File _patchinfo of Package patchinfo.30240
<patchinfo incident="30240">
<issue tracker="bnc" id="1027519">Xen: Missing upstream bug fixes</issue>
<issue tracker="bnc" id="1213616">VUL-0: CVE-2023-20593: xen: x86/AMD: Zenbleed (XSA-433)</issue>
<issue tracker="bnc" id="1214082">VUL-0: CVE-2023-20569: xen: x86/AMD: Speculative Return Stack Overflow (XSA-434)</issue>
<issue tracker="bnc" id="1214083">VUL-0: CVE-2022-40982: xen: x86/Intel: Gather Data Sampling (XSA-435)</issue>
<issue tracker="cve" id="2023-20569"/>
<issue tracker="cve" id="2022-40982"/>
<issue tracker="cve" id="2023-20593"/>
<packager>charlesa</packager>
<rating>moderate</rating>
<category>security</category>
<summary>Security update for xen</summary>
<description>This update for xen fixes the following issues:
- CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434)
- CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling". (bsc#1214083, XSA-435)
- CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)
</description>
</patchinfo>