[qubes-users] QSB #059: Multiple Xen issues (XSA-337, XSA-340, XSA-343)

adw · September 22, 2020, 3:08pm

Dear Qubes Community,

We have just published Qubes Security Bulletin (QSB) #059: Multiple Xen
issues (XSA-337, XSA-340, XSA-343). The text of this QSB is reproduced
below. This QSB and its accompanying signatures will always be available
in the Qubes Security Pack (qubes-secpack).

View QSB #059 in the qubes-secpack:

github.com

QubesOS/qubes-secpack/blob/master/QSBs/qsb-059-2020.txt



             ---===[ Qubes Security Bulletin #59 ]===---

                             2020-09-22


           Multiple Xen issues (XSA-337, XSA-340, XSA-343)


Summary
========

On 2020-09-22, the Xen Security Team published the following Xen
Security Advisories (XSAs):

XSA-337 [1] "PCI passthrough code reading back hardware registers":
| Code paths in Xen's MSI handling have been identified which act on
| unsanitized values read back from device hardware registers.  While
| devices strictly compliant with PCI specifications shouldn't be able

This file has been truncated. show original

Learn about the qubes-secpack, including how to obtain, verify, and read it:

View all past QSBs:

View the associated XSAs in the XSA Tracker:

```

---===[ Qubes Security Bulletin #59 ]===---

2020-09-22

Multiple Xen issues (XSA-337, XSA-340, XSA-343)

Summary