[Pkg-xen-devel] Updated Xen packages for XSA 216..225

Ian Jackson ijackson at chiark.greenend.org.uk
Wed Sep 13 13:33:10 UTC 2017


Moritz Muehlenhoff writes ("Re: Updated Xen packages for XSA 216..225"):
> On Wed, Sep 13, 2017 at 01:30:47PM +0100, Ian Jackson wrote:
> > Moritz Mühlenhoff writes ("Re: Updated Xen packages for XSA 216..225"):
> > > Since the queue was already quite big and this update was ready
> > > I went ahead and released what we had for now.
> > 
> > Yes, sorry, I should have been explicit that that's what I expected
> > you to do...
> 
> BTW, did Xen upstream ever request CVE IDs for XSA-206 and XSA-207?
> Otherwise I'd do that via cveform.mitre.org.

fx: switches hats to Xen Project Security Team

We did but only by email and MITRE ignore us.  Please go ahead and use
the CVE form, and notify security at xenproject.org of the response.
We'll send out updated advisories.

Thanks,
Ian.



More information about the Pkg-xen-devel mailing list