[CentOS-announce] CESA-2013:X017 Xen4CentOS xen Security Update

Tue Dec 10 22:37:16 UTC 2013
Johnny Hughes <johnny at centos.org>

CentOS Errata and Security Advisory 2013:X017 (Xen4CentOS)

The following updated files have been uploaded and are currently
syncing to the mirrors: ( sha256sum Filename )

-----------------------------
X86_64
-----------------------------

588443b1936d3da45e5872a1578722fdac5ddf0eaeb02b8e47854a3c1d7a45f5 xen-4.2.3-26.el6.centos.alt.x86_64.rpm
12c0af60f60af67ebc07cd5dca9d61b6634f4be33966fcdcc77e3039161ef6f4 xen-devel-4.2.3-26.el6.centos.alt.x86_64.rpm
4a60dc96c14fd735ddf1cde1f08322dd5c94d982227347dfd15abdcee11d2790 xen-doc-4.2.3-26.el6.centos.alt.x86_64.rpm
b36b1ede055d17639d4bbadd0e17aec1ffee73ed0f6f648fa8e76492894b074d xen-hypervisor-4.2.3-26.el6.centos.alt.x86_64.rpm
e70dc056dfed81cae18ad19dc5b48478c888c26212134b8dd202415d5e8170b2 xen-libs-4.2.3-26.el6.centos.alt.x86_64.rpm
2554337053b5bc9b3ecc581d59960ce500afb2944feff6ccacd69caf92f93be1 xen-licenses-4.2.3-26.el6.centos.alt.x86_64.rpm
f63b13925967a8c3e9be02b97732544200ce2e72e334350bc9fee401c2e2cc8b xen-ocaml-4.2.3-26.el6.centos.alt.x86_64.rpm
77229a8d145016e1fa9e640f321f682704f4fd567762f906cdf5b2d9984bf76d xen-ocaml-devel-4.2.3-26.el6.centos.alt.x86_64.rpm
92805976d532f9ec8c9f49fe3f3ae6ee682f71636becfe80c961dd1160b213c6 xen-runtime-4.2.3-26.el6.centos.alt.x86_64.rpm

-----------------------------
Source:
-----------------------------

febf2b9b59a070713d1c3928ad923a403f219f580b995de005389c3b42d4fa2b xen-4.2.3-26.el6.centos.alt.src.rpm

=====================================================

xen Changelog info from the SPEC file:

* Tue Dec 10 2013 Johnny Hughes <johnny at centos.org> - 4.2.3-26.el6.centos
- Roll in Patches 147, 148, 149, 150 for the following XSAs:
- XSA-74 (CVE-2013-4553), XSA-76 (CVE-2013-4554), XSA-80 (CVE-2013-6400)
- XSA-82 (CVE-2013-6885)


=====================================================

The following XSA info is available from the Xen site 
http://xenbits.xen.org/xsa/advisory-74.html
http://xenbits.xen.org/xsa/advisory-76.html
http://xenbits.xen.org/xsa/advisory-80.html
http://xenbits.xen.org/xsa/advisory-82.html

--
Johnny Hughes
CentOS Project { http://www.centos.org/ }
irc: hughesjr, #centos at irc.freenode.net