Fedora alert FEDORA-2026-78cd69d9ae (xen)
| From: | updates--- via package-announce <package-announce@lists.fedoraproject.org> | |
| To: | package-announce@lists.fedoraproject.org | |
| Subject: | [SECURITY] Fedora 43 Update: xen-4.20.3-2.fc43 | |
| Date: | Fri, 01 May 2026 03:06:29 +0000 | |
| Message-ID: | <20260501030629.E04CF84D30@bastion01.rdu3.fedoraproject.org> | |
| Archive-link: | Article |
-------------------------------------------------------------------------------- Fedora Update Notification FEDORA-2026-78cd69d9ae 2026-05-01 03:01:50.286568+00:00 -------------------------------------------------------------------------------- Name : xen Product : Fedora 43 Version : 4.20.3 Release : 2.fc43 URL : http://xen.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor -------------------------------------------------------------------------------- Update Information: oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557] grant table v2 race in status page mapping [XSA-486, CVE-2026-23558] x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505] -------------------------------------------------------------------------------- ChangeLog: * Wed Apr 29 2026 Michael Young <m.a.young@durham.ac.uk> - 4.20.3-2 - oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557] - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558] - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505] -------------------------------------------------------------------------------- This update can be installed with the "dnf" update program. Use su -c 'dnf upgrade --advisory FEDORA-2026-78cd69d9ae' at the command line. For more information, refer to the dnf documentation available at http://dnf.readthedocs.io/en/latest/command_ref.html#upgr... All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/keys -------------------------------------------------------------------------------- -- _______________________________________________ package-announce mailing list -- package-announce@lists.fedoraproject.org To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond... List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines List Archives: https://lists.fedoraproject.org/archives/list/package-ann... Do not reply to spam, report it: https://forge.fedoraproject.org/infra/tickets/issues/new