Alerts This Week
Warning Icon 1 714
Alerts This Week
Warning Icon 1 714

Fedora 36: 2022-b50023a180 Moderate: Xen Hypervisor Issues

fedora
Calendar Grey May 7, 2022
Dist Fedora Esm H88
The recently released Xen 4.16.1 addresses several bugs associated with EFI configurations and hypervisor functionality specifically within the Fedora 36 ecosystem.
update to xen-4.16.1 strip .efi file to help EFI partitions with limited space ---- Racy interactions between dirty vram tracking and paging log dirty hypercalls [XSA-397, CVE-2022...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

update to xen-4.16.1 strip .efi file to help EFI partitions with limited space

---- Racy interactions between dirty vram tracking and paging log dirty

hypercalls [XSA-397, CVE-2022-26356] race in VT-d domain ID cleanup [XSA-399,

CVE-2022-26357] IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues

[XSA-400, CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361]

* Thu Apr 14 2022 Michael Young - 4.16.1-1

- update to xen-4.16.1

remove or adjust patches now included or superceded upstream

renumber patches

- strip .efi file to help EFI partitions with limited space

* Tue Apr 5 2022 Michael Young - 4.16.0-6

- Racy interactions between dirty vram tracking and paging log dirty

hypercalls [XSA-397, CVE-2022-26356]

- race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357]

- IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues [XSA-400,

CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361]

- additional patches so above applies cleanly

su -c 'dnf upgrade --advisory FEDORA-2022-b50023a180' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

https://fedoraproject.org/security/

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure

Change Log

References

Update Instructions

Severity
important
Lowest
Low
Medium
High
Critical

Product: Fedora 36
Version: 4.16.1
Release: 1.fc36
Summary: Xen is a virtual machine monitor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here