FEDORA-2018-1a467757ce — security update for xen

xen-4.9.2-6.fc27

FEDORA-2018-1a467757ce created by myoung a year ago for Fedora 27

stable

preemption checks bypassed in x86 PV MM handling [XSA-264, CVE-2018-12891] x86: #DB exception safety check can be triggered by a guest [XSA-265, CVE-2018-12893] libxl fails to honour readonly flag on HVM emulated SCSI disks [XSA-266, CVE-2018-12892]

Speculative register leakage from lazy FPU context switching [XSA-267, CVE-2018-3665] fix for change in iasl output

How to install

sudo dnf upgrade --advisory=FEDORA-2018-1a467757ce

This update has been submitted for testing by myoung. a year ago

This update has obsoleted [xen-4.9.2-5.fc27](https://bodhi.fedoraproject.org/updates/FEDORA-2018-f82bcf6850), and has inherited its bugs and notes. a year ago

This update has been pushed to testing. a year ago

pwalter commented & provided feedback a year ago

karma

Works

This update has reached 14 days in testing and can be pushed to stable now if the maintainer wishes a year ago

This update has been submitted for batched by myoung. a year ago

This update has been submitted for stable by bodhi. a year ago

This update has been pushed to stable. a year ago

Please login to add feedback.

Metadata

Type

security

Karma

Signed

Content Type

RPM

Test Gating

Builds

xen-4.9.2-6.fc27

Settings

Unstable by Karma

-3

Stable by Karma

Dates

submitted

a year ago

in testing

a year ago

in stable

a year ago

BZ#1590979 CVE-2018-12893 xen: x86 DB exception safety check can be triggered by a guest (XSA-265)

BZ#1590984 CVE-2018-12892 xsa-266 xen: libxl fails to honour readonly flag on HVM emulated SCSI disks

BZ#1590985 CVE-2018-12891 xen: preemption checks bypassed in x86 PV MM handling (XSA-264)

BZ#1595957 CVE-2018-12892 xen: xsa-266 xen: libxl fails to honour readonly flag on HVM emulated SCSI disks [fedora-all]

BZ#1595958 CVE-2018-12893 xen: x86 DB exception safety check can be triggered by a guest (XSA-265) [fedora-all]

BZ#1595959 CVE-2018-12891 xen: preemption checks bypassed in x86 PV MM handling (XSA-264) [fedora-all]

xen-4.9.2-6.fc27

How to install

Automated Test Results