Stay Secure with the Latest Linux Advisories
Refine advisories
X Clear Filters
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Loading...
Explore Latest Linux Security advisories
We found -6 articles for you...
100
security advisorycritical issueimportantopenSUSE Leap Micro 5.2: SUSE-SU-2022:2599-2 Important Xen Fixes
An update that fixes 10 vulnerabilities is now available. . SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2022:2599-2 Rating: important References: #1027519 #1199965 #1199966 #1200549 #1201394 #1201469 Cross-References: CVE-2022-21123 CVE-2022-21125 CVE-2022-21166 CVE-2022-23816 CVE-2022-23825 CVE-2022-26362 CVE-2022-26363 CVE-2022-26364 CVE-2022-29900 CVE-2022-33745 CVSS scores: CVE-2022-21123 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-21123 (SUSE): 6.1 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N CVE-2022-21125 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-21125 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-21166 (NVD) : 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-21166 (SUSE): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-23816 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-23825 (NVD) : 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-23825 (SUSE): 5.6 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-26362 (NVD) : 6.4 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-26362 (SUSE): 7.4 CVSS:3.1/AV:L/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26363 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-26363 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-26364 (NVD) : 6.7 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H CVE-2022-26364 (SUSE): 8.1 CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:H CVE-2022-29900 (NVD) : 6.5CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2022-29900 (SUSE): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2022-33745 (NVD) : 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2022-33745 (SUSE): 7.5 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H Affected Products: openSUSE Leap Micro 5.2 ______________________________________________________________________________ An update that fixes 10 vulnerabilities is now available. Description: This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469). Fixed several upstream bugs (bsc#1027519). Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - openSUSE Leap Micro 5.2: zypper in -t patch openSUSE-Leap-Micro-5.2-2022-2599=1 Package List: - openSUSE Leap Micro 5.2 (x86_64): xen-debugsource-4.14.5_04-150300.3.32.1 xen-libs-4.14.5_04-150300.3.32.1 xen-libs-debuginfo-4.14.5_04-150300.3.32.1 References: https://www.suse.com/security/cve/CVE-2022-21123.html https://www.suse.com/security/cve/CVE-2022-21125.html https://www.suse.com/security/cve/CVE-2022-21166.html https://www.suse.com/security/cve/CVE-2022-23816.html https://www.suse.com/security/cve/CVE-2022-23825.html https://www.suse.com/security/cve/CVE-2022-26362.html https://www.suse.com/security/cve/CVE-2022-26363.html https://www.suse.com/security/cve/CVE-2022-26364.html https://www.suse.com/security/cve/CVE-2022-29900.html https://www.suse.com/security/cve/CVE-2022-33745.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1199965 https://bugzilla.suse.com/1199966 https://bugzilla.suse.com/1200549 https://bugzilla.suse.com/1201394 https://bugzilla.suse.com/1201469 . A notable enhancement for Fedora addresses and fixes 12 significant vulnerabilities in libvirt, boosting overall network safety.. openSUSE Updates, Xen Security Fixes, Important Security Patch. . Severity: Important. LinuxSecurity.com Team
Sep 01, 2022
•Important
SuSE
100
security advisorysecurity updateimportantSUSE 12-SP5: 2021:1580-1 Critical: Issues with Xen Process Management
An update that contains security fixes can now be installed. . SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2021:1580-1 Rating: important References: #1183790 #1185021 #1185196 Affected Products: SUSE Linux Enterprise Software Development Kit 12-SP5 SUSE Linux Enterprise Server 12-SP5 ______________________________________________________________________________ An update that contains security fixes can now be installed. Description: This update for xen fixes the following issues: - A recent systemd update caused a regression in 'xenstored.service' systemd now fails to track units that use systemd-notify. (bsc#1183790) - Add a fix to delay between the call to 'systemd-notify' and the final exit of the wrapper script. (bsc#1185021, bsc#1185196) - Run xenstored in a separeately, which will make processing of large and/or concurrent batches of xenstore accesses more robust. (fate#323663) Special Instructions and Notes: Please reboot the system after installing this update. Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Software Development Kit 12-SP5: zypper in -t patch SUSE-SLE-SDK-12-SP5-2021-1580=1 - SUSE Linux Enterprise Server 12-SP5: zypper in -t patch SUSE-SLE-SERVER-12-SP5-2021-1580=1 Package List: - SUSE Linux Enterprise Software Development Kit 12-SP5 (aarch64 x86_64): xen-debugsource-4.12.4_10-3.42.1 xen-devel-4.12.4_10-3.42.1 - SUSE Linux Enterprise Server 12-SP5 (x86_64): xen-4.12.4_10-3.42.1 xen-debugsource-4.12.4_10-3.42.1 xen-doc-html-4.12.4_10-3.42.1 xen-libs-32bit-4.12.4_10-3.42.1 xen-libs-4.12.4_10-3.42.1 xen-libs-debuginfo-32bit-4.12.4_10-3.42.1 xen-libs-debuginfo-4.12.4_10-3.42.1 xen-tools-4.12.4_10-3.42.1 xen-tools-debuginfo-4.12.4_10-3.42.1 xen-tools-domU-4.12.4_10-3.42.1 xen-tools-domU-debuginfo-4.12.4_10-3.42.1 References: https://bugzilla.suse.com/1183790 https://bugzilla.suse.com/1185021 https://bugzilla.suse.com/1185196 . SUSE Security Patch for xen resolves process vulnerabilities. Apply updates via zypper patch or YaST. A reboot is advised.. SUSE Linux Enterprise, xen fixes, security updates, systemd regression. . Severity: Critical. LinuxSecurity.com Team
May 12, 2021
•Critical
SuSE
100
security advisorymoderate severitysystem updateSUSE: 2020:3914-1 Moderate: Multiple Xen Fixes for OpenStack
An update that solves 8 vulnerabilities and has two fixes is now available. . SUSE Security Update: Security update for xen ______________________________________________________________________________ Announcement ID: SUSE-SU-2020:3914-1 Rating: moderate References: #1027519 #1176782 #1179477 #1179496 #1179498 #1179501 #1179502 #1179506 #1179514 #1179516 Cross-References: CVE-2020-29130 CVE-2020-29480 CVE-2020-29481 CVE-2020-29483 CVE-2020-29484 CVE-2020-29566 CVE-2020-29570 CVE-2020-29571 Affected Products: SUSE OpenStack Cloud Crowbar 9 SUSE OpenStack Cloud 9 SUSE Linux Enterprise Server for SAP 12-SP4 SUSE Linux Enterprise Server 12-SP4-LTSS ______________________________________________________________________________ An update that solves 8 vulnerabilities and has two fixes is now available. Description: This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115). - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). - CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325). - CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). - CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348). - CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358). - CVE-2020-29571: Fixed an issue where FIFO event channels control structure ordering (bsc#1179516 XSA-359). - CVE-2020-29130: Fixed an out-of-bounds access while processing ARP packets (bsc#1179477). - Fixed an issue wheredump-core shows missing nr_pages during core (bsc#1176782). - Multiple other bugs (bsc#1027519) Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE OpenStack Cloud Crowbar 9: zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-9-2020-3914=1 - SUSE OpenStack Cloud 9: zypper in -t patch SUSE-OpenStack-Cloud-9-2020-3914=1 - SUSE Linux Enterprise Server for SAP 12-SP4: zypper in -t patch SUSE-SLE-SAP-12-SP4-2020-3914=1 - SUSE Linux Enterprise Server 12-SP4-LTSS: zypper in -t patch SUSE-SLE-SERVER-12-SP4-LTSS-2020-3914=1 Package List: - SUSE OpenStack Cloud Crowbar 9 (x86_64): xen-4.11.4_16-2.48.1 xen-debugsource-4.11.4_16-2.48.1 xen-doc-html-4.11.4_16-2.48.1 xen-libs-32bit-4.11.4_16-2.48.1 xen-libs-4.11.4_16-2.48.1 xen-libs-debuginfo-32bit-4.11.4_16-2.48.1 xen-libs-debuginfo-4.11.4_16-2.48.1 xen-tools-4.11.4_16-2.48.1 xen-tools-debuginfo-4.11.4_16-2.48.1 xen-tools-domU-4.11.4_16-2.48.1 xen-tools-domU-debuginfo-4.11.4_16-2.48.1 - SUSE OpenStack Cloud 9 (x86_64): xen-4.11.4_16-2.48.1 xen-debugsource-4.11.4_16-2.48.1 xen-doc-html-4.11.4_16-2.48.1 xen-libs-32bit-4.11.4_16-2.48.1 xen-libs-4.11.4_16-2.48.1 xen-libs-debuginfo-32bit-4.11.4_16-2.48.1 xen-libs-debuginfo-4.11.4_16-2.48.1 xen-tools-4.11.4_16-2.48.1 xen-tools-debuginfo-4.11.4_16-2.48.1 xen-tools-domU-4.11.4_16-2.48.1 xen-tools-domU-debuginfo-4.11.4_16-2.48.1 - SUSE Linux Enterprise Server for SAP 12-SP4 (x86_64): xen-4.11.4_16-2.48.1 xen-debugsource-4.11.4_16-2.48.1 xen-doc-html-4.11.4_16-2.48.1 xen-libs-32bit-4.11.4_16-2.48.1 xen-libs-4.11.4_16-2.48.1 xen-libs-debuginfo-32bit-4.11.4_16-2.48.1 xen-libs-debuginfo-4.11.4_16-2.48.1 xen-tools-4.11.4_16-2.48.1 xen-tools-debuginfo-4.11.4_16-2.48.1 xen-tools-domU-4.11.4_16-2.48.1 xen-tools-domU-debuginfo-4.11.4_16-2.48.1 - SUSE Linux Enterprise Server 12-SP4-LTSS (x86_64): xen-4.11.4_16-2.48.1 xen-debugsource-4.11.4_16-2.48.1 xen-doc-html-4.11.4_16-2.48.1 xen-libs-32bit-4.11.4_16-2.48.1 xen-libs-4.11.4_16-2.48.1 xen-libs-debuginfo-32bit-4.11.4_16-2.48.1 xen-libs-debuginfo-4.11.4_16-2.48.1 xen-tools-4.11.4_16-2.48.1 xen-tools-debuginfo-4.11.4_16-2.48.1 xen-tools-domU-4.11.4_16-2.48.1 xen-tools-domU-debuginfo-4.11.4_16-2.48.1 References: https://www.suse.com/security/cve/CVE-2020-29130.html https://www.suse.com/security/cve/CVE-2020-29480.html https://www.suse.com/security/cve/CVE-2020-29481.html https://www.suse.com/security/cve/CVE-2020-29483.html https://www.suse.com/security/cve/CVE-2020-29484.html https://www.suse.com/security/cve/CVE-2020-29566.html https://www.suse.com/security/cve/CVE-2020-29570.html https://www.suse.com/security/cve/CVE-2020-29571.html https://bugzilla.suse.com/1027519 https://bugzilla.suse.com/1176782 https://bugzilla.suse.com/1179477 https://bugzilla.suse.com/1179496 https://bugzilla.suse.com/1179498 https://bugzilla.suse.com/1179501 https://bugzilla.suse.com/1179502 https://bugzilla.suse.com/1179506 https://bugzilla.suse.com/1179514 https://bugzilla.suse.com/1179516 . Elevate your SUSE environment by applying the most recent Xen patches that rectify various security flaws and essential enhancements.. SUSE Updates, Xen Security Fixes, OpenStack Security, SUSE Cloud Advisory. . LinuxSecurity.com Team
Dec 22, 2020
SuSE
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Community Poll
What got you started with Linux?
Search Topics
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!