File _patchinfo of Package patchinfo.33138

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.33138

<patchinfo incident="33138">
  <issue tracker="bnc" id="1214083">VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435)</issue>
  <issue tracker="bnc" id="1221332">VUL-0: CVE-2023-28746: xen: x86: Register File Data Sampling (XSA-452)</issue>
  <issue tracker="bnc" id="1221334">VUL-0: CVE-2024-2193: xen: GhostRace: Speculative Race Conditions (XSA-453)</issue>
  <issue tracker="bnc" id="1221984">VUL-0: CVE-2023-46842: xen: x86 HVM hypercalls may trigger Xen bug check (XSA-454)</issue>
  <issue tracker="bnc" id="1222302">VUL-0: CVE-2024-31142: xen: x86: Incorrect logic for BTC/SRSO mitigations (XSA-455)</issue>
  <issue tracker="bnc" id="1222453">VUL-0: CVE-2024-2201: xen: x86: Native Branch History Injection (XSA-456)</issue>
  <issue tracker="bnc" id="1227355">VUL-0: EMBARGOED: CVE-2024-31143: xen: double unlock in x86 guest IRQ handling (XSA-458)</issue>
  <issue tracker="cve" id="2023-46842"/>
  <issue tracker="cve" id="2023-28746"/>
  <issue tracker="cve" id="2024-2193"/>
  <issue tracker="cve" id="2024-2201"/>
  <issue tracker="cve" id="2024-31142"/>
  <issue tracker="cve" id="2024-31143"/>
  <packager>charlesa</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <description>This update for xen fixes the following issues:

- CVE-2023-28746: Register File Data Sampling (XSA-452, bsc#1221332)
- CVE-2023-46842: HVM hypercalls may trigger Xen bug check (XSA-454, bsc#1221984)
- CVE-2024-2193: Fixed GhostRace, a speculative race conditions. (XSA-453, bsc#1221334)
- CVE-2024-2201: Mitigation for Native Branch History Injection (XSA-456, bsc#1222453)
- CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455, bsc#1222302)
- CVE-2024-31143: Fixed double unlock in x86 guest IRQ handling (XSA-458, bsc#1227355)
</description>
<reboot_needed/>
</patchinfo>

Places

File _patchinfo of Package patchinfo.33138

Places