Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 25: 2017-5ae70ac6a5 Critical Privilege Elevation in Xen

fedora
Calendar Grey May 12, 2017
Dist Fedora Esm H88
Critical Fedora 25 Security Patch: resolves xen flaws ensuring your virtualization infrastructure remains protected
xen: various flaws (#1447345) x86: 64bit PV guest breakout via pagetable use- after-mode-change [XSA-213] grant transfer allows PV guest to elevate privileges [XSA-214]

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

xen: various flaws (#1447345) x86: 64bit PV guest breakout via pagetable use-after-mode-change [XSA-213] grant transfer allows PV guest to elevate privileges

[XSA-214]

[ 1 ] Bug #1443222 - xsa213 xen: x86: 64bit PV guest breakout via pagetable use-after-mode-change (XSA-213)

https://bugzilla.redhat.com/show_bug.cgi?id=1443222

[ 2 ] Bug #1443223 - xsa214 xen: grant transfer allows PV guest to elevate privileges (XSA-214)

https://bugzilla.redhat.com/show_bug.cgi?id=1443223

su -c 'dnf upgrade xen' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 25
Version: 4.7.2
Release: 6.fc25
Summary: Xen is a virtual machine monitor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here