Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 37: FEDORA-2023-abc1234d56 Urgent: Kernel Memory Leak Vulnerability

fedora
Calendar Grey March 6, 2023
Dist Fedora Esm H88
Update for Fedora 36 enhances VM monitoring and resolves a critical cross-thread memory leak issue.
use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file built from edk2-ovmf package no longer supports xen (#2170930) ---- x86: Cross-Thread Return Address Predictions [XSA-42...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file built from edk2-ovmf

package no longer supports xen (#2170930) ---- x86: Cross-Thread Return

Address Predictions [XSA-426, CVE-2022-27672]

* Sat Feb 18 2023 Michael Young - 4.16.3-3

- use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file

built from edk2-ovmf package no longer supports xen (#2170930)

* Wed Feb 15 2023 Michael Young - 4.16.3-2

- x86: Cross-Thread Return Address Predictions [XSA-426, CVE-2022-27672]

(backported to xen-4.16)

[ 1 ] Bug #2170930 - Please configure xen to use new edk2-ovmf-xen package

https://bugzilla.redhat.com/show_bug.cgi?id=2170930

su -c 'dnf upgrade --advisory FEDORA-2023-dad0295b25' at the command

line. For more information, refer to the dnf documentation available at

https://dnf.readthedocs.io/en/latest/command_ref.html

All packages are signed with the Fedora Project GPG key. More details on the

GPG keys used by the Fedora Project can be found at

package-announce mailing list -- package-announce@lists.fedoraproject.org

To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org

Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/

List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines

List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/

Do not reply to spam, report it:

Change Log

References

Update Instructions

Severity
critical
Lowest
Low
Medium
High
Critical

Product: Fedora 36
Version: 4.16.3
Release: 3.fc36
Summary: Xen is a virtual machine monitor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here