Fedora Linux 8579 Published by

A xen security update has been released for Fedora 38.



[SECURITY] Fedora 38 Update: xen-4.17.2-1.fc38


--------------------------------------------------------------------------------
Fedora Update Notification
FEDORA-2023-fff31650c8
2023-08-16 01:20:55.660978
--------------------------------------------------------------------------------

Name : xen
Product : Fedora 38
Version : 4.17.2
Release : 1.fc38
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

--------------------------------------------------------------------------------
Update Information:

update to xen-4.17.2 which includes x86/AMD: Speculative Return Stack Overflow
[XSA-434, CVE-2023-20569] x86/Intel: Gather Data Sampling [XSA-435,
CVE-2022-40982] remove patches now included upstream
--------------------------------------------------------------------------------
ChangeLog:

* Thu Aug 10 2023 Michael Young [m.a.young@durham.ac.uk] - 4.17.2-1
- update to xen-4.17.2 which includes
x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569]
x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982]
- remove patches now included upstream
--------------------------------------------------------------------------------

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade --advisory FEDORA-2023-fff31650c8' at the command
line. For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
--------------------------------------------------------------------------------