Bug 33401

Summary:	xen new security issues CVE-2024-3114[34]
Product:	Mageia	Reporter:	Nicolas Salguero <nicolas.salguero>
Component:	Security	Assignee:	Giuseppe Ghibò <ghibomgx>
Status:	NEW ---	QA Contact:	Sec team <security>
Severity:	normal
Priority:	Normal
Version:	Cauldron
Target Milestone:	---
Hardware:	All
OS:	Linux
Whiteboard:	MGA9TOO
Source RPM:	xen-4.18.0-5.mga10.src.rpm, xen-4.17.4-1.mga9.src.rpm	CVE:	CVE-2024-31143, CVE-2024-31144
Status comment:

Description Nicolas Salguero 2024-07-16 14:10:26 CEST

Those CVEs were announced here:
https://www.openwall.com/lists/oss-security/2024/07/16/3
https://www.openwall.com/lists/oss-security/2024/07/16/4

Nicolas Salguero 2024-07-16 14:11:32 CEST

CVE: (none) => CVE-2024-31143, CVE-2024-31144
Source RPM: (none) => xen-4.18.0-5.mga10.src.rpm, xen-4.17.4-1.mga9.src.rpm
Whiteboard: (none) => MGA9TOO

Comment 1 Lewis Smith 2024-07-17 21:45:32 CEST

"xsa458.patch"
https://www.openwall.com/lists/oss-security/2024/07/16/3/1

"xsa459-xen-api.patch"
https://www.openwall.com/lists/oss-security/2024/07/16/4/1
"xsa459-xsconsole.patch"
https://www.openwall.com/lists/oss-security/2024/07/16/4/2

It looks as if you do xen, Nicolas; so handing this to you.

Assignee: bugsquad => nicolas.salguero

Nicolas Salguero 2024-07-18 09:06:13 CEST

Assignee: nicolas.salguero => ghibomgx