File _patchinfo of Package patchinfo.21904

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.21904

<patchinfo incident="21904">
  <issue tracker="bnc" id="1027519">Xen: Missing upstream bug fixes</issue>
  <issue tracker="bnc" id="1191363">VUL-0: CVE-2021-28702: xen: PCI devices with RMRRs not deassigned correctly (XSA-386)</issue>
  <issue tracker="bnc" id="1192554">VUL-0: EMBARGOED: CVE-2021-28706: xen: guests may exceed their designated memory limit (XSA-385)</issue>
  <issue tracker="bnc" id="1192557">VUL-0: EMBARGOED: CVE-2021-28704,CVE-2021-28707,CVE-2021-28708: xen: PoD operations on misaligned GFNs (XSA-388)</issue>
  <issue tracker="bnc" id="1192559">VUL-0: EMBARGOED: CVE-2021-28705,CVE-2021-28709: xen: issues with partially successful P2M updates on x86 (XSA-389)</issue>
  <issue tracker="cve" id="2021-28702"/>
  <issue tracker="cve" id="2021-28704"/>
  <issue tracker="cve" id="2021-28705"/>
  <issue tracker="cve" id="2021-28706"/>
  <issue tracker="cve" id="2021-28707"/>
  <issue tracker="cve" id="2021-28708"/>
  <issue tracker="cve" id="2021-28709"/>
  <packager>charlesa</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <description>This update for xen fixes the following issues:

- CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363).
- CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557).
- CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559).
- CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554).

- Update to Xen 4.14.3 bug fix release (bsc#1027519).
</description>
  <reboot_needed/>
</patchinfo>

Places

File _patchinfo of Package patchinfo.21904

Places