Xen: Multiple vulnerabilities Multiple vulnerabilities have been found in Xen, the worst of which could cause a Denial of Service condition. xen 2018-10-30 2018-10-30 643350 655188 655544 659442 local 4.10.1-r2 4.10.1-r2 4.10.1-r2 4.10.1-r2

Xen is a bare-metal hypervisor.

Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.

A local attacker could cause a Denial of Service condition or disclose sensitive information.

There is no known workaround at this time.

All Xen users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.10.1-r2"

All Xen tools users should upgrade to the latest version:

# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.10.1-r2" CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-10471 CVE-2018-10472 CVE-2018-10981 CVE-2018-10982 CVE-2018-12891 CVE-2018-12892 CVE-2018-12893 CVE-2018-15468 CVE-2018-15469 CVE-2018-15470 CVE-2018-3620 CVE-2018-3646 CVE-2018-5244 CVE-2018-7540 CVE-2018-7541 CVE-2018-7542 whissi irishluck83