[Pkg-xen-devel] Bug#845670: xen: CVE-2016-9379 CVE-2016-9380: delimiter injection vulnerabilities in pygrub

[Salvatore Bonaccorso]

Source: xen
Version: 4.4.1-9
Severity: important
Tags: security upstream patch

Hi,

the following vulnerabilities were published for xen.

CVE-2016-9379[0]:
delimiter injection vulnerabilities in pygrub

CVE-2016-9380[1]:
delimiter injection vulnerabilities in pygrub

If you fix the vulnerabilities please also make sure to include the
CVE (Common Vulnerabilities & Exposures) ids in your changelog entry.

For further information see:

[0] https://security-tracker.debian.org/tracker/CVE-2016-9379
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9379
[1] https://security-tracker.debian.org/tracker/CVE-2016-9380
    https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2016-9380
[2] https://xenbits.xen.org/xsa/advisory-198.html

Please adjust the affected versions in the BTS as needed.

Regards,
Salvatore