Stay Secure with the Latest Linux Advisories

security advisoryFedorabranch history injection

Fedora 39: 2024-58c950d8d8 Moderate: Double Unlock, IRQ Handling

x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2024-58c950d8d8 2024-08-01 01:24:27.004238 -------------------------------------------------------------------------------- Name : xen Product : Fedora 39 Version : 4.17.4 Release : 2.fc39 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143] -------------------------------------------------------------------------------- ChangeLog: * Tue Jul 16 2024 Michael Young - 4.17.4-2 - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143] -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-58c950d8d8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Codeof Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it. Do not reply to spam, report it: . Fedora 39 Update Alert: This version tackles urgent problems like the double unlock vulnerability and enhances security with new native branch history injection safeguards. xen Kernel, Fedora 39 Update, Security Fix, IRQ Handling Issue. . Severity: Important. LinuxSecurity.com Team

Aug 01, 2024 •Important Fedora