add Xen page-table isolation (XPTI) mitigation and Branch Target Injection (BTI) mitigation for XSA-254 DoS via non-preemptable L3/L4 pagetable freeing [XSA-252] (#1549568) grant table v2 -> v1 transition may crash Xen [XSA-255] (#1549570) x86 PVH guest without LAPIC may DoS the host [XSA-256] (#1549572)
Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:
sudo dnf upgrade --refresh --advisory=FEDORA-2018-c553a586c8Please login to add feedback.
This update has been submitted for testing by myoung.
This update has been pushed to testing.
Dom0 boots notably slower. Is there nopti kernel option analogue for Xen page-table isolation?
Looks like a bit faster boot with xpti=false.
No issues.
works for me
no regressions noted
This update has been submitted for batched by bodhi.
This update has been submitted for stable by bodhi.
This update has been pushed to stable.