Alerts This Week
Warning Icon 1 727
Alerts This Week
Warning Icon 1 727

Fedora 39 FEDORA-2024-4357ec611d Moderate: Xen Bug Check Mitigations

fedora
Calendar Grey April 25, 2024
Dist Fedora Esm H88
The latest security notice from Fedora emphasizes essential updates for Xen 4.17.4, focusing on crucial vulnerabilities related to branch history manipulation and system error checks.
x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM hypercalls may trigger...

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

x86: Native Branch History Injection [XSA-456, CVE-2024-2201] update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842] x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]

Topics%20covered

Topics Covered

security advisory moderate Fedora branch history injection XSA-456 Xen Bug Check XSA-454

Change Log

* Tue Apr 9 2024 Michael Young - 4.17.4-1 - x86: Native Branch History Injection [XSA-456, CVE-2024-2201] - update to xen 4.17.4, remove patches now included upstream rebase xen.gcc12.fixes.patch - x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842] - x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]

References

Fedora Update Notification FEDORA-2024-4357ec611d 2024-04-25 01:19:12.574795 Name : xen Product : Fedora 39 Version : 4.17.4 Release : 1.fc39 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-4357ec611d' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Name: xen
Product: Fedora 39
Version: 4.17.4
Release: 1.fc39
URL: https://xenproject.org/
Summary: Xen is a virtual machine monitor

Topics%20covered

Topics Covered

security advisory moderate Fedora branch history injection XSA-456 Xen Bug Check XSA-454

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here