Stay Secure with the Latest Linux Advisories

security advisoryfedoravulnerability

Fedora 36: 2022-0142d562ca Critical: Xen Race Condition Risk

stop building for ix86 and armv7hl due to missing build dependency x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362] x86 pv: Insufficient care with non-coherent mappings [ XSA-402, CVE-2022-26363, CVE-2022-26364] ---- Split qemu-user-static into per-arch subpackages (bz 2061584). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-0142d562ca 2022-06-22 00:46:07.353356 --------------------------------------------------------------------------------Name : xen Product : Fedora 36 Version : 4.16.1 Release : 2.fc36 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: stop building for ix86 and armv7hl due to missing build dependency x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362] x86 pv: Insufficient care with non-coherent mappings [ XSA-402, CVE-2022-26363, CVE-2022-26364] ---- Split qemu-user-static into per-arch subpackages (bz 2061584) --------------------------------------------------------------------------------ChangeLog: * Sat Jun 11 2022 Michael Young - 4.16.1-2 - stop building for ix86 and armv7hl due to missing build dependency - x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362] - x86 pv: Insufficient care with non-coherent mappings [ XSA-402, CVE-2022-26363, CVE-2022-26364] - additional patches so above applies cleanly --------------------------------------------------------------------------------References: [ 1 ] Bug #2061584 - qemu-user-static needs to be broken into separate package per arch. https://bugzilla.redhat.com/show_bug.cgi?id=2061584 --------------------------------------------------------------------------------Thisupdate can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-0142d562ca' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure . Fedora 36 has released important updates for the Xen vulnerabilities XSA-401 and XSA-402, aimed at protecting users managing virtual machines. Xen Hypervisor, Security Update, Virtual Machine Management, Fedora Update. . Severity: Critical. LinuxSecurity.com Team

Jun 21, 2022 •Critical Fedora