Fedora alert FEDORA-2022-dfbf7e2372 (xen)

From:
             
 
updates@fedoraproject.org
To:
             
 
package-announce@lists.fedoraproject.org
Subject:
             
 
[SECURITY] Fedora 35 Update: xen-4.15.2-3.fc35
Date:
             
 
Thu, 21 Apr 2022 21:22:10 +0000
Message-ID:
             
 
<20220421212210.02FBA3179974@bastion01.iad2.fedoraproject.org>
Archive-link:
             
 
Article
--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-dfbf7e2372
2022-04-21 21:21:21.120204
--------------------------------------------------------------------------------

Name        : xen
Product     : Fedora 35
Version     : 4.15.2
Release     : 3.fc35
URL         : http://xen.org/
Summary     : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

Racy interactions between dirty vram tracking and paging log dirty hypercalls
[XSA-397, CVE-2022-26356] race in VT-d domain ID cleanup [XSA-399,
CVE-2022-26357] IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues
[XSA-400, CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361]
--------------------------------------------------------------------------------
ChangeLog:

* Wed Apr  6 2022 Michael Young <m.a.young@durham.ac.uk> - 4.15.2-3
- Racy interactions between dirty vram tracking and paging log dirty
	hypercalls [XSA-397, CVE-2022-26356]
- race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357]
- IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues [XSA-400,
	CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361]
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-dfbf7e2372' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgr...

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-cond...
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/package-ann...
Do not reply to spam on the list, report it: https://pagure.io/fedora-infrastructure