Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

Fedora 38: 2024-29f57f1b4e critical: xen data sampling and race conditions

fedora
Calendar Grey March 30, 2024
Dist Fedora Esm H88
Kernel Patch Announcement for Fedora 38: Essential updates addressing Memory Safety and Concurrency Issues now released.
x86: Register File Data Sampling [XSA-452, CVE-2023-28746] GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

x86: Register File Data Sampling [XSA-452, CVE-2023-28746] GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]

Topics%20covered

Topics Covered

security advisory fedora race condition xen update announcement data sampling

Change Log

* Thu Mar 14 2024 Michael Young - 4.17.2-8 - x86: Register File Data Sampling [XSA-452, CVE-2023-28746] - GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193] - additional patches so above applies cleanly

References

Fedora Update Notification FEDORA-2024-29f57f1b4e 2024-03-30 01:43:28.218917 Name : xen Product : Fedora 38 Version : 4.17.2 Release : 8.fc38 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-29f57f1b4e' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xen
Product: Fedora 38
Version: 4.17.2
Release: 8.fc38
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory fedora race condition xen update announcement data sampling

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here