-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

- -------------------------------------------------------------------------
Debian Security Advisory DSA-3262-1                   security@debian.org
http://www.debian.org/security/                        Moritz Muehlenhoff
May 18, 2015                           http://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : xen
CVE ID         : CVE-2015-3456

Jason Geffner discovered a buffer overflow in the emulated floppy
disk drive, resulting in the potential execution of arbitrary code.
This only affects HVM guests.

For the oldstable distribution (wheezy), this problem has been fixed
in version 4.1.4-3+deb7u6.

The stable distribution (jessie) is already fixed through the qemu
update provided as DSA-3259-1.

We recommend that you upgrade your xen packages.

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: debian-security-announce@lists.debian.org
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=DW5p
-----END PGP SIGNATURE-----