits
    - debian/patches/CVE-2012-3494.patch: write upper 32 bits as zeros in
      xen/include/asm-x86/debugreg.h.
    - CVE-2012-3494
  * SECURITY UPDATE: denial of service and possible privilege escalation
    via physdev_get_free_pirq hypercall.
    - debian/patches/CVE-2012-3495.patch: handle out-of-pirq condition
      correctly in xen/arch/x86/physdev.c.
    - CVE-2012-3495
  * SECURITY UPDATE: denial of service via via invalid flags
    - debian/patches/CVE-2012-3496.patch: Don't BUG_ON() PoD operations on
      a non-translated guest in xen/arch/x86/mm/p2m.c.
    - CVE-2012-3496
  * SECURITY UPDATE: denial of service and possibly hypervisor memory
    disclosure via PHYSDEVOP_map_pirq
    - debian/patches/CVE-2012-3498.patch: add validation before using in
      xen/arch/x86/physdev.c.
    - CVE-2012-3498
  * SECURITY UPDATE: privilege escalation via crafted escape VT100 sequence
    - debian/patches/CVE-2012-3515.patch: bounds check whenever changing
      the cursor due to an escape code in qemu/console.c.
    - CVE-2012-3515
  * SECURITY UPDATE: host info disclosure via qemu monitor
    - debian/patches/CVE-2012-4411.patch: disable qemu monitor by default
      in qemu/vl.c.
    - CVE-2012-4411
 -- Marc Deslauriers <email address hidden> Tue, 11 Dec 2012 10:13:24 -0500
CVE-2012-3432 The handle_mmio function in arch/x86/hvm/io.c in the MMIO operations emulator for Xen 3.3 and 4.x, when running an HVM guest, does not properly reset
CVE-2012-3433 Xen 4.0 and 4.1 allows local HVM guest OS kernels to cause a denial of service (domain 0 VCPU hang and kernel panic) by modifying the physical addres
CVE-2012-3494 The set_debugreg hypercall in include/asm-x86/debugreg.h in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when running on x86-64 sys
CVE-2012-3495 The physdev_get_free_pirq hypercall in arch/x86/physdev.c in Xen 4.1.x and Citrix XenServer 6.0.2 and earlier uses the return value of the get_free_p
CVE-2012-3496 XENMEM_populate_physmap in Xen 4.0, 4.1, and 4.2, and Citrix XenServer 6.0.2 and earlier, when translating paging mode is not used, allows local PV O
CVE-2012-3498 PHYSDEVOP_map_pirq in Xen 4.1 and 4.2 and Citrix XenServer 6.0.2 and earlier allows local HVM guest OS kernels to cause a denial of service (host cra
CVE-2012-3515 Qemu VT100 emulation vulnerability
CVE-2012-4411 The graphical console in Xen 4.0, 4.1 and 4.2 allows local OS guest administrators to obtain sensitive host resource information via the qemu monitor


About   -   Changelog   -   Send Feedback
Site Meter