Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
202
security advisorymoderatexenopenSUSE 2025:01850-1 Moderate: Security Update for Xen
An update that solves three vulnerabilities can now be installed.. # Security update for xen Announcement ID: SUSE-SU-2025:01850-1 Release Date: 2025-06-10T01:33:37Z Rating: moderate References: * bsc#1234282 * bsc#1238043 * bsc#1243117 Cross-References: * CVE-2024-28956 * CVE-2024-53241 * CVE-2025-1713 CVSS scores: * CVE-2024-28956 ( SUSE ): 5.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-28956 ( SUSE ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2024-28956 ( NVD ): 5.7 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X * CVE-2024-28956 ( NVD ): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N * CVE-2024-53241 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N * CVE-2024-53241 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N * CVE-2025-1713 ( SUSE ): 6.8 CVSS:4.0/AV:L/AC:H/AT:P/PR:L/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:H * CVE-2025-1713 ( SUSE ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H Affected Products: * openSUSE Leap 15.3 * SUSE Linux Enterprise Micro 5.1 * SUSE Linux Enterprise Micro 5.2 * SUSE Linux Enterprise Micro for Rancher 5.2 An update that solves three vulnerabilities can now be installed. ## Description: This update for xen fixes the following issues: * CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117) * CVE-2024-53241: Fixed Xen hypercall page unsafe against speculative attacks (XSA-466) (bsc#1234282) * CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043) ## Special Instructions and Notes: * Please reboot the system after installing this update. ## Patch Instructions: To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypperpatch". Alternatively you can run the command listed for your product: * openSUSE Leap 15.3 zypper in -t patch SUSE-2025-1850=1 * SUSE Linux Enterprise Micro 5.1 zypper in -t patch SUSE-SUSE-MicroOS-5.1-2025-1850=1 * SUSE Linux Enterprise Micro 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1850=1 * SUSE Linux Enterprise Micro for Rancher 5.2 zypper in -t patch SUSE-SUSE-MicroOS-5.2-2025-1850=1 ## Package List: * openSUSE Leap 15.3 (aarch64 x86_64 i586) * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-devel-4.14.6_24-150300.3.87.1 * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-tools-domU-4.14.6_24-150300.3.87.1 * xen-tools-domU-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (x86_64) * xen-libs-32bit-4.14.6_24-150300.3.87.1 * xen-libs-32bit-debuginfo-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (aarch64 x86_64) * xen-tools-4.14.6_24-150300.3.87.1 * xen-4.14.6_24-150300.3.87.1 * xen-tools-debuginfo-4.14.6_24-150300.3.87.1 * xen-doc-html-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (noarch) * xen-tools-xendomains-wait-disk-4.14.6_24-150300.3.87.1 * openSUSE Leap 15.3 (aarch64_ilp32) * xen-libs-64bit-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-64bit-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro 5.1 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro 5.2 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 * SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64) * xen-debugsource-4.14.6_24-150300.3.87.1 * xen-libs-debuginfo-4.14.6_24-150300.3.87.1 * xen-libs-4.14.6_24-150300.3.87.1 ## References: * https://www.suse.com/security/cve/CVE-2024-28956.html * https://www.suse.com/security/cve/CVE-2024-53241.html *https://www.suse.com/security/cve/CVE-2025-1713.html * https://bugzilla.suse.com/show_bug.cgi?id=1234282 * https://bugzilla.suse.com/show_bug.cgi?id=1238043 * https://bugzilla.suse.com/show_bug.cgi?id=1243117 . This bulletin outlines a significant security patch for Fedora targeting various weaknesses in OpenSSL.. openSUSE, Xen, security update, patch, Intel CPU. . LinuxSecurity.com Team
Jun 10, 2025
OpenSUSE
89
security advisorycriticalFedoraFedora 34: FEDORA-2022-64b2c02d29 Critical Xen Hypervisor Security Update
update to xen-4.14.5 ---- Racy interactions between dirty vram tracking and paging log dirty hypercalls [XSA-397, CVE-2022-26356] race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357] IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues [XSA-400, CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361]. --------------------------------------------------------------------------------Fedora Update Notification FEDORA-2022-64b2c02d29 2022-05-02 07:30:26.553347 --------------------------------------------------------------------------------Name : xen Product : Fedora 34 Version : 4.14.5 Release : 1.fc34 URL : https://xenproject.org/ Summary : Xen is a virtual machine monitor Description : This package contains the XenD daemon and xm command line tools, needed to manage virtual machines running under the Xen hypervisor --------------------------------------------------------------------------------Update Information: update to xen-4.14.5 ---- Racy interactions between dirty vram tracking and paging log dirty hypercalls [XSA-397, CVE-2022-26356] race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357] IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues [XSA-400, CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361] --------------------------------------------------------------------------------ChangeLog: * Fri Apr 15 2022 Michael Young - 4.14.5-1 - update to xen-4.14.5 remove or adjust patches now included or superceded upstream * Wed Apr 6 2022 Michael Young - 4.14.4-3 - Racy interactions between dirty vram tracking and paging log dirty hypercalls [XSA-397, CVE-2022-26356] - race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357] - IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues [XSA-400, CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361] --------------------------------------------------------------------------------This update can be installed with the "dnf" update program. Use su-c 'dnf upgrade --advisory FEDORA-2022-64b2c02d29' at the command line. For more information, refer to the dnf documentation available at https://dnf.readthedocs.io/en/latest/command_ref.html All packages are signed with the Fedora Project GPG key. More details on the GPG keys used by the Fedora Project can be found at https://fedoraproject.org/security/ --------------------------------------------------------------------------------_______________________________________________ package-announce mailing list --
May 02, 2022
•Critical
Fedora
100
security advisorysecurity fiximportantSUSE: 2012:1129-1 Important: Fix For Xen Hypercall And Qemu Issues
An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available. An update that fixes two vulnerabilities is now available.. SUSE Security Update: Security update for Xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2012:1129-1 Rating: important References: #777084 #777090 Cross-References: CVE-2012-3494 CVE-2012-3515 Affected Products: SUSE Linux Enterprise Server 10 SP3 LTSS ______________________________________________________________________________ An update that fixes two vulnerabilities is now available. Description: XEN was updated to fix multiple bugs and security issues. The following security issues have been fixed: * CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17) Security Issue references: * CVE-2012-3494 * CVE-2012-3515 Indications: Everyone using XEN should update. Package List: - SUSE Linux Enterprise Server 10 SP3 LTSS (i586 x86_64): xen-3.2.3_17040_28-0.6.13.5 xen-devel-3.2.3_17040_28-0.6.13.5 xen-doc-html-3.2.3_17040_28-0.6.13.5 xen-doc-pdf-3.2.3_17040_28-0.6.13.5 xen-doc-ps-3.2.3_17040_28-0.6.13.5 xen-kmp-debug-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-default-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-kdump-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-smp-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-libs-3.2.3_17040_28-0.6.13.5 xen-tools-3.2.3_17040_28-0.6.13.5 xen-tools-domU-3.2.3_17040_28-0.6.13.5 xen-tools-ioemu-3.2.3_17040_28-0.6.13.5 - SUSE Linux Enterprise Server 10 SP3 LTSS (x86_64): xen-libs-32bit-3.2.3_17040_28-0.6.13.5 - SUSE Linux Enterprise Server 10 SP3 LTSS (i586): xen-kmp-bigsmp-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-kdumppae-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-vmi-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 xen-kmp-vmipae-3.2.3_17040_28_2.6.16.60_0.83.169-0.6.13.5 References: https://www.suse.com/security/cve/CVE-2012-3494.html https://www.suse.com/security/cve/CVE-2012-3515.html https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 https://login.microfocus.com/nidp/app/login?sid=0 . Recently, a Xen update has been announced addressing two critical security flaws for SUSE systems.. Xen Security Update,SUSE Security Advisory,Important Vulnerability Fixes. . Severity: Important. LinuxSecurity.com Team
Sep 06, 2012
•Important
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!