Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -5 articles for you...
89
security advisorycriticalFedoraFedora 37: 2022-9f51d13fa3 Critical: Xenstore Crash and Memory Issues
x86: Multiple speculative security issues [XSA-422, CVE-2022-23824] ---- x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] Xenstore: guests can let run xenstored out of memory [XSA-326, CVE-2022-42311, CVE-2022-42312,. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-9f51d13fa3 2022-11-24 01:24:26.774334 --------------------------------------------------------------------------------Name : xen Product : Fedora 37 Version : 4.16.2 Release : 4.fc37 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: x86: Multiple speculative security issues [XSA-422, CVE-2022-23824] ---- x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] Xenstore: guests can let run xenstored out of memory [XSA-326, CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318] Xenstore: Guests can cause Xenstore to not free temporary memory [XSA-416, CVE-2022-42319] Xenstore: Guests can get access to Xenstore nodes of deleted domains [XSA-417, CVE-2022-42320] Xenstore: Guests can crash xenstored via exhausting the stack [XSA-418, CVE-2022-42321] Xenstore: Cooperating guests can create arbitrary numbers of nodes [XSA-419, CVE-2022-42322, CVE-2022-42323] Oxenstored 32-> 31 bit integer truncation issues [XSA-420, CVE-2022-42324] Xenstore: Guests can create arbitrary numberof nodes via transactions [XSA-421, CVE-2022-42325, CVE-2022-42326] --------------------------------------------------------------------------------ChangeLog: * Tue Nov 8 2022 Michael Young - 4.16.2-4 - x86: Multiple speculative security issues [XSA-422, CVE-2022-23824] * Tue Nov 1 2022 Michael Young - 4.16.2-3 - x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327] - Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309] - Xenstore: Guests can create orphaned Xenstore nodes [XSA-415, CVE-2022-42310] - Xenstore: guests can let run xenstored out of memory [XSA-326, CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318] - Xenstore: Guests can cause Xenstore to not free temporary memory [XSA-416, CVE-2022-42319] - Xenstore: Guests can get access to Xenstore nodes of deleted domains [XSA-417, CVE-2022-42320] - Xenstore: Guests can crash xenstored via exhausting the stack [XSA-418, CVE-2022-42321] - Xenstore: Cooperating guests can create arbitrary numbers of nodes [XSA-419, CVE-2022-42322, CVE-2022-42323] - Oxenstored 32-> 31 bit integer truncation issues [XSA-420, CVE-2022-42324] - Xenstore: Guests can create arbitrary number of nodes via transactions [XSA-421, CVE-2022-42325, CVE-2022-42326] --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-9f51d13fa3' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Nov 23, 2022
•Critical
Fedora
89
security advisorysecurity patchxenFedora 36: FEDORA-2022-cf87a9b146 Moderate: Speculative Threats
fix build of xen*.efi file and package it in /usr/lib*/efi ---- Multiple speculative security issues [XSA-398]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-cf87a9b146 2022-04-05 00:15:09.251194 --------------------------------------------------------------------------------Name : xen Product : Fedora 36 Version : 4.16.0 Release : 5.fc36 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: fix build of xen*.efi file and package it in /usr/lib*/efi ---- Multiple speculative security issues [XSA-398] --------------------------------------------------------------------------------ChangeLog: * Mon Mar 21 2022 Michael Young - 4.16.0-5 - fix build of xen*.efi file and package it in /usr/lib*/efi * Tue Mar 15 2022 Michael Young - 4.16.0-4 - Multiple speculative security issues [XSA-398] - additional patches so above applies cleanly --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-cf87a9b146' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Apr 04, 2022
Fedora
89
security advisoryFedoracritical threatFedora 35: Addressing Critical Issues in Xen Hypervisor Speculation
Multiple speculative security issues [XSA-398]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-011c2a9ba8 2022-03-30 01:27:23.334600 --------------------------------------------------------------------------------Name : xen Product : Fedora 35 Version : 4.15.2 Release : 2.fc35 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: Multiple speculative security issues [XSA-398] --------------------------------------------------------------------------------ChangeLog: * Sat Mar 12 2022 Michael Young - 4.15.2-2 - Multiple speculative security issues [XSA-398] - additional patches so above applies cleanly --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-011c2a9ba8' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 29, 2022
•Critical
Fedora
89
security advisoryFedoraupdate notificationFedora 35: FEDORA-2023-12b4567a9c Security Risks in Kubernetes Exploits
Multiple speculative security issues [XSA-398]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-96b6341e4f 2022-03-28 01:03:42.775963 --------------------------------------------------------------------------------Name : xen Product : Fedora 34 Version : 4.14.4 Release : 2.fc34 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: Multiple speculative security issues [XSA-398] --------------------------------------------------------------------------------ChangeLog: * Sat Mar 12 2022 Michael Young - 4.14.4-2 - Multiple speculative security issues [XSA-398] - additional patches so above applies cleanly --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2022-96b6341e4f' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
Mar 27, 2022
•Critical
Fedora
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!