From mboxrd@z Thu Jan 1 00:00:00 1970 From: Michael Young Subject: Re: Xen Security Advisory 206 - xenstore denial of service via repeated update Date: Wed, 29 Mar 2017 23:16:15 +0100 Message-ID: References: Mime-Version: 1.0 Content-Type: text/plain; charset="utf-8"; Format="flowed" Content-Transfer-Encoding: base64 Return-path: In-Reply-To: List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-devel-bounces@lists.xen.org Sender: "Xen-devel" To: "Xen.org security team" Cc: xen-users@lists.xen.org, xen-announce@lists.xen.org, oss-security@lists.openwall.com, xen-devel@lists.xen.org List-Id: xen-devel@lists.xenproject.org T24gV2VkLCAyOSBNYXIgMjAxNywgWGVuLm9yZyBzZWN1cml0eSB0ZWFtIHdyb3RlOgoKPiAtLS0t LUJFR0lOIFBHUCBTSUdORUQgTUVTU0FHRS0tLS0tCj4gSGFzaDogU0hBMQo+Cj4gICAgICAgICAg ICAgICAgICAgIFhlbiBTZWN1cml0eSBBZHZpc29yeSBYU0EtMjA2Cj4gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICB2ZXJzaW9uIDkKPgo+ICAgICAgICAgICAgeGVuc3RvcmUgZGVuaWFsIG9m IHNlcnZpY2UgdmlhIHJlcGVhdGVkIHVwZGF0ZQoKSSBhbSBzZWVpbmcgYSBidWlsZCBmYWlsdXJl IGZyb20gdGhlc2UgcGF0Y2hlcyB3aGVuIHVzaW5nIGdjYyA3LiBUaGUgCnByb2JsZW0gaXMgd2l0 aAp4c2EyMDYtNC44MDAwMi14ZW5zdG9yZWQtTG9nLXdoZW4tdGhlLXdyaXRlLXRyYW5zYWN0aW9u LXJhdGUtbGltaXQtLnBhdGNoIApiZWNhdXNlIGluIHRvb2xzL3hlbnN0b3JlL3hlbnN0b3JlZF9k b21haW4uYyB0aGUgcGF0Y2ggYWRkcyB0aGUgYm9vbGVhbiAKd3JsX2RlbGF5X2xvZ2dlZCB0byB0 aGUgc3RydWN0dXJlICJkb21haW4iIGJ1dCBsYXRlciBpdCB0cmllcyB0byBpbmNyZW1lbnQgCml0 LCByZXN1bHRpbmcgaW4gdGhlIGVycm9yIAp4ZW5zdG9yZWRfZG9tYWluLmM6IEluIGZ1bmN0aW9u ICd3cmxfYXBwbHlfZGViaXRfYWN0dWFsJzoKeGVuc3RvcmVkX2RvbWFpbi5jOjk0OTozMjogZXJy b3I6IGluY3JlbWVudCBvZiBhIGJvb2xlYW4gZXhwcmVzc2lvbiAKWy1XZXJyb3I9Ym9vbC1vcGVy YXRpb25dCiAgICBpZiAoIWRvbWFpbi0+d3JsX2RlbGF5X2xvZ2dlZCsrKSB7CgogCU1pY2hhZWwg WW91bmcKCl9fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fClhl bi1kZXZlbCBtYWlsaW5nIGxpc3QKWGVuLWRldmVsQGxpc3RzLnhlbi5vcmcKaHR0cHM6Ly9saXN0 cy54ZW4ub3JnL3hlbi1kZXZlbAo=