Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 38: 2023-4125279976 High: Xen Cache And Speculative Leak Issues

fedora
Calendar Grey September 30, 2023
Dist Fedora Esm H88
Fedora 38's latest update, FEDORA-2023-4125279976, enhances Xen hypervisor across arm32 and x86/AMD architectures, addressing critical issues
arm32: The cache may not be properly cleaned/invalidated [XSA-437, CVE-2023-34321] top-level shadow reference dropped too early for 64-bit PV guests [XSA-438, CVE-2023-34322] x86/A...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

arm32: The cache may not be properly cleaned/invalidated [XSA-437, CVE-2023-34321] top-level shadow reference dropped too early for 64-bit PV guests [XSA-438, CVE-2023-34322] x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]

Change Log

* Tue Sep 26 2023 Michael Young - 4.17.2-2 - arm32: The cache may not be properly cleaned/invalidated [XSA-437, CVE-2023-34321] - top-level shadow reference dropped too early for 64-bit PV guests [XSA-438, CVE-2023-34322] - x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]

References

Fedora Update Notification FEDORA-2023-4125279976 2023-09-30 03:34:08.918308 Name : xen Product : Fedora 38 Version : 4.17.2 Release : 2.fc38 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-4125279976' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Name: xen
Product: Fedora 38
Version: 4.17.2
Release: 2.fc38
Summary: Xen is a virtual machine monitor

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here