Xen: Multiple vulnerabilities — GLSA 202005-08

Multiple vulnerabilities have been found in Xen, the worst of which could allow privilege escalation.

Package	app-emulation/xen on all architectures
Affected versions	< 4.12.2-r2
Unaffected versions	>= 4.12.2-r2

Package	app-emulation/xen-tools on all architectures
Affected versions	< 4.12.2-r1
Unaffected versions	>= 4.12.2-r1

Xen is a bare-metal hypervisor.

Multiple vulnerabilities have been discovered in Xen. Please review the CVE identifiers referenced below for details.

Please review the referenced CVE identifiers for details.

There is no known workaround at this time.

All Xen users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.12.2-r2"

All Xen Tools users should upgrade to the latest version:

 # emerge --sync
 # emerge --ask --oneshot --verbose
 ">=app-emulation/xen-tools-4.12.2-r1"

Release date
May 14, 2020

Latest revision
May 15, 2020: 2

Severity
normal

Exploitable
local

Bugzilla entries