Explore top 10 tips to secure your open-source projects now. Read More

×
Alerts This Week
Warning Icon 1 488
Alerts This Week
Warning Icon 1 488

openSUSE Leap Micro 5.2: SUSE-SU-2022:2599-2 Important Xen Fixes

suse
Calendar Grey September 1, 2022
Scroller Suse
A notable enhancement for Fedora addresses and fixes 12 significant vulnerabilities in libvirt, boosting overall network safety.
An update that fixes 10 vulnerabilities is now available

Summary

This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469). Fixed several upstream bugs (bsc#1027519).

Topics%20covered

Topics Covered

security advisory critical issue important system update xen fixes openSUSE Leap Micro

References

#1027519 #1199965 #1199966 #1200549 #1201394

#1201469

Cross- CVE-2022-21123 CVE-2022-21125 CVE-2022-21166

CVE-2022-23816 CVE-2022-23825 CVE-2022-26362

CVE-2022-26363 CVE-2022-26364 CVE-2022-29900

CVE-2022-33745

CVSS scores:

CVE-2022-21123 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21123 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

CVE-2022-21125 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21125 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

CVE-2022-21166 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-21166 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CVE-2022-23816 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2022:2599-2
Rating: important

Topics%20covered

Topics Covered

security advisory critical issue important system update xen fixes openSUSE Leap Micro

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.