Stay Secure with the Latest Linux Advisories

security advisorydenial of servicefedora

Fedora 27: 2018-c553a586c8 Moderate: Xen DoS and Injection Mitigations

add Xen page-table isolation (XPTI) mitigation and Branch Target Injection (BTI) mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing [XSA-252] (#1549568) grant table v2 -> v1 transition may crash Xen [XSA-255] (#1549570) x86 PVH guest without LAPIC may DoS the host [XSA-256] (#1549572). --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2018-c553a586c8 2018-03-06 17:17:51.858344 --------------------------------------------------------------------------------Name : xen Product : Fedora 27 Version : 4.9.1 Release : 5.fc27 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: add Xen page-table isolation (XPTI) mitigation and Branch Target Injection (BTI) mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing [XSA-252] (#1549568) grant table v2 -> v1 transition may crash Xen [XSA-255] (#1549570) x86 PVH guest without LAPIC may DoS the host [XSA-256] (#1549572) --------------------------------------------------------------------------------References: [ 1 ] Bug #1544456 - CVE-2018-7540 xsa252 xen: DoS via non-preemptable L3/L4 pagetable freeing (XSA-252) https://bugzilla.redhat.com/show_bug.cgi?id=1544456 [ 2 ] Bug #1544459 - CVE-2018-7541 xsa255 xen: grant table v2 -> v1 transition may crash Xen (XSA-255) https://bugzilla.redhat.com/show_bug.cgi?id=1544459 [ 3 ] Bug #1544453 - CVE-2018-7542 xsa256 xen: x86 PVH guest without LAPIC may DoS the host (XSA-256) https://bugzilla.redhat.com/show_bug.cgi?id=1544453 --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnfupgrade xen' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. . Comprehensive Xen patch for Fedora 27 targeting DoS vulnerabilities and injection safeguards, in addition to key performance enhancements.. Xen Security Update,Fedora 27,DoS Mitigation. . LinuxSecurity.com Team

Mar 06, 2018 Fedora