Stay Secure with the Latest Linux Advisories

security advisorycriticalFedora

Fedora 38: 2023-0d6aa10621 Critical: Xen ARM Deadlock and Zenbleed

arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) ---- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] ---- x86/AMD: Zenbleed [XSA-433] omit OCaml 5 patch on fc38. -------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2023-0d6aa10621 2023-08-05 01:37:28.394507 -------------------------------------------------------------------------------- Name : xen Product : Fedora 38 Version : 4.17.1 Release : 9.fc38 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) ---- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] ---- x86/AMD: Zenbleed [XSA-433] omit OCaml 5 patch on fc38 -------------------------------------------------------------------------------- ChangeLog: * Tue Aug 1 2023 Michael Young - 4.17.1-9 - arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320] (#2228238) * Mon Jul 31 2023 Michael Young - 4.17.1-8 - bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] * Tue Jul 25 2023 Michael Young - adjust OCaml patch condition so eln builds work * Mon Jul 24 2023 Michael Young - 4.17.1-7 - x86/AMD: Zenbleed [XSA-433, CVE-2023-20593] - omit OCaml 5 patch on fc38 * Sat Jul 22 2023 Fedora Release Engineering - 4.17.1-6 - Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild * Mon Jul 10 2023 Jerry James - 4.17.1-5 - Add patch for OCaml 5.0.0 * Tue Jun 27 2023 Michael Young - 4.17.1-4 - work around a build problem with python 3.12 * Tue Jun 13 2023 Python Maint - 4.17.1-3 - Rebuilt for Python3.12 -------------------------------------------------------------------------------- References: [ 1 ] Bug #2228237 - CVE-2023-34320 Xen Security Advisory 436 v1 (CVE-2023-34320) - arm: Guests can trigger a deadlock on Cortex-A77 https://bugzilla.redhat.com/show_bug.cgi?id=2228237 -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2023-0d6aa10621' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ -------------------------------------------------------------------------------- _______________________________________________ package-announce mailing list -- This email address is being protected from spambots. You need JavaScript enabled to view it. To unsubscribe send an email to This email address is being protected from spambots. You need JavaScript enabled to view it. Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/ List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/This email address is being protected from spambots. You need JavaScript enabled to view it./ Do not reply to spam, report it: . Important Fedora 38 Release Notes for Xen: Resolution for ARM Hang Issue and AMD Improvements. Ensure your system is secure and current!. Xen Update Fedora 38, Deadlock Bugfix, Xen Virtualization, ARM Security Patch, x86 Zenbleed Fix. . Severity: Critical. LinuxSecurity.com Team

Aug 05, 2023 •Critical Fedora