FEDORA-2016-1b868c23a9 — security update for xen

stable

xen-4.7.1-5.fc25

FEDORA-2016-1b868c23a9 created by myoung 8 years ago for Fedora 25

x86 CMPXCHG8B emulation fails to ignore operand size override [XSA-200, CVE-2016-9932] (#1404262)

ARM guests may induce host asynchronous abort [XSA-201, CVE-2016-9815,

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2016-1b868c23a9

This update has been submitted for testing by myoung.

8 years ago

This update has obsoleted xen-4.7.1-4.fc25, and has inherited its bugs and notes.

8 years ago

This update has been pushed to testing.

8 years ago

filiperosset commented & provided feedback 8 years ago

karma

no regressions noted

cserpentis commented & provided feedback 8 years ago

karma

works for me

This update has been submitted for stable by bodhi.

8 years ago

nb commented & provided feedback 8 years ago

karma

wfm

This update has been pushed to stable.

8 years ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

None

Autopush Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

disabled

Dates

submitted

8 years ago

in testing

8 years ago

in stable

8 years ago

Builds

xen-4.7.1-5.fc25

BZ#1334398 CVE-2016-9921 CVE-2016-9922 Qemu: display: cirrus_vga: a divide by zero in cirrus_do_copy

BZ#1399055 CVE-2016-9921 CVE-2016-9922 xen: qemu: Divide by zero vulnerability in cirrus_do_copy [fedora-all]

BZ#1399745 CVE-2016-9932 xsa200 xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200)

BZ#1399746 CVE-2016-9815 CVE-2016-9816 CVE-2016-9817 CVE-2016-9818 xsa201 xen: ARM guests may induce host asynchronous abort (XSA-201)

BZ#1399747 CVE-2016-9815 CVE-2016-9816 CVE-2016-9817 CVE-2016-9818 xsa201 xen: ARM guests may induce host asynchronous abort (XSA-201) [fedora-all]

BZ#1402276 CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 Qemu: 9pfs: memory leakage via proxy/handle callbacks

BZ#1402278 CVE-2016-9913 CVE-2016-9914 CVE-2016-9915 CVE-2016-9916 xen: Qemu: 9pfs: memory leakage via proxy/handle callbacks [fedora-all]

BZ#1404262 CVE-2016-9932 xsa200 xen: x86 CMPXCHG8B emulation fails to ignore operand size override (XSA-200) [fedora-all]

xen-4.7.1-5.fc25

Automated Test Results

None