Fedora 26: 2017-f336ba205d Moderate: Xen Memory Leakage and Escalation

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Qemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]

(#1416162) Qemu: display: cirrus: OOB read access issue [CVE-2017-7718]

(#1443444) xen: various flaws (#1481765) multiple problems with transitive

grants [XSA-226, CVE-2017-12135] x86: PV privilege escalation via map_grant_ref

[XSA-227, CVE-2017-12137] grant_table: Race conditions with maptrack free list

handling [XSA-228, CVE-2017-12136] grant_table: possibly premature clearing of

GTF_writing / GTF_reading [XSA-230, CVE-2017-12855]

[ 1 ] Bug #1477651 - CVE-2017-12136 xsa228 xen: grant_table: Race conditions with maptrack free list handling (XSA-228)

https://bugzilla.redhat.com/show_bug.cgi?id=1477651

[ 2 ] Bug #1477655 - CVE-2017-12135 xsa226 xen: possibly unbounded recursion in grant table code (XSA-226)

https://bugzilla.redhat.com/show_bug.cgi?id=1477655

[ 3 ] Bug #1477657 - CVE-2017-12137 xsa227 xen: x86: PV privilege escalation via map_grant_ref (XSA-227)

https://bugzilla.redhat.com/show_bug.cgi?id=1477657

[ 4 ] Bug #1481762 - CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table: possibly premature clearing of GTF_writing / GTF_reading (XSA-230)

https://bugzilla.redhat.com/show_bug.cgi?id=1481762

su -c 'dnf upgrade xen' at the command line.

For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org