[Pkg-xen-devel] Processed: forcibly merging 845663 845664 845665 845667 845668 845669 845670

Debian Bug Tracking System owner at bugs.debian.org
Sun Nov 27 11:27:13 UTC 2016


Processing commands for control at bugs.debian.org:

> forcemerge 845663 845664 845665 845667 845668 845669 845670
Bug #845663 [src:xen] xen: CVE-2016-9386: x86 null segments not always treated as unusable
Bug #845670 [src:xen] xen: CVE-2016-9379 CVE-2016-9380: delimiter injection vulnerabilities in pygrub
Marked as found in versions xen/4.8.0~rc5-1.
Bug #845669 [src:xen] xen: CVE-2016-9377 CVE-2016-9378: x86 software interrupt injection mis-handled
Marked as found in versions xen/4.4.1-9 and xen/4.4.1-6.
Bug #845663 [src:xen] xen: CVE-2016-9386: x86 null segments not always treated as unusable
Marked as found in versions xen/4.8.0~rc5-1.
Bug #845667 [src:xen] xen: CVE-2016-9384: guest 32-bit ELF symbol table load leaking host data
Marked as found in versions xen/4.4.1-6 and xen/4.4.1-9.
Bug #845668 [src:xen] xen: CVE-2016-9383: x86 64-bit bit test instruction emulation broken
Severity set to 'important' from 'grave'
Marked as found in versions xen/4.8.0~rc5-1.
Bug #845665 [src:xen] xen: CVE-2016-9385: x86 segment base write emulation lacking canonical address checks
Marked as found in versions xen/4.8.0~rc5-1.
Bug #845664 [src:xen] xen: CVE-2016-9382: x86 task switch to VM86 mode mis-handled
Marked as found in versions xen/4.8.0~rc5-1.
Merged 845663 845664 845665 845667 845668 845669 845670
> thanks
Stopping processing here.

Please contact me if you need assistance.
-- 
845663: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845663
845664: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845664
845665: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845665
845667: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845667
845668: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845668
845669: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845669
845670: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=845670
Debian Bug Tracking System
Contact owner at bugs.debian.org with problems



More information about the Pkg-xen-devel mailing list