Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2021:3852-1 Security Fix for Moderate Xen Threat Mitigation

suse
Calendar Grey December 1, 2021
Dist Suse Esm H88
A recent patch from Debian fixes multiple vulnerabilities in ntp, reinforcing system security with a medium risk assessment.
An update that fixes 7 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363). - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557). - CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559). - CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554). - Fixed 15sp4 uefi fv guest on 12sp5 host unable to bootup with sriov pci device plugin (bsc#1191510). - Upstream bug fixes (bsc#1027519).

Topics%20covered

Topics Covered

security advisory moderate update threat system integrity SUSE xen

References

#1027519 #1191363 #1191510 #1192554 #1192557

#1192559

Cross- CVE-2021-28702 CVE-2021-28704 CVE-2021-28705

CVE-2021-28706 CVE-2021-28707 CVE-2021-28708

CVE-2021-28709

CVSS scores:

CVE-2021-28702 (NVD) : 7.6 CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

CVE-2021-28704 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28705 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28706 (NVD) : 8.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

CVE-2021-28706 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28707 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

CVE-2021-28708 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Announcement ID: SUSE-SU-2021:3852-1
Rating: moderate

Topics%20covered

Topics Covered

security advisory moderate update threat system integrity SUSE xen

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here