Fedora Linux 8643 Published by

A xen security update has been released for Fedora 36.



SECURITY: Fedora 36 Update: xen-4.16.1-2.fc36


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2022-0142d562ca
2022-06-22 00:46:07.353356
--------------------------------------------------------------------------------

Name : xen
Product : Fedora 36
Version : 4.16.1
Release : 2.fc36
URL :   http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

stop building for ix86 and armv7hl due to missing build dependency x86 pv: Race
condition in typeref acquisition [XSA-401, CVE-2022-26362] x86 pv: Insufficient
care with non-coherent mappings [ XSA-402, CVE-2022-26363, CVE-2022-26364]
---- Split qemu-user-static into per-arch subpackages (bz 2061584)
--------------------------------------------------------------------------------
ChangeLog:

* Sat Jun 11 2022 Michael Young - 4.16.1-2
- stop building for ix86 and armv7hl due to missing build dependency
- x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362]
- x86 pv: Insufficient care with non-coherent mappings [ XSA-402,
CVE-2022-26363, CVE-2022-26364]
- additional patches so above applies cleanly
--------------------------------------------------------------------------------
References:

[ 1 ] Bug #2061584 - qemu-user-static needs to be broken into separate package per arch.
  https://bugzilla.redhat.com/show_bug.cgi?id=2061584
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2022-0142d562ca' at the command
line. For more information, refer to the dnf documentation available at
  http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
  https://fedoraproject.org/keys
--------------------------------------------------------------------------------
_______________________________________________