is

Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Xen . org security team on Nov 12

Xen Security Advisory CVE-2024-45819 / XSA-464
version 2

libxl leaks data to PVH guests via ACPI tables

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

PVH guests have their ACPI tables constructed by the toolstack. The
construction involves building the tables in local memory, which are
then copied into guest memory. While actually used...




is

Xen Security Advisory 463 v2 (CVE-2024-45818) - Deadlock in x86 HVM standard VGA handling

Posted by Xen . org security team on Nov 12

Xen Security Advisory CVE-2024-45818 / XSA-463
version 2

Deadlock in x86 HVM standard VGA handling

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

The hypervisor contains code to accelerate VGA memory accesses for HVM
guests, when the (virtual) VGA is in "standard" mode. Locking involved
there has an unusual discipline, leaving...




is

Re: Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Andrew Cooper on Nov 12

Data are leaked into the PVShim guest, but it is the shim Xen
(exclusively) which has access to the ACPI tables.

The guest which has been shim'd can't architecturally access the leaked
data.

~Andrew




is

Re: Xen Security Advisory 464 v2 (CVE-2024-45819) - libxl leaks data to PVH guests via ACPI tables

Posted by Demi Marie Obenour on Nov 12

Is this unconditional (perhaps because the relevant data gets zeroed out
by the shim), or does it only apply when the PV guest can't extract data
from the shim's memory? For instance, 32-bit PV guests aren't security
supported anymore, but the PV shim isn't supposed to rely on the
security of the shim itself, only of the rest of the system.




is

Aircuity is Approved Vendor for Real-Time Energy Management Program

Aircuity has been named a New York State Energy Research and Development Authority Qualified Vendor for the RTEM program.




is

Honeywell Launches Autonomous Building Sustainability Solution To Fight Rising Global Energy Consumption

Honeywell announced the launch of Honeywell Forge Energy Optimization, a cloud-based, closed-loop, machine learning solution.




is

Project Files: Episode 27 — U.S. Air Conditioning Distributors

When it comes to smart thermostats, USACD walks the walk and talks the talk.




is

BrainBox AI in Agreement to Acquire ABB’s Multisite Retail Energy Management System Integrator Business

BrainBox AI intends to integrate ABB’s MSR business and its installed base of 12,000-plus retail locations in its current operations.





is

Fujitsu Technical Service Advisors Conference Creates a Unified Front

Fujitsu’s Technical Service Advisors event was held to strengthen manufacturer-distributor relationships and empower in-field technical support staff.




is

HVAC Pros Discuss Their Favorite Diagnostic Troubleshooting Tools

HVACR technicians are special individuals. They have the intelligence, aptitude, and knack for problem-solving. In fact, they are expected to know how to diagnose and troubleshoot equipment of all types, sizes, and ages.




is

Extech, a division of Flir Systems Inc.: IAQ Meter

This handheld device displays CO, CO2, air temperature, rh, dew point, and wet bulb temperature measurements.




is

Extech, a division of Flir Systems Inc.: Digital Multimeter

Designed for HVAC and refrigeration professionals to view electrical and temperature readings, this product logs data remotely using the ExView® W-Series app on smartphones and tablets via Bluetooth.




is

Contractors Discuss How to Handle Tool Policies With Technicians

Summer cooling season is in full gear, which means that both technicians and their tools are being kept extremely busy.




is

Remove this email address

Posted by Jose Dominguez via Snort-sigs on Oct 22

Please remove this email address from future notifications




is

Re: Remove this email address

Posted by Joel Esler via Snort-sigs on Oct 23

Thank you for writing in.

Go to this URL to change user options or unsubscribe:
https://lists.snort.org/mailman/listinfo/snort-sigs

or by sending an email to snort-sigs-leave () lists snort org

Thanks!




is

Visitors notice

Let your visitors know about news and events on your website as often as possible. You need to keep your website up-to-date so that your visitors will get used to visiting your pages regularly. You can use RSS feeds to deliver new articles directly to your readers.




is

The NEWSMakers Podcast: Data Driven HVAC Decisions

Frank Bacchetta of Total Comfort Group talks about how his company uses data to improve the customer experience.




is

For Grocers, Collaboration with HVACR Contractors is Key

Grocers are looking to their refrigeration contractor partners to be the experts and make suggestions about how they can transition smoothly to the new low-GWP refrigeration technologies.




is

EPA: Refrigerant Reclamation On the Rise

EPA is counting on increased recovery and reclamation in order to maintain existing HVAC equipment, and finally, the numbers are going in the right direction.




is

A Way to Listen to Every Interaction Your Tech has with a Customer

AI technology can help HVAC contractors monitor each sales and repair call.




is

HVAC Q&A Episode 4: Overlooked Ways to Advertise Locally

Four marketing coaches share what makes an HVAC contractor stand out to potential customers.




is

Is it Time to Quit?

When starting a company on a new path, the goals and routes can be quite different than expected, so plan on taking a few detours and be willing to make adjustments. 




is

Distributor’s Gamble on VRF Technology Continues Paying Off 3 Decades Later

A visit to an ASHRAE event 30-plus years ago introduced David Heckler to VRF technology, and the distributor was won over. VRF systems now make up about half of his company’s business.




is

The AHR Expo Finds Atlanta Is Just Peachy

The upcoming expo will preview the future of the HVACR industry, with exhibitors from around the globe gathering to showcase new and upgraded products, technologies, and innovations.




is

HVAC Contractors Discuss the Business of Connected Products

Contractors who are embracing the technological advancements say ignoring a new neighborhood of home automation products could be a big mistake.




is

Owning the HVAC Workflow is Driving Record Valuations

Whether you are thinking about exploring strategic alternatives for your business or simply want to take it to the next level, private equity investors and strategic buyers are looking for tech-enabled companies.




is

Name Has Changed, But ASHB’s Mission Remains

CABA was founded in 1988. As ASHB, its mission — to empower connectivity among people, spaces, and technology to deliver a more livable, sustainable, and efficient connected world — remains unchanged.




is

Plug-and-play Zoning is Here to Stay

Zoning has been around for way longer than some of the newest, most popular technologies, like ductless systems, Wi-Fi thermostats, and Alexa; however, its adoption has been slow, comprising only about 5 percent of the market.




is

Alea Labs Inc.: Sensor Register

This product replaces standard supply registers with sensor-equipped registers that automatically measure each room’s dynamic conditions and optimally balance air distribution throughout the home.




is

Comfort is the HVAC Contractor’s Top Commodity

Customer comfort is the top sales driver in the HVAC industry, or at least it should be.




is

Disruptive Trends Change Zoning’s Role in HVACR

Zoning technology has experienced success in both residential and commercial applications of hot water and hydronic systems.




is

Project Files: Episode 24 — The Lido House

The project team and property management realized they needed to maximize open space for use by hotel guests. They chose LG’s Multi V™ 5 and Multi V™ S VRF systems, noted for energy efficiency and flexibility in design and installation options.




is

Zonefirst, Zonex Join Forces in Acquisition

“The acquisition of California Economizer and its Zonex Systems brings together the two oldest manufacturers of zoning dampers and zone-control systems,” said Dick Foster, the president of Zonefirst and its parent company, Trolex Corp.




is

Hybrid Heat Pumps Offer Practical Compromise

Hybrid systems offer a pathway that balances environmental concerns with practical considerations, ensuring a more sustainable and feasible transition towards cleaner energy sources.




is

HVAC Q&A Episode 1: Common Heat Pump Installation Mistakes

What are the most common mistakes in heat pump installs, and how do you avoid them? Here’s what experts had to say about heat pump installation — a must-watch as electrification continues to gain momentum.




is

Heat Pumps Experiencing a Renaissance in Maine

As more homeowners are ditching oil heaters and moving to heat pumps, the rest of the country can learn from the cold-climate success story.




is

A Favorite in Many Countries, Inverter Heat Pumps Offer Consistency and Energy Savings

Variable-speed heat pumps, which dominate the heat pump market in many countries, are getting more attention in the U.S. The NEWS asked several manufacturers about the benefits of the technology.




is

The Time is Now for HVAC Contractors to Install and Repair All-Electric Heat Pumps

All-electric options have come a long way since their inception, and there’s never been a better time to get on board.




is

Peterman Brothers Charity Showdown Supports Indianapolis-Area Community Organizations

Throughout March, voters will help the staff at Peterman Brothers select four charity partner organizations for 2023.




is

DOE Issues 95% AFUE Rule For New Gas Furnaces

Manufacturers will have five years, from the date the rule is published in the Federal Register, to ensure that new gas furnaces comply with the new minimum.




is

New Efficiency Rule Issued by DOE

The latest rule will require every mobile home gas furnace — and every new residential, non-weatherized gas furnace — to have a minimum annual fuel utilization efficiency (or AFUE) of 95% starting in late 2028.




is

Tips for Residential Heating Combustion Analysis

The biggest tip is that combustion analysis should be the first and last thing completed during any heating appliance repair.




is

Risks Digest 34.35

Posted by RISKS List Owner on Jul 11

RISKS-LIST: Risks-Forum Digest Thursday 11 Jun 2024 Volume 34 : Issue 35

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.35>
The current issue can also be found at
<...




is

Risks Digest 34.36

Posted by RISKS List Owner on Jul 21

RISKS-LIST: Risks-Forum Digest Sunday 21 Jul 2024 Volume 34 : Issue 36

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.36>
The current issue can also be found at
<...




is

Risks Digest 34.37

Posted by RISKS List Owner on Jul 25

RISKS-LIST: Risks-Forum Digest Thursday 25 Jul 2024 Volume 34 : Issue 37

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.37>
The current issue can also be found at
<...




is

Risks Digest 34.38

Posted by RISKS List Owner on Jul 29

RISKS-LIST: Risks-Forum Digest Monday 29 Jul 2024 Volume 34 : Issue 38

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.38>
The current issue can also be found at
<...




is

Risks Digest 34.39

Posted by RISKS List Owner on Aug 03

RISKS-LIST: Risks-Forum Digest Saturday 3 Aug 2024 Volume 34 : Issue 39

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.39>
The current issue can also be found at
<...




is

Risks Digest 34.40

Posted by RISKS List Owner on Aug 14

RISKS-LIST: Risks-Forum Digest Wednesday 14 Aug 2024 Volume 34 : Issue 40

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.40>
The current issue can also be found at
<...




is

Risks Digest 34.41

Posted by RISKS List Owner on Aug 24

RISKS-LIST: Risks-Forum Digest Saturday 24 Aug 2024 Volume 34 : Issue 41

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS
(comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats,
etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.41>
The current issue can also be found at
<...




is

Risks Digest 34.42

Posted by RISKS List Owner on Aug 26

RISKS-LIST: Risks-Forum Digest Monday 26 Aug 2024 Volume 34 : Issue 42

ACM FORUM ON RISKS TO THE PUBLIC IN COMPUTERS AND RELATED SYSTEMS (comp.risks)
Peter G. Neumann, founder and still moderator

***** See last item for further information, disclaimers, caveats, etc. *****
This issue is archived at <http://www.risks.org> as
<http://catless.ncl.ac.uk/Risks/34.42>
The current issue can also be found at
<...