Debian/xen: medium 5.6
An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users (in certain configurations) to read arbitrary dom0 files via QMP live insertion of a CDROM, in conjunction with specifying
Action: Upgrade xen to 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6 | - |
Fixed versions
| 4.8.3+xsa262+shim4.10.0+comet3-1+deb9u6 |
Sources
published · modified · JSON