Login
Login-Name Passwort


 
Newsletter
Werbung

Sicherheit: Mehrere Probleme in Xen
Aktuelle Meldungen Distributionen
Name: Mehrere Probleme in Xen
ID: FEDORA-2017-f336ba205d
Distribution: Fedora
Plattformen: Fedora 26
Datum: Di, 22. August 2017, 23:32
Referenzen: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-7718
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12855
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12137
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12135
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-5579
http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2017-12136

Originalnachricht

-------------------------------------------------------------------------------
-
Fedora Update Notification
FEDORA-2017-f336ba205d
2017-08-22 19:36:30.389716
-------------------------------------------------------------------------------
-

Name : xen
Product : Fedora 26
Version : 4.8.1
Release : 6.fc26
URL : http://xen.org/
Summary : Xen is a virtual machine monitor
Description :
This package contains the XenD daemon and xm command line
tools, needed to manage virtual machines running under the
Xen hypervisor

-------------------------------------------------------------------------------
-
Update Information:

Qemu: serial: host memory leakage 16550A UART emulation [CVE-2017-5579]
(#1416162) Qemu: display: cirrus: OOB read access issue [CVE-2017-7718]
(#1443444) xen: various flaws (#1481765) multiple problems with transitive
grants [XSA-226, CVE-2017-12135] x86: PV privilege escalation via map_grant_ref
[XSA-227, CVE-2017-12137] grant_table: Race conditions with maptrack free list
handling [XSA-228, CVE-2017-12136] grant_table: possibly premature clearing of
GTF_writing / GTF_reading [XSA-230, CVE-2017-12855]
-------------------------------------------------------------------------------
-
References:

[ 1 ] Bug #1477651 - CVE-2017-12136 xsa228 xen: grant_table: Race conditions
with maptrack free list handling (XSA-228)
https://bugzilla.redhat.com/show_bug.cgi?id=1477651
[ 2 ] Bug #1477655 - CVE-2017-12135 xsa226 xen: possibly unbounded recursion
in grant table code (XSA-226)
https://bugzilla.redhat.com/show_bug.cgi?id=1477655
[ 3 ] Bug #1477657 - CVE-2017-12137 xsa227 xen: x86: PV privilege escalation
via map_grant_ref (XSA-227)
https://bugzilla.redhat.com/show_bug.cgi?id=1477657
[ 4 ] Bug #1481762 - CVE-2017-12855 xsa230 CVE-2017-12855 xen: grant_table:
possibly premature clearing of GTF_writing / GTF_reading (XSA-230)
https://bugzilla.redhat.com/show_bug.cgi?id=1481762
-------------------------------------------------------------------------------
-

This update can be installed with the "dnf" update program. Use
su -c 'dnf upgrade xen' at the command line.
For more information, refer to the dnf documentation available at
http://dnf.readthedocs.io/en/latest/command_ref.html#upgrade-command-label

All packages are signed with the Fedora Project GPG key. More details on the
GPG keys used by the Fedora Project can be found at
https://fedoraproject.org/keys
-------------------------------------------------------------------------------
-
_______________________________________________
package-announce mailing list -- package-announce@lists.fedoraproject.org
To unsubscribe send an email to package-announce-leave@lists.fedoraproject.org
Pro-Linux
Traut euch!
Neue Nachrichten
Werbung