Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 502
Alerts This Week
Warning Icon 1 502

Fedora 38: 2024-a676697123 Critical: Xen HVM Hypercalls Update

fedora
Calendar Grey April 26, 2024
Dist Fedora Esm H88
The Xen 4.17.4 release for Fedora 38 tackles significant branch injection vulnerabilities and includes various bug resolutions along with comprehensive advisory documentation.
x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM hypercalls may trigger...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842] x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]

Topics%20covered

Topics Covered

security advisory critical Fedora bug fix xen branch injection HVM hypercalls

Change Log

* Tue Apr 9 2024 Michael Young - 4.17.4-1 - x86: Native Branch History Injection [XSA-456, CVE-2024-2201] - update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842] - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]

References

Fedora Update Notification FEDORA-2024-a676697123 2024-04-26 01:03:50.148827 Name : xen Product : Fedora 38 Version : 4.17.4 Release : 1.fc38 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-a676697123' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
critical
Lowest
Low
Medium
High
Critical

Name: xen
Product: Fedora 38
Version: 4.17.4
Release: 1.fc38
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory critical Fedora bug fix xen branch injection HVM hypercalls

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.