FEDORA-2021-d68ed12e46 — security update for xen

stable

xen-4.14.2-3.fc34

FEDORA-2021-d68ed12e46 created by myoung 3 years ago for Fedora 34

IOMMU page mapping issues on x86 [XSA-378, CVE-2021-28694, CVE-2021-28695, CVE-2021-28696] (#1997531) (#1997568) (#1997537) grant table v2 status pages may remain accessible after de-allocation [XSA-379, CVE-2021-28697] (#1997520) long running loops in grant table handling [XSA-380, CVE-2021-28698] (#1997526) inadequate grant-v2 status frames array bounds check [XSA-382, CVE-2021-28699] (#1997523) xen/arm: No memory limit for dom0less domUs [XSA-383, CVE-2021-28700] (#1997527) grub x86_64-efi modules now go into /boot/grub2

How to install

Updates may require up to 24 hours to propagate to mirrors. If the following command doesn't work, please retry later:

sudo dnf upgrade --refresh --advisory=FEDORA-2021-d68ed12e46

This update has been submitted for testing by myoung.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update's test gating status has been changed to 'waiting'.

3 years ago

This update's test gating status has been changed to 'ignored'.

3 years ago

This update has been pushed to testing.

3 years ago

besser82 commented & provided feedback 3 years ago

karma

Works great! LGTM! =)

pwalter commented & provided feedback 3 years ago

karma

Works

This update can be pushed to stable now if the maintainer wishes

3 years ago

This update has been submitted for stable by bodhi.

3 years ago

This update has been pushed to stable.

3 years ago

Please login to add feedback.

Metadata

Type

security

Severity

medium

Karma

Signed

Content Type

RPM

Test Gating

ignored

Builds

xen-4.14.2-3.fc34

Settings

Unstable by Karma

-3

Stable by Karma

Stable by Time

7 days

Dates

submitted

3 years ago

in testing

3 years ago

in stable

3 years ago

BZ#1997519 CVE-2021-28697 xen: malicious guest may be able to elevate its privileges leads to DoS

BZ#1997520 CVE-2021-28697 xen: malicious guest may be able to elevate its privileges leads to DoS [fedora-all]

BZ#1997522 CVE-2021-28699 xen: malicious guest kernel leads to DoS

BZ#1997523 CVE-2021-28699 xen: malicious guest kernel leads to DoS [fedora-all]

BZ#1997524 CVE-2021-28698 xen: malicious kernels lead to DoS

BZ#1997525 CVE-2021-28700 xen: malicious dom0less guest could drive Xen out of memory and leads to DoS

BZ#1997526 CVE-2021-28698 xen: malicious kernels lead to DoS [fedora-all]

BZ#1997527 CVE-2021-28700 xen: malicious dom0less guest could drive Xen out of memory and leads to DoS [fedora-all]

BZ#1997529 CVE-2021-28694 xen: failed to prevent guests from undoing/replacing such mappings

BZ#1997531 CVE-2021-28694 xen: failed to prevent guests from undoing/replacing such mappings [fedora-all]

BZ#1997535 CVE-2021-28696 xen: physical device from a guest allowing to access memory

BZ#1997537 CVE-2021-28696 xen: physical device from a guest allowing to access memory [fedora-all]

BZ#1997567 CVE-2021-28695 xen: discontinuous range is specified by firmware leads to vulnerability

BZ#1997568 CVE-2021-28695 xen: discontinuous range is specified by firmware leads to vulnerability [fedora-all]

xen-4.14.2-3.fc34

Automated Test Results

ignored