Re: [Xen-devel] Recent CVE

[Jonathan Tripathy <jonnyt@xxxxxxxxxxx>]

On 14/06/2012 11:56, Roger Pau Monne wrote:
> Jonathan Tripathy wrote:
> > Hi Everyone,
> >
> > According to this CVE:
> >
> > http://lists.xen.org/archives/html/xen-announce/2012-06/msg00001.html
> >
> > The patch has been added to xen-3.4-testing.hg. However, when I look 
> > here:
> > http://xenbits.xen.org/hg/xen-3.4-testing.hg/
> It's still in staging:
>
> http://xenbits.xen.org/hg/staging/xen-3.4-testing.hg/
>
> > I don't see any recent commits.
> >
> > Am I missing something? I feel it is very important that these patches
> > make its way into this branch, and tagged as 3.4.5 ASAP :)
> Not sure why they haven't made it to the repos. I'm Ccing Ian Jackson 
> about this.
Let's also not forget the following CVEs which don't seem to be 
backported yet:
CVE-2011-2901
CVE-2011-1898
CVE-2012-0029
CVE-2011-1166

Thanks

_______________________________________________
Xen-devel mailing list
Xen-devel@xxxxxxxxxxxxx
http://lists.xen.org/xen-devel