Fedora Linux 8771 Published by

A xen security update has been released for Fedora 37.



[SECURITY] Fedora 37 Update: xen-4.16.5-3.fc37


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-881672fdab
2023-10-27 01:10:52.863737
--------------------------------------------------------------------------------

Name : xen
Product : Fedora 37
Version : 4.16.5
Release : 3.fc37
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

xenstored: A transaction conflict can crash C Xenstored [XSA-440,
CVE-2023-34323] x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
Multiple vulnerabilities in libfsimage disk handling [XSA-443, CVE-2023-34325]
x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327, CVE-2023-34328]
--------------------------------------------------------------------------------
ChangeLog:

* Wed Oct 11 2023 Michael Young [m.a.young@durham.ac.uk] - 4.16.5-3
- xenstored: A transaction conflict can crash C Xenstored [XSA-440,
CVE-2023-34323]
- x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
- Multiple vulnerabilities in libfsimage disk handling [XSA-443,
CVE-2023-34325]
- x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
CVE-2023-34328]
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-881672fdab' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------