---------------------------------------------------------------------- Try a new way to discover vulnerabilities that ALREADY EXIST in your IT infrastructure. The Secunia NSI enables you to INSPECT, DISCOVER, and DOCUMENT vulnerabilities in more than 4,700 different Windows applications. Request your account, the Secunia Network Software Inspector (NSI): http://secunia.com/network_software_inspector/ ---------------------------------------------------------------------- TITLE: Debian update for xen-utils SECUNIA ADVISORY ID: SA27085 VERIFY ADVISORY: http://secunia.com/advisories/27085/ CRITICAL: Less critical IMPACT: Security Bypass, Privilege escalation WHERE: Local system OPERATING SYSTEM: Debian GNU/Linux unstable alias sid http://secunia.com/product/530/ Debian GNU/Linux 4.0 http://secunia.com/product/13844/ DESCRIPTION: Debian has issued an update for xen-utils. This fixes some vulnerabilities, which can be exploited by malicious, local users to bypass certain security restrictions or gain escalated privileges. For more information: SA26986 SOLUTION: Apply updated packages. -- Debian GNU/Linux 4.0 alias etch -- Source archives: http://security.debian.org/pool/updates/main/x/xen-3.0/xen-3.0_3.0.3-0.orig.tar.gz Size/MD5 checksum: 6127238 71257a2d977a601594c70c9eac0a121b http://security.debian.org/pool/updates/main/x/xen-3.0/xen-3.0_3.0.3-0-3.diff.gz Size/MD5 checksum: 28697 64f2dd856726a95d88fe48531e987ff4 http://security.debian.org/pool/updates/main/x/xen-3.0/xen-3.0_3.0.3-0-3.dsc Size/MD5 checksum: 1115 d42726f5a374bfb8eb1a6618174ff893 Architecture independent packages: http://security.debian.org/pool/updates/main/x/xen-3.0/xen-docs-3.0_3.0.3-0-3_all.deb Size/MD5 checksum: 533396 b91af7395e7a1169be06ced33ef56daa amd64 architecture (AMD x86_64 (AMD64)) http://security.debian.org/pool/updates/main/x/xen-3.0/xen-utils-3.0.3-1_3.0.3-0-3_amd64.deb Size/MD5 checksum: 368012 b4ceb2935cf07339c98b7aa67709a508 http://security.debian.org/pool/updates/main/x/xen-3.0/xen-ioemu-3.0.3-1_3.0.3-0-3_amd64.deb Size/MD5 checksum: 331438 f7f8a51f48c87072fe2c0ffd03e066aa http://security.debian.org/pool/updates/main/x/xen-3.0/xen-hypervisor-3.0.3-1-amd64_3.0.3-0-3_amd64.deb Size/MD5 checksum: 269956 7957630a8fcd612e7492b7d14a36512d i386 architecture (Intel ia32) http://security.debian.org/pool/updates/main/x/xen-3.0/xen-hypervisor-3.0.3-1-i386-pae_3.0.3-0-3_i386.deb Size/MD5 checksum: 273756 f36f6d51efa2c545d98275e63965569c http://security.debian.org/pool/updates/main/x/xen-3.0/xen-ioemu-3.0.3-1_3.0.3-0-3_i386.deb Size/MD5 checksum: 326526 b198abda8622589fb4dd0141744dddf0 http://security.debian.org/pool/updates/main/x/xen-3.0/xen-utils-3.0.3-1_3.0.3-0-3_i386.deb Size/MD5 checksum: 347860 954ccb3ddf9aea5fa5a09e08abd6c95c http://security.debian.org/pool/updates/main/x/xen-3.0/xen-hypervisor-3.0.3-1-i386_3.0.3-0-3_i386.deb Size/MD5 checksum: 253984 b92b82d449805ff4a8d8f90b655be600 -- Debian GNU/Linux unstable alias sid -- Reportedly, the vulnerabilities will be fixed soon. ORIGINAL ADVISORY: http://lists.debian.org/debian-security-announce/debian-security-announce-2007/msg00155.html OTHER REFERENCES: SA26986: http://secunia.com/advisories/26986/ ---------------------------------------------------------------------- About: This Advisory was delivered by Secunia as a free service to help everybody keeping their systems up to date against the latest vulnerabilities. Subscribe: http://secunia.com/secunia_security_advisories/ Definitions: (Criticality, Where etc.) http://secunia.com/about_secunia_advisories/ Please Note: Secunia recommends that you verify all advisories you receive by clicking the link. Secunia NEVER sends attached files with advisories. Secunia does not advise people to install third party patches, only use those supplied by the vendor. ---------------------------------------------------------------------- Unsubscribe: Secunia Security Advisories http://secunia.com/sec_adv_unsubscribe/?email=packet%40packetstormsecurity.org ----------------------------------------------------------------------