Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 37 FEDORA-2023-04473fc41e Moderate: Xen Security Issues

fedora
Calendar Grey August 27, 2023
Dist Fedora Esm H88
This Ubuntu upgrade tackles significant vulnerabilities such as the Spectre Variant 4 and VRP (Virtual Return Pointer) problems in Kernel 5.18.
update to xen-4.16.5 which includes x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569] x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982] remove patches no...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

update to xen-4.16.5 which includes x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569] x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982] remove patches now included upstream ---- arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) ---- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] ---- x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]

Topics%20covered

Topics Covered

security advisory moderate Fedora bugfix Xen Hypervisor Zenbleed Speculative Overflow

Change Log

* Fri Aug 11 2023 Michael Young - 4.16.5-1 - update to xen-4.16.5 which includes x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569] x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982] - remove patches now included upstream * Tue Aug 1 2023 Michael Young - 4.16.4-4 - arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) * Mon Jul 31 2023 Michael Young - 4.16.4-3 - bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] * Wed Jul 26 2023 Michael Young - 4.16.4-2 - x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]

References


[ 1 ] Bug #2228237 - CVE-2023-34320 Xen Security Advisory 436 v1 (CVE-2023-34320) - arm: Guests can trigger a deadlock on Cortex-A77 https://bugzilla.redhat.com/show_bug.cgi?id=2228237

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-04473fc41e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: xen
Product: Fedora 37
Version: 4.16.5
Release: 1.fc37
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory moderate Fedora bugfix Xen Hypervisor Zenbleed Speculative Overflow

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here