xen - security update

Fixed packages 1

Vulnerabilities 9

• Unscored —
  CVE-2020-25595

  An issue was discovered in Xen through 4.14.x. The PCI passthrough code improperly uses register data. Code paths in Xe…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25596

  An issue was discovered in Xen through 4.14.x. x86 PV guest kernels can experience denial of service via SYSENTER. The …

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25597

  An issue was discovered in Xen through 4.14.x. There is mishandling of the constraint that once-valid event channels ma…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25599

  An issue was discovered in Xen through 4.14.x. There are evtchn_reset() race conditions. Uses of EVTCHNOP_reset (potent…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25600

  An issue was discovered in Xen through 4.14.x. Out of bounds event channels are available to 32-bit x86 domains. The so…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25601

  An issue was discovered in Xen through 4.14.x. There is a lack of preemption in evtchn_reset() / evtchn_destroy(). In p…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25602

  An issue was discovered in Xen through 4.14.x. An x86 PV guest can trigger a host OS crash when handling guest access t…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25603

  An issue was discovered in Xen through 4.14.x. There are missing memory barriers when accessing/allocating an event cha…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020
• Unscored —
  CVE-2020-25604

  An issue was discovered in Xen through 4.14.x. There is a race condition when migrating timers between x86 HVM vCPUs. W…

  xen xen xen Debian Ubuntu Alpine
  Sep 23, 2020