File _patchinfo of Package patchinfo.20938

<patchinfo incident="20938">
  <issue tracker="bnc" id="1189376">VUL-0: EMBARGOED: CVE-2021-28697: xen: grant table v2 status pages may remain accessible after de-allocation. (XSA-379)</issue>
  <issue tracker="bnc" id="1186429">VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373)</issue>
  <issue tracker="bnc" id="1186434">VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377)</issue>
  <issue tracker="bnc" id="1189378">VUL-0: EMBARGOED: CVE-2021-28698: xen: long running loops in grant table handling. (XSA-380)</issue>
  <issue tracker="bnc" id="1186433">VUL-0: CVE-2021-0089,CVE-2021-26313: xen: Speculative Code Store Bypass (XSA-375)</issue>
  <issue tracker="bnc" id="1189373">VUL-0: EMBARGOED: CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378)</issue>
  <issue tracker="bnc" id="1189380">VUL-0: EMBARGOED: CVE-2021-28699: xen: inadequate grant-v2 status frames array bounds check. (XSA-382)</issue>
  <issue tracker="bnc" id="1189882">Prevent superpage allocation in the LAPIC and ACPI_INFO range</issue>
  <issue tracker="cve" id="2021-28694"/>
  <issue tracker="cve" id="2021-28698"/>
  <issue tracker="cve" id="2021-28692"/>
  <issue tracker="cve" id="2021-28695"/>
  <issue tracker="cve" id="2021-0089"/>
  <issue tracker="cve" id="2021-28699"/>
  <issue tracker="cve" id="2021-28696"/>
  <issue tracker="cve" id="2021-28697"/>
  <issue tracker="cve" id="2021-28690"/>
  <packager>charlesa</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <description>This update for xen fixes the following issues:

- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429).
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434).

- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
</description>
</patchinfo>