--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2024-58c950d8d8
2024-08-01 01:24:27.004238
--------------------------------------------------------------------------------

Name        : xen
Product     : Fedora 39
Version     : 4.17.4
Release     : 2.fc39
URL         : http://xen.org/
Summary     : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
--------------------------------------------------------------------------------
ChangeLog:

* Tue Jul 16 2024 Michael Young  - 4.17.4-2
- x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
- double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2024-58c950d8d8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
--------------------------------------------------------------------------------

-- 
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org
Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue

Fedora 39 Xen Security Advisory: Critical Vulnerabilities & Update Steps

August 1, 2024
x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]

Summary

This package contains the XenD daemon and xm command line

tools, needed to manage virtual machines running under the

Xen hypervisor

Update Information:

x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]

Change Log

* Tue Jul 16 2024 Michael Young - 4.17.4-2 - x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201] - double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]

References

Fedora Update Notification FEDORA-2024-58c950d8d8 2024-08-01 01:24:27.004238 Name : xen Product : Fedora 39 Version : 4.17.4 Release : 2.fc39 URL : http://xen.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor

Update Instructions

This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2024-58c950d8d8' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

Severity
Name : xen
Product : Fedora 39
Version : 4.17.4
Release : 2.fc39
URL : http://xen.org/
Summary : Xen is a virtual machine monitor

Related News

The End of the Road for Linux 6.11: A Call to Upgrade to Kernel 6.12
3 - 5 min read
The Linux kernel community recently issued an EOL announcement regarding the 6.11 kernel series, urging sysadmins to upgrade quickly to 6.12 . This
A Linux Admin
3 - 6 min read
As 2025 approaches, we Linux admins are facing new and often unseen cloud-native security obstacles. While skilled at mitigating known risks,
Leveraging Insights from the Linux Foundation
3 - 5 min read
The Linux Foundation's recent Census III report provides critical insights for Linux administrators, information security professionals, and anyone
Chrome 131 Released: Emergency Security Update Fixes Over a Dozen Significant Vulns
3 - 6 min read
Google recently unveiled a critical security update to their popular web browser, Google Chrome, addressing over a dozen significant security
From Wayland Fixes to Security Boosts: Examining Qt 6.8.1
3 - 6 min read
The recent Qt 6.8.1 release brings significant updates and improvements, strengthening its reputation as a secure and reliable application
Exploring Arch Linux 2024.12.01: Security Implications & Notable Enhancements for Linux Admins
3 - 6 min read
The Arch Linux 2024.12.01 ISO release marks an impressive milestone, offering cutting-edge updates that enhance functionality, streamline
Deck the Halls with Enhanced Security: Linux Kernel 6.13
3 - 5 min read
As Linux admins and infosec professionals prepare for the holiday season, there's much cause for celebration this year! Linus Torvalds recently made
Lessons from Bootkitty: Securing Linux Systems Against UEFI Intrusions
3 - 5 min read
New Linux security threats mark critical junctures that challenge existing policies and test security protocols to their limit. One such milestone

Get the Latest News & Insights

Sign up to get the latest security news affecting Linux and open source delivered straight to your inbox.

© 2024 Guardian Digital, Inc All Rights Reserved