Fedora 33: xen 2020-d71fa5f0b9

stack corruption from XSA-346 change [XSA-355] ---- Information leak via power sidechannel [XSA-351]

--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2020-d71fa5f0b9
2020-12-01 01:27:21.870041
--------------------------------------------------------------------------------

Name        : xen
Product     : Fedora 33
Version     : 4.14.0
Release     : 12.fc33
URL         : https://xen.org/
Summary     : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

stack corruption from XSA-346 change [XSA-355]  ----  Information leak via power
sidechannel [XSA-351]
--------------------------------------------------------------------------------
ChangeLog:

* Tue Nov 24 2020 Michael Young  - 4.14.0-12
- stack corruption from XSA-346 change [XSA-355]
* Mon Nov 23 2020 Michael Young  - 4.14.0-11
- support zstd compressed kernels (dom0 only) based on linux kernel code
* Tue Nov 10 2020 Michael Young  - 4.14.0-10
- Information leak via power sidechannel [XSA-351, CVE-2020-28368]
	(#1897146)
- add make as build requires
--------------------------------------------------------------------------------
References:

  [ 1 ] Bug #1897145 - CVE-2020-28368 xen: information leak via power sidechannel
        https://bugzilla.redhat.com/show_bug.cgi?id=1897145
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2020-d71fa5f0b9' at the command
line. For more information, refer to the dnf documentation available at
https://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it.
To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it.
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it.