[Buildroot] [PATCH] package/xen: add upstream security fix for XSA-327

Thomas Petazzoni thomas.petazzoni at bootlin.com
Sun Aug 23 21:35:23 UTC 2020


On Sun, 23 Aug 2020 22:32:36 +0200
Peter Korsgaard <peter at korsgaard.com> wrote:

> Fixes the following security issue:
> 
> CVE-2020-15564: Missing alignment check in VCPUOP_register_vcpu_info
> 
> For further details, see the advisory:
> 
> https://xenbits.xenproject.org/xsa/advisory-327.html
> 
> Signed-off-by: Peter Korsgaard <peter at korsgaard.com>
> ---
>  package/xen/xen.hash | 1 +
>  package/xen/xen.mk   | 2 ++
>  2 files changed, 3 insertions(+)

Applied to master, thanks.

Thomas
-- 
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com



More information about the buildroot mailing list