File _patchinfo of Package patchinfo.30241

Overview Repositories Revisions Requests Users Attributes Meta

File _patchinfo of Package patchinfo.30241

<patchinfo incident="30241">
  <issue tracker="bnc" id="1214083">VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435)</issue>
  <issue tracker="bnc" id="1214082">VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434)</issue>
  <issue tracker="bnc" id="1204489">VUL-0: CVE-2022-42320: xen: Xenstore: Guests can get access to Xenstore nodes of deleted domains (XSA-417)</issue>
  <issue tracker="bnc" id="1213616">VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed (XSA-433)</issue>
  <issue tracker="bnc" id="1027519">Xen: Missing upstream bug fixes</issue>
  <issue tracker="cve" id="2023-20593"/>
  <issue tracker="cve" id="2023-20569"/>
  <issue tracker="cve" id="2022-40982"/>
  <packager>charlesa</packager>
  <rating>moderate</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <description>This update for xen fixes the following issues:

- CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434)
- CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling". (bsc#1214083, XSA-435)
- CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)
</description>
</patchinfo>

Places

File _patchinfo of Package patchinfo.30241

Places