Multiple vulnerabilities have been found in Xen, the worst of which could cause a Denial of Service condition.
| Package | app-emulation/xen on all architectures | 
|---|---|
| Affected versions | < 4.10.1-r2 | 
| Unaffected versions | >= 4.10.1-r2 | 
| Package | app-emulation/xen-tools on all architectures | 
|---|---|
| Affected versions | < 4.10.1-r2 | 
| Unaffected versions | >= 4.10.1-r2 | 
Xen is a bare-metal hypervisor.
Multiple vulnerabilities have been discovered in Xen. Please review the referenced CVE identifiers for details.
A local attacker could cause a Denial of Service condition or disclose sensitive information.
There is no known workaround at this time.
All Xen users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-4.10.1-r2"
All Xen tools users should upgrade to the latest version:
# emerge --sync # emerge --ask --oneshot --verbose ">=app-emulation/xen-tools-4.10.1-r2"