Gnoppix Security Advisory: Xen Vulnerability Patching
Gnoppix Security has released an urgent update for the Xen hypervisor, addressing a critical vulnerability that could allow an attacker to crash the host or gain unauthorized privileges.
Affected Versions
- Gnoppix 24/25 (oldstable) requires an immediate upgrade.
- Gnoppix 26 (stable) also receives the fix.
- Gnoppix 27 (testing) is patched in the latest packages.
The Vulnerability
The issue stems from improper memory handling in Xen’s emulation code. A malicious guest VM can exploit this to escalate privileges or cause a denial of service.
Critical warning: Anyone running unpatched Xen versions must apply the update now to prevent system compromise.
Fixed Packages
Upgrade the xen package to the corrected versions provided in the respective repositories. Reboot affected systems after patching.
Action Required
- For administrators: Apply the GSA-6424-1 advisory immediately.
- For users: Ensure your system updates are current.
This advisory is based on the original Gnoppix Security announcement. - Please update your systems.