[{"xsas":[{"cve":["CVE-2011-1166"],"public_time":"2011-03-14 11:00","title":"Host crash due to failure to correctly validate PV kernel execution state","version":1,"version_time":"2011-03-14 11:00","xsa":"1"},{"cve":["CVE-2011-1583"],"public_time":"2011-05-09 12:08","title":"paravirtualised kernel image validation","version":1,"version_time":"2011-05-09 12:08","xsa":"2"},{"cve":["CVE-2011-1898"],"public_time":"2011-05-12 11:48","title":"VT-d (PCI passthrough) MSI trap injection","version":1,"version_time":"2011-05-12 11:48","xsa":"3"},{"cve":["CVE-2011-2901"],"public_time":"2011-09-02 09:18","title":"Xen \u003c= 3.3 DoS due to incorrect virtual address validation","version":1,"version_time":"2011-09-02 09:18","xsa":"4"},{"cve":["CVE-2011-3131"],"public_time":"2011-08-12 11:27","title":"Xen DoS using IOMMU faults from PCI-passthrough guest","version":1,"version_time":"2011-08-12 11:27","xsa":"5"},{"cve":["CVE-2012-0029"],"public_time":"2012-02-02 13:57","title":"qemu-dm Local Privilege Escalation Vulnerability","version":1,"version_time":"2012-02-02 13:57","xsa":"6"},{"cve":["CVE-2012-0217"],"files":[{"name":"xsa7-xsa8-unstable-apr16.patch"},{"name":"xsa7-xsa8-unstable-recent.patch"},{"name":"xsa7-xsa8-xen-3.4.patch"},{"name":"xsa7-xsa8-xen-4.0.patch"},{"name":"xsa7-xsa8-xen-4.1.patch"}],"public_time":"2013-05-30 16:30","title":"64-bit PV guest privilege escalation vulnerability","version":9,"version_time":"2013-05-30 16:34","xsa":"7"},{"cve":["CVE-2012-0218"],"files":[{"name":"xsa7-xsa8-unstable-apr16.patch"},{"name":"xsa7-xsa8-unstable-recent.patch"},{"name":"xsa7-xsa8-xen-3.4.patch"},{"name":"xsa7-xsa8-xen-4.0.patch"},{"name":"xsa7-xsa8-xen-4.1.patch"}],"public_time":"2013-05-30 16:36","title":"guest denial of service on syscall/sysenter exception generation","version":7,"version_time":"2013-05-30 16:36","xsa":"8"},{"cve":["CVE-2012-2934"],"files":[{"name":"xsa9-unstable.patch"},{"name":"xsa9-xen-4.0.patch"},{"name":"xsa9-xen-4.1.patch"}],"public_time":"2013-05-30 16:36","title":"PV guest host Denial of Service","version":3,"version_time":"2013-05-30 16:36","xsa":"9"},{"cve":["CVE-2012-3432"],"files":[{"name":"xsa10-4.x.patch"},{"name":"xsa10-unstable.patch"}],"public_time":"2012-07-26 15:21","title":"HVM guest user mode MMIO emulation DoS vulnerability","version":2,"version_time":"2012-07-27 14:34","xsa":"10"},{"cve":["CVE-2012-3433"],"files":[{"name":"xsa11-4.0.patch"},{"name":"xsa11-4.1.patch"}],"public_time":"2012-08-09 12:00","title":"HVM guest destroy p2m teardown host DoS vulnerability","version":3,"version_time":"2012-08-09 14:58","xsa":"11"},{"cve":["CVE-2012-3494"],"files":[{"name":"xsa12-all.patch","project":"xen","upstream":"Xen","versions":[["4.0"],["4.1"],["xen-unstable"]]}],"public_time":"2012-09-05 07:38","title":"hypercall set_debugreg vulnerability","version":3,"version_time":"2012-09-05 07:38","xsa":"12"},{"cve":["CVE-2012-3495"],"files":[{"name":"xsa13-xen-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1"],["4.1.x"]]}],"public_time":"2012-09-05 08:13","title":"hypercall physdev_get_free_pirq vulnerability","version":3,"version_time":"2012-09-05 08:13","xsa":"13"},{"cve":["CVE-2012-3496"],"files":[{"name":"xsa14-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa14-xen-3.4-and-4.x.patch","project":"xen","upstream":"Xen","versions":[["3.4.x"],["4.0.x"],["4.1.x"]]}],"public_time":"2012-09-05 08:38","title":"XENMEM_populate_physmap DoS vulnerability","version":3,"version_time":"2012-09-05 08:38","xsa":"14"},{"cve":["CVE-2012-3497"],"public_time":"2012-09-05 09:10","title":"multiple TMEM hypercall vulnerabilities","version":2,"version_time":"2012-09-05 09:10","xsa":"15"},{"cve":["CVE-2012-3498"],"files":[{"name":"xsa16-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa16-xen-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]}],"public_time":"2012-09-05 09:12","title":"PHYSDEVOP_map_pirq index vulnerability","version":3,"version_time":"2012-09-05 09:12","xsa":"16"},{"cve":["CVE-2012-3515"],"files":[{"name":"xsa17-qemu-xen-traditional-all.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.0"],["4.1"],["master"]]},{"name":"xsa17-qemu-xen-unstable.patch","project":"qemu-xen","upstream":"Qemu","versions":[["master"]]}],"public_time":"2012-09-05 09:12","title":"Qemu VT100 emulation vulnerability","version":2,"version_time":"2012-09-05 09:12","xsa":"17"},{"cve":["CVE-2012-3516"],"files":[{"name":"xsa18-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-09-05 09:14","title":"grant table entry swaps have inadequate bounds checking","version":2,"version_time":"2012-09-05 09:14","xsa":"18"},{"cve":["CVE-2012-4411"],"files":[{"name":"xsa19-qemu-all.patch"}],"public_time":"2012-09-06 14:13","title":"guest administrator can access qemu monitor console","version":2,"version_time":"2012-09-06 14:13","xsa":"19"},{"cve":["CVE-2012-4535"],"files":[{"name":"xsa20.patch"}],"public_time":"2012-11-13 11:56","title":"Timer overflow DoS vulnerability","version":2,"version_time":"2012-11-13 11:56","xsa":"20"},{"cve":["CVE-2012-4536"],"files":[{"name":"xsa21.patch"}],"public_time":"2012-11-13 11:56","title":"pirq range check DoS vulnerability","version":2,"version_time":"2012-11-13 11:56","xsa":"21"},{"cve":["CVE-2012-4537"],"files":[{"name":"xsa22-3.4.patch","project":"xen","upstream":"Xen","versions":[["3.4.x"]]},{"name":"xsa22-4.0.patch","project":"xen","upstream":"Xen","versions":[["4.0.x"]]},{"name":"xsa22-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa22-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2012-11-13 11:56","title":"Memory mapping failure DoS vulnerability","version":4,"version_time":"2012-11-13 11:56","xsa":"22"},{"cve":["CVE-2012-4538"],"files":[{"name":"xsa23-4.0-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.0.x"],["4.1.x"]]},{"name":"xsa23-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2012-11-13 11:56","title":"Unhooking empty PAE entries DoS vulnerability","version":2,"version_time":"2012-11-13 11:56","xsa":"23"},{"cve":["CVE-2012-4539"],"files":[{"name":"xsa24.patch"}],"public_time":"2012-11-13 11:56","title":"Grant table hypercall infinite loop DoS vulnerability","version":2,"version_time":"2012-11-13 11:56","xsa":"24"},{"cve":["CVE-2012-4544","CVE-2012-2625"],"files":[{"name":"xsa25-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa25-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa25-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-11-13 11:56","title":"Xen domain builder Out-of-memory due to malicious kernel/ramdisk","version":2,"version_time":"2012-11-13 11:56","xsa":"25"},{"cve":["CVE-2012-5510"],"files":[{"name":"xsa26-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa26-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa26-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"Grant table version switch list corruption vulnerability","version":3,"version_time":"2012-12-03 17:51","xsa":"26"},{"cve":["CVE-2012-5511","CVE-2012-6333"],"files":[{"name":"xsa27-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa27-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa27-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"several HVM operations do not validate the range of their inputs","version":6,"version_time":"2023-12-15 15:42","xsa":"27"},{"cve":["CVE-2012-5512"],"files":[{"name":"xsa28-4.1.patch"}],"public_time":"2012-12-03 17:51","title":"HVMOP_get_mem_access crash / HVMOP_set_mem_access information leak","version":3,"version_time":"2012-12-03 17:51","xsa":"28"},{"cve":["CVE-2012-5513"],"files":[{"name":"xsa29-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa29-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"XENMEM_exchange may overwrite hypervisor memory","version":3,"version_time":"2012-12-03 17:51","xsa":"29"},{"cve":["CVE-2012-5514"],"files":[{"name":"xsa30-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa30-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa30-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"Broken error handling in guest_physmap_mark_populate_on_demand()","version":5,"version_time":"2023-12-15 15:42","xsa":"30"},{"cve":["CVE-2012-5515"],"files":[{"name":"xsa31-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa31-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"Several memory hypercall operations allow invalid extent order values","version":3,"version_time":"2012-12-03 17:51","xsa":"31"},{"cve":["CVE-2012-5525"],"files":[{"name":"xsa32-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]},{"name":"xsa32-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2012-12-03 17:51","title":"several hypercalls do not validate input GFNs","version":4,"version_time":"2012-12-03 17:51","xsa":"32"},{"cve":["CVE-2012-5634"],"files":[{"name":"xsa33-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa33-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2013-01-08 12:00","title":"VT-d interrupt remapping source validation flaw","version":3,"version_time":"2013-01-11 17:10","xsa":"33"},{"cve":["CVE-2013-0151"],"files":[{"name":"xsa34-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]}],"public_time":"2013-01-22 11:49","title":"nested virtualization on 32-bit exposes host crash","version":2,"version_time":"2013-01-22 11:49","xsa":"34"},{"cve":["CVE-2013-0152"],"files":[{"name":"xsa35-4.2-with-xsa34.patch"},{"name":"xsa35.patch"}],"public_time":"2013-01-22 11:49","title":"Nested HVM exposes host to being driven out of memory by guest","version":4,"version_time":"2013-01-23 18:28","xsa":"35"},{"cve":["CVE-2013-0153"],"files":[{"name":"xsa36-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa36-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa36-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-02-05 12:00","title":"interrupt remap entries shared and old ones not cleared on AMD IOMMUs","version":4,"version_time":"2013-02-21 11:05","xsa":"36"},{"cve":["CVE-2013-0154"],"files":[{"name":"xsa37-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa37-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-01-04 16:00","title":"Hypervisor crash due to incorrect ASSERT (debug build only)","version":1,"version_time":"2013-01-04 16:00","xsa":"37"},{"cve":["CVE-2013-0215"],"files":[{"name":"xsa38.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["xen-unstable"]]}],"public_time":"2013-02-05 12:00","title":"oxenstored incorrect handling of certain Xenbus ring states","version":3,"version_time":"2013-02-15 11:40","xsa":"38"},{"cve":["CVE-2013-0216","CVE-2013-0217"],"files":[{"name":"xsa39-classic-0001-xen-netback-garbage-ring.patch","project":"linux-2.6.18-xen","upstream":"Linux","versions":[[null]]},{"name":"xsa39-classic-0002-xen-netback-wrap-around.patch","project":"linux-2.6.18-xen","upstream":"Linux","versions":[[null]]},{"name":"xsa39-pvops-0001-xen-netback-shutdown-the-ring-if-it-contains-garbage.patch","project":"Linux","upstream":"Linux","versions":[["3.8-rc2"]]},{"name":"xsa39-pvops-0002-xen-netback-don-t-leak-pages-on-failure-in-xen_netbk.patch","project":"Linux","upstream":"Linux","versions":[["3.8-rc2"]]},{"name":"xsa39-pvops-0003-xen-netback-free-already-allocated-memory-on-failure.patch","project":"Linux","upstream":"Linux","versions":[["3.8-rc2"]]},{"name":"xsa39-pvops-0004-netback-correct-netbk_tx_err-to-handle-wrap-around.patch","project":"Linux","upstream":"Linux","versions":[["3.8-rc2"]]}],"public_time":"2013-02-05 12:00","title":"Linux netback DoS via malicious guest ring.","version":3,"version_time":"2023-12-15 15:43","xsa":"39"},{"cve":["CVE-2013-0190"],"files":[{"name":"xsa40.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2013-01-16 14:50","title":"Linux stack corruption in xen_failsafe_callback for 32bit PVOPS guests.","version":2,"version_time":"2023-12-15 15:43","xsa":"40"},{"cve":["CVE-2012-6075"],"public_time":"2013-01-16 14:50","title":"qemu (e1000 device driver): Buffer overflow when processing large packets","version":2,"version_time":"2013-01-17 12:17","xsa":"41"},{"cve":["CVE-2013-0228"],"files":[{"name":"xsa42-pvops-0001-x86-xen-don-t-assume-ds-is-usable-in-xen_iret-for-32.patch"}],"public_time":"2013-02-12 12:00","title":"Linux kernel hits general protection if %ds is corrupt for 32-bit PVOPS.","version":2,"version_time":"2013-02-13 16:49","xsa":"42"},{"cve":["CVE-2013-0231"],"files":[{"name":"xsa43-classic.patch","project":"linux-2.6.18-xen","upstream":"Linux","versions":[[null]]},{"name":"xsa43-pvops.patch","project":"Linux","upstream":"Linux","versions":[["3.8-rc5"]]}],"public_time":"2013-02-05 12:00","title":"Linux pciback DoS via not rate limited log messages.","version":3,"version_time":"2023-12-15 15:43","xsa":"43"},{"cve":["CVE-2013-1917"],"files":[{"name":"xsa44-4.0.patch","project":"xen","upstream":"Xen","versions":[["4.0.x"]]},{"name":"xsa44-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa44-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa44-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-04-18 12:00","title":"Xen PV DoS vulnerability with SYSENTER","version":3,"version_time":"2013-04-18 13:50","xsa":"44"},{"cve":["CVE-2013-1918"],"files":[{"name":"xsa45-4.1-01-vcpu-destroy-pagetables-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-02-new-guest-cr3-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-03-new-user-base-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-04-vcpu-reset-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-05-set-info-guest-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-06-unpin-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.1-07-mm-error-paths-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa45-4.2-01-vcpu-destroy-pagetables-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-02-new-guest-cr3-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-03-new-user-base-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-04-vcpu-reset-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-05-set-info-guest-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-06-unpin-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-4.2-07-mm-error-paths-preemptible.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa45-unstable-01-vcpu-destroy-pagetables-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-02-new-guest-cr3-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-03-new-user-base-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-04-vcpu-reset-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-05-set-info-guest-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-06-unpin-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa45-unstable-07-mm-error-paths-preemptible.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-05-02 12:00","title":"Several long latency operations are not preemptible","version":2,"version_time":"2013-05-02 13:54","xsa":"45"},{"cve":["CVE-2013-1919"],"files":[{"name":"xsa46-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa46-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa46-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-04-18 12:00","title":"Several access permission issues with IRQs for unprivileged guests","version":3,"version_time":"2013-04-18 13:35","xsa":"46"},{"cve":["CVE-2013-1920"],"files":[{"name":"xsa47-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa47-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2013-04-04 17:54","title":"Potential use of freed memory in event channel operations","version":1,"version_time":"2013-04-04 17:54","xsa":"47"},{"cve":["CVE-2013-1922"],"files":[{"name":"xsa48-4.2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"]]},{"name":"xsa48-unstable.patch","project":"qemu-xen","upstream":"Qemu","versions":[["master"]]}],"public_time":"2013-04-15 15:00","title":"qemu-nbd format-guessing due to missing format specification","version":3,"version_time":"2023-12-15 15:43","xsa":"48"},{"cve":["CVE-2013-1952"],"files":[{"name":"xsa49-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa49-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa49-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-05-02 12:00","title":"VT-d interrupt remapping source validation flaw for bridges","version":3,"version_time":"2023-12-15 15:43","xsa":"49"},{"cve":["CVE-2013-1964"],"files":[{"name":"xsa50-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"]]}],"public_time":"2013-04-18 15:16","title":"grant table hypercall acquire/release imbalance","version":2,"version_time":"2023-12-15 15:43","xsa":"50"},{"cve":["CVE-2013-2007"],"public_time":"2013-05-06 15:00","title":"qemu guest agent (qga) insecure file permissions","version":2,"version_time":"2013-05-06 21:18","xsa":"51"},{"cve":["CVE-2013-2076"],"files":[{"name":"xsa52-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa52-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2013-06-03 12:00","title":"Information leak on XSAVE/XRSTOR capable AMD CPUs","version":3,"version_time":"2013-06-03 16:18","xsa":"52"},{"cve":["CVE-2013-2077"],"files":[{"name":"xsa53-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa53-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa53-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-06-03 12:00","title":"Hypervisor crash due to missing exception recovery on XRSTOR","version":3,"version_time":"2013-06-03 16:18","xsa":"53"},{"cve":["CVE-2013-2078"],"files":[{"name":"xsa54.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["xen-unstable"]]}],"public_time":"2013-06-03 12:00","title":"Hypervisor crash due to missing exception recovery on XSETBV","version":4,"version_time":"2014-06-03 12:23","xsa":"54"},{"cve":["CVE-2013-2194","CVE-2013-2195","CVE-2013-2196"],"public_time":"2013-06-03 16:18","title":"Multiple vulnerabilities in libelf PV kernel handling","version":5,"version_time":"2013-06-20 10:26","xsa":"55"},{"cve":["CVE-2013-2072"],"files":[{"name":"xsa56.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["xen-unstable"]]}],"public_time":"2013-05-17 12:00","title":"Buffer overflow in xencontrol Python bindings affecting xend","version":2,"version_time":"2013-05-17 15:44","xsa":"56"},{"cve":["CVE-2013-2211"],"files":[{"name":"xsa57-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa57-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa57-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-06-20 12:00","title":"libxl allows guest write access to sensitive console related xenstore keys","version":4,"version_time":"2013-06-26 10:37","xsa":"57"},{"cve":["CVE-2013-1432"],"files":[{"name":"xsa58-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa58-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa58-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2013-06-26 12:00","title":"Page reference counting error due to XSA-45/CVE-2013-1918 fixes","version":2,"version_time":"2013-06-26 13:18","xsa":"58"},{"cve":["CVE-2013-3495"],"public_time":"2013-08-20 12:00","title":"Intel VT-d Interrupt Remapping engines can be evaded by native NMI interrupts","version":4,"version_time":"2013-08-20 12:07","xsa":"59"},{"cve":["CVE-2013-2212"],"public_time":"2013-07-19 12:00","title":"Excessive time to disable caching with HVM guests with PCI passthrough","version":6,"version_time":"2014-02-19 16:54","xsa":"60"},{"cve":["CVE-2013-4329"],"files":[{"name":"xsa61-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa61-4.2-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["xen-unstable"]]}],"public_time":"2013-09-10 10:56","title":"libxl partially sets up HVM passthrough even with disabled iommu","version":2,"version_time":"2013-09-11 12:13","xsa":"61"},{"cve":["CVE-2013-1442"],"files":[{"name":"xsa62-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa62.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-09-24 12:00","title":"Information leak on AVX and/or LWP capable CPUs","version":3,"version_time":"2023-12-15 15:43","xsa":"62"},{"cve":["CVE-2013-4355"],"files":[{"name":"xsa63.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-09-30 10:04","title":"Information leaks through I/O instruction emulation","version":4,"version_time":"2023-12-15 15:43","xsa":"63"},{"cve":["CVE-2013-4356"],"files":[{"name":"xsa64.patch"}],"public_time":"2013-09-30 10:04","title":"Memory accessible by 64-bit PV guests under live migration","version":3,"version_time":"2013-09-30 10:04","xsa":"64"},{"cve":["CVE-2013-4344"],"public_time":"2013-10-02 15:00","title":"qemu SCSI REPORT LUNS buffer overflow","version":2,"version_time":"2013-10-02 16:23","xsa":"65"},{"cve":["CVE-2013-4361"],"files":[{"name":"xsa66.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-09-30 10:04","title":"Information leak through fbld instruction emulation","version":3,"version_time":"2013-09-30 10:04","xsa":"66"},{"cve":["CVE-2013-4368"],"files":[{"name":"xsa67.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-10 12:00","title":"Information leak through outs instruction emulation","version":2,"version_time":"2013-10-10 12:22","xsa":"67"},{"cve":["CVE-2013-4369"],"files":[{"name":"xsa68.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-10 12:00","title":"possible null dereference when parsing vif ratelimiting info","version":2,"version_time":"2013-10-10 12:22","xsa":"68"},{"cve":["CVE-2013-4370"],"files":[{"name":"xsa69.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-10 12:00","title":"misplaced free in ocaml xc_vcpu_getaffinity stub","version":2,"version_time":"2013-10-10 12:22","xsa":"69"},{"cve":["CVE-2013-4371"],"files":[{"name":"xsa70.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-10 12:00","title":"use-after-free in libxl_list_cpupool under memory pressure","version":2,"version_time":"2013-10-10 12:22","xsa":"70"},{"cve":["CVE-2013-4375"],"files":[{"name":"xsa71-qemu-xen-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa71-qemu-xen-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-10 12:00","title":"qemu disk backend (qdisk) resource leak","version":2,"version_time":"2013-10-10 12:28","xsa":"71"},{"cve":["CVE-2013-4416"],"files":[{"name":"xsa72.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-10-29 12:00","title":"ocaml xenstored mishandles oversized message replies","version":3,"version_time":"2013-10-29 15:39","xsa":"72"},{"cve":["CVE-2013-4494"],"files":[{"name":"xsa73-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa73-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa73-4.3-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2013-11-01 15:07","title":"Lock order reversal between page allocation and grant table locks","version":3,"version_time":"2013-11-04 13:15","xsa":"73"},{"cve":["CVE-2013-4553"],"files":[{"name":"xsa74-4.1-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"]]},{"name":"xsa74-4.3-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2013-11-26 12:00","title":"Lock order reversal between page_alloc_lock and mm_rwlock","version":3,"version_time":"2013-11-26 17:02","xsa":"74"},{"cve":["CVE-2013-4551"],"files":[{"name":"xsa75-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa75-4.3-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2013-11-08 16:20","title":"Host crash due to guest VMX instruction execution","version":2,"version_time":"2013-11-11 11:42","xsa":"75"},{"cve":["CVE-2013-4554"],"files":[{"name":"xsa76.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-11-26 12:00","title":"Hypercalls exposed to privilege rings 1 and 2 of HVM guests","version":3,"version_time":"2013-11-26 17:02","xsa":"76"},{"files":[{"name":"xsa77-unstable.patch"}],"public_time":"2013-12-10 12:00","title":"Disaggregated domain management security status","version":3,"version_time":"2013-12-10 12:58","xsa":"77"},{"cve":["CVE-2013-6375"],"files":[{"name":"xsa78.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-11-20 17:08","title":"Insufficient TLB flushing in VT-d (iommu) code","version":2,"version_time":"2013-11-21 11:32","xsa":"78"},{"deallocated":true,"public_time":"2013-11-27 13:20","xsa":"79"},{"cve":["CVE-2013-6400"],"files":[{"name":"xsa80.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-12-10 12:00","title":"IOMMU TLB flushing may be inadvertently suppressed","version":3,"version_time":"2013-12-10 12:58","xsa":"80"},{"deallocated":true,"public_time":"2013-11-27 13:21","xsa":"81"},{"cve":["CVE-2013-6885"],"files":[{"name":"xsa82-4.1-32bit.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa82-4.2-32bit.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa82.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2013-12-02 17:13","title":"Guest triggerable AMD CPU erratum may cause host hang","version":4,"version_time":"2014-02-19 16:54","xsa":"82"},{"cve":["CVE-2014-1642"],"files":[{"name":"xsa83.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2014-01-23 12:00","title":"Out-of-memory condition yielding memory corruption during IRQ setup","version":3,"version_time":"2014-01-23 14:26","xsa":"83"},{"cve":["CVE-2014-1891","CVE-2014-1892","CVE-2014-1893","CVE-2014-1894"],"files":[{"name":"xsa84-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa84-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa84-unstable-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2014-02-06 12:00","title":"integer overflow in several XSM/Flask hypercalls","version":4,"version_time":"2023-12-15 15:43","xsa":"84"},{"cve":["CVE-2014-1895"],"files":[{"name":"xsa85.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2014-02-06 12:00","title":"Off-by-one error in FLASK_AVC_CACHESTAT hypercall","version":3,"version_time":"2014-02-10 11:25","xsa":"85"},{"cve":["CVE-2014-1896"],"files":[{"name":"xsa86.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2014-02-06 12:00","title":"libvchan failure handling malicious ring indexes","version":3,"version_time":"2014-02-10 11:25","xsa":"86"},{"cve":["CVE-2014-1666"],"files":[{"name":"xsa87-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa87-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa87-unstable-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["xen-unstable"]]}],"public_time":"2014-01-23 17:38","title":"PHYSDEVOP_{prepare,release}_msix exposed to unprivileged guests","version":2,"version_time":"2014-01-24 15:37","xsa":"87"},{"cve":["CVE-2014-1950"],"files":[{"name":"xsa88.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["4.3.x"],["xen-unstable"]]}],"public_time":"2014-02-12 12:00","title":"use-after-free in xc_cpupool_getinfo() under memory pressure","version":3,"version_time":"2014-02-12 17:04","xsa":"88"},{"cve":["CVE-2014-2599"],"files":[{"name":"xsa89.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]},{"name":"xsa89-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]}],"public_time":"2014-03-25 12:00","title":"HVMOP_set_mem_access is not preemptible","version":3,"version_time":"2014-04-02 11:45","xsa":"89"},{"cve":["CVE-2014-2580"],"files":[{"name":"xsa90.patch"}],"public_time":"2014-03-24 13:00","title":"Linux netback crash trying to disable due to malformed packet","version":2,"version_time":"2014-04-02 11:49","xsa":"90"},{"cve":["CVE-2014-3125"],"files":[{"name":"xsa91-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa91-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2014-04-30 09:52","title":"Hardware timer context is not properly context switched on ARM","version":3,"version_time":"2014-05-01 10:52","xsa":"91"},{"cve":["CVE-2014-3124"],"files":[{"name":"xsa92.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["xen-unstable"]]},{"name":"xsa92-4.1.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"]]},{"name":"xsa92-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]}],"public_time":"2014-04-29 08:50","title":"HVMOP_set_mem_type allows invalid P2M entries to be created","version":3,"version_time":"2014-05-01 10:52","xsa":"92"},{"cve":["CVE-2014-2915"],"files":[{"name":"xsa93-4.4-01.patch"},{"name":"xsa93-4.4-02.patch"},{"name":"xsa93-4.4-03.patch"},{"name":"xsa93-4.4-04.patch"},{"name":"xsa93-4.4-05.patch"},{"name":"xsa93-4.4-06.patch"},{"name":"xsa93-unstable-01.patch"},{"name":"xsa93-unstable-02.patch"},{"name":"xsa93-unstable-03.patch"},{"name":"xsa93-unstable-04.patch"},{"name":"xsa93-unstable-05.patch"},{"name":"xsa93-unstable-06.patch"}],"public_time":"2014-04-22 15:05","title":"Hardware features unintentionally exposed to guests on ARM","version":2,"version_time":"2014-04-23 10:19","xsa":"93"},{"cve":["CVE-2014-2986"],"files":[{"name":"xsa94.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]}],"public_time":"2014-04-23 13:05","title":"ARM hypervisor crash on guest interrupt controller access","version":2,"version_time":"2014-04-23 15:12","xsa":"94"},{"cve":["CVE-2014-3714","CVE-2014-3715","CVE-2014-3716","CVE-2014-3717"],"files":[{"name":"xsa95.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]}],"public_time":"2014-05-14 10:44","title":"input handling vulnerabilities loading guest kernel on ARM","version":3,"version_time":"2014-05-16 10:34","xsa":"95"},{"cve":["CVE-2014-3967","CVE-2014-3968"],"files":[{"name":"xsa96.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-06-03 12:00","title":"Vulnerabilities in HVM MSI injection","version":3,"version_time":"2014-06-04 16:03","xsa":"96"},{"cve":["CVE-2014-5146","CVE-2014-5149"],"files":[{"name":"xsa97-hap-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa97-hap-4.2-prereq.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa97-hap-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa97-hap-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa97-hap-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2014-08-12 12:00","title":"Long latency virtual-mmu operations are not preemptible","version":3,"version_time":"2014-08-12 13:02","xsa":"97"},{"cve":["CVE-2014-3969"],"files":[{"name":"xsa98-unstable-01.patch"},{"name":"xsa98-unstable-02.patch"},{"name":"xsa98-4.4-01.patch"},{"name":"xsa98-4.4-02.patch"},{"name":"xsa98-update.patch"}],"public_time":"2014-06-04 12:00","title":"insufficient permissions checks accessing guest memory on ARM","version":5,"version_time":"2015-03-13 15:59","xsa":"98"},{"files":[{"name":"xsa99.patch"}],"public_time":"2014-06-17 11:44","title":"unexpected pitfall in xenaccess API","version":2,"version_time":"2014-06-17 11:44","xsa":"99"},{"cve":["CVE-2014-4021"],"files":[{"name":"xsa100.patch","project":"xen","upstream":"Xen","versions":[["4.1.x"],["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-06-17 11:44","title":"Hypervisor heap contents leaked to guests","version":3,"version_time":"2014-06-17 11:44","xsa":"100"},{"cve":["CVE-2014-4022"],"files":[{"name":"xsa101.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]}],"public_time":"2014-06-25 12:00","title":"information leak via gnttab_setup_table on ARM","version":3,"version_time":"2014-06-30 14:22","xsa":"101"},{"cve":["CVE-2014-5147"],"files":[{"name":"xsa102-4.4-01.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa102-4.4-02.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa102-4.4-03.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa102-unstable-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa102-unstable-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa102-unstable-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2014-08-12 12:00","title":"Flaws in handling traps from 32-bit userspace on 64-bit ARM","version":3,"version_time":"2014-08-12 13:02","xsa":"102"},{"cve":["CVE-2014-5148"],"files":[{"name":"xsa103-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa103-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2014-08-12 12:00","title":"Flaw in handling unknown system register access from 64-bit userspace on ARM","version":3,"version_time":"2014-08-12 13:02","xsa":"103"},{"cve":["CVE-2014-7154"],"files":[{"name":"xsa104.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-09-23 12:00","title":"Race condition in HVMOP_track_dirty_vram","version":3,"version_time":"2014-09-24 10:29","xsa":"104"},{"cve":["CVE-2014-7155"],"files":[{"name":"xsa105.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-09-23 12:00","title":"Missing privilege level checks in x86 HLT, LGDT, LIDT, and LMSW emulation","version":3,"version_time":"2014-09-24 10:29","xsa":"105"},{"cve":["CVE-2014-7156"],"files":[{"name":"xsa106.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-09-23 12:00","title":"Missing privilege level checks in x86 emulation of software interrupts","version":3,"version_time":"2014-09-24 10:29","xsa":"106"},{"cve":["CVE-2014-6268"],"files":[{"name":"xsa107-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa107-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2014-09-09 12:30","title":"Mishandling of uninitialised FIFO-based event channel control blocks","version":2,"version_time":"2014-09-11 10:07","xsa":"107"},{"cve":["CVE-2014-7188"],"files":[{"name":"xsa108.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-10-01 12:00","title":"Improper MSR range used for x2APIC emulation","version":4,"version_time":"2014-10-01 12:02","xsa":"108"},{"cve":["CVE-2014-8594"],"files":[{"name":"xsa109-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa109.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-11-18 12:00","title":"Insufficient restrictions on certain MMU update hypercalls","version":4,"version_time":"2015-01-20 18:14","xsa":"109"},{"cve":["CVE-2014-8595"],"files":[{"name":"xsa110-4.3-and-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa110.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]}],"public_time":"2014-11-18 12:00","title":"Missing privilege level checks in x86 emulation of far branches","version":4,"version_time":"2023-12-15 15:43","xsa":"110"},{"cve":["CVE-2014-8866"],"files":[{"name":"xsa111-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa111-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa111.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]}],"public_time":"2014-11-27 11:25","title":"Excessive checking in compatibility mode hypercall argument translation","version":4,"version_time":"2023-12-15 15:43","xsa":"111"},{"cve":["CVE-2014-8867"],"files":[{"name":"xsa112-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa112.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-11-27 11:25","title":"Insufficient bounding of \"REP MOVS\" to MMIO emulated inside the hypervisor","version":6,"version_time":"2023-12-15 15:43","xsa":"112"},{"cve":["CVE-2014-9030"],"files":[{"name":"xsa113.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["xen-unstable"]]}],"public_time":"2014-11-20 16:26","title":"Guest effectable page reference leak in MMU_MACHPHYS_UPDATE handling","version":2,"version_time":"2014-11-21 12:25","xsa":"113"},{"cve":["CVE-2014-9065","CVE-2014-9066"],"files":[{"name":"xsa114.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa114-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa114-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa114-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]}],"public_time":"2014-12-08 12:00","title":"p2m lock starvation","version":3,"version_time":"2014-12-08 12:08","xsa":"114"},{"cve":["CVE-2020-29480"],"files":[{"name":"xsa115.meta"},{"name":"xsa115-4.10-o/0001-tools-ocaml-xenstored-ignore-transaction-id-for-un-w.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.10-o/0002-tools-ocaml-xenstored-check-privilege-for-XS_IS_DOMA.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.10-o/0003-tools-ocaml-xenstored-unify-watch-firing.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.10-o/0004-tools-ocaml-xenstored-introduce-permissions-for-spec.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.10-o/0005-tools-ocaml-xenstored-avoid-watch-events-for-nodes-w.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.10-o/0006-tools-ocaml-xenstored-add-xenstored.conf-flag-to-tur.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa115-4.11-o/0001-tools-ocaml-xenstored-ignore-transaction-id-for-un-w.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.11-o/0002-tools-ocaml-xenstored-check-privilege-for-XS_IS_DOMA.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.11-o/0003-tools-ocaml-xenstored-unify-watch-firing.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.11-o/0004-tools-ocaml-xenstored-introduce-permissions-for-spec.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.11-o/0005-tools-ocaml-xenstored-avoid-watch-events-for-nodes-w.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.11-o/0006-tools-ocaml-xenstored-add-xenstored.conf-flag-to-tur.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa115-4.13-c/0001-tools-xenstore-allow-removing-child-of-a-node-exceed.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0002-tools-xenstore-ignore-transaction-id-for-un-watch.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0003-tools-xenstore-fix-node-accounting-after-failed-node.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0004-tools-xenstore-simplify-and-rename-check_event_node.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0005-tools-xenstore-check-privilege-for-XS_IS_DOMAIN_INTR.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0006-tools-xenstore-rework-node-removal.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0007-tools-xenstore-fire-watches-only-when-removing-a-spe.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0008-tools-xenstore-introduce-node_perms-structure.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0009-tools-xenstore-allow-special-watches-for-privileged-.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.13-c/0010-tools-xenstore-avoid-watch-events-for-nodes-without-.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]},{"name":"xsa115-4.14-c/0001-tools-xenstore-allow-removing-child-of-a-node-exceed.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0002-tools-xenstore-ignore-transaction-id-for-un-watch.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0003-tools-xenstore-fix-node-accounting-after-failed-node.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0004-tools-xenstore-simplify-and-rename-check_event_node.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0005-tools-xenstore-check-privilege-for-XS_IS_DOMAIN_INTR.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0006-tools-xenstore-rework-node-removal.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0007-tools-xenstore-fire-watches-only-when-removing-a-spe.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0008-tools-xenstore-introduce-node_perms-structure.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0009-tools-xenstore-allow-special-watches-for-privileged-.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-4.14-c/0010-tools-xenstore-avoid-watch-events-for-nodes-without-.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa115-c/0001-tools-xenstore-allow-removing-child-of-a-node-exceed.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0002-tools-xenstore-ignore-transaction-id-for-un-watch.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0003-tools-xenstore-fix-node-accounting-after-failed-node.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0004-tools-xenstore-simplify-and-rename-check_event_node.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0005-tools-xenstore-check-privilege-for-XS_IS_DOMAIN_INTR.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0006-tools-xenstore-rework-node-removal.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0007-tools-xenstore-fire-watches-only-when-removing-a-spe.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0008-tools-xenstore-introduce-node_perms-structure.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0009-tools-xenstore-allow-special-watches-for-privileged-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-c/0010-tools-xenstore-avoid-watch-events-for-nodes-without-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa115-o/0001-tools-ocaml-xenstored-ignore-transaction-id-for-un-w.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa115-o/0002-tools-ocaml-xenstored-check-privilege-for-XS_IS_DOMA.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa115-o/0003-tools-ocaml-xenstored-unify-watch-firing.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa115-o/0004-tools-ocaml-xenstored-introduce-permissions-for-spec.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa115-o/0005-tools-ocaml-xenstored-avoid-watch-events-for-nodes-w.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa115-o/0006-tools-ocaml-xenstored-add-xenstored.conf-flag-to-tur.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"xenstore watch notifications lacking permission checks","version":4,"version_time":"2020-12-15 12:18","xsa":"115"},{"cve":["CVE-2015-0361"],"files":[{"name":"xsa116.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["xen-unstable"]]},{"name":"xsa116-4.3-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"]]}],"public_time":"2015-01-06 12:00","title":"xen crash due to use after free on hvm guest teardown","version":3,"version_time":"2015-01-06 12:40","xsa":"116"},{"cve":["CVE-2015-0268"],"files":[{"name":"xsa117.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["xen-unstable"]]}],"public_time":"2015-02-12 12:00","title":"arm: vgic-v2: GICD_SGIR is not properly emulated","version":2,"version_time":"2015-02-12 17:41","xsa":"117"},{"cve":["CVE-2015-1563"],"files":[{"name":"xsa118-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa118-4.5-unstable-1.patch"},{"name":"xsa118-4.5-unstable-2.patch"}],"public_time":"2015-01-29 11:14","title":"arm: vgic: incorrect rate limiting of guest triggered logging","version":2,"version_time":"2015-02-25 11:14","xsa":"118"},{"cve":["CVE-2015-2152"],"files":[{"name":"xsa119-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["xen-unstable"]]},{"name":"xsa119-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]}],"public_time":"2015-03-12 12:00","title":"HVM qemu unexpectedly enabling emulated VGA graphics backends","version":3,"version_time":"2015-03-12 13:32","xsa":"119"},{"cve":["CVE-2015-2150","CVE-2015-8553"],"files":[{"name":"xsa120.patch","project":"Linux","upstream":"Linux","versions":[["3.19"]]},{"name":"xsa120-addendum.patch","project":"Linux","upstream":"Linux","versions":[["3.19"]]},{"name":"xsa120-classic.patch","project":"linux-2.6.18-xen.hg","upstream":"Linux","versions":[[null]]},{"name":"xsa120-classic-addendum.patch","project":"linux-2.6.18-xen.hg","upstream":"Linux","versions":[[null]]}],"public_time":"2015-03-10 12:00","title":"Non-maskable interrupts triggerable by guests","version":6,"version_time":"2023-12-15 15:43","xsa":"120"},{"cve":["CVE-2015-2044"],"files":[{"name":"xsa121.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-03-05 12:00","title":"Information leak via internal x86 system device emulation","version":3,"version_time":"2015-03-05 12:18","xsa":"121"},{"cve":["CVE-2015-2045"],"files":[{"name":"xsa122.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-03-05 12:00","title":"Information leak through version information hypercall","version":3,"version_time":"2015-03-05 12:18","xsa":"122"},{"cve":["CVE-2015-2151"],"files":[{"name":"xsa123-4.3-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa123.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-03-10 12:00","title":"Hypervisor memory corruption due to x86 emulator flaw","version":4,"version_time":"2015-03-10 12:00","xsa":"123"},{"public_time":"2015-03-10 12:00","title":"Non-standard PCI device functionality may render pass-through insecure","version":2,"version_time":"2015-03-10 12:00","xsa":"124"},{"cve":["CVE-2015-2752"],"files":[{"name":"xsa125.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["xen-unstable"]]},{"name":"xsa125-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa125-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa125-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]}],"public_time":"2015-03-31 12:00","title":"Long latency MMIO mapping operations are not preemptible","version":3,"version_time":"2015-03-31 12:09","xsa":"125"},{"cve":["CVE-2015-2756"],"files":[{"name":"xsa126-qemut-incr.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.2.x","4.5.x"]]},{"name":"xsa126-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.2.x","4.5.x"]]},{"name":"xsa126-qemuu-4.3-incr.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.3.x"]]},{"name":"xsa126-qemuu-4.3.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.3.x"]]},{"name":"xsa126-qemuu-incr.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa126-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]}],"public_time":"2015-03-31 12:00","title":"Unmediated PCI command register access in qemu","version":4,"version_time":"2023-12-15 15:43","xsa":"126"},{"cve":["CVE-2015-2751"],"files":[{"name":"xsa127.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa127-4.x.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"]]}],"public_time":"2015-03-31 12:00","title":"Certain domctl operations may be abused to lock up the host","version":3,"version_time":"2023-12-15 15:43","xsa":"127"},{"cve":["CVE-2015-4103"],"files":[{"name":"xsa128-qemut.patch"},{"name":"xsa128-qemuu-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa128-qemuu.patch"}],"public_time":"2015-06-02 12:00","title":"Potential unintended writes to host MSI message data field via qemu","version":2,"version_time":"2015-06-02 14:02","xsa":"128"},{"cve":["CVE-2015-4104"],"files":[{"name":"xsa129-qemut.patch"},{"name":"xsa129-qemuu-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa129-qemuu.patch"}],"public_time":"2015-06-02 12:00","title":"PCI MSI mask bits inadvertently exposed to guests","version":2,"version_time":"2015-06-02 14:02","xsa":"129"},{"cve":["CVE-2015-4105"],"files":[{"name":"xsa130-qemut.patch"},{"name":"xsa130-qemuu-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa130-qemuu.patch"}],"public_time":"2015-06-02 12:00","title":"Guest triggerable qemu MSI-X pass-through error messages","version":2,"version_time":"2015-06-02 14:02","xsa":"130"},{"cve":["CVE-2015-4106"],"files":[{"name":"xsa131-qemut-1.patch"},{"name":"xsa131-qemut-2.patch"},{"name":"xsa131-qemut-3.patch"},{"name":"xsa131-qemut-4.2-1.patch"},{"name":"xsa131-qemut-4.patch"},{"name":"xsa131-qemut-5.patch"},{"name":"xsa131-qemut-6.patch"},{"name":"xsa131-qemut-7.patch"},{"name":"xsa131-qemut-8.patch"},{"name":"xsa131-qemuu-1.patch"},{"name":"xsa131-qemuu-2.patch"},{"name":"xsa131-qemuu-3.patch"},{"name":"xsa131-qemuu-4.3-1.patch"},{"name":"xsa131-qemuu-4.3-2.patch"},{"name":"xsa131-qemuu-4.3-3.patch"},{"name":"xsa131-qemuu-4.3-4.patch"},{"name":"xsa131-qemuu-4.3-5.patch"},{"name":"xsa131-qemuu-4.3-6.patch"},{"name":"xsa131-qemuu-4.3-7.patch"},{"name":"xsa131-qemuu-4.3-8.patch"},{"name":"xsa131-qemuu-4.4-1.patch"},{"name":"xsa131-qemuu-4.patch"},{"name":"xsa131-qemuu-5.patch"},{"name":"xsa131-qemuu-6.patch"},{"name":"xsa131-qemuu-7.patch"},{"name":"xsa131-qemuu-8.patch"}],"public_time":"2015-06-02 12:00","title":"Unmediated PCI register access in qemu","version":3,"version_time":"2015-06-02 14:02","xsa":"131"},{"cve":["CVE-2015-3340"],"files":[{"name":"xsa132-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa132.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-04-20 17:10","title":"Information leak through XEN_DOMCTL_gettscinfo","version":3,"version_time":"2023-12-15 15:43","xsa":"132"},{"cve":["CVE-2015-3456"],"files":[{"name":"xsa133-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa133-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa133-qemuu-4.3-4.2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]}],"public_time":"2015-05-13 11:15","title":"Privilege escalation via emulated floppy disk drive","version":3,"version_time":"2023-12-15 15:43","xsa":"133"},{"cve":["CVE-2015-4163"],"files":[{"name":"xsa134.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-06-11 12:00","title":"GNTTABOP_swap_grant_ref operation misbehavior","version":3,"version_time":"2015-06-11 12:28","xsa":"134"},{"cve":["CVE-2015-3209"],"files":[{"name":"xsa135-qemut-1.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa135-qemut-2.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa135-qemuu-unstable.patch","project":"qemu-xen","upstream":"Qemu","versions":[["master"]]},{"name":"xsa135-qemuu-4.2-1.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"]]},{"name":"xsa135-qemuu-4.2-2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"]]},{"name":"xsa135-qemuu-4.3-1.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.3.x"]]},{"name":"xsa135-qemuu-4.3-2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.3.x"]]},{"name":"xsa135-qemuu-4.5-1.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa135-qemuu-4.5-2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"]]}],"public_time":"2015-06-10 13:10","title":"Heap overflow in QEMU PCNET controller, allowing guest-\u003ehost escape","version":4,"version_time":"2023-12-15 15:43","xsa":"135"},{"cve":["CVE-2015-4164"],"files":[{"name":"xsa136.patch"}],"public_time":"2015-06-11 12:00","title":"vulnerability in the iret hypercall handler","version":3,"version_time":"2015-06-11 12:28","xsa":"136"},{"cve":["CVE-2015-3259"],"files":[{"name":"xsa137.patch","project":"xen","upstream":"Xen","versions":[["4.2.x","xen-unstable"]]}],"public_time":"2015-07-07 12:00","title":"xl command line config handling stack overflow","version":4,"version_time":"2023-12-15 15:43","xsa":"137"},{"cve":["CVE-2015-5154"],"files":[{"name":"xsa138-qemut-1.patch"},{"name":"xsa138-qemut-2.patch"},{"name":"xsa138-qemuu-1.patch"},{"name":"xsa138-qemuu-2.patch"},{"name":"xsa138-qemuu-3.patch"}],"public_time":"2015-07-27 12:00","title":"QEMU heap overflow flaw while processing certain ATAPI commands.","version":2,"version_time":"2015-07-27 12:03","xsa":"138"},{"cve":["CVE-2015-5166"],"files":[{"name":"xsa139-qemuu-unstable.patch","project":"qemu-xen","upstream":"Qemu","versions":[["master"]]},{"name":"xsa139-qemuu-4.5.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"],["4.4.x"],["4.5.x"]]}],"public_time":"2015-08-03 12:00","title":"Use after free in QEMU/Xen block unplug protocol","version":3,"version_time":"2023-12-15 15:43","xsa":"139"},{"cve":["CVE-2015-5165"],"files":[{"name":"xsa140-qemuu-unstable-1.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-3.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-4.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-5.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-6.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-unstable-7.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa140-qemuu-4.3-1.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-2.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-3.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-4.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-5.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-6.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]},{"name":"xsa140-qemuu-4.3-7.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.2.x"],["4.3.x"]]}],"public_time":"2015-08-03 12:00","title":"QEMU leak of uninitialized heap memory in rtl8139 device model","version":3,"version_time":"2023-12-15 15:43","xsa":"140"},{"cve":["CVE-2015-6654"],"files":[{"name":"xsa141.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["xen-unstable"]]}],"public_time":"2015-09-01 12:00","title":"printk is not rate-limited in xenmem_add_to_physmap_one","version":3,"version_time":"2015-09-01 13:18","xsa":"141"},{"cve":["CVE-2015-7311"],"files":[{"name":"xsa142-4.2.patch","project":"xen","upstream":"Xen","versions":[["4.2.x"]]},{"name":"xsa142-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.3.x","4.5.x"]]},{"name":"xsa142-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x","xen-unstable"]]}],"public_time":"2015-09-22 10:00","title":"libxl fails to honour readonly flag on disks with qemu-xen","version":3,"version_time":"2023-12-15 15:43","xsa":"142"},{"deallocated":true,"public_time":"2015-10-14 12:03","xsa":"143"},{"deallocated":true,"public_time":"2015-10-14 12:03","xsa":"144"},{"cve":["CVE-2015-7812"],"files":[{"name":"xsa145.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"arm: Host crash when preempting a multicall","version":3,"version_time":"2015-10-29 11:59","xsa":"145"},{"cve":["CVE-2015-7813"],"files":[{"name":"xsa146.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"arm: various unimplemented hypercalls log without rate limiting","version":3,"version_time":"2015-10-29 11:59","xsa":"146"},{"cve":["CVE-2015-7814"],"files":[{"name":"xsa147.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"arm: Race between domain destruction and memory allocation decrease","version":3,"version_time":"2015-10-29 11:59","xsa":"147"},{"cve":["CVE-2015-7835"],"files":[{"name":"xsa148.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["xen-unstable"]]},{"name":"xsa148-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"]]},{"name":"xsa148-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]}],"public_time":"2015-10-29 11:59","title":"x86: Uncontrolled creation of large page mappings by PV guests","version":4,"version_time":"2015-10-29 11:59","xsa":"148"},{"cve":["CVE-2015-7969"],"files":[{"name":"xsa149.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"leak of main per-domain vcpu pointer array","version":3,"version_time":"2015-10-29 11:59","xsa":"149"},{"cve":["CVE-2015-7970"],"files":[{"name":"xsa150.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"x86: Long latency populate-on-demand operation is not preemptible","version":5,"version_time":"2015-10-29 11:59","xsa":"150"},{"cve":["CVE-2015-7969"],"files":[{"name":"xsa151.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"x86: leak of per-domain profiling-related vcpu pointer array","version":3,"version_time":"2015-10-29 11:59","xsa":"151"},{"cve":["CVE-2015-7971"],"files":[{"name":"xsa152.patch"},{"name":"xsa152-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"]]}],"public_time":"2015-10-29 11:59","title":"x86: some pmu and profiling hypercalls log without rate limiting","version":3,"version_time":"2015-10-29 11:59","xsa":"152"},{"cve":["CVE-2015-7972"],"files":[{"name":"xsa153-check.c"},{"name":"xsa153-libxl.patch","project":"xen","upstream":"Xen","versions":[["4.1","4.4"],["4.5"],["4.6"],["xen-unstable"]]}],"public_time":"2015-10-29 11:59","title":"x86: populate-on-demand balloon size inaccuracy can crash guests","version":4,"version_time":"2023-12-15 15:43","xsa":"153"},{"cve":["CVE-2016-2270"],"files":[{"name":"xsa154.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa154-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa154-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa154-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa154-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2016-02-17 12:00","title":"x86: inconsistent cachability flags on guest mappings","version":3,"version_time":"2016-02-17 12:25","xsa":"154"},{"cve":["CVE-2015-8550"],"files":[{"name":"xsa155-linux319-xsa155-0006-xen-scsiback-safely-copy-requests.patch"},{"name":"xsa155-linux43-0005-xen-blkback-read-from-indirect-descriptors-only-once.patch"},{"name":"xsa155-linux-xsa155-0001-xen-Add-RING_COPY_REQUEST.patch"},{"name":"xsa155-linux-xsa155-0002-xen-netback-don-t-use-last-request-to-determine-mini.patch"},{"name":"xsa155-linux-xsa155-0003-xen-netback-use-RING_COPY_REQUEST-throughout.patch"},{"name":"xsa155-linux-xsa155-0004-xen-blkback-only-read-request-operation-from-shared-.patch"},{"name":"xsa155-linux-xsa155-0005-xen-blkback-read-from-indirect-descriptors-only-once.patch"},{"name":"xsa155-linux-xsa155-0006-xen-scsiback-safely-copy-requests.patch"},{"name":"xsa155-linux-xsa155-0007-xen-pciback-Save-xen_pci_op-commands-before-processi.patch"},{"name":"xsa155-netbsd-xsa155-0001-netbsd-xen-Add-RING_COPY_REQUEST.patch"},{"name":"xsa155-netbsd-xsa155-0002-netbsd-netback-Use-RING_COPY_REQUEST-instead-of-RING.patch"},{"name":"xsa155-netbsd-xsa155-0003-netbsd-ring-Add-barrier-to-provide-an-compiler-barri.patch"},{"name":"xsa155-netbsd-xsa155-0004-netbsd-block-only-read-request-operation-from-shared.patch"},{"name":"xsa155-netbsd-xsa155-0005-netbsd-pciback-Operate-on-local-version-of-xen_pci_o.patch"},{"name":"xsa155-qemu-qdisk-double-access.patch"},{"name":"xsa155-qemut-qdisk-double-access.patch"},{"name":"xsa155-qemut-xenfb.patch"},{"name":"xsa155-qemu-xenfb.patch"},{"name":"xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch"},{"name":"xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch"},{"name":"xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch"},{"name":"xsa155-xen44-0003-libvchan-Read-prod-cons-only-once.patch"}],"public_time":"2015-12-17 12:00","title":"paravirtualized drivers incautious about shared memory contents","version":6,"version_time":"2015-12-17 13:36","xsa":"155"},{"cve":["CVE-2015-5307","CVE-2015-8104"],"files":[{"name":"xsa156-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa156-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa156-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa156.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["xen-unstable"]]}],"public_time":"2015-11-10 00:01","title":"x86: CPU lockup during exception delivery","version":2,"version_time":"2015-11-10 00:07","xsa":"156"},{"cve":["CVE-2015-8551","CVE-2015-8552"],"files":[{"name":"xsa157-0001-xen-pciback-Return-error-on-XEN_PCI_OP_enable_msi-wh.patch","project":"Linux","upstream":"Linux","versions":[["4.3"]]},{"name":"xsa157-0002-xen-pciback-Return-error-on-XEN_PCI_OP_enable_msix-w.patch","project":"Linux","upstream":"Linux","versions":[["4.3"]]},{"name":"xsa157-0003-xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch","project":"Linux","upstream":"Linux","versions":[["4.3"]]},{"name":"xsa157-0004-xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch","project":"Linux","upstream":"Linux","versions":[["4.3"]]},{"name":"xsa157-0005-xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch","project":"Linux","upstream":"Linux","versions":[["4.3"]]}],"public_time":"2015-12-17 12:00","title":"Linux pciback missing sanity checks leading to crash","version":4,"version_time":"2023-12-15 15:43","xsa":"157"},{"cve":["CVE-2015-8338"],"files":[{"name":"xsa158.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["xen-unstable"]]},{"name":"xsa158-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"]]},{"name":"xsa158-fix.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-12-08 11:29","title":"long running memory operations on ARM","version":5,"version_time":"2023-12-15 15:44","xsa":"158"},{"cve":["CVE-2015-8339","CVE-2015-8340"],"files":[{"name":"xsa159.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-12-08 11:29","title":"XENMEM_exchange error handling issues","version":4,"version_time":"2015-12-08 11:29","xsa":"159"},{"cve":["CVE-2015-8341"],"files":[{"name":"xsa160.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa160-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"]]},{"name":"xsa160-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]}],"public_time":"2015-12-08 11:29","title":"libxl leak of pv kernel and initrd on error","version":3,"version_time":"2015-12-08 11:29","xsa":"160"},{"files":[{"name":"xsa161.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2015-11-25 15:29","title":"WITHDRAWN: missing XSETBV intercept privilege check on AMD SVM","version":2,"version_time":"2015-11-25 15:29","xsa":"161"},{"cve":["CVE-2015-7504"],"files":[{"name":"xsa162-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["master"]]},{"name":"xsa162-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["master"]]},{"name":"xsa162-qemuu-4.3.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.3.x"]]}],"public_time":"2015-11-30 06:00","title":"heap buffer overflow vulnerability in pcnet emulator","version":3,"version_time":"2023-12-15 15:43","xsa":"162"},{"files":[{"name":"xsa163.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2015-11-24 17:12","title":"virtual PMU is unsupported","version":1,"version_time":"2015-11-24 17:12","xsa":"163"},{"cve":["CVE-2015-8554"],"files":[{"name":"xsa164.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["master"]]}],"public_time":"2015-12-17 12:00","title":"qemu-dm buffer overrun in MSI-X handling","version":4,"version_time":"2023-12-15 15:43","xsa":"164"},{"cve":["CVE-2015-8555"],"files":[{"name":"xsa165.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa165-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa165-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa165-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2015-12-17 12:00","title":"information leak in legacy x86 FPU/XMM initialization","version":3,"version_time":"2015-12-17 12:38","xsa":"165"},{"files":[{"name":"xsa166.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["xen-unstable"]]},{"name":"xsa166-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa166-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa166-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]}],"public_time":"2015-12-17 12:00","title":"ioreq handling possibly susceptible to multiple read issue","version":2,"version_time":"2015-12-17 12:38","xsa":"166"},{"cve":["CVE-2016-1570"],"files":[{"name":"xsa167.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa167-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"]]},{"name":"xsa167-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]}],"public_time":"2016-01-20 12:00","title":"PV superpage functionality missing sanity checks","version":4,"version_time":"2016-01-20 12:08","xsa":"167"},{"cve":["CVE-2016-1571"],"files":[{"name":"xsa168.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2016-01-20 12:00","title":"VMX: intercept issue with INVLPG on non-canonical address","version":3,"version_time":"2016-01-20 12:08","xsa":"168"},{"cve":["CVE-2015-8615"],"files":[{"name":"xsa169.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["xen-unstable"]]}],"public_time":"2015-12-21 11:12","title":"x86: unintentional logging upon guest changing callback method","version":2,"version_time":"2015-12-22 18:46","xsa":"169"},{"cve":["CVE-2016-2271"],"files":[{"name":"xsa170.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["xen-unstable"]]},{"name":"xsa170-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa170-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]}],"public_time":"2016-02-17 12:00","title":"VMX: guest user mode may crash guest with non-canonical RIP","version":3,"version_time":"2016-02-17 12:25","xsa":"170"},{"cve":["CVE-2016-3157"],"files":[{"name":"xsa171.patch","project":"Linux","upstream":"Linux","versions":[["4.4.x"],["4.5-rc7"]]}],"public_time":"2016-03-16 19:00","title":"I/O port access privilege escalation in x86-64 Linux","version":4,"version_time":"2016-03-16 19:03","xsa":"171"},{"cve":["CVE-2016-3158","CVE-2016-3159"],"files":[{"name":"xsa172.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]},{"name":"xsa172-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]}],"public_time":"2016-03-24 16:26","title":"broken AMD FPU FIP/FDP/FOP leak workaround","version":3,"version_time":"2016-03-24 16:26","xsa":"172"},{"cve":["CVE-2016-3960"],"files":[{"name":"xsa173-unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa173-4.3.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"]]},{"name":"xsa173-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa173-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa173-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2016-04-18 12:00","title":"x86 shadow pagetables: address width overflow","version":3,"version_time":"2016-04-18 13:31","xsa":"173"},{"cve":["CVE-2016-3961"],"files":[{"name":"xsa174.patch","project":"Linux","upstream":"Linux","versions":[["3.10.x","4.5.x"]]}],"public_time":"2016-04-14 12:00","title":"hugetlbfs use may crash PV Linux guests","version":3,"version_time":"2016-04-14 13:03","xsa":"174"},{"cve":["CVE-2016-4962"],"files":[{"name":"xsa175-unstable/0001-libxl-Record-backend-frontend-paths-in-libxl-DOMID.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0002-libxl-Provide-libxl__backendpath_parse_domid.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0003-libxl-Do-not-trust-frontend-in-libxl__devices_destro.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0004-libxl-Do-not-trust-frontend-in-libxl__device_nextid.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0005-libxl-Do-not-trust-frontend-for-disk-eject-event.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0006-libxl-Do-not-trust-frontend-for-disk-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0007-libxl-Do-not-trust-frontend-for-vtpm-list.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0008-libxl-Do-not-trust-frontend-for-vtpm-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0009-libxl-Do-not-trust-frontend-for-nic-in-libxl_devid_t.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0010-libxl-Do-not-trust-frontend-for-nic-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0011-libxl-Do-not-trust-frontend-for-channel-in-list.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0012-libxl-Do-not-trust-frontend-for-channel-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-unstable/0013-libxl-Do-not-trust-frontend-for-vusb.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa175-4.6/0001-libxl-Record-backend-frontend-paths-in-libxl-DOMID.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0002-libxl-Provide-libxl__backendpath_parse_domid.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0003-libxl-Do-not-trust-frontend-in-libxl__devices_destro.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0004-libxl-Do-not-trust-frontend-in-libxl__device_nextid.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0005-libxl-Do-not-trust-frontend-for-disk-eject-event.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0006-libxl-Do-not-trust-frontend-for-disk-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0007-libxl-Do-not-trust-frontend-for-vtpm-list.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0008-libxl-Do-not-trust-frontend-for-vtpm-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0009-libxl-Do-not-trust-frontend-for-nic-in-libxl_devid_t.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0010-libxl-Do-not-trust-frontend-for-nic-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0011-libxl-Do-not-trust-frontend-for-channel-in-list.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.6/0012-libxl-Do-not-trust-frontend-for-channel-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa175-4.5/0001-libxl-Record-backend-frontend-paths-in-libxl-DOMID.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0002-libxl-Provide-libxl__backendpath_parse_domid.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0003-libxl-Do-not-trust-frontend-in-libxl__devices_destro.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0004-libxl-Do-not-trust-frontend-in-libxl__device_nextid.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0005-libxl-Do-not-trust-frontend-for-disk-eject-event.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0006-libxl-Do-not-trust-frontend-for-disk-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0007-libxl-Do-not-trust-frontend-for-vtpm-list.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0008-libxl-Do-not-trust-frontend-for-vtpm-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0009-libxl-Do-not-trust-frontend-for-nic-in-libxl_devid_t.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0010-libxl-Do-not-trust-frontend-for-nic-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0011-libxl-Do-not-trust-frontend-for-channel-in-list.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.5/0012-libxl-Do-not-trust-frontend-for-channel-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa175-4.4/0001-libxl-Record-backend-frontend-paths-in-libxl-DOMID.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0002-libxl-Provide-libxl__backendpath_parse_domid.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0003-libxl-Do-not-trust-frontend-in-libxl__devices_destro.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0004-libxl-Do-not-trust-frontend-in-libxl__device_nextid.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0005-libxl-Do-not-trust-frontend-for-disk-eject-event.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0006-libxl-Do-not-trust-frontend-for-disk-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0007-libxl-Do-not-trust-frontend-for-vtpm-list.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0008-libxl-Do-not-trust-frontend-for-vtpm-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0009-libxl-Do-not-trust-frontend-for-nic-in-libxl_devid_t.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa175-4.4/0010-libxl-Do-not-trust-frontend-for-nic-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]}],"public_time":"2016-06-02 12:00","title":"Unsanitised guest input in libxl device handling code","version":7,"version_time":"2023-12-15 15:43","xsa":"175"},{"cve":["CVE-2016-4480"],"files":[{"name":"xsa176.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"],["4.6.x"],["xen-unstable"]]}],"public_time":"2016-05-17 12:00","title":"x86 software guest page walk PS bit handling flaw","version":3,"version_time":"2016-05-17 12:11","xsa":"176"},{"deallocated":true,"public_time":"2016-05-25 10:03","xsa":"177"},{"cve":["CVE-2016-4963"],"files":[{"name":"xsa178-unstable/0001-libxl-Make-copy-of-every-xs-backend-in-libxl-in-_gen.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0002-libxl-Do-not-trust-backend-in-libxl__device_exists.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0003-libxl-Do-not-trust-backend-for-vtpm-in-getinfo-excep.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0004-libxl-Do-not-trust-backend-for-vtpm-in-getinfo-uuid.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0005-libxl-cdrom-eject-and-insert-write-to-libxl.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0006-libxl-Do-not-trust-backend-for-disk-eject-vdev.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0007-libxl-Do-not-trust-backend-for-disk-fix-driver-domai.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0008-libxl-Do-not-trust-backend-for-disk-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0009-libxl-Do-not-trust-backend-for-cdrom-insert.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0010-libxl-Do-not-trust-backend-for-channel-in-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0011-libxl-Rename-libxl__device_-nic-channel-_from_xs_be-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0012-libxl-Rename-READ_BACKEND-to-READ_LIBXLDEV.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0013-libxl-Have-READ_LIBXLDEV-use-libxl_path-rather-than-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0014-libxl-Do-not-trust-backend-in-nic-getinfo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0015-libxl-Do-not-trust-backend-for-nic-in-devid_to_devic.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0016-libxl-Do-not-trust-backend-for-nic-in-list.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0017-libxl-Do-not-trust-backend-in-channel-list.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa178-unstable/0018-libxl-Do-not-trust-backend-for-vusb.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2016-06-02 12:00","title":"Unsanitised driver domain input in libxl device handling","version":4,"version_time":"2016-06-06 16:56","xsa":"178"},{"cve":["CVE-2016-3710","CVE-2016-3712"],"files":[{"name":"xsa179-qemuu-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemuu-unstable-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemuu-unstable-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemuu-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemuu-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"},{"name":"xsa179-qemuu-4.3-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemuu-4.3-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemuu-4.3-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemuu-4.3-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemuu-4.3-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"},{"name":"xsa179-qemuu-4.4-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemuu-4.4-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemuu-4.4-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemuu-4.4-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemuu-4.4-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"},{"name":"xsa179-qemuu-4.5-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemuu-4.5-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemuu-4.5-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemuu-4.5-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemuu-4.5-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"},{"name":"xsa179-qemuu-4.6-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemuu-4.6-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemuu-4.6-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemuu-4.6-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemuu-4.6-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"},{"name":"xsa179-qemut-unstable-0001-vga-fix-banked-access-bounds-checking-CVE-2016-3710.patch"},{"name":"xsa179-qemut-unstable-0002-vga-add-vbe_enabled-helper.patch"},{"name":"xsa179-qemut-unstable-0003-vga-factor-out-vga-register-setup.patch"},{"name":"xsa179-qemut-unstable-0004-vga-update-vga-register-setup-on-vbe-changes.patch"},{"name":"xsa179-qemut-unstable-0005-vga-make-sure-vga-register-setup-for-vbe-stays-intac.patch"}],"public_time":"2016-05-09 12:00","title":"QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks","version":5,"version_time":"2016-05-10 11:25","xsa":"179"},{"cve":["CVE-2014-3672"],"files":[{"name":"xsa180-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[[null]]},{"name":"xsa180-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["master"]]}],"public_time":"2016-05-23 17:09","title":"Unrestricted qemu logging","version":2,"version_time":"2023-12-15 15:43","xsa":"180"},{"cve":["CVE-2016-5242"],"files":[{"name":"xsa181.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["xen-unstable"]]},{"name":"xsa181-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]}],"public_time":"2016-06-03 09:47","title":"arm: Host crash caused by VMID exhaustion","version":2,"version_time":"2016-06-06 14:26","xsa":"181"},{"cve":["CVE-2016-6258"],"files":[{"name":"xsa182-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["xen-unstable"]]},{"name":"xsa182-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.3.x"],["4.4.x"],["4.5.x"]]},{"name":"xsa182-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2016-07-26 12:00","title":"x86: Privilege escalation in PV guests","version":4,"version_time":"2023-12-15 15:43","xsa":"182"},{"cve":["CVE-2016-6259"],"files":[{"name":"xsa183-unstable.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["xen-unstable"]]},{"name":"xsa183-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]}],"public_time":"2016-07-26 12:00","title":"x86: Missing SMAP whitelisting in 32-bit exception / event delivery","version":6,"version_time":"2023-12-15 15:43","xsa":"183"},{"cve":["CVE-2016-5403"],"files":[{"name":"xsa184-qemut-master.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["4.7.x"]]},{"name":"xsa184-qemuu-master.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["4.7.x"]]}],"public_time":"2016-07-27 15:00","title":"virtio: unbounded memory allocation issue","version":3,"version_time":"2023-12-15 15:43","xsa":"184"},{"cve":["CVE-2016-7092"],"files":[{"name":"xsa185.patch","project":"xen","upstream":"Xen","versions":[["4.4","xen-unstable"]]}],"public_time":"2016-09-08 12:00","title":"x86: Disallow L3 recursive pagetable for 32-bit PV guests","version":3,"version_time":"2016-09-08 12:00","xsa":"185"},{"cve":["CVE-2016-7093"],"files":[{"name":"xsa186-0001-x86-emulate-Correct-boundary-interactions-of-emulate.patch"},{"name":"xsa186-0002-hvm-fep-Allow-testing-of-instructions-crossing-the-1.patch"},{"name":"xsa186-4.6-0002-hvm-fep-Allow-testing-of-instructions-crossing-the.patch"},{"name":"xsa186-4.7-0002-hvm-fep-Allow-testing-of-instructions-crossing-the.patch"}],"public_time":"2016-09-08 12:00","title":"x86: Mishandling of instruction pointer truncation during emulation","version":4,"version_time":"2016-09-08 12:00","xsa":"186"},{"cve":["CVE-2016-7094"],"files":[{"name":"xsa187-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch"},{"name":"xsa187-0002-x86-segment-Bounds-check-accesses-to-emulation-ctxt-.patch"},{"name":"xsa187-4.4-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch"},{"name":"xsa187-4.6-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch"},{"name":"xsa187-4.7-0001-x86-shadow-Avoid-overflowing-sh_ctxt-seg.patch"},{"name":"xsa187-4.7-0002-x86-segment-Bounds-check-accesses-to-emulation-ctx.patch"}],"public_time":"2016-09-08 12:00","title":"x86 HVM: Overflow of sh_ctxt-\u003eseg_reg[]","version":3,"version_time":"2016-09-08 12:05","xsa":"187"},{"cve":["CVE-2016-7154"],"files":[{"name":"xsa188.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]}],"public_time":"2016-09-08 12:00","title":"use after free in FIFO event channel code","version":3,"version_time":"2016-09-08 12:00","xsa":"188"},{"deallocated":true,"public_time":"2016-09-21 09:49","xsa":"189"},{"cve":["CVE-2016-7777"],"files":[{"name":"xsa190.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["xen-unstable"]]},{"name":"xsa190-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa190-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2016-10-04 12:00","title":"CR0.TS and CR0.EM not always honored for x86 HVM guests","version":5,"version_time":"2016-10-04 12:51","xsa":"190"},{"cve":["CVE-2016-9386"],"files":[{"name":"xsa191.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["xen-unstable"]]},{"name":"xsa191-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"]]}],"public_time":"2016-11-22 12:00","title":"x86 null segments not always treated as unusable","version":3,"version_time":"2016-11-22 12:02","xsa":"191"},{"cve":["CVE-2016-9382"],"files":[{"name":"xsa192.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["xen-unstable"]]},{"name":"xsa192-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]}],"public_time":"2016-11-22 12:00","title":"x86 task switch to VM86 mode mis-handled","version":3,"version_time":"2016-11-22 12:02","xsa":"192"},{"cve":["CVE-2016-9385"],"files":[{"name":"xsa193.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa193-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa193-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]}],"public_time":"2016-11-22 12:00","title":"x86 segment base write emulation lacking canonical address checks","version":3,"version_time":"2016-11-22 12:02","xsa":"193"},{"cve":["CVE-2016-9384"],"files":[{"name":"xsa194.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["xen-unstable"]]}],"public_time":"2016-11-22 12:00","title":"guest 32-bit ELF symbol table load leaking host data","version":3,"version_time":"2016-11-22 12:02","xsa":"194"},{"cve":["CVE-2016-9383"],"files":[{"name":"xsa195.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["4.7.x"],["xen-unstable"]]}],"public_time":"2016-11-22 12:00","title":"x86 64-bit bit test instruction emulation broken","version":3,"version_time":"2016-11-22 12:02","xsa":"195"},{"cve":["CVE-2016-9377","CVE-2016-9378"],"files":[{"name":"xsa196-0001-x86-emul-Correct-the-IDT-entry-calculation-in-inject.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["xen-unstable"]]},{"name":"xsa196-0002-x86-svm-Fix-injection-of-software-interrupts.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["xen-unstable"]]}],"public_time":"2016-11-22 12:00","title":"x86 software interrupt injection mis-handled","version":3,"version_time":"2016-11-22 12:02","xsa":"196"},{"cve":["CVE-2016-9381"],"files":[{"name":"xsa197-4.4-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4.x"]]},{"name":"xsa197-4.5-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa197-4.5-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.5.x"]]},{"name":"xsa197-4.6-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.6.x"]]},{"name":"xsa197-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.6.x","master"]]},{"name":"xsa197-qemuu.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.7.x"],["master"]]}],"public_time":"2016-11-22 12:00","title":"qemu incautious about shared ring processing","version":4,"version_time":"2023-12-15 15:43","xsa":"197"},{"cve":["CVE-2016-9379","CVE-2016-9380"],"files":[{"name":"xsa198.patch","project":"xen","upstream":"Xen","versions":[[null]]}],"public_time":"2016-11-22 12:00","title":"delimiter injection vulnerabilities in pygrub","version":4,"version_time":"2023-12-15 15:43","xsa":"198"},{"cve":["CVE-2016-9637"],"files":[{"name":"xsa199-trad.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[[null]]}],"public_time":"2016-12-06 12:00","title":"qemu ioport array overflow","version":4,"version_time":"2023-12-15 15:43","xsa":"199"},{"cve":["CVE-2016-9932"],"files":[{"name":"xsa200-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"]]},{"name":"xsa200-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]}],"public_time":"2016-12-13 12:00","title":"x86 CMPXCHG8B emulation fails to ignore operand size override","version":3,"version_time":"2016-12-13 13:08","xsa":"200"},{"cve":["CVE-2016-9815","CVE-2016-9816","CVE-2016-9817","CVE-2016-9818"],"files":[{"name":"xsa201-1.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["xen-unstable"]]},{"name":"xsa201-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["xen-unstable"]]},{"name":"xsa201-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa201-3-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]},{"name":"xsa201-4.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["xen-unstable"]]}],"public_time":"2016-11-29 14:48","title":"ARM guests may induce host asynchronous abort","version":3,"version_time":"2023-12-15 15:44","xsa":"201"},{"cve":["CVE-2016-10024"],"files":[{"name":"xsa202.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["xen-unstable"]]},{"name":"xsa202-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]},{"name":"xsa202-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]}],"public_time":"2016-12-21 12:00","title":"x86 PV guests may be able to mask interrupts","version":3,"version_time":"2016-12-21 12:01","xsa":"202"},{"cve":["CVE-2016-10025"],"files":[{"name":"xsa203.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa203-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]},{"name":"xsa203-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2016-12-21 12:00","title":"x86: missing NULL pointer check in VMFUNC emulation","version":3,"version_time":"2016-12-21 12:01","xsa":"203"},{"cve":["CVE-2016-10013"],"files":[{"name":"xsa204.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa204-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"]]},{"name":"xsa204-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]},{"name":"xsa204-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2016-12-19 15:37","title":"x86: Mishandling of SYSCALL singlestep during emulation","version":2,"version_time":"2016-12-19 17:04","xsa":"204"},{"deallocated":true,"public_time":"2017-02-13 14:23","xsa":"205"},{"files":[{"name":"xsa206-unstable/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0003-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0004-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0005-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0006-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0007-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0008-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0009-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0010-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0011-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0012-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0013-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0014-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0015-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-unstable/0016-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa206-4.4/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0003-oxenstored-exempt-dom0-from-domU-node-quotas.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0004-oxenstored-perform-a-3-way-merge-of-the-quota-after-.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0005-oxenstored-catch-the-error-when-a-connection-is-alre.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0006-oxenstored-use-hash-table-to-store-socket-connection.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0007-oxenstored-enable-domain-connection-indexing-based-o.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0008-oxenstored-only-process-domain-connections-that-noti.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0009-oxenstored-add-a-safe-net-mechanism-for-existing-ill.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0010-oxenstored-refactor-putting-response-on-wire.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0011-oxenstored-remove-some-unused-parameters.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0012-oxenstored-refactor-request-processing.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0013-oxenstored-keep-track-of-each-transaction-s-operatio.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0014-oxenstored-move-functions-that-process-simple-operat.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0015-oxenstored-replay-transaction-upon-conflict.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0016-oxenstored-log-request-and-response-during-transacti.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0017-oxenstored-allow-compilation-prior-to-OCaml-3.12.0.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0018-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0019-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0020-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0021-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0022-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0023-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0024-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0025-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0026-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0027-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0028-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0029-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0030-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.4/0031-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["4.4"]]},{"name":"xsa206-4.5/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0003-oxenstored-refactor-putting-response-on-wire.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0004-oxenstored-remove-some-unused-parameters.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0005-oxenstored-refactor-request-processing.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0006-oxenstored-keep-track-of-each-transaction-s-operatio.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0007-oxenstored-move-functions-that-process-simple-operat.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0008-oxenstored-replay-transaction-upon-conflict.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0009-oxenstored-log-request-and-response-during-transacti.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0010-oxenstored-allow-compilation-prior-to-OCaml-3.12.0.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0011-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0012-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0013-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0014-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0015-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0016-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0017-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0018-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0019-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0020-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0021-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0022-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0023-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.5/0024-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa206-4.6/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0003-oxenstored-refactor-putting-response-on-wire.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0004-oxenstored-remove-some-unused-parameters.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0005-oxenstored-refactor-request-processing.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0006-oxenstored-keep-track-of-each-transaction-s-operatio.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0007-oxenstored-move-functions-that-process-simple-operat.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0008-oxenstored-replay-transaction-upon-conflict.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0009-oxenstored-log-request-and-response-during-transacti.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0010-oxenstored-allow-compilation-prior-to-OCaml-3.12.0.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0011-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0012-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0013-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0014-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0015-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0016-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0017-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0018-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0019-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0020-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0021-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0022-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0023-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.6/0024-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa206-4.7/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0003-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0004-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0005-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0006-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0007-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0008-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0009-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0010-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0011-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0012-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0013-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0014-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0015-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.7/0016-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa206-4.8/0001-xenstored-apply-a-write-transaction-rate-limit.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0002-xenstored-Log-when-the-write-transaction-rate-limit-.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0003-oxenstored-comments-explaining-some-variables.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0004-oxenstored-handling-of-domain-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0005-oxenstored-ignore-domains-with-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0006-oxenstored-add-transaction-info-relevant-to-history-.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0007-oxenstored-support-commit-history-tracking.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0008-oxenstored-only-record-operations-with-side-effects-.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0009-oxenstored-discard-old-commit-history-on-txn-end.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0010-oxenstored-track-commit-history.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0011-oxenstored-blame-the-connection-that-caused-a-transa.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0012-oxenstored-allow-self-conflicts.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0013-oxenstored-do-not-commit-read-only-transactions.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0014-oxenstored-don-t-wake-to-issue-no-conflict-credit.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0015-oxenstored-transaction-conflicts-improve-logging.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa206-4.8/0016-oxenstored-trim-history-in-the-frequent_ops-function.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]}],"public_time":"2017-03-28 12:00","title":"xenstore denial of service via repeated update","version":10,"version_time":"2023-12-15 15:43","xsa":"206"},{"files":[{"name":"xsa207.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]},{"name":"xsa207-4.4.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"]]}],"public_time":"2017-02-15 12:00","title":"memory leak when destroying guest without PT devices","version":2,"version_time":"2017-02-15 12:05","xsa":"207"},{"cve":["CVE-2017-2615"],"files":[{"name":"xsa208-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[[null]]},{"name":"xsa208-qemuu.patch","versions":[[null],["4.8"],["master"]]},{"name":"xsa208-qemuu-4.7.patch","project":"qemu-xen","upstream":"Qemu","versions":[["4.4"],["4.5"],["4.6"],["4.7"]]}],"public_time":"2017-02-10 12:43","title":"oob access in cirrus bitblt copy","version":3,"version_time":"2023-12-15 15:43","xsa":"208"},{"cve":["CVE-2017-2620"],"files":[{"name":"xsa209-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[[null]]},{"name":"xsa209-qemuu/0001-display-cirrus-ignore-source-pitch-value-as-needed-i.patch","versions":[[null],[null]]},{"name":"xsa209-qemuu/0002-cirrus-add-blit_is_unsafe-call-to-cirrus_bitblt_cput.patch","versions":[[null],[null]]}],"public_time":"2017-02-21 12:00","title":"cirrus_bitblt_cputovideo does not check if memory region is safe","version":5,"version_time":"2023-12-15 15:43","xsa":"209"},{"files":[{"name":"xsa210.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["xen-unstable"]]}],"public_time":"2017-02-23 16:28","title":"arm: memory corruption when freeing p2m pages","version":1,"version_time":"2017-02-23 16:28","xsa":"210"},{"cve":["CVE-2016-9603"],"files":[{"name":"xsa211-qemut.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.6","master"]]},{"name":"xsa211-qemut-4.5.patch","project":"qemu-xen-traditional","upstream":"Qemu","versions":[["4.4"],["4.5"]]},{"name":"xsa211-qemuu.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["master"]]},{"name":"xsa211-qemuu-4.4.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.4"]]},{"name":"xsa211-qemuu-4.6.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.5"],["4.6"]]},{"name":"xsa211-qemuu-4.7.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.7"]]},{"name":"xsa211-qemuu-4.8.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.8"]]}],"public_time":"2017-03-14 12:00","title":"Cirrus VGA Heap overflow via display refresh","version":3,"version_time":"2023-12-15 15:43","xsa":"211"},{"cve":["CVE-2017-7228"],"files":[{"name":"xsa212.patch","project":"xen","upstream":"Xen","versions":[["4.4.x"],["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]}],"public_time":"2017-04-04 12:00","title":"x86: broken check in memory_exchange() permits PV guest breakout","version":3,"version_time":"2017-04-04 12:37","xsa":"212"},{"cve":["CVE-2017-8903"],"files":[{"name":"xsa213.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa213-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa213-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa213-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa213-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2017-05-02 12:00","title":"x86: 64bit PV guest breakout via pagetable use-after-mode-change","version":3,"version_time":"2017-05-12 10:45","xsa":"213"},{"cve":["CVE-2017-8904"],"files":[{"name":"xsa214.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]}],"public_time":"2017-05-02 12:00","title":"grant transfer allows PV guest to elevate privileges","version":4,"version_time":"2023-12-15 15:43","xsa":"214"},{"cve":["CVE-2017-8905"],"files":[{"name":"xsa215.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]}],"public_time":"2017-05-02 12:00","title":"possible memory corruption via failsafe callback","version":3,"version_time":"2017-05-12 10:45","xsa":"215"},{"cve":["CVE-2017-10911"],"files":[{"name":"xsa216-linux-2.6.18-xen.patch","project":"linux-2.6.18-xen.hg","upstream":"Linux","versions":[[null]]},{"name":"xsa216-linux-4.4.patch","project":"Linux","upstream":"Linux","versions":[["3.3","4.4"]]},{"name":"xsa216-linux-4.11.patch","project":"Linux","upstream":"Linux","versions":[["4.5","4.11"]]},{"name":"xsa216-qemuu.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.8"],["master"]]},{"name":"xsa216-qemuu-4.5.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.5"]]},{"name":"xsa216-qemuu-4.7.patch","project":"qemu-upstream","upstream":"Qemu","versions":[["4.6"],["4.7"]]}],"public_time":"2017-06-20 12:00","title":"blkif responses leak backend stack data","version":5,"version_time":"2017-07-07 13:53","xsa":"216"},{"cve":["CVE-2017-10912"],"files":[{"name":"xsa217.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]},{"name":"xsa217-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]}],"public_time":"2017-06-20 12:00","title":"page transfer may allow PV guest to elevate privilege","version":3,"version_time":"2017-07-07 13:54","xsa":"217"},{"cve":["CVE-2017-10913","CVE-2017-10914"],"files":[{"name":"xsa218-unstable/0001-gnttab-fix-unmap-pin-accounting-race.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa218-unstable/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa218-unstable/0003-gnttab-correct-maptrack-table-accesses.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa218-4.5/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa218-4.5/0002-gnttab-fix-unmap-pin-accounting-race.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa218-4.5/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa218-4.5/0004-gnttab-correct-maptrack-table-accesses.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa218-4.6/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa218-4.6/0002-gnttab-fix-unmap-pin-accounting-race.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa218-4.6/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa218-4.6/0004-gnttab-correct-maptrack-table-accesses.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa218-4.7/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa218-4.7/0002-gnttab-fix-unmap-pin-accounting-race.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa218-4.7/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa218-4.7/0004-gnttab-correct-maptrack-table-accesses.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa218-4.8/0001-gnttab-fix-unmap-pin-accounting-race.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa218-4.8/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa218-4.8/0003-gnttab-correct-maptrack-table-accesses.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2017-06-20 12:00","title":"Races in the grant table unmap code","version":5,"version_time":"2017-07-07 13:54","xsa":"218"},{"cve":["CVE-2017-10915"],"files":[{"name":"xsa219.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa219-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.4"],["4.5"]]},{"name":"xsa219-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa219-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.7"],["4.8"]]}],"public_time":"2017-06-20 12:00","title":"x86: insufficient reference counts during shadow emulation","version":3,"version_time":"2017-07-07 13:54","xsa":"219"},{"cve":["CVE-2017-10916"],"files":[{"name":"xsa220.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa220-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa220-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6"]]},{"name":"xsa220-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7"]]},{"name":"xsa220-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]}],"public_time":"2017-06-20 12:00","title":"x86: PKRU and BND* leakage between vCPU-s","version":3,"version_time":"2017-07-07 13:54","xsa":"220"},{"cve":["CVE-2017-10917"],"files":[{"name":"xsa221.patch","project":"xen","upstream":"Xen","versions":[["4.4.x","xen-unstable"]]}],"public_time":"2017-06-20 12:00","title":"NULL pointer deref in event channel poll","version":4,"version_time":"2023-12-15 15:43","xsa":"221"},{"cve":["CVE-2017-10918"],"files":[{"name":"xsa222-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["xen-unstable"]]},{"name":"xsa222-1-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]},{"name":"xsa222-1-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa222-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa222-2-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa222-2-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa222-2-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa222-2-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2017-06-20 12:00","title":"stale P2M mappings due to insufficient error checking","version":3,"version_time":"2017-07-07 13:54","xsa":"222"},{"cve":["CVE-2017-10919"],"files":[{"name":"xsa223.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]}],"public_time":"2017-06-20 12:00","title":"ARM guest disabling interrupt may crash Xen","version":3,"version_time":"2017-07-07 13:54","xsa":"223"},{"cve":["CVE-2017-10920","CVE-2017-10921","CVE-2017-10922"],"files":[{"name":"xsa224-unstable/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa224-unstable/0002-gnttab-never-create-host-mapping-unless-asked-to.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa224-unstable/0003-gnttab-correct-logic-to-get-page-references-during-m.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa224-unstable/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa224-4.5/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa224-4.5/0002-gnttab-never-create-host-mapping-unless-asked-to.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa224-4.5/0003-gnttab-correct-logic-to-get-page-references-during-m.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa224-4.5/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa224-4.6/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa224-4.6/0002-gnttab-never-create-host-mapping-unless-asked-to.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa224-4.6/0003-gnttab-correct-logic-to-get-page-references-during-m.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa224-4.6/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa224-4.7/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa224-4.7/0002-gnttab-never-create-host-mapping-unless-asked-to.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa224-4.7/0003-gnttab-correct-logic-to-get-page-references-during-m.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa224-4.7/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa224-4.8/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa224-4.8/0002-gnttab-never-create-host-mapping-unless-asked-to.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa224-4.8/0003-gnttab-correct-logic-to-get-page-references-during-m.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa224-4.8/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2017-06-20 12:00","title":"grant table operations mishandle reference counts","version":5,"version_time":"2017-07-07 13:54","xsa":"224"},{"cve":["CVE-2017-10923"],"files":[{"name":"xsa225.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"],["xen-unstable"]]}],"public_time":"2017-06-20 12:00","title":"arm: vgic: Out-of-bound access when sending SGIs","version":3,"version_time":"2017-07-07 13:54","xsa":"225"},{"cve":["CVE-2017-12135"],"files":[{"name":"xsa226.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"],["xen-unstable"]]},{"name":"xsa226-unstable/0001-gnttab-dont-use-possibly-unbounded-tail-calls.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa226-unstable/0002-gnttab-fix-transitive-grant-handling.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa226-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa226-4.5/0001-gnttab-dont-use-possibly-unbounded-tail-calls.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa226-4.5/0002-gnttab-fix-transitive-grant-handling.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa226-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa226-4.6/0001-gnttab-dont-use-possibly-unbounded-tail-calls.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa226-4.6/0002-gnttab-fix-transitive-grant-handling.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa226-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa226-4.9/0001-gnttab-dont-use-possibly-unbounded-tail-calls.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]},{"name":"xsa226-4.9/0002-gnttab-fix-transitive-grant-handling.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]}],"public_time":"2017-08-15 12:00","title":"multiple problems with transitive grants","version":7,"version_time":"2017-08-29 12:04","xsa":"226"},{"cve":["CVE-2017-12137"],"files":[{"name":"xsa227.meta"},{"name":"xsa227.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"],["xen-unstable"]]},{"name":"xsa227-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa227-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2017-08-15 12:00","title":"x86: PV privilege escalation via map_grant_ref","version":3,"version_time":"2017-08-15 12:05","xsa":"227"},{"cve":["CVE-2017-12136"],"files":[{"name":"xsa228.meta"},{"name":"xsa228.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["xen-unstable"]]},{"name":"xsa228-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"]]}],"public_time":"2017-08-15 12:00","title":"grant_table: Race conditions with maptrack free list handling","version":3,"version_time":"2017-08-15 12:05","xsa":"228"},{"cve":["CVE-2017-12134"],"files":[{"name":"xsa229.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2017-08-15 12:00","title":"linux: Fix Xen block IO merge-ability calculation","version":3,"version_time":"2017-08-15 12:05","xsa":"229"},{"cve":["CVE-2017-12855"],"files":[{"name":"xsa230.meta"},{"name":"xsa230.patch","project":"xen","upstream":"Xen","versions":[["4.5"],["4.6"],["4.7"],["4.8"],["4.9"],["xen-unstable"]]}],"public_time":"2017-08-15 12:00","title":"grant_table: possibly premature clearing of GTF_writing / GTF_reading","version":3,"version_time":"2017-08-15 13:49","xsa":"230"},{"cve":["CVE-2017-14316"],"files":[{"name":"xsa231.meta"},{"name":"xsa231.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa231-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5"]]},{"name":"xsa231-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6"],["4.7"]]},{"name":"xsa231-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8"],["4.9"]]}],"public_time":"2017-09-12 12:00","title":"Missing NUMA node parameter verification","version":3,"version_time":"2017-09-12 12:03","xsa":"231"},{"cve":["CVE-2017-14318"],"files":[{"name":"xsa232.meta"},{"name":"xsa232.patch","project":"xen","upstream":"Xen","versions":[["4.5"],["4.6"],["4.7"],["4.8"],["4.9"],["xen-unstable"]]}],"public_time":"2017-09-12 12:00","title":"Missing check for grant table","version":4,"version_time":"2017-09-12 12:03","xsa":"232"},{"cve":["CVE-2017-14317"],"files":[{"name":"xsa233.meta"},{"name":"xsa233.patch","project":"xen","upstream":"Xen","versions":[["4.5.x","4.9.x"],["xen-unstable"]]}],"public_time":"2017-09-12 12:00","title":"cxenstored: Race in domain cleanup","version":4,"version_time":"2023-12-15 15:43","xsa":"233"},{"cve":["CVE-2017-14319"],"files":[{"name":"xsa234.meta"},{"name":"xsa234.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa234-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa234-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa234-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa234-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]}],"public_time":"2017-09-12 12:00","title":"insufficient grant unmapping checks for x86 PV guests","version":3,"version_time":"2017-09-12 12:03","xsa":"234"},{"cve":["CVE-2017-15596"],"files":[{"name":"xsa235.meta"},{"name":"xsa235.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa235-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa235-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa235-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa235-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]}],"public_time":"2017-08-23 15:18","title":"add-to-physmap error paths fail to release lock on ARM","version":2,"version_time":"2017-10-18 12:08","xsa":"235"},{"cve":["CVE-2017-15597"],"files":[{"name":"xsa236.meta"},{"name":"xsa236.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa236-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa236-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"],["4.9.x"]]}],"public_time":"2017-10-24 12:00","title":"pin count / page reference race in grant table code","version":3,"version_time":"2017-10-24 13:55","xsa":"236"},{"cve":["CVE-2017-15590"],"files":[{"name":"xsa237.meta"},{"name":"xsa237-unstable/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa237-unstable/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa237-unstable/0003-x86-MSI-disallow-redundant-enabling.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa237-unstable/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa237-unstable/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa237-4.5/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa237-4.5/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa237-4.5/0003-x86-MSI-disallow-redundant-enabling.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa237-4.5/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa237-4.5/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa237-4.6/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa237-4.6/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa237-4.6/0003-x86-MSI-disallow-redundant-enabling.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa237-4.6/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa237-4.6/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa237-4.8/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa237-4.8/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa237-4.8/0003-x86-MSI-disallow-redundant-enabling.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa237-4.8/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa237-4.8/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa237-4.9/0001-x86-dont-allow-MSI-pIRQ-mapping-on-unowned-device.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa237-4.9/0002-x86-enforce-proper-privilege-when-mapping-pIRQ-s.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa237-4.9/0003-x86-MSI-disallow-redundant-enabling.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa237-4.9/0004-x86-IRQ-conditionally-preserve-irq-pirq-mapping-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa237-4.9/0005-x86-FLASK-fix-unmap-domain-IRQ-XSM-hook.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]}],"public_time":"2017-10-12 12:00","title":"multiple MSI mapping issues on x86","version":3,"version_time":"2017-10-18 12:08","xsa":"237"},{"cve":["CVE-2017-15591"],"files":[{"name":"xsa238.meta"},{"name":"xsa238.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"],["xen-unstable"]]},{"name":"xsa238-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa238-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2017-10-12 12:00","title":"DMOP map/unmap missing argument checks","version":3,"version_time":"2017-12-06 10:59","xsa":"238"},{"cve":["CVE-2017-15589"],"files":[{"name":"xsa239.meta"},{"name":"xsa239.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"],["4.9.x"],["xen-unstable"]]},{"name":"xsa239-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]}],"public_time":"2017-10-12 12:00","title":"hypervisor stack leak in x86 I/O intercept code","version":3,"version_time":"2017-10-18 12:08","xsa":"239"},{"cve":["CVE-2017-15595"],"files":[{"name":"xsa240.meta"},{"name":"xsa240-unstable/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa240-unstable/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa240-unstable/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa240-unstable/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa240-4.5/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa240-4.5/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa240-4.5/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa240-4.5/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa240-4.6/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa240-4.6/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa240-4.6/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa240-4.6/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa240-4.7/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa240-4.7/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa240-4.7/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa240-4.7/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa240-4.8/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa240-4.8/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa240-4.8/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa240-4.8/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa240-4.9/0001-x86-limit-linear-page-table-use-to-a-single-level.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa240-4.9/0002-x86-mm-Disable-PV-linear-pagetables-by-default.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa240-4.9/0003-x86-dont-wrongly-trigger-linear-page-table-assertion.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa240-4.9/0004-x86-dont-wrongly-trigger-linear-page-table-assertion-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]}],"public_time":"2017-10-12 12:00","title":"Unlimited recursion in linear pagetable de-typing","version":6,"version_time":"2017-12-11 18:16","xsa":"240"},{"cve":["CVE-2017-15588"],"files":[{"name":"xsa241.meta"},{"name":"xsa241.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa241-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"]]},{"name":"xsa241-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]}],"public_time":"2017-10-12 12:00","title":"Stale TLB entry due to page type release race","version":4,"version_time":"2017-10-18 12:08","xsa":"241"},{"cve":["CVE-2017-15593"],"files":[{"name":"xsa242.meta"},{"name":"xsa242.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa242-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"],["4.8.x"],["4.9.x"]]}],"public_time":"2017-10-12 12:00","title":"page type reference leak on x86","version":3,"version_time":"2017-10-18 12:08","xsa":"242"},{"cve":["CVE-2017-15592"],"files":[{"name":"xsa243-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["xen-unstable"]]},{"name":"xsa243-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["xen-unstable"]]},{"name":"xsa243-4.5-2.patch"},{"name":"xsa243-4.5-3.patch"},{"name":"xsa243-4.6-1.patch"},{"name":"xsa243-4.6-2.patch"},{"name":"xsa243-4.7-1.patch"},{"name":"xsa243-4.8-1.patch"}],"public_time":"2017-10-12 12:00","title":"x86: Incorrect handling of self-linear shadow mappings with translated guests","version":5,"version_time":"2017-11-15 17:13","xsa":"243"},{"cve":["CVE-2017-15594"],"files":[{"name":"xsa244.meta"},{"name":"xsa244.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"],["xen-unstable"]]},{"name":"xsa244-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa244-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa244-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]}],"public_time":"2017-10-12 12:00","title":"x86: Incorrect handling of IST settings during CPU hotplug","version":3,"version_time":"2017-10-18 12:08","xsa":"244"},{"cve":["CVE-2017-17046"],"files":[{"name":"xsa245.meta"},{"name":"xsa245/0001-xen-page_alloc-Cover-memory-unreserved-after-boot-in.patch","project":"xen","upstream":"Xen","versions":[[null]]},{"name":"xsa245/0002-xen-arm-Correctly-report-the-memory-region-in-the-du.patch","project":"xen","upstream":"Xen","versions":[[null]]}],"public_time":"2017-09-28 17:26","title":"ARM: Some memory not scrubbed at boot","version":3,"version_time":"2023-12-15 15:43","xsa":"245"},{"cve":["CVE-2017-17044"],"files":[{"name":"xsa246.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa246-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"],["4.7.x"]]},{"name":"xsa246-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]}],"public_time":"2017-11-28 12:00","title":"x86: infinite loop due to missing PoD error checking","version":3,"version_time":"2017-11-30 11:59","xsa":"246"},{"cve":["CVE-2017-17045"],"files":[{"name":"xsa247.meta"},{"name":"xsa247-4.5/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa247-4.5/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa247-4.6/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa247-4.6/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa247-4.7/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa247-4.7/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa247-4.8/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa247-4.8/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa247-4.9/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa247-4.9/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa247/0001-p2m-Always-check-to-see-if-removing-a-p2m-entry-actu.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa247/0002-p2m-Check-return-value-of-p2m_set_entry-when-decreas.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2017-11-28 12:00","title":"Missing p2m error checking in PoD code","version":3,"version_time":"2017-11-30 11:59","xsa":"247"},{"cve":["CVE-2017-17566"],"files":[{"name":"xsa248.meta"},{"name":"xsa248.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["xen-unstable"]]},{"name":"xsa248-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa248-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"]]}],"public_time":"2017-12-12 12:00","title":"x86 PV guests may gain access to internally used pages","version":3,"version_time":"2018-01-06 16:15","xsa":"248"},{"cve":["CVE-2017-17563"],"files":[{"name":"xsa249.meta"},{"name":"xsa249.patch","project":"xen","upstream":"Xen","versions":[["4.5.x","4.9.x"],["xen-unstable"]]}],"public_time":"2017-12-12 12:00","title":"broken x86 shadow mode refcount overflow check","version":3,"version_time":"2018-01-06 16:15","xsa":"249"},{"cve":["CVE-2017-17564"],"files":[{"name":"xsa250.meta"},{"name":"xsa250.patch","project":"xen","upstream":"Xen","versions":[["4.6.x","4.9.x"],["xen-unstable"]]},{"name":"xsa250-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]}],"public_time":"2017-12-12 12:00","title":"improper x86 shadow mode refcount error handling","version":3,"version_time":"2018-01-06 16:15","xsa":"250"},{"cve":["CVE-2017-17565"],"files":[{"name":"xsa251.meta"},{"name":"xsa251.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["xen-unstable"]]},{"name":"xsa251-4.5.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"]]},{"name":"xsa251-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"],["4.8.x"]]}],"public_time":"2017-12-12 12:00","title":"improper bug check in x86 log-dirty handling","version":3,"version_time":"2018-01-06 16:16","xsa":"251"},{"cve":["CVE-2018-7540"],"files":[{"name":"xsa252.meta"},{"name":"xsa252.patch","project":"xen","upstream":"Xen","versions":[["4.10.0"],["xen-unstable"]]},{"name":"xsa252-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.5.x"],["4.6.x"]]},{"name":"xsa252-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa252-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]}],"public_time":"2018-02-27 12:00","title":"DoS via non-preemptable L3/L4 pagetable freeing","version":3,"version_time":"2018-03-01 13:15","xsa":"252"},{"cve":["CVE-2018-5244"],"files":[{"name":"xsa253.patch","project":"xen","upstream":"Xen","versions":[["4.10"],["xen-unstable"]]}],"public_time":"2018-01-04 12:00","title":"x86: memory leak with MSR emulation","version":3,"version_time":"2018-01-06 15:25","xsa":"253"},{"cve":["CVE-2017-5753","CVE-2017-5715","CVE-2017-5754"],"files":[{"name":"xsa254/README.bti"},{"name":"xsa254/README.comet"},{"name":"xsa254/README.pti"},{"name":"xsa254/README.vixen"},{"name":"xsa254/README.which-shim"},{"name":"xsa254/pvshim-converter.pl"}],"public_time":"2018-01-03 22:30","title":"Information leak via side effects of speculative execution","version":12,"version_time":"2018-02-23 19:35","xsa":"254"},{"cve":["CVE-2018-7541"],"files":[{"name":"xsa255-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["xen-unstable"]]},{"name":"xsa255-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["xen-unstable"]]},{"name":"xsa255-4.6-1.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa255-4.6-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa255-4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa255-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa255-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa255-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]}],"public_time":"2018-02-27 12:00","title":"grant table v2 -\u003e v1 transition may crash Xen","version":4,"version_time":"2018-03-01 13:15","xsa":"255"},{"cve":["CVE-2018-7542"],"files":[{"name":"xsa256.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["4.10.x"],["xen-unstable"]]},{"name":"xsa256-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]}],"public_time":"2018-02-27 12:00","title":"x86 PVH guest without LAPIC may DoS the host","version":3,"version_time":"2018-03-01 13:15","xsa":"256"},{"cve":["CVE-2018-10472"],"files":[{"name":"xsa258.meta"},{"name":"xsa258.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["4.10.x"],["xen-unstable"]]},{"name":"xsa258-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa258-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]}],"public_time":"2018-04-25 12:00","title":"Information leak via crafted user-supplied CDROM","version":3,"version_time":"2018-04-30 13:16","xsa":"258"},{"cve":["CVE-2018-10471"],"files":[{"name":"xsa259.meta"},{"name":"xsa259.patch","project":"xen","upstream":"Xen","versions":[["4.7.x","4.10.x"],["xen-unstable"]]},{"name":"xsa259-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]}],"public_time":"2018-04-25 12:00","title":"x86: PV guest may crash Xen with XPTI","version":4,"version_time":"2023-12-15 15:43","xsa":"259"},{"cve":["CVE-2018-8897"],"files":[{"name":"xsa260.meta"},{"name":"xsa260-unstable/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa260-unstable/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa260-unstable/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa260-unstable/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa260-4.6/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa260-4.6/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa260-4.6/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa260-4.6/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa260-4.7/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa260-4.7/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa260-4.7/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa260-4.7/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa260-4.8/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa260-4.8/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa260-4.8/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa260-4.8/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa260-4.9/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa260-4.9/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa260-4.9/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa260-4.9/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa260-4.10/xsa260-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa260-4.10/xsa260-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa260-4.10/xsa260-3.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa260-4.10/xsa260-4.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]}],"public_time":"2018-05-08 17:00","title":"x86: mishandling of debug exceptions","version":3,"version_time":"2023-12-15 15:43","xsa":"260"},{"cve":["CVE-2018-10982"],"files":[{"name":"xsa261.meta"},{"name":"xsa261.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["xen-unstable"]]},{"name":"xsa261-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]},{"name":"xsa261-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa261-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]}],"public_time":"2018-05-08 17:00","title":"x86 vHPET interrupt injection errors","version":3,"version_time":"2018-05-11 10:13","xsa":"261"},{"cve":["CVE-2018-10981"],"files":[{"name":"xsa262.meta"},{"name":"xsa262.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa262-4.6.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa262-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]},{"name":"xsa262-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]}],"public_time":"2018-05-08 17:00","title":"qemu may drive Xen into unbounded loop","version":3,"version_time":"2018-05-11 10:13","xsa":"262"},{"cve":["CVE-2018-3639"],"files":[{"name":"xsa263.meta"},{"name":"xsa263-unstable/0001-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa263-unstable/0002-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa263-unstable/0003-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa263-4.6/0001-x86-spec_ctrl-Read-MSR_ARCH_CAPABILITIES-only-once.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0002-x86-spec_ctrl-Express-Xen-s-choice-of-MSR_SPEC_CTRL-.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0003-x86-spec_ctrl-Merge-bti_ist_info-and-use_shadow_spec.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0004-x86-spec_ctrl-Fold-the-XEN_IBRS_-SET-CLEAR-ALTERNATI.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0005-x86-spec_ctrl-Rename-bits-of-infrastructure-to-avoid.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0006-x86-spec_ctrl-Elide-MSR_SPEC_CTRL-handling-in-idle-c.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0007-x86-spec_ctrl-Split-X86_FEATURE_SC_MSR-into-PV-and-H.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0008-x86-spec_ctrl-Explicitly-set-Xen-s-default-MSR_SPEC_.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0009-x86-cpuid-Improvements-to-guest-policies-for-specula.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0010-x86-spec_ctrl-Introduce-a-new-spec-ctrl-command-line.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0011-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0012-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.6/0013-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa263-4.7/0001-x86-Fix-x86-further-CPUID-handling-adjustments.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0002-x86-spec_ctrl-Read-MSR_ARCH_CAPABILITIES-only-once.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0003-x86-spec_ctrl-Express-Xen-s-choice-of-MSR_SPEC_CTRL-.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0004-x86-spec_ctrl-Merge-bti_ist_info-and-use_shadow_spec.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0005-x86-spec_ctrl-Fold-the-XEN_IBRS_-SET-CLEAR-ALTERNATI.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0006-x86-spec_ctrl-Rename-bits-of-infrastructure-to-avoid.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0007-x86-spec_ctrl-Elide-MSR_SPEC_CTRL-handling-in-idle-c.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0008-x86-spec_ctrl-Split-X86_FEATURE_SC_MSR-into-PV-and-H.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0009-x86-spec_ctrl-Explicitly-set-Xen-s-default-MSR_SPEC_.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0010-x86-cpuid-Improvements-to-guest-policies-for-specula.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0011-x86-spec_ctrl-Introduce-a-new-spec-ctrl-command-line.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0012-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0013-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.7/0014-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa263-4.8/0001-x86-Fix-x86-further-CPUID-handling-adjustments.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0002-x86-spec_ctrl-Read-MSR_ARCH_CAPABILITIES-only-once.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0003-x86-spec_ctrl-Express-Xen-s-choice-of-MSR_SPEC_CTRL-.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0004-x86-spec_ctrl-Merge-bti_ist_info-and-use_shadow_spec.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0005-x86-spec_ctrl-Fold-the-XEN_IBRS_-SET-CLEAR-ALTERNATI.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0006-x86-spec_ctrl-Rename-bits-of-infrastructure-to-avoid.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0007-x86-spec_ctrl-Elide-MSR_SPEC_CTRL-handling-in-idle-c.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0008-x86-spec_ctrl-Split-X86_FEATURE_SC_MSR-into-PV-and-H.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0009-x86-spec_ctrl-Explicitly-set-Xen-s-default-MSR_SPEC_.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0010-x86-cpuid-Improvements-to-guest-policies-for-specula.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0011-x86-spec_ctrl-Introduce-a-new-spec-ctrl-command-line.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0012-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0013-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.8/0014-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa263-4.9/0001-x86-spec_ctrl-Read-MSR_ARCH_CAPABILITIES-only-once.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0002-x86-spec_ctrl-Express-Xen-s-choice-of-MSR_SPEC_CTRL-.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0003-x86-spec_ctrl-Merge-bti_ist_info-and-use_shadow_spec.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0004-x86-spec_ctrl-Fold-the-XEN_IBRS_-SET-CLEAR-ALTERNATI.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0005-x86-spec_ctrl-Rename-bits-of-infrastructure-to-avoid.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0006-x86-spec_ctrl-Elide-MSR_SPEC_CTRL-handling-in-idle-c.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0007-x86-spec_ctrl-Split-X86_FEATURE_SC_MSR-into-PV-and-H.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0008-x86-spec_ctrl-Explicitly-set-Xen-s-default-MSR_SPEC_.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0009-x86-cpuid-Improvements-to-guest-policies-for-specula.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0010-x86-spec_ctrl-Introduce-a-new-spec-ctrl-command-line.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0011-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0012-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.9/0013-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa263-4.10/0001-x86-spec_ctrl-Read-MSR_ARCH_CAPABILITIES-only-once.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0002-x86-spec_ctrl-Express-Xen-s-choice-of-MSR_SPEC_CTRL-.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0003-x86-spec_ctrl-Merge-bti_ist_info-and-use_shadow_spec.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0004-x86-spec_ctrl-Fold-the-XEN_IBRS_-SET-CLEAR-ALTERNATI.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0005-x86-spec_ctrl-Rename-bits-of-infrastructure-to-avoid.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0006-x86-spec_ctrl-Elide-MSR_SPEC_CTRL-handling-in-idle-c.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0007-x86-spec_ctrl-Split-X86_FEATURE_SC_MSR-into-PV-and-H.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0008-x86-spec_ctrl-Explicitly-set-Xen-s-default-MSR_SPEC_.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0009-x86-cpuid-Improvements-to-guest-policies-for-specula.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0010-x86-spec_ctrl-Introduce-a-new-spec-ctrl-command-line.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0011-x86-AMD-Mitigations-for-GPZ-SP4-Speculative-Store-By.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0012-x86-Intel-Mitigations-for-GPZ-SP4-Speculative-Store-.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa263-4.10/0013-x86-msr-Virtualise-MSR_SPEC_CTRL.SSBD-for-guests-to-.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]}],"public_time":"2018-05-21 21:00","title":"Speculative Store Bypass","version":1,"version_time":"2018-05-21 21:00","xsa":"263"},{"cve":["CVE-2018-12891"],"files":[{"name":"xsa264.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa264-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.6.x","4.10.x"]]}],"public_time":"2018-06-27 21:00","title":"preemption checks bypassed in x86 PV MM handling","version":3,"version_time":"2018-06-27 21:03","xsa":"264"},{"cve":["CVE-2018-12893"],"files":[{"name":"xsa265.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"],["4.10.x"],["xen-unstable"]]},{"name":"xsa265-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"],["4.7.x"]]}],"public_time":"2018-06-27 21:00","title":"x86: #DB exception safety check can be triggered by a guest","version":3,"version_time":"2018-06-27 21:03","xsa":"265"},{"cve":["CVE-2018-12892"],"files":[{"name":"xsa266.meta"},{"name":"xsa266-4.7/0001-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa266-4.7/0002-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa266-4.8/0001-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa266-4.8/0002-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa266-4.9/0001-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa266-4.9/0002-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa266-4.10/0001-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa266-4.10/0002-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa266/0001-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa266/0002-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2018-06-27 21:00","title":"libxl fails to honour readonly flag on HVM emulated SCSI disks","version":3,"version_time":"2018-06-27 21:04","xsa":"266"},{"cve":["CVE-2018-3665"],"files":[{"name":"xsa267-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa267-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa267-4.6-1.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa267-4.6-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa267-4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa267-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa267-4.8-livepatch.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa267-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa267-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa267-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa267-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa267-livepatch.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["4.10.x"],["xen-unstable"]]}],"public_time":"2018-06-13 21:00","title":"Speculative register leakage from lazy FPU context switching","version":4,"version_time":"2023-12-15 15:43","xsa":"267"},{"cve":["CVE-2018-15469"],"files":[{"name":"xsa268.meta"},{"name":"xsa268.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa268-4.6-1.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa268-4.6-2.patch","project":"xen","upstream":"Xen","versions":[["4.6.x"]]},{"name":"xsa268-4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa268-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa268-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa268-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa268-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa268-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa268-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.0"]]}],"public_time":"2018-08-14 17:00","title":"Use of v2 grant tables may cause crash on ARM","version":3,"version_time":"2018-08-20 09:47","xsa":"268"},{"cve":["CVE-2018-15468"],"files":[{"name":"xsa269.meta"},{"name":"xsa269.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa269-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.6"],["4.7"],["4.8"]]},{"name":"xsa269-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.9"],["4.10"]]},{"name":"xsa269-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]}],"public_time":"2018-08-14 17:00","title":"x86: Incorrect MSR_DEBUGCTL handling lets guests enable BTS","version":4,"version_time":"2023-12-15 15:43","xsa":"269"},{"cve":["CVE-2018-15471"],"files":[{"name":"xsa270.patch","project":"Linux","upstream":"Linux","versions":[["4.7","4.17"]]}],"public_time":"2018-08-14 17:00","title":"Linux netback driver OOB access in hash handling","version":3,"version_time":"2018-08-20 09:47","xsa":"270"},{"cve":["CVE-2018-14007"],"files":[{"name":"xsa271-xapi.patch","project":"Xapi","upstream":"Xapi","versions":[[null]]}],"public_time":"2018-08-14 17:00","title":"XAPI HTTP directory traversal","version":3,"version_time":"2023-12-15 15:43","xsa":"271"},{"cve":["CVE-2018-15470"],"files":[{"name":"xsa272.meta"},{"name":"xsa272.patch"}],"public_time":"2018-08-14 17:00","title":"oxenstored does not apply quota-maxentity","version":3,"version_time":"2018-08-20 09:47","xsa":"272"},{"cve":["CVE-2018-3620","CVE-2018-3646"],"public_time":"2018-08-14 17:16","title":"L1 Terminal Fault speculative side channel","version":1,"version_time":"2018-08-14 17:16","xsa":"273"},{"cve":["CVE-2018-14678"],"files":[{"name":"xsa274-linux-4.17.patch","project":"Linux","upstream":"Linux","versions":[["4.17"]]}],"public_time":"2018-07-25 17:00","title":"Linux: Uninitialized state in x86 PV failsafe callback path","version":3,"version_time":"2018-08-15 16:09","xsa":"274"},{"cve":["CVE-2018-19961","CVE-2018-19962"],"files":[{"name":"xsa275.meta"},{"name":"xsa275-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa275-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa275-4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa275-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa275-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x","4.11.x"]]},{"name":"xsa275-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x","4.11.x"]]}],"public_time":"2018-11-20 12:00","title":"insufficient TLB flushing / improper large page mappings with AMD IOMMUs","version":3,"version_time":"2019-01-08 16:43","xsa":"275"},{"cve":["CVE-2018-19963"],"files":[{"name":"xsa276.meta"},{"name":"xsa276-4.11/0001-x86-hvm-ioreq-fix-page-referencing.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa276-4.11/0002-x86-hvm-ioreq-use-ref-counted-target-assigned-shared.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa276/0001-x86-hvm-ioreq-fix-page-referencing.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa276/0002-x86-hvm-ioreq-use-ref-counted-target-assigned-shared.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2018-11-20 12:00","title":"resource accounting issues in x86 IOREQ server handling","version":3,"version_time":"2019-01-08 16:44","xsa":"276"},{"cve":["CVE-2018-19964"],"files":[{"name":"xsa277.meta"},{"name":"xsa277.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"],["xen-unstable"]]}],"public_time":"2018-11-20 12:00","title":"x86: incorrect error handling for guest p2m page removals","version":3,"version_time":"2019-01-08 16:44","xsa":"277"},{"cve":["CVE-2018-18883"],"files":[{"name":"xsa278.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa278-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.9"],["4.10"],["4.11"]]}],"public_time":"2018-10-24 21:13","title":"x86: Nested VT-x usable even when disabled","version":2,"version_time":"2018-11-01 11:10","xsa":"278"},{"cve":["CVE-2018-19965"],"files":[{"name":"xsa279.meta"},{"name":"xsa279.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"],["xen-unstable"]]},{"name":"xsa279-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.7.x","4.9.x"]]}],"public_time":"2018-11-20 12:00","title":"x86: DoS from attempting to use INVPCID with a non-canonical addresses","version":3,"version_time":"2019-01-08 16:44","xsa":"279"},{"cve":["CVE-2018-19966"],"files":[{"name":"xsa280.meta"},{"name":"xsa280-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"],["xen-unstable"]]},{"name":"xsa280-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa280-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa280-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]},{"name":"xsa280-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"],["4.10.x"]]},{"name":"xsa280-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]}],"public_time":"2018-11-20 12:00","title":"Fix for XSA-240 conflicts with shadow paging","version":4,"version_time":"2023-12-15 15:44","xsa":"280"},{"deallocated":true,"public_time":"2019-03-12 14:15","xsa":"281"},{"cve":["CVE-2018-19967"],"files":[{"name":"xsa282.meta"},{"name":"xsa282-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa282-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"],["4.10.x"],["4.11.x"],["xen-unstable"]]},{"name":"xsa282-4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"]]},{"name":"xsa282-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]},{"name":"xsa282-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]}],"public_time":"2018-11-06 18:41","title":"guest use of HLE constructs may lock up host","version":3,"version_time":"2023-12-15 15:44","xsa":"282"},{"files":[{"name":"xsa283.patch-withdrawn"}],"public_time":"2019-02-22 17:42","title":"Withdrawn Xen Security Advisory number","version":2,"version_time":"2019-02-22 17:42","withdrawn":true,"xsa":"283"},{"cve":["CVE-2019-17340"],"files":[{"name":"xsa284.meta"},{"name":"xsa284.patch","project":"xen","upstream":"Xen","versions":[["4.7.x","4.11.x"],["xen-unstable"]]}],"public_time":"2019-03-05 12:00","title":"grant table transfer issues on large hosts","version":3,"version_time":"2019-10-25 11:10","xsa":"284"},{"cve":["CVE-2019-17341"],"files":[{"name":"xsa285.meta"},{"name":"xsa285.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa285-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.7.x","4.11.x"]]}],"public_time":"2019-03-05 12:00","title":"race with pass-through device hotplug","version":3,"version_time":"2019-10-25 11:10","xsa":"285"},{"cve":["CVE-2020-27674"],"files":[{"name":"xsa286.meta"},{"name":"xsa286-unstable/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa286-unstable/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa286-4.10/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa286-4.10/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa286-4.11/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa286-4.11/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa286-4.12/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa286-4.12/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa286-4.13/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa286-4.13/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa286-4.14/0001-x86-pv-Drop-FLUSH_TLB_GLOBAL-in-do_mmu_update-for-XP.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa286-4.14/0002-x86-pv-Flush-TLB-in-response-to-paging-structure-cha.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]}],"public_time":"2020-10-20 12:00","title":"x86 PV guest INVLPG-like flushes may leave stale TLB entries","version":6,"version_time":"2021-01-19 16:34","xsa":"286"},{"cve":["CVE-2019-17342"],"files":[{"name":"xsa287.meta"},{"name":"xsa287.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa287-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa287-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa287-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa287-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa287-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]}],"public_time":"2019-03-05 12:00","title":"x86: steal_page violates page_struct access discipline","version":3,"version_time":"2019-10-25 11:10","xsa":"287"},{"cve":["CVE-2019-17343"],"files":[{"name":"xsa288.meta"},{"name":"xsa288.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa288-4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa288-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa288-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa288-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]}],"public_time":"2019-03-05 12:00","title":"x86: Inconsistent PV IOMMU discipline","version":3,"version_time":"2019-10-25 11:11","xsa":"288"},{"files":[{"name":"xsa289/0000-Cover-Letter.txt"},{"name":"xsa289/0001-lfence-add-function-that-returns-int.patch"},{"name":"xsa289/0002-is_hvm-pv_domain-block-speculation.patch"},{"name":"xsa289/0003-is_control_domain-block-speculation.patch"},{"name":"xsa289/0004-x86-hvm-block-speculative-accesses.patch"},{"name":"xsa289/0005-nospec-introduce-method-for-static-arrays.patch"},{"name":"xsa289/0006-x86-hvm-block-speculative-out-of-bound-accesses.patch"},{"name":"xsa289/0007-xen-evtchn-block-speculative-out-of-bound-accesses.patch"},{"name":"xsa289/0008-common-gant_table-block-speculative-out-of-bound-acc.patch"},{"name":"xsa289/0009-x86-hvm-emulate-block-speculative-out-of-bound-acces.patch"},{"name":"xsa289/0010-x86-vioapic-block-speculative-out-of-bound-accesses.patch"},{"name":"xsa289/0011-x86-hvm-hpet-block-speculative-out-of-bound-accesses.patch"},{"name":"xsa289/0012-common-memory-block-speculative-out-of-bound-accesse.patch"},{"name":"xsa289/0013-x86-CPUID-block-speculative-out-of-bound-accesses.patch"},{"name":"xsa289/detect-spectre-candidates.sh"},{"name":"xsa289/sorted-gadgets.txt"}],"public_time":"2019-01-21 12:00","title":"Cache-load gadgets exploitable with L1TF","version":3,"version_time":"2019-01-21 17:32","xsa":"289"},{"cve":["CVE-2019-17344"],"files":[{"name":"xsa290.meta"},{"name":"xsa290/4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa290/4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa290/4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa290/4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa290/4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa290/4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa290/4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa290/4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa290/4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa290/4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa290/unstable-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa290/unstable-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-03-05 12:00","title":"missing preemption in x86 PV page table unvalidation","version":3,"version_time":"2019-10-25 11:10","xsa":"290"},{"cve":["CVE-2019-17345"],"files":[{"name":"xsa291.meta"},{"name":"xsa291.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa291-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa291-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]}],"public_time":"2019-03-05 12:00","title":"x86/PV: page type reference counting issue with failed IOMMU update","version":3,"version_time":"2019-10-25 11:10","xsa":"291"},{"cve":["CVE-2019-17346"],"files":[{"name":"xsa292.meta"},{"name":"xsa292.patch","project":"xen","upstream":"Xen","versions":[["4.7.6","4.11.x"],["xen-unstable"]]}],"public_time":"2019-03-05 12:00","title":"x86: insufficient TLB flushing when using PCID","version":3,"version_time":"2019-10-25 11:10","xsa":"292"},{"cve":["CVE-2019-17347"],"files":[{"name":"xsa293.meta"},{"name":"xsa293/4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa293/4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa293/4.7-3.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa293/4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa293/4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa293/4.8-3.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa293/4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa293/4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa293/4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa293/4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa293/4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa293/4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa293/unstable-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa293/unstable-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-03-05 12:00","title":"x86: PV kernel context switch corruption","version":4,"version_time":"2019-10-25 11:10","xsa":"293"},{"cve":["CVE-2019-17348"],"files":[{"name":"xsa294/4.7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa294/4.8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa294/4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa294/4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa294/4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa294/unstable.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-03-05 12:00","title":"x86 shadow: Insufficient TLB flushing when using PCID","version":3,"version_time":"2019-10-25 11:10","xsa":"294"},{"cve":["CVE-2019-17349","CVE-2019-17350"],"files":[{"name":"xsa295.meta"},{"name":"xsa295/4.8-01.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-02.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-03.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-04.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-05.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-06.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-07.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-08.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-09.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-10.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-11.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-12.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-13.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-14.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-15.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-16.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-17.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-18.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-19.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-20.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.8-21.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa295/4.9-01.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-02.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-03.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-04.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-05.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-06.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-07.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-08.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-09.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-10.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-11.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-12.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-13.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-14.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-15.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-16.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-17.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-18.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-19.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.9-20.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa295/4.10-01.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-02.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-03.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-04.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-05.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-06.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-07.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-08.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-09.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-11.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-12.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-13.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-14.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-15.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-16.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-17.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-18.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-19.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.10-20.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa295/4.11-01.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-02.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-03.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-04.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-05.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-06.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-07.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-08.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-09.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-10.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-12.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-13.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-14.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-15.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-16.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-17.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-18.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-19.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.11-20.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa295/4.12-01.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-02.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-03.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-04.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-05.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-06.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-07.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-08.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-09.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-10.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-11.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-13.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-14.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-15.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-16.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/4.12-17.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa295/unstable-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-11.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-12.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-13.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-14.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa295/unstable-15.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-06-13 19:16","title":"Unlimited Arm Atomics Operations","version":2,"version_time":"2019-10-25 11:10","xsa":"295"},{"cve":["CVE-2019-18420"],"files":[{"name":"xsa296.meta"},{"name":"xsa296.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]},{"name":"xsa296-4.8.patch","project":"xen","upstream":"Xen","versions":[["4.7","4.8"]]}],"public_time":"2019-10-31 12:00","title":"VCPUOP_initialise DoS","version":5,"version_time":"2020-08-14 16:41","xsa":"296"},{"cve":["CVE-2018-12126","CVE-2018-12127","CVE-2018-12130","CVE-2019-11091"],"files":[{"name":"xsa297.meta"},{"name":"xsa297/xsa297-unstable-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa297/xsa297-unstable-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa297/xsa297-unstable-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa297/xsa297-unstable-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa297/xsa297-4.7-1.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-2.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-3.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-4.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-5.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-6.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-7.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.7-8.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"]]},{"name":"xsa297/xsa297-4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-3.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-4.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-5.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-6.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-7.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.8-8.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa297/xsa297-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-3.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-4.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-5.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-6.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-7.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.9-8.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa297/xsa297-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-3.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-4.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-5.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-6.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.10-7.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa297/xsa297-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-4.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-5.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-6.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.11-7.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa297/xsa297-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-4.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-5.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-6.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa297/xsa297-4.12-7.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2019-05-14 17:00","title":"Microarchitectural Data Sampling speculative side channel","version":1,"version_time":"2019-05-14 17:00","xsa":"297"},{"cve":["CVE-2019-18425"],"files":[{"name":"xsa298.meta"},{"name":"xsa298.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"],["xen-unstable"]]},{"name":"xsa298-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.7.x"],["4.8.x"],["4.9.x"]]},{"name":"xsa298-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa298-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]}],"public_time":"2019-10-31 12:00","title":"missing descriptor table limit checking in x86 PV emulation","version":3,"version_time":"2019-10-31 12:29","xsa":"298"},{"cve":["CVE-2019-18421"],"files":[{"name":"xsa299.meta"},{"name":"xsa299-4.8/0001-x86-mm-Clean-up-trailing-whitespace.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0002-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0003-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0004-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0005-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0006-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0007-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0008-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0009-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0010-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0011-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.8/0012-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa299-4.9/0001-x86-mm-Clean-up-trailing-whitespace.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0002-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0003-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0004-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0005-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0006-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0007-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0008-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0009-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0010-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0011-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.9/0012-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa299-4.10/0001-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0002-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0003-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0004-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0005-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0006-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0007-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0008-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0009-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0010-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.10/0011-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa299-4.11/0001-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0002-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0003-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0004-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0005-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0006-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0007-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0008-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0009-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0010-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.11/0011-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa299-4.12/0001-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0002-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0003-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0004-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0005-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0006-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0007-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0008-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0009-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0010-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299-4.12/0011-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa299/0001-x86-mm-L1TF-checks-don-t-leave-a-partial-entry.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0002-x86-mm-Don-t-re-set-PGT_pinned-on-a-partially-de-val.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0003-x86-mm-Separate-out-partial_pte-tristate-into-indivi.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0004-x86-mm-Use-flags-for-_put_page_type-rather-than-a-bo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0005-x86-mm-Rework-get_page_and_type_from_mfn-conditional.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0006-x86-mm-Have-alloc_l-23-_table-clear-partial_flags-wh.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0007-x86-mm-Always-retain-a-general-ref-on-partial.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0008-x86-mm-Collapse-PTF_partial_set-and-PTF_partial_gene.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0009-x86-mm-Properly-handle-linear-pagetable-promotion-fa.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0010-x86-mm-Fix-nested-de-validation-on-error.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa299/0011-x86-mm-Don-t-drop-a-type-ref-unless-you-held-a-ref-t.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-10-31 12:00","title":"Issues with restartable PV type change operations","version":4,"version_time":"2019-10-31 12:29","xsa":"299"},{"cve":["CVE-2019-17351"],"files":[{"name":"xsa300-linux-5.2.patch","project":"Linux","upstream":"Linux","versions":[["4.4","5.2"]]}],"public_time":"2019-07-09 13:55","title":"Linux: No grant table and foreign mapping limits","version":4,"version_time":"2020-08-14 16:51","xsa":"300"},{"cve":["CVE-2019-18423"],"files":[{"name":"xsa301.meta"},{"name":"xsa301-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.11"]]},{"name":"xsa301-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.11"]]},{"name":"xsa301-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.11"]]},{"name":"xsa301-master-1.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa301-master-2.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa301-master-3.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]}],"public_time":"2019-10-31 12:00","title":"add-to-physmap can be abused to DoS Arm hosts","version":4,"version_time":"2020-08-14 16:51","xsa":"301"},{"cve":["CVE-2019-18424"],"files":[{"name":"xsa302.meta"},{"name":"xsa302-4.9/0001-IOMMU-add-missing-HVM-check.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa302-4.9/0002-passthrough-quarantine-PCI-devices.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa302-4.10/0001-IOMMU-add-missing-HVM-check.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa302-4.10/0002-passthrough-quarantine-PCI-devices.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa302-4.11/0001-IOMMU-add-missing-HVM-check.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa302-4.11/0002-passthrough-quarantine-PCI-devices.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa302-4.12/0001-IOMMU-add-missing-HVM-check.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa302-4.12/0002-passthrough-quarantine-PCI-devices.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa302/0001-passthrough-quarantine-PCI-devices.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2019-10-31 12:00","title":"passed through PCI devices may corrupt host memory after deassignment","version":5,"version_time":"2019-10-31 12:30","xsa":"302"},{"cve":["CVE-2019-18422"],"files":[{"name":"xsa303.meta"},{"name":"xsa303-4.8/0001-Revert-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa303-4.8/0002-xen-arm32-entry-Consolidate-DEFINE_TRAP_ENTRY-macros.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa303-4.8/0003-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa303-4.8/0004-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa303-4.8/0005-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch","project":"xen","upstream":"Xen","versions":[["4.8"]]},{"name":"xsa303/0001-xen-arm32-entry-Split-__DEFINE_ENTRY_TRAP-in-two.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]},{"name":"xsa303/0002-xen-arm32-entry-Fold-the-macro-SAVE_ALL-in-the-macro.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]},{"name":"xsa303/0003-xen-arm32-Don-t-blindly-unmask-interrupts-on-trap-wi.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]},{"name":"xsa303/0004-xen-arm64-Don-t-blindly-unmask-interrupts-on-trap-wi.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]}],"public_time":"2019-10-31 12:00","title":"ARM: Interrupts are unconditionally unmasked in exception handlers","version":5,"version_time":"2020-08-14 16:51","xsa":"303"},{"cve":["CVE-2018-12207"],"files":[{"name":"xsa304.meta"},{"name":"xsa304/xsa304-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa304/xsa304-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa304/xsa304-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa304/xsa304-4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa304/xsa304-4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa304/xsa304-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa304/xsa304-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa304/xsa304-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa304/xsa304-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa304/xsa304-4.10-3.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa304/xsa304-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa304/xsa304-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa304/xsa304-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa304/xsa304-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa304/xsa304-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa304/xsa304-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2019-11-12 18:01","title":"x86: Machine Check Error on Page Size Change DoS","version":2,"version_time":"2020-08-14 16:52","xsa":"304"},{"cve":["CVE-2019-11135"],"files":[{"name":"xsa305.meta"},{"name":"xsa305/xsa305-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa305/xsa305-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa305/xsa305-4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa305/xsa305-4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa305/xsa305-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa305/xsa305-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa305/xsa305-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa305/xsa305-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa305/xsa305-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa305/xsa305-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa305/xsa305-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa305/xsa305-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2019-11-12 18:01","title":"TSX Asynchronous Abort speculative side channel","version":2,"version_time":"2020-08-14 16:52","xsa":"305"},{"cve":["CVE-2019-19579"],"files":[{"name":"xsa306.meta"},{"name":"xsa306.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa306-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"],["4.9.x"]]},{"name":"xsa306-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]},{"name":"xsa306-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2019-11-26 12:00","title":"Device quarantine for alternate pci assignment methods","version":3,"version_time":"2019-12-05 14:21","xsa":"306"},{"cve":["CVE-2019-19581","CVE-2019-19582"],"files":[{"name":"xsa307.meta"},{"name":"xsa307.patch","project":"xen","upstream":"Xen","versions":[["4.8.x","4.13.x"],["xen-unstable"]]}],"public_time":"2019-12-11 12:00","title":"find_next_bit() issues","version":4,"version_time":"2020-08-14 16:52","xsa":"307"},{"cve":["CVE-2019-19583"],"files":[{"name":"xsa308.meta"},{"name":"xsa308.patch","project":"xen","upstream":"Xen","versions":[["4.8.x","4.13.x"],["xen-unstable"]]}],"public_time":"2019-12-11 12:00","title":"VMX: VMentry failure with debug exceptions and blocked states","version":4,"version_time":"2020-08-14 16:51","xsa":"308"},{"cve":["CVE-2019-19578"],"files":[{"name":"xsa309.meta"},{"name":"xsa309.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.13"],["xen-unstable"]]}],"public_time":"2019-12-11 12:00","title":"Linear pagetable use / entry miscounts","version":3,"version_time":"2019-12-11 12:09","xsa":"309"},{"cve":["CVE-2019-19580"],"files":[{"name":"xsa310.meta"},{"name":"xsa310-4.9/0001-x86-mm-Set-old_guest_table-when-destroying-vcpu-page.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.9"]]},{"name":"xsa310-4.9/0002-x86-mm-alloc-free_lN_table-Retain-partial_flags-on-E.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.9"]]},{"name":"xsa310-4.9/0003-x86-mm-relinquish_memory-Grab-an-extra-type-ref-when.patch","project":"xen","upstream":"Xen","versions":[["4.8","4.9"]]},{"name":"xsa310/0001-x86-mm-Set-old_guest_table-when-destroying-vcpu-page.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"],["xen-unstable"]]},{"name":"xsa310/0002-x86-mm-alloc-free_lN_table-Retain-partial_flags-on-E.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"],["xen-unstable"]]},{"name":"xsa310/0003-x86-mm-relinquish_memory-Grab-an-extra-type-ref-when.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"],["xen-unstable"]]}],"public_time":"2019-12-11 12:00","title":"Further issues with restartable PV type change operations","version":3,"version_time":"2019-12-11 12:09","xsa":"310"},{"cve":["CVE-2019-19577"],"files":[{"name":"xsa311.meta"},{"name":"xsa311.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"],["xen-unstable"]]},{"name":"xsa311-4.8-1.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa311-4.8-2.patch","project":"xen","upstream":"Xen","versions":[["4.8.x"]]},{"name":"xsa311-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa311-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa311-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa311-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa311-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa311-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2019-12-11 12:00","title":"Bugs in dynamic height handling for AMD IOMMU pagetables","version":4,"version_time":"2019-12-11 12:09","xsa":"311"},{"files":[{"name":"xsa312.meta"},{"name":"xsa312.patch","project":"xen","upstream":"Xen","versions":[["4.12","4.13"],["xen-unstable"]]},{"name":"xsa312-4.9.patch","project":"xen","upstream":"Xen","versions":[["4.9"]]},{"name":"xsa312-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]}],"public_time":"2020-01-14 14:21","title":"arm: a CPU may speculate past the ERET instruction","version":1,"version_time":"2020-01-14 14:21","xsa":"312"},{"cve":["CVE-2020-11740","CVE-2020-11741"],"files":[{"name":"xsa313.meta"},{"name":"xsa313-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x","4.13.x"],["xen-unstable"]]},{"name":"xsa313-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x","4.13.x"],["xen-unstable"]]}],"public_time":"2020-04-14 12:00","title":"multiple xenoprof issues","version":3,"version_time":"2020-04-14 12:00","xsa":"313"},{"cve":["CVE-2020-11739"],"files":[{"name":"xsa314.meta"},{"name":"xsa314.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa314-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.9","4.13"]]}],"public_time":"2020-04-14 12:00","title":"Missing memory barriers in read-write unlock paths","version":3,"version_time":"2020-04-14 12:00","xsa":"314"},{"cve":["CVE-2020-0551"],"public_time":"2020-03-10 17:02","title":"Load Value Injection (LVI) speculative side channel","version":1,"version_time":"2020-03-10 17:02","xsa":"315"},{"cve":["CVE-2020-11743"],"files":[{"name":"xsa316/xsa316-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa316/xsa316-xen.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]}],"public_time":"2020-04-14 12:00","title":"Bad error path in GNTTABOP_map_grant","version":3,"version_time":"2020-04-14 12:00","xsa":"316"},{"cve":["CVE-2020-15566"],"files":[{"name":"xsa317.meta"},{"name":"xsa317.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-07-07 12:00","title":"Incorrect error handling in event channel port allocation","version":3,"version_time":"2020-07-07 12:18","xsa":"317"},{"cve":["CVE-2020-11742"],"files":[{"name":"xsa318.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]}],"public_time":"2020-04-14 12:00","title":"Bad continuation handling in GNTTABOP_copy","version":3,"version_time":"2020-04-14 12:00","xsa":"318"},{"cve":["CVE-2020-15563"],"files":[{"name":"xsa319.meta"},{"name":"xsa319.patch","project":"xen","upstream":"Xen","versions":[["4.9","4.13"],["xen-unstable"]]}],"public_time":"2020-07-07 12:00","title":"inverted code paths in x86 dirty VRAM tracking","version":3,"version_time":"2020-07-07 12:18","xsa":"319"},{"cve":["CVE-2020-0543"],"files":[{"name":"xsa320/xsa320-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa320/xsa320-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa320/xsa320-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa320/xsa320-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa320/xsa320-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa320/xsa320-4.9-3.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa320/xsa320-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa320/xsa320-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa320/xsa320-4.10-3.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa320/xsa320-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa320/xsa320-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa320/xsa320-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa320/xsa320-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa320/xsa320-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa320/xsa320-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa320/xsa320-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa320/xsa320-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa320/xsa320-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]}],"public_time":"2020-06-09 17:00","title":"Special Register Buffer speculative side channel","version":2,"version_time":"2020-06-11 13:10","xsa":"320"},{"cve":["CVE-2020-15565"],"files":[{"name":"xsa321.meta"},{"name":"xsa321/xsa321-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-3.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-4.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-5.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-6.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.9-7.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa321/xsa321-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-3.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-4.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-5.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-6.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.10-7.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa321/xsa321-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-4.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-5.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-6.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.11-7.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa321/xsa321-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-4.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-5.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-6.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.12-7.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa321/xsa321-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-4.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-5.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-6.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.13-7.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa321/xsa321-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-6.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa321/xsa321-7.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2020-07-07 12:00","title":"insufficient cache write-back under VT-d","version":3,"version_time":"2020-07-07 12:21","xsa":"321"},{"cve":["CVE-2020-29481"],"files":[{"name":"xsa322.meta"},{"name":"xsa322-4.11-o.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]},{"name":"xsa322-4.12-c.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.12"]]},{"name":"xsa322-4.14-c.patch","project":"xen","upstream":"Xen","versions":[["4.13","4.14"]]},{"name":"xsa322-c.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa322-o.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"Xenstore: new domains inheriting existing node permissions","version":5,"version_time":"2020-12-16 16:41","xsa":"322"},{"cve":["CVE-2020-29482"],"files":[{"name":"xsa323.meta"},{"name":"xsa323.patch","project":"xen","upstream":"Xen","versions":[["4.11.x","xen-unstable"]]},{"name":"xsa323-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]}],"public_time":"2020-12-15 12:00","title":"Xenstore: wrong path length check","version":3,"version_time":"2020-12-15 12:20","xsa":"323"},{"cve":["CVE-2020-29484"],"files":[{"name":"xsa324.meta"},{"name":"xsa324.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"Xenstore: guests can crash xenstored via watchs","version":3,"version_time":"2020-12-15 12:20","xsa":"324"},{"cve":["CVE-2020-29483"],"files":[{"name":"xsa325.meta"},{"name":"xsa325.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa325-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.14"]]}],"public_time":"2020-12-15 12:00","title":"Xenstore: guests can disturb domain cleanup","version":3,"version_time":"2020-12-15 12:20","xsa":"325"},{"cve":["CVE-2022-42311","CVE-2022-42312","CVE-2022-42313","CVE-2022-42314","CVE-2022-42315","CVE-2022-42316","CVE-2022-42317","CVE-2022-42318"],"files":[{"name":"xsa326.meta"},{"name":"xsa326/xsa326-4.13-oxenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-oxenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-09.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-10.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-11.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-12.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-15.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.13-xenstored-16.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-oxenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-09.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-10.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-11.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-12.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-13.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-15.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.14-xenstored-16.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-oxenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-09.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-10.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-11.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-12.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-13.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-14.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.15-xenstored-16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-oxenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-08.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-09.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-10.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-11.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-12.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-13.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-14.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-15.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-4.16-xenstored-16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa326/xsa326-oxenstored-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-oxenstored-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-11.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-12.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-13.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-14.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-15.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa326/xsa326-xenstored-16.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: guests can let run xenstored out of memory","version":4,"version_time":"2022-11-01 12:00","xsa":"326"},{"cve":["CVE-2020-15564"],"files":[{"name":"xsa327.meta"},{"name":"xsa327.patch","project":"xen","upstream":"Xen","versions":[["4.9","xen-unstable"]]}],"public_time":"2020-07-07 12:00","title":"Missing alignment check in VCPUOP_register_vcpu_info","version":3,"version_time":"2020-07-07 12:23","xsa":"327"},{"cve":["CVE-2020-15567"],"files":[{"name":"xsa328.meta"},{"name":"xsa328/xsa328-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa328/xsa328-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa328/xsa328-4.9-1.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa328/xsa328-4.9-2.patch","project":"xen","upstream":"Xen","versions":[["4.9.x"]]},{"name":"xsa328/xsa328-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]},{"name":"xsa328/xsa328-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"],["4.11.x"]]},{"name":"xsa328/xsa328-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa328/xsa328-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa328/xsa328-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa328/xsa328-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]}],"public_time":"2020-07-07 12:00","title":"non-atomic modification of live EPT PTE","version":3,"version_time":"2020-07-07 12:24","xsa":"328"},{"cve":["CVE-2020-15852"],"files":[{"name":"xsa329.patch","project":"Linux","upstream":"Linux","versions":[["5.5","master"]]}],"public_time":"2020-07-16 12:00","title":"Linux ioperm bitmap context switching issues","version":4,"version_time":"2023-12-15 15:43","xsa":"329"},{"cve":["CVE-2020-29485"],"files":[{"name":"xsa330.meta"},{"name":"xsa330.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa330-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]}],"public_time":"2020-12-15 12:00","title":"oxenstored memory leak in reset_watches","version":3,"version_time":"2020-12-15 12:20","xsa":"330"},{"cve":["CVE-2020-27675"],"files":[{"name":"xsa331-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2020-10-20 12:00","title":"Race condition in Linux event handler may crash dom0","version":3,"version_time":"2021-01-19 16:34","xsa":"331"},{"cve":["CVE-2020-27673"],"files":[{"name":"xsa332-linux-01.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-02.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-03.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-04.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-05.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-06.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-07.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-08.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-09.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-10.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-11.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa332-linux-12.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2020-10-20 12:00","title":"Rogue guests can cause DoS of Dom0 via high frequency events","version":4,"version_time":"2021-01-19 16:34","xsa":"332"},{"cve":["CVE-2020-25602"],"files":[{"name":"xsa333.meta"},{"name":"xsa333.patch","project":"xen","upstream":"Xen","versions":[["4.11","xen-unstable"]]}],"public_time":"2020-09-22 12:00","title":"x86 pv: Crash when handling guest access to MSR_MISC_ENABLE","version":3,"version_time":"2020-09-22 13:37","xsa":"333"},{"cve":["CVE-2020-25598"],"files":[{"name":"xsa334.meta"},{"name":"xsa334.patch","project":"xen","upstream":"Xen","versions":[["4.13","xen-unstable"]]},{"name":"xsa334-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]}],"public_time":"2020-09-22 12:00","title":"Missing unlock in XENMEM_acquire_resource error path","version":3,"version_time":"2020-09-22 13:37","xsa":"334"},{"cve":["CVE-2020-14364"],"files":[{"name":"xsa335-qemu.patch","project":"qemu-xen","upstream":"Qemu","versions":[[null]]},{"name":"xsa335-trad.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2020-08-24 12:00","title":"QEMU: usb: out-of-bounds r/w access issue","version":3,"version_time":"2023-12-15 15:43","xsa":"335"},{"cve":["CVE-2020-25604"],"files":[{"name":"xsa336.meta"},{"name":"xsa336.patch","project":"xen","upstream":"Xen","versions":[["4.12","xen-unstable"]]},{"name":"xsa336-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]}],"public_time":"2020-09-22 12:00","title":"race when migrating timers between x86 HVM vCPU-s","version":3,"version_time":"2020-09-22 13:37","xsa":"336"},{"cve":["CVE-2020-25595"],"files":[{"name":"xsa337.meta"},{"name":"xsa337/xsa337-1.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa337/xsa337-2.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa337/xsa337-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.12"]]},{"name":"xsa337/xsa337-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.12"]]},{"name":"xsa337/xsa337-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa337/xsa337-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]}],"public_time":"2020-09-22 12:00","title":"PCI passthrough code reading back hardware registers","version":3,"version_time":"2020-09-22 13:37","xsa":"337"},{"cve":["CVE-2020-25597"],"files":[{"name":"xsa338.meta"},{"name":"xsa338.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-09-22 12:00","title":"once valid event channels may not turn invalid","version":4,"version_time":"2020-09-22 13:37","xsa":"338"},{"cve":["CVE-2020-25596"],"files":[{"name":"xsa339.meta"},{"name":"xsa339.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-09-22 12:00","title":"x86 pv guest kernel DoS via SYSENTER","version":3,"version_time":"2020-09-22 13:37","xsa":"339"},{"cve":["CVE-2020-25603"],"files":[{"name":"xsa340.meta"},{"name":"xsa340.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-09-22 12:00","title":"Missing memory barriers when accessing/allocating an event channel","version":3,"version_time":"2020-09-22 13:37","xsa":"340"},{"deallocated":true,"public_time":"2020-09-08 15:35","xsa":"341"},{"cve":["CVE-2020-25600"],"files":[{"name":"xsa342.meta"},{"name":"xsa342.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa342-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.13"]]}],"public_time":"2020-09-22 12:00","title":"out of bounds event channels available to 32-bit x86 domains","version":3,"version_time":"2020-09-22 13:37","xsa":"342"},{"cve":["CVE-2020-25599"],"files":[{"name":"xsa343.meta"},{"name":"xsa343/xsa343-1.patch","project":"xen","upstream":"Xen","versions":[["4.13","xen-unstable"]]},{"name":"xsa343/xsa343-2.patch","project":"xen","upstream":"Xen","versions":[["4.13","xen-unstable"]]},{"name":"xsa343/xsa343-3.patch","project":"xen","upstream":"Xen","versions":[["4.13","xen-unstable"]]},{"name":"xsa343/xsa343-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa343/xsa343-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa343/xsa343-4.10-3.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa343/xsa343-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa343/xsa343-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa343/xsa343-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa343/xsa343-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa343/xsa343-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa343/xsa343-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]}],"public_time":"2020-09-22 12:00","title":"races with evtchn_reset()","version":5,"version_time":"2020-12-16 17:04","xsa":"343"},{"cve":["CVE-2020-25601"],"files":[{"name":"xsa344.meta"},{"name":"xsa344/xsa344-1.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa344/xsa344-2.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa344/xsa344-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa344/xsa344-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa344/xsa344-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa344/xsa344-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa344/xsa344-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa344/xsa344-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa344/xsa344-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa344/xsa344-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]}],"public_time":"2020-09-22 12:00","title":"lack of preemption in evtchn_reset() / evtchn_destroy()","version":4,"version_time":"2020-09-22 13:37","xsa":"344"},{"cve":["CVE-2020-27672"],"files":[{"name":"xsa345.meta"},{"name":"xsa345-4.10/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa345-4.10/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa345-4.10/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa345-4.11/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa345-4.11/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa345-4.11/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa345-4.12/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa345-4.12/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa345-4.12/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa345-4.13/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa345-4.13/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa345-4.13/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa345-4.14/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa345-4.14/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa345-4.14/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa345/0001-x86-mm-Refactor-map_pages_to_xen-to-have-only-a-sing.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa345/0002-x86-mm-Refactor-modify_xen_mappings-to-have-one-exit.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa345/0003-x86-mm-Prevent-some-races-in-hypervisor-mapping-upda.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2020-10-20 12:00","title":"x86: Race condition in Xen mapping code","version":5,"version_time":"2023-12-15 15:43","xsa":"345"},{"cve":["CVE-2020-27671"],"files":[{"name":"xsa346.meta"},{"name":"xsa346/xsa346-1.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa346/xsa346-2.patch","project":"xen","upstream":"Xen","versions":[["4.14","xen-unstable"]]},{"name":"xsa346/xsa346-4.10-1.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa346/xsa346-4.10-2.patch","project":"xen","upstream":"Xen","versions":[["4.10"]]},{"name":"xsa346/xsa346-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa346/xsa346-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11"]]},{"name":"xsa346/xsa346-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa346/xsa346-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa346/xsa346-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa346/xsa346-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]}],"public_time":"2020-10-20 12:00","title":"undue deferral of IOMMU TLB flushes","version":3,"version_time":"2021-01-19 16:34","xsa":"346"},{"cve":["CVE-2020-27670"],"files":[{"name":"xsa347.meta"},{"name":"xsa347/xsa347-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa347/xsa347-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa347/xsa347-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa347/xsa347-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]},{"name":"xsa347/xsa347-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.11"]]},{"name":"xsa347/xsa347-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa347/xsa347-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12"]]},{"name":"xsa347/xsa347-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa347/xsa347-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa347/xsa347-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13"]]},{"name":"xsa347/xsa347-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa347/xsa347-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]},{"name":"xsa347/xsa347-4.14-3.patch","project":"xen","upstream":"Xen","versions":[["4.14"]]}],"public_time":"2020-10-20 12:00","title":"unsafe AMD IOMMU page table updates","version":3,"version_time":"2021-01-19 16:34","xsa":"347"},{"cve":["CVE-2020-29566"],"files":[{"name":"xsa348.meta"},{"name":"xsa348-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]},{"name":"xsa348-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]},{"name":"xsa348-3.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]},{"name":"xsa348-4.10.patch","project":"xen","upstream":"Xen","versions":[["4.10.x"]]},{"name":"xsa348-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa348-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa348-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa348-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa348-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]}],"public_time":"2020-12-15 12:00","title":"undue recursion in x86 HVM context switch code","version":3,"version_time":"2020-12-15 12:20","xsa":"348"},{"cve":["CVE-2020-29568"],"files":[{"name":"xsa349/xsa349-linux-1.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa349/xsa349-linux-2.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa349/xsa349-linux-3.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa349/xsa349-linux-4.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa349/xsa349-linux-5.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2020-12-15 12:00","title":"Frontends can trigger OOM in Backends by update a watched path","version":3,"version_time":"2020-12-15 12:20","xsa":"349"},{"cve":["CVE-2020-29569"],"files":[{"name":"xsa350-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2020-12-15 12:00","title":"Use after free triggered by block frontend in Linux blkback","version":4,"version_time":"2020-12-15 12:20","xsa":"350"},{"cve":["CVE-2020-28368"],"files":[{"name":"xsa351.meta"},{"name":"xsa351-arm.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","xen-unstable"]]},{"name":"xsa351-arm-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.10.x","4.11.x"]]},{"name":"xsa351-x86-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.10.x","4.11.x"]]},{"name":"xsa351-x86-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.10.x","4.11.x"]]},{"name":"xsa351-x86-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa351-x86-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa351-x86-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa351-x86-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa351-x86-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa351-x86-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]}],"public_time":"2020-11-10 18:01","title":"Information leak via power sidechannel","version":3,"version_time":"2023-12-15 15:43","xsa":"351"},{"cve":["CVE-2020-29486"],"files":[{"name":"xsa352.meta"},{"name":"xsa352.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"oxenstored: node ownership can be changed by unprivileged clients","version":3,"version_time":"2020-12-15 12:20","xsa":"352"},{"cve":["CVE-2020-29479"],"files":[{"name":"xsa353.meta"},{"name":"xsa353.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"oxenstored: permissions not checked on root node","version":4,"version_time":"2020-12-15 12:20","xsa":"353"},{"cve":["CVE-2020-29487"],"files":[{"name":"xsa354-1-ls_lR-factor-out-dir-concatenation.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-2-ls_lR-refactor-use-fold.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-3-ls_lR-separate-recursion-into-separate-funct.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-4-ls_lR-add-quota.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-5-ls_lR-limit-depth.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-6-exclude-attr-os-hotfixes-from-ls_lR.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-7-read-important-xenstore-entries-first.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]},{"name":"xsa354-8-refactor-attr-os-hotfixes-exclusion.patch","project":"xenopsd","upstream":"Xapi","versions":[["master"]]}],"public_time":"2020-12-15 12:00","title":"XAPI: guest-triggered excessive memory usage","version":4,"version_time":"2020-12-15 12:20","xsa":"354"},{"cve":["CVE-2020-29040"],"files":[{"name":"xsa355.meta"},{"name":"xsa355.patch","project":"xen","upstream":"Xen","versions":[["4.10.x","xen-unstable"]]}],"public_time":"2020-11-24 12:00","title":"stack corruption from XSA-346 change","version":3,"version_time":"2021-01-19 16:34","xsa":"355"},{"cve":["CVE-2020-29567"],"files":[{"name":"xsa356.meta"},{"name":"xsa356.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"infinite loop when cleaning up IRQ vectors","version":3,"version_time":"2020-12-15 12:20","xsa":"356"},{"deallocated":true,"public_time":"2021-08-10 14:47","xsa":"357"},{"cve":["CVE-2020-29570"],"files":[{"name":"xsa358.meta"},{"name":"xsa358.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa358-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.10","4.14"]]}],"public_time":"2020-12-15 12:00","title":"FIFO event channels control block related ordering","version":5,"version_time":"2020-12-16 17:04","xsa":"358"},{"cve":["CVE-2020-29571"],"files":[{"name":"xsa359.meta"},{"name":"xsa359.patch","project":"xen","upstream":"Xen","versions":[["4.10","xen-unstable"]]}],"public_time":"2020-12-15 12:00","title":"FIFO event channels control structure ordering","version":3,"version_time":"2020-12-15 12:20","xsa":"359"},{"cve":["CVE-2021-3308"],"files":[{"name":"xsa360.meta"},{"name":"xsa360.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa360-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.12","4.14"]]}],"public_time":"2021-01-21 14:10","title":"IRQ vector leak on x86","version":2,"version_time":"2021-01-26 22:04","xsa":"360"},{"cve":["CVE-2021-26932"],"files":[{"name":"xsa361-linux-1.patch","project":"Linux","upstream":"Linux","versions":[["3.19","5.11-rc"]]},{"name":"xsa361-linux-2.patch","project":"Linux","upstream":"Linux","versions":[["3.15","5.11-rc"]]},{"name":"xsa361-linux-3.patch","project":"Linux","upstream":"Linux","versions":[["4.19","5.11-rc"]]},{"name":"xsa361-linux-4.patch","project":"Linux","upstream":"Linux","versions":[["4.19","5.11-rc"]]},{"name":"xsa361-linux-5.patch","project":"Linux","upstream":"Linux","versions":[["4.4","5.11-rc"]]}],"public_time":"2021-02-16 12:00","title":"Linux: grant mapping error handling issues","version":4,"version_time":"2021-02-16 12:35","xsa":"361"},{"cve":["CVE-2021-26931"],"files":[{"name":"xsa362-linux-1.patch","project":"Linux","upstream":"Linux","versions":[["5.10","5.11-rc"]]},{"name":"xsa362-linux-2.patch","project":"Linux","upstream":"Linux","versions":[["3.16","5.11-rc"]]},{"name":"xsa362-linux-3.patch","project":"Linux","upstream":"Linux","versions":[["4.1","5.11-rc"]]}],"public_time":"2021-02-16 12:00","title":"Linux: backends treating grant mapping errors as bugs","version":3,"version_time":"2021-02-16 12:35","xsa":"362"},{"cve":["CVE-2021-26934"],"files":[{"name":"xsa363.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-02-16 12:00","title":"Linux: display frontend \"be-alloc\" mode is unsupported","version":3,"version_time":"2021-02-16 12:35","xsa":"363"},{"cve":["CVE-2021-26933"],"files":[{"name":"xsa364.meta"},{"name":"xsa364.patch","project":"xen","upstream":"Xen","versions":[["4.11","xen-unstable"]]}],"public_time":"2021-02-16 12:00","title":"arm: The cache may not be cleaned for newly allocated scrubbed pages","version":3,"version_time":"2021-02-16 12:35","xsa":"364"},{"cve":["CVE-2021-26930"],"files":[{"name":"xsa365-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.10","5.11-rc"]]}],"public_time":"2021-02-16 12:00","title":"Linux: error handling issues in blkback's grant mapping","version":3,"version_time":"2021-02-16 12:35","xsa":"365"},{"cve":["CVE-2021-27379"],"files":[{"name":"xsa366.meta"},{"name":"xsa366-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]}],"public_time":"2021-02-18 11:47","title":"missed flush in XSA-321 backport","version":2,"version_time":"2021-02-23 16:37","xsa":"366"},{"cve":["CVE-2021-28038"],"files":[{"name":"xsa367-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.12-rc"]]}],"public_time":"2021-03-04 10:39","title":"Linux: netback fails to honor grant mapping errors","version":2,"version_time":"2021-03-05 17:07","xsa":"367"},{"cve":["CVE-2021-28687"],"files":[{"name":"xsa368.meta"},{"name":"xsa368.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa368-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","4.13.x"]]},{"name":"xsa368-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]}],"public_time":"2021-03-18 12:00","title":"HVM soft-reset crashes toolstack","version":3,"version_time":"2021-03-18 13:56","xsa":"368"},{"cve":["CVE-2021-28039"],"files":[{"name":"xsa369-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.9","5.12-rc"]]}],"public_time":"2021-03-04 10:58","title":"Linux: special config may crash when trying to map foreign pages","version":3,"version_time":"2023-12-15 15:43","xsa":"369"},{"cve":["CVE-2021-28689"],"files":[{"name":"xsa370.meta"},{"name":"xsa370/0001-SUPPORT.md-Document-speculative-attacks-status-of-no.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa370/0002-SUPPORT.md-Un-shimmed-32-bit-PV-guests-are-no-longer.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-05-04 12:00","title":"x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests","version":2,"version_time":"2021-05-04 12:02","xsa":"370"},{"cve":["CVE-2021-28688"],"files":[{"name":"xsa371-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.10.18",null],["5.11.1",null],["5.12-rc"]]}],"public_time":"2021-03-30 12:00","title":"Linux: blkback driver may leak persistent grants","version":3,"version_time":"2021-03-30 12:01","xsa":"371"},{"cve":["CVE-2021-28693"],"files":[{"name":"xsa372.meta"},{"name":"xsa372-4.12/0001-xen-arm-Create-dom0less-domUs-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa372-4.12/0002-xen-arm-Boot-modules-should-always-be-scrubbed-if-bo.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa372-4.14/0001-xen-arm-Create-dom0less-domUs-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa372-4.14/0002-xen-arm-Boot-modules-should-always-be-scrubbed-if-bo.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa372-4.15/0001-xen-arm-Create-dom0less-domUs-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa372-4.15/0002-xen-arm-Boot-modules-should-always-be-scrubbed-if-bo.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa372/0001-xen-arm-Create-dom0less-domUs-earlier.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa372/0002-xen-arm-Boot-modules-should-always-be-scrubbed-if-bo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-06-08 17:00","title":"xen/arm: Boot modules are not scrubbed","version":3,"version_time":"2021-06-08 17:04","xsa":"372"},{"cve":["CVE-2021-28692"],"files":[{"name":"xsa373.meta"},{"name":"xsa373/xsa373-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa373/xsa373-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa373/xsa373-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa373/xsa373-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa373/xsa373-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa373/xsa373-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa373/xsa373-4.11-4.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa373/xsa373-4.11-5.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa373/xsa373-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa373/xsa373-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa373/xsa373-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa373/xsa373-4.12-4.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa373/xsa373-4.12-5.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa373/xsa373-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa373/xsa373-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa373/xsa373-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa373/xsa373-4.13-4.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa373/xsa373-4.13-5.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa373/xsa373-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa373/xsa373-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa373/xsa373-4.14-3.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa373/xsa373-4.14-4.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa373/xsa373-4.14-5.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa373/xsa373-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa373/xsa373-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa373/xsa373-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa373/xsa373-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa373/xsa373-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa373/xsa373-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa373/xsa373-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-06-08 17:00","title":"inappropriate x86 IOMMU timeout detection / handling","version":2,"version_time":"2021-06-08 17:04","xsa":"373"},{"cve":["CVE-2021-28691"],"files":[{"name":"xsa374-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.5.0","5.12.2"]]}],"public_time":"2021-06-08 17:00","title":"Guest triggered use-after-free in Linux xen-netback","version":2,"version_time":"2021-06-08 17:04","xsa":"374"},{"cve":["CVE-2021-0089","CVE-2021-26313"],"files":[{"name":"xsa375.meta"},{"name":"xsa375.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]},{"name":"xsa375-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.11.x","4.12.x"]]},{"name":"xsa375-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]}],"public_time":"2021-06-08 17:00","title":"Speculative Code Store Bypass","version":4,"version_time":"2021-06-10 09:16","xsa":"375"},{"files":[{"name":"xsa376.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-12-20 12:04","title":"frontends vulnerable to backends","version":1,"version_time":"2021-12-20 12:04","xsa":"376"},{"cve":["CVE-2021-28690"],"files":[{"name":"xsa377.meta"},{"name":"xsa377.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","xen-unstable"]]},{"name":"xsa377-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa377-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2021-06-08 17:00","title":"x86: TSX Async Abort protections not restored after S3","version":2,"version_time":"2021-06-08 17:04","xsa":"377"},{"cve":["CVE-2021-28694","CVE-2021-28695","CVE-2021-28696"],"files":[{"name":"xsa378.meta"},{"name":"xsa378/xsa378-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-4.11-0a.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-0b.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-0c.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-4.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-5.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-6.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-7.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.11-8.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa378/xsa378-4.12-0a.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-0b.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-0c.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-3.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-4.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-5.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-6.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-7.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.12-8.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa378/xsa378-4.13-0a.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-0b.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-0c.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-4.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-5.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-6.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-7.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.13-8.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa378/xsa378-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-3.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-4.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-5.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-6.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-7.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.14-8.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa378/xsa378-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-6.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-7.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.15-8.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa378/xsa378-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-6.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-7.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa378/xsa378-8.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2021-08-25 12:00","title":"IOMMU page mapping issues on x86","version":3,"version_time":"2021-09-01 09:30","xsa":"378"},{"cve":["CVE-2021-28697"],"files":[{"name":"xsa379.meta"},{"name":"xsa379.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa379-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.11.x","4.12.x"]]},{"name":"xsa379-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa379-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]}],"public_time":"2021-08-25 12:00","title":"grant table v2 status pages may remain accessible after de-allocation","version":2,"version_time":"2021-08-25 12:01","xsa":"379"},{"cve":["CVE-2021-28698"],"files":[{"name":"xsa380.meta"},{"name":"xsa380/xsa380-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]},{"name":"xsa380/xsa380-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]},{"name":"xsa380/xsa380-3.patch","project":"xen","upstream":"Xen","versions":[["4.11.x","4.15.x"]]},{"name":"xsa380/xsa380-4.11-1.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa380/xsa380-4.11-2.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa380/xsa380-4.12-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa380/xsa380-4.12-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa380/xsa380-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa380/xsa380-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa380/xsa380-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa380/xsa380-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]}],"public_time":"2021-08-25 12:00","title":"long running loops in grant table handling","version":3,"version_time":"2021-09-01 09:30","xsa":"380"},{"cve":["CVE-2021-28699"],"files":[{"name":"xsa382.meta"},{"name":"xsa382.patch","project":"xen","upstream":"Xen","versions":[["4.11.x","xen-unstable"]]}],"public_time":"2021-08-25 12:00","title":"inadequate grant-v2 status frames array bounds check","version":2,"version_time":"2021-08-25 12:01","xsa":"382"},{"cve":["CVE-2021-28700"],"files":[{"name":"xsa383.meta"},{"name":"xsa383.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","xen-unstable"]]},{"name":"xsa383-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2021-08-25 12:00","title":"xen/arm: No memory limit for dom0less domUs","version":2,"version_time":"2021-08-25 12:01","xsa":"383"},{"cve":["CVE-2021-28701"],"files":[{"name":"xsa384.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]},{"name":"xsa384-4.11.patch","project":"xen","upstream":"Xen","versions":[["4.11.x"]]},{"name":"xsa384-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","4.14.x"]]}],"public_time":"2021-09-08 12:00","title":"Another race in XENMAPSPACE_grant_table handling","version":3,"version_time":"2021-09-08 12:28","xsa":"384"},{"cve":["CVE-2021-28706"],"files":[{"name":"xsa385-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa385-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa385-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa385-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa385-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","4.15.x"]]}],"public_time":"2021-11-23 12:00","title":"guests may exceed their designated memory limit","version":2,"version_time":"2021-11-23 12:11","xsa":"385"},{"cve":["CVE-2021-28702"],"files":[{"name":"xsa386.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","xen-unstable"]]}],"public_time":"2021-10-05 18:43","title":"PCI devices with RMRRs not deassigned correctly","version":2,"version_time":"2021-10-07 14:41","xsa":"386"},{"cve":["CVE-2021-28703"],"public_time":"2021-11-23 12:00","title":"grant table v2 status pages may remain accessible after de-allocation (take two)","version":2,"version_time":"2021-11-23 12:11","xsa":"387"},{"cve":["CVE-2021-28704","CVE-2021-28707","CVE-2021-28708"],"files":[{"name":"xsa388-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa388-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa388-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","4.14.x"]]},{"name":"xsa388-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","4.14.x"]]},{"name":"xsa388-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa388-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]}],"public_time":"2021-11-23 12:00","title":"PoD operations on misaligned GFNs","version":3,"version_time":"2021-11-23 12:11","xsa":"388"},{"cve":["CVE-2021-28705","CVE-2021-28709"],"files":[{"name":"xsa389.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa389-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa389-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa389-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa389-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]}],"public_time":"2021-11-23 12:00","title":"issues with partially successful P2M updates on x86","version":3,"version_time":"2021-11-23 12:11","xsa":"389"},{"cve":["CVE-2021-28710"],"files":[{"name":"xsa390.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]}],"public_time":"2021-11-19 14:10","title":"certain VT-d IOMMUs may not work in shared page table mode","version":1,"version_time":"2021-11-19 14:10","xsa":"390"},{"cve":["CVE-2021-28711","CVE-2021-28712","CVE-2021-28713"],"files":[{"name":"xsa391-linux-1.patch","project":"Linux","upstream":"Linux","versions":[["5.15"]]},{"name":"xsa391-linux-2.patch","project":"Linux","upstream":"Linux","versions":[["5.15"]]},{"name":"xsa391-linux-3.patch","project":"Linux","upstream":"Linux","versions":[["5.15"]]}],"public_time":"2021-12-20 12:00","title":"Rogue backends can cause DoS of guests via high frequency events","version":3,"version_time":"2021-12-20 12:02","xsa":"391"},{"cve":["CVE-2021-28714","CVE-2021-28715"],"files":[{"name":"xsa392-linux-1.patch","project":"Linux","upstream":"Linux","versions":[["5.15"]]},{"name":"xsa392-linux-2.patch","project":"Linux","upstream":"Linux","versions":[["5.15"]]}],"public_time":"2021-12-20 12:00","title":"Guest can force Linux netback driver to hog large amounts of kernel memory","version":4,"version_time":"2021-12-20 12:03","xsa":"392"},{"cve":["CVE-2022-23033"],"files":[{"name":"xsa393.meta"},{"name":"xsa393.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","xen-unstable"]]}],"public_time":"2022-01-25 12:00","title":"arm: guest_physmap_remove_page not removing the p2m mappings","version":2,"version_time":"2022-01-25 12:04","xsa":"393"},{"cve":["CVE-2022-23034"],"files":[{"name":"xsa394.meta"},{"name":"xsa394.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","xen-unstable"]]},{"name":"xsa394-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]}],"public_time":"2022-01-25 12:00","title":"A PV guest could DoS Xen while unmapping a grant","version":3,"version_time":"2022-01-25 12:05","xsa":"394"},{"cve":["CVE-2022-23035"],"files":[{"name":"xsa395.meta"},{"name":"xsa395.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]},{"name":"xsa395-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.12.x","4.14.x"]]}],"public_time":"2022-01-25 12:00","title":"Insufficient cleanup of passed-through device IRQs","version":2,"version_time":"2022-01-25 12:05","xsa":"395"},{"cve":["CVE-2022-23036","CVE-2022-23037","CVE-2022-23038","CVE-2022-23039","CVE-2022-23040","CVE-2022-23041","CVE-2022-23042"],"files":[{"name":"xsa396-linux-01.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-02.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-03.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-04.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-05.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-06.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-07.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-08.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-09.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-10.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-11.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa396-linux-12.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2022-03-10 12:00","title":"Linux PV device frontends vulnerable to attacks by backends","version":4,"version_time":"2023-12-15 15:43","xsa":"396"},{"cve":["CVE-2022-26356"],"files":[{"name":"xsa397.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa397-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa397-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa397-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]}],"public_time":"2022-04-05 12:00","title":"Racy interactions between dirty vram tracking and paging log dirty hypercalls","version":2,"version_time":"2022-04-05 12:00","xsa":"397"},{"files":[{"name":"xsa398.meta"},{"name":"xsa398/xsa398-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa398/xsa398-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa398/xsa398-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa398/xsa398-4.12-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.12-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.12-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.12-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.12-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.12-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa398/xsa398-4.13-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.13-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.13-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.13-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.13-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.13-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa398/xsa398-4.14-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.14-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.14-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.14-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.14-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.14-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa398/xsa398-4.15-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.15-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.15-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.15-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.15-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.15-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa398/xsa398-4.16-1-xen-arm-Introduce-new-Arm-processors.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4.16-2-xen-arm-move-errata-CSV2-check-earlier.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4.16-3-xen-arm-Add-ECBHB-and-CLEARBHB-ID-fields.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4.16-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4.16-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4.16-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa398/xsa398-4-xen-arm-Add-Spectre-BHB-handling.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa398/xsa398-5-xen-arm-Allow-to-discover-and-use-SMCCC_ARCH_WORKARO.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa398/xsa398-6-x86-spec-ctrl-Cease-using-thunk-lfence-on-AMD.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-03-08 18:16","title":"Multiple speculative security issues","version":2,"version_time":"2022-03-18 15:07","xsa":"398"},{"cve":["CVE-2022-26357"],"files":[{"name":"xsa399.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa399-4.12.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa399-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.16.x"]]}],"public_time":"2022-04-05 12:00","title":"race in VT-d domain ID cleanup","version":2,"version_time":"2022-04-05 12:00","xsa":"399"},{"cve":["CVE-2022-26358","CVE-2022-26359","CVE-2022-26360","CVE-2022-26361"],"files":[{"name":"xsa400/xsa400-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-4.12-00.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-01.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-02.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-03.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-04.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-05.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-06.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-07.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-08.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-09.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-10.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.12-11.patch","project":"xen","upstream":"Xen","versions":[["4.12.x"]]},{"name":"xsa400/xsa400-4.13-00.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-07.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-08.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-09.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-10.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.13-11.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa400/xsa400-4.14-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-04.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-05.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-06.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-07.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-08.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-09.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-10.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.14-11.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa400/xsa400-4.15-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-08.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-09.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-10.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-11.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.15-12.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa400/xsa400-4.16-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-08.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-09.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-10.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-11.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-4.16-12.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa400/xsa400-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-11.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa400/xsa400-12.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-04-05 12:00","title":"IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues","version":2,"version_time":"2022-04-05 12:03","xsa":"400"},{"cve":["CVE-2022-26362"],"files":[{"name":"xsa401.meta"},{"name":"xsa401/xsa401-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa401/xsa401-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa401/xsa401-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa401/xsa401-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa401/xsa401-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","4.16.x"]]},{"name":"xsa401/xsa401-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","4.16.x"]]}],"public_time":"2022-06-09 12:00","title":"x86 pv: Race condition in typeref acquisition","version":2,"version_time":"2022-06-09 12:07","xsa":"401"},{"cve":["CVE-2022-26363","CVE-2022-26364"],"files":[{"name":"xsa402.meta"},{"name":"xsa402/xsa402-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa402/xsa402-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa402/xsa402-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa402/xsa402-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa402/xsa402-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa402/xsa402-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa402/xsa402-4.13-4.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa402/xsa402-4.13-5.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa402/xsa402-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa402/xsa402-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa402/xsa402-4.14-3.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa402/xsa402-4.14-4.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa402/xsa402-4.14-5.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa402/xsa402-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa402/xsa402-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa402/xsa402-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa402/xsa402-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa402/xsa402-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa402/xsa402-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa402/xsa402-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa402/xsa402-4.16-3.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa402/xsa402-4.16-4.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa402/xsa402-4.16-5.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa402/xsa402-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa402/xsa402-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-06-09 12:00","title":"x86 pv: Insufficient care with non-coherent mappings","version":4,"version_time":"2022-06-09 12:08","xsa":"402"},{"cve":["CVE-2022-26365","CVE-2022-33740","CVE-2022-33741","CVE-2022-33742"],"files":[{"name":"xsa403/xsa403-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa403/xsa403-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa403/xsa403-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa403/xsa403-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa403/xsa403-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa403/xsa403-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa403/xsa403-linux-1.patch","project":"Linux","upstream":"Linux","versions":[["5.18"]]},{"name":"xsa403/xsa403-linux-2.patch","project":"Linux","upstream":"Linux","versions":[["5.18"]]},{"name":"xsa403/xsa403-linux-3.patch","project":"Linux","upstream":"Linux","versions":[["5.18"]]},{"name":"xsa403/xsa403-linux-4.patch","project":"Linux","upstream":"Linux","versions":[["5.18"]]}],"public_time":"2022-07-05 12:00","title":"Linux disk/nic frontends data leaks","version":3,"version_time":"2022-07-05 12:04","xsa":"403"},{"cve":["CVE-2022-21123","CVE-2022-21125","CVE-2022-21166"],"files":[{"name":"xsa404/xsa404-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa404/xsa404-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa404/xsa404-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa404/xsa404-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa404/xsa404-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa404/xsa404-4.13-3.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa404/xsa404-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa404/xsa404-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa404/xsa404-4.14-3.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa404/xsa404-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa404/xsa404-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa404/xsa404-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa404/xsa404-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa404/xsa404-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa404/xsa404-4.16-3.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2022-06-14 18:26","title":"x86: MMIO Stale Data vulnerabilities","version":2,"version_time":"2022-06-16 16:10","xsa":"404"},{"cve":["CVE-2022-33743"],"files":[{"name":"xsa405-linux.patch","project":"Linux","upstream":"Linux","versions":[["5.9","5.19-rc"]]}],"public_time":"2022-07-05 12:00","title":"network backend may cause Linux netfront to use freed SKBs","version":3,"version_time":"2022-07-05 12:04","xsa":"405"},{"cve":["CVE-2022-33744"],"files":[{"name":"xsa406-linux.patch","project":"Linux","upstream":"Linux","versions":[["3.13","5.19-rc"]]}],"public_time":"2022-07-05 12:00","title":"Arm guests can cause Dom0 DoS via PV devices","version":3,"version_time":"2022-07-05 12:04","xsa":"406"},{"cve":["CVE-2022-23816","CVE-2022-23825","CVE-2022-29900"],"files":[{"name":"xsa407.meta"},{"name":"xsa407/xsa407-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-4.13-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-07.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-08.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-09.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-10.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-11.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-12.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-15.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-16.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-17.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-18.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-19.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-20.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.13-21.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa407/xsa407-4.14-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-04.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-05.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-06.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-07.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-08.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-09.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-10.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-11.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.14-12.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa407/xsa407-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-6.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-7.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.15-8.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa407/xsa407-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-3.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-4.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-5.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-6.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-7.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.16-8.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa407/xsa407-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-6.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-7.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa407/xsa407-8.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-07-12 16:36","title":"Retbleed - arbitrary speculative code execution with return instructions","version":1,"version_time":"2022-07-12 16:36","xsa":"407"},{"cve":["CVE-2022-33745"],"files":[{"name":"xsa408.meta"},{"name":"xsa408.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]},{"name":"xsa408-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]}],"public_time":"2022-07-26 12:00","title":"insufficient TLB flush for x86 PV guests in shadow mode","version":3,"version_time":"2022-07-26 19:24","xsa":"408"},{"cve":["CVE-2022-33747"],"files":[{"name":"xsa409.meta"},{"name":"xsa409-4.13/0001-libxl-docs-Use-arch-specific-default-paging-memory.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa409-4.13/0002-xen-arm-Construct-the-P2M-pages-pool-for-guests.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa409-4.13/0003-xen-arm-libxl-Implement-XEN_DOMCTL_shadow_op-for-Arm.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa409-4.13/0004-xen-arm-Allocate-and-free-P2M-pages-from-the-P2M-poo.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa409-4.14/0001-libxl-docs-Use-arch-specific-default-paging-memory.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa409-4.14/0002-xen-arm-Construct-the-P2M-pages-pool-for-guests.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa409-4.14/0003-xen-arm-libxl-Implement-XEN_DOMCTL_shadow_op-for-Arm.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa409-4.14/0004-xen-arm-Allocate-and-free-P2M-pages-from-the-P2M-poo.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa409-4.15/0001-libxl-docs-Use-arch-specific-default-paging-memory.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa409-4.15/0002-xen-arm-Construct-the-P2M-pages-pool-for-guests.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa409-4.15/0003-xen-arm-libxl-Implement-XEN_DOMCTL_shadow_op-for-Arm.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa409-4.15/0004-xen-arm-Allocate-and-free-P2M-pages-from-the-P2M-poo.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa409-4.16/0001-libxl-docs-Use-arch-specific-default-paging-memory.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa409-4.16/0002-xen-arm-Construct-the-P2M-pages-pool-for-guests.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa409-4.16/0003-xen-arm-libxl-Implement-XEN_DOMCTL_shadow_op-for-Arm.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa409-4.16/0004-xen-arm-Allocate-and-free-P2M-pages-from-the-P2M-poo.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa409/0001-libxl-docs-Add-per-arch-extra-default-paging-memory.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa409/0002-xen-arm-Construct-the-P2M-pages-pool-for-guests.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa409/0003-xen-arm-libxl-Implement-XEN_DOMCTL_shadow_op-for-Arm.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa409/0004-xen-arm-Allocate-and-free-P2M-pages-from-the-P2M-poo.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-10-11 12:00","title":"Arm: unbounded memory consumption for 2nd-level page tables","version":3,"version_time":"2022-10-11 12:06","xsa":"409"},{"cve":["CVE-2022-33746"],"files":[{"name":"xsa410.meta"},{"name":"xsa410/xsa410-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-4.13-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-07.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-08.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-09.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.13-10.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa410/xsa410-4.14-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-04.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-05.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-06.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-07.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-08.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-09.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.14-10.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa410/xsa410-4.16-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-08.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-09.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-4.16-10.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa410/xsa410-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa410/xsa410-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-10-11 12:00","title":"P2M pool freeing may take excessively long","version":3,"version_time":"2022-10-11 12:05","xsa":"410"},{"cve":["CVE-2022-33748"],"files":[{"name":"xsa411.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]},{"name":"xsa411-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]}],"public_time":"2022-10-11 12:00","title":"lock order inversion in transitive grant copy handling","version":3,"version_time":"2022-10-11 12:05","xsa":"411"},{"cve":["CVE-2022-42327"],"files":[{"name":"xsa412.meta"},{"name":"xsa412.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa412-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2022-11-01 12:00","title":"x86: unintended memory sharing between guests","version":2,"version_time":"2022-11-01 12:00","xsa":"412"},{"cve":["CVE-2022-33749"],"files":[{"name":"xsa413/xsa413-1.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]},{"name":"xsa413/xsa413-2.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]},{"name":"xsa413/xsa413-3.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]},{"name":"xsa413/xsa413-4.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]},{"name":"xsa413/xsa413-5.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]},{"name":"xsa413/xsa413-6.patch","project":"Xapi","upstream":"Xapi","versions":[["master"]]}],"public_time":"2022-10-11 12:00","title":"XAPI open file limit DoS","version":2,"version_time":"2022-10-11 12:06","xsa":"413"},{"cve":["CVE-2022-42309"],"files":[{"name":"xsa414.meta"},{"name":"xsa414.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"],["xen-unstable"]]},{"name":"xsa414-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can crash xenstored","version":2,"version_time":"2022-11-01 12:00","xsa":"414"},{"cve":["CVE-2022-42310"],"files":[{"name":"xsa415.meta"},{"name":"xsa415.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]},{"name":"xsa415-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa415-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can create orphaned Xenstore nodes","version":2,"version_time":"2022-11-01 12:00","xsa":"415"},{"cve":["CVE-2022-42319"],"files":[{"name":"xsa416.meta"},{"name":"xsa416.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa416-4.13.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa416-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa416-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa416-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can cause Xenstore to not free temporary memory","version":2,"version_time":"2022-11-01 12:00","xsa":"416"},{"cve":["CVE-2022-42320"],"files":[{"name":"xsa417.meta"},{"name":"xsa417.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.16.x"],["xen-unstable"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can get access to Xenstore nodes of deleted domains","version":2,"version_time":"2022-11-01 12:00","xsa":"417"},{"cve":["CVE-2022-42321"],"files":[{"name":"xsa418.meta"},{"name":"xsa418/xsa418-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-4.14-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.14-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.14-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.14-04.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.14-05.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.14-06.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.14.x"]]},{"name":"xsa418/xsa418-4.15-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.15-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa418/xsa418-4.16-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-4.16-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa418/xsa418-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa418/xsa418-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can crash xenstored via exhausting the stack","version":2,"version_time":"2022-11-01 12:00","xsa":"418"},{"cve":["CVE-2022-42322","CVE-2022-42323"],"files":[{"name":"xsa419.meta"},{"name":"xsa419/xsa419-4.13-oxenstored.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa419/xsa419-4.13-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa419/xsa419-4.13-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa419/xsa419-4.13-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa419/xsa419-4.14-oxenstored.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa419/xsa419-4.14-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa419/xsa419-4.14-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa419/xsa419-4.14-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa419/xsa419-4.15-oxenstored.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa419/xsa419-4.15-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa419/xsa419-4.15-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa419/xsa419-4.15-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa419/xsa419-oxenstored.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa419/xsa419-xenstored-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]},{"name":"xsa419/xsa419-xenstored-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]},{"name":"xsa419/xsa419-xenstored-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Cooperating guests can create arbitrary numbers of nodes","version":2,"version_time":"2022-11-01 12:00","xsa":"419"},{"cve":["CVE-2022-42324"],"files":[{"name":"xsa420.meta"},{"name":"xsa420.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","xen-unstable"]]}],"public_time":"2022-11-01 12:00","title":"Oxenstored 32-\u003e31 bit integer truncation issues","version":2,"version_time":"2022-11-01 12:00","xsa":"420"},{"cve":["CVE-2022-42325","CVE-2022-42326"],"files":[{"name":"xsa421.meta"},{"name":"xsa421/xsa421-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]},{"name":"xsa421/xsa421-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"],["xen-unstable"]]},{"name":"xsa421/xsa421-4.15-01.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.15.x"]]},{"name":"xsa421/xsa421-4.15-02.patch","project":"xen","upstream":"Xen","versions":[["4.13.x","4.15.x"]]}],"public_time":"2022-11-01 12:00","title":"Xenstore: Guests can create arbitrary number of nodes via transactions","version":2,"version_time":"2022-11-01 12:00","xsa":"421"},{"cve":["CVE-2022-23824"],"files":[{"name":"xsa422.meta"},{"name":"xsa422/xsa422-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa422/xsa422-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa422/xsa422-4.13-1.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa422/xsa422-4.13-2.patch","project":"xen","upstream":"Xen","versions":[["4.13.x"]]},{"name":"xsa422/xsa422-4.14-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa422/xsa422-4.14-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa422/xsa422-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa422/xsa422-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa422/xsa422-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa422/xsa422-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2022-11-08 18:00","title":"x86: Multiple speculative security issues","version":2,"version_time":"2022-11-10 15:24","xsa":"422"},{"cve":["CVE-2022-3643"],"files":[{"name":"xsa423-linux.patch","project":"Linux","upstream":"Linux","versions":[["4.14","6.1-rc"]]}],"public_time":"2022-12-06 15:17","title":"Guests can trigger NIC interface reset/abort/crash via netback","version":2,"version_time":"2022-12-07 15:24","xsa":"423"},{"cve":["CVE-2022-42328","CVE-2022-42329"],"files":[{"name":"xsa424-linux.patch","project":"Linux","upstream":"Linux","versions":[["6.0"],["6.1-rc"]]}],"public_time":"2022-12-06 15:17","title":"Guests can trigger deadlock in Linux netback driver","version":1,"version_time":"2022-12-06 15:17","xsa":"424"},{"cve":["CVE-2022-42330"],"files":[{"name":"xsa425.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"],["xen-unstable"]]}],"public_time":"2023-01-25 14:56","title":"Guests can cause Xenstore crash via soft reset","version":1,"version_time":"2023-01-25 14:56","xsa":"425"},{"cve":["CVE-2022-27672"],"files":[{"name":"xsa426.patch","project":"xen","upstream":"Xen","versions":[["4.16","xen-unstable"]]}],"public_time":"2023-02-14 18:03","title":"x86: Cross-Thread Return Address Predictions","version":2,"version_time":"2023-02-16 17:44","xsa":"426"},{"cve":["CVE-2022-42332"],"files":[{"name":"xsa427.meta"},{"name":"xsa427.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa427-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa427-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa427-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2023-03-21 12:00","title":"x86 shadow plus log-dirty mode use-after-free","version":2,"version_time":"2023-03-21 12:00","xsa":"427"},{"cve":["CVE-2022-42333","CVE-2022-42334"],"files":[{"name":"xsa428.meta"},{"name":"xsa428-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa428-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa428-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","4.16.x"]]},{"name":"xsa428-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","4.16.x"]]},{"name":"xsa428-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa428-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2023-03-21 12:00","title":"x86/HVM pinned cache attributes mis-handling","version":3,"version_time":"2023-03-21 12:00","xsa":"428"},{"cve":["CVE-2022-42331"],"files":[{"name":"xsa429.meta"},{"name":"xsa429.patch","project":"xen","upstream":"Xen","versions":[["4.16","xen-unstable"]]},{"name":"xsa429-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.14","4.15"]]}],"public_time":"2023-03-21 12:00","title":"x86: speculative vulnerability in 32bit SYSCALL path","version":3,"version_time":"2023-03-21 12:00","xsa":"429"},{"cve":["CVE-2022-42335"],"files":[{"name":"xsa430.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2023-04-25 12:00","title":"x86 shadow paging arbitrary pointer dereference","version":2,"version_time":"2023-04-25 12:02","xsa":"430"},{"cve":["CVE-2022-42336"],"files":[{"name":"xsa431.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2023-05-16 15:14","title":"Mishandling of guest SSBD selection on AMD hardware","version":1,"version_time":"2023-05-16 15:14","xsa":"431"},{"cve":["CVE-2023-34319"],"files":[{"name":"xsa432-linux.patch","project":"Linux","upstream":"Linux","versions":[["6.3","6.5-rc"]]}],"public_time":"2023-08-08 17:00","title":"Linux: buffer overrun in netback due to unusual packet","version":2,"version_time":"2023-08-08 17:00","xsa":"432"},{"cve":["CVE-2023-20593"],"files":[{"name":"xsa433.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa433-4.14.patch","project":"xen","upstream":"Xen","versions":[["4.14.x"]]},{"name":"xsa433-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa433-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa433-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa433-bugfix.patch","project":"xen","upstream":"Xen","versions":[["4.14.x","xen-unstable"]]}],"public_time":"2023-07-24 16:03","title":"x86/AMD: Zenbleed","version":3,"version_time":"2023-07-31 17:00","xsa":"433"},{"cve":["CVE-2023-20569"],"public_time":"2023-08-08 17:00","title":"x86/AMD: Speculative Return Stack Overflow","version":1,"version_time":"2023-08-08 17:00","xsa":"434"},{"cve":["CVE-2022-40982"],"public_time":"2023-08-08 17:00","title":"x86/Intel: Gather Data Sampling","version":1,"version_time":"2023-08-08 17:00","xsa":"435"},{"cve":["CVE-2023-34320"],"files":[{"name":"xsa436.meta"},{"name":"xsa436/xsa436.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa436/xsa436-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa436/xsa436-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]}],"public_time":"2023-08-01 14:44","title":"arm: Guests can trigger a deadlock on Cortex-A77","version":1,"version_time":"2023-08-01 14:44","xsa":"436"},{"cve":["CVE-2023-34321"],"files":[{"name":"xsa437.meta"},{"name":"xsa437/xsa437.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa437/xsa437-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]}],"public_time":"2023-09-05 12:00","title":"arm32: The cache may not be properly cleaned/invalidated","version":2,"version_time":"2023-09-05 12:13","xsa":"437"},{"cve":["CVE-2023-34322"],"files":[{"name":"xsa438.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa438-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa438-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa438-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2023-09-19 12:00","title":"top-level shadow reference dropped too early for 64-bit PV guests","version":2,"version_time":"2023-09-20 09:20","xsa":"438"},{"cve":["CVE-2023-20588"],"public_time":"2023-09-25 16:05","title":"x86/AMD: Divide speculative information leak","version":2,"version_time":"2023-09-25 17:18","xsa":"439"},{"cve":["CVE-2023-34323"],"files":[{"name":"xsa440.meta"},{"name":"xsa440-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.17.x"]]}],"public_time":"2023-10-10 12:00","title":"xenstored: A transaction conflict can crash C Xenstored","version":4,"version_time":"2023-12-15 15:39","xsa":"440"},{"cve":["CVE-2023-34324"],"files":[{"name":"xsa441-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2023-10-10 12:00","title":"Possible deadlock in Linux kernel event handling","version":4,"version_time":"2023-10-10 12:06","xsa":"441"},{"cve":["CVE-2023-34326"],"files":[{"name":"xsa442.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa442-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa442-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","4.17.x"]]}],"public_time":"2023-10-10 12:00","title":"x86/AMD: missing IOMMU TLB flushing","version":2,"version_time":"2023-10-10 12:06","xsa":"442"},{"cve":["CVE-2023-34325","CVE-2022-4949"],"files":[{"name":"xsa443/xsa443-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-4.15-01.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-02.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-03.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-04.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-05.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-06.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-07.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-08.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-09.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-10.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.15-11.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa443/xsa443-4.16-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-08.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-09.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-10.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.16-11.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa443/xsa443-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-08.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-09.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-10.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-4.17-11.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa443/xsa443-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa443/xsa443-11.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2023-10-10 12:00","title":"Multiple vulnerabilities in libfsimage disk handling","version":4,"version_time":"2023-11-09 15:19","xsa":"443"},{"cve":["CVE-2023-34327","CVE-2023-34328"],"files":[{"name":"xsa444-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa444-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa444-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa444-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa444-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa444-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2023-10-10 12:00","title":"x86/AMD: Debug Mask handling","version":3,"version_time":"2023-10-10 12:09","xsa":"444"},{"cve":["CVE-2023-46835"],"files":[{"name":"xsa445.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa445-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa445-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa445-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2023-11-14 12:00","title":"x86/AMD: mismatch in IOMMU quarantine page table levels","version":3,"version_time":"2023-11-14 14:00","xsa":"445"},{"cve":["CVE-2023-46836"],"files":[{"name":"xsa446.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","xen-unstable"]]}],"public_time":"2023-11-14 12:00","title":"x86: BTC/SRSO fixes not fully effective","version":2,"version_time":"2023-11-14 14:01","xsa":"446"},{"cve":["CVE-2023-46837"],"files":[{"name":"xsa447.meta"},{"name":"xsa447/xsa447.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa447/xsa447-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]}],"public_time":"2023-12-12 12:00","title":"arm32: The cache may not be properly cleaned/invalidated (take two)","version":2,"version_time":"2023-12-12 12:01","xsa":"447"},{"cve":["CVE-2023-46838"],"files":[{"name":"xsa448-linux.patch","project":"Linux","upstream":"Linux","versions":[["6.5","6.7-rc"]]}],"public_time":"2024-01-22 18:32","title":"Linux: netback processing of zero-length transmit fragment","version":2,"version_time":"2024-01-22 18:32","xsa":"448"},{"cve":["CVE-2023-46839"],"files":[{"name":"xsa449.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa449-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]}],"public_time":"2024-01-30 12:00","title":"pci: phantom functions assigned to incorrect contexts","version":2,"version_time":"2024-01-30 13:13","xsa":"449"},{"cve":["CVE-2023-46840"],"files":[{"name":"xsa450.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2024-01-30 12:00","title":"VT-d: Failure to quarantine devices in !HVM builds","version":2,"version_time":"2024-01-30 13:13","xsa":"450"},{"cve":["CVE-2023-46841"],"files":[{"name":"xsa451-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa451-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa451-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa451-4.15.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa451-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa451-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa451-4.18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]}],"public_time":"2024-02-27 12:00","title":"x86: shadow stack vs exceptions from emulation stubs","version":2,"version_time":"2024-02-27 12:01","xsa":"451"},{"cve":["CVE-2023-28746"],"files":[{"name":"xsa452/xsa452-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa452/xsa452-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa452/xsa452-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa452/xsa452-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-6.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.15-7.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa452/xsa452-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-3.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-4.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-5.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-6.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.16-7.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa452/xsa452-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-3.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-4.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-5.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-6.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.17-7.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa452/xsa452-4.18-1.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-2.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-3.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-4.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-5.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-6.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.18-7.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa452/xsa452-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa452/xsa452-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2024-03-12 17:06","title":"x86: Register File Data Sampling","version":1,"version_time":"2024-03-12 17:06","xsa":"452"},{"cve":["CVE-2024-2193"],"files":[{"name":"xsa453/xsa453-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-3.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-4.15-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-3.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-4.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-5.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-6.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-7.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.15-8.patch","project":"xen","upstream":"Xen","versions":[["4.15.x"]]},{"name":"xsa453/xsa453-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-3.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-4.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-5.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-6.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-7.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.16-8.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa453/xsa453-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-3.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-4.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-5.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-6.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-7.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.17-8.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa453/xsa453-4.18-1.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-2.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-3.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-4.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-5.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-6.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.18-7.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa453/xsa453-4.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-5.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-6.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa453/xsa453-7.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2024-03-12 17:06","title":"GhostRace: Speculative Race Conditions","version":1,"version_time":"2024-03-12 17:06","xsa":"453"},{"cve":["CVE-2023-46842"],"files":[{"name":"xsa454-1.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa454-2.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa454-4.16-1.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa454-4.16-2.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]},{"name":"xsa454-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa454-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa454-4.18-1.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa454-4.18-2.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]}],"public_time":"2024-04-09 12:00","title":"x86 HVM hypercalls may trigger Xen bug check","version":2,"version_time":"2024-04-09 12:00","xsa":"454"},{"cve":["CVE-2024-31142"],"files":[{"name":"xsa455.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa455-4.16.patch","project":"xen","upstream":"Xen","versions":[["4.15.x","4.16.x"]]}],"public_time":"2024-04-09 17:00","title":"x86: Incorrect logic for BTC/SRSO mitigations","version":4,"version_time":"2024-04-09 17:00","xsa":"455"},{"cve":["CVE-2024-2201"],"public_time":"2024-04-09 17:00","title":"x86: Native Branch History Injection","version":3,"version_time":"2024-05-07 17:12","xsa":"456"},{"cve":["CVE-2024-27393"],"files":[{"name":"xsa457.patch","project":"Linux","upstream":"Linux","versions":[["5.9"]]}],"public_time":"2024-05-07 17:12","title":"Linux/xen-netfront: Memory leak due to missing cleanup function","version":3,"version_time":"2024-05-08 22:19","xsa":"457"},{"cve":["CVE-2024-31143"],"files":[{"name":"xsa458.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","xen-unstable"]]}],"public_time":"2024-07-16 12:00","title":"double unlock in x86 guest IRQ handling","version":2,"version_time":"2024-07-16 12:00","xsa":"458"},{"cve":["CVE-2024-31144"],"files":[{"name":"xsa459-xen-api.patch"},{"name":"xsa459-xsconsole.patch"}],"public_time":"2024-07-16 12:00","title":"Xapi: Metadata injection attack against backup/restore functionality","version":2,"version_time":"2024-07-16 12:00","xsa":"459"},{"cve":["CVE-2024-31145"],"files":[{"name":"xsa460.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","xen-unstable"]]}],"public_time":"2024-08-13 12:00","title":"error handling in x86 IOMMU identity mapping","version":2,"version_time":"2024-08-14 13:25","xsa":"460"},{"cve":["CVE-2024-31146"],"files":[{"name":"xsa461.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","xen-unstable"]]}],"public_time":"2024-08-13 12:00","title":"PCI device pass-through with shared resources","version":2,"version_time":"2024-08-14 13:25","xsa":"461"},{"cve":["CVE-2024-45817"],"files":[{"name":"xsa462.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","xen-unstable"]]}],"public_time":"2024-09-24 12:00","title":"x86: Deadlock in vlapic_error()","version":2,"version_time":"2024-09-24 12:13","xsa":"462"},{"cve":["CVE-2024-45818"],"files":[{"name":"xsa463/xsa463-4.16-01.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-02.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-03.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-04.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-05.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-06.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-07.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-08.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-09.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.16-10.patch","project":"xen","upstream":"Xen","versions":[["4.16.x"]]},{"name":"xsa463/xsa463-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-08.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-09.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.17-10.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa463/xsa463-4.18-01.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-02.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-03.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-04.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-05.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-06.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-07.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-08.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.18-09.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa463/xsa463-4.19-01.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-02.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-03.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-04.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-05.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-06.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-07.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-08.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa463/xsa463-4.19-09.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]}],"public_time":"2024-11-12 12:00","title":"Deadlock in x86 HVM standard VGA handling","version":2,"version_time":"2024-11-12 12:05","xsa":"463"},{"cve":["CVE-2024-45819"],"files":[{"name":"xsa464.patch","project":"xen","upstream":"Xen","versions":[["4.16.x","xen-unstable"]]}],"public_time":"2024-11-12 12:00","title":"libxl leaks data to PVH guests via ACPI tables","version":2,"version_time":"2024-11-12 12:05","xsa":"464"},{"cve":["CVE-2024-53240"],"files":[{"name":"xsa465-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2024-12-17 12:00","title":"Backend can crash Linux netfront","version":3,"version_time":"2024-12-17 12:18","xsa":"465"},{"cve":["CVE-2024-53241"],"files":[{"name":"xsa466-linux-01.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-02.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-03.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-04.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-05.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-06.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-linux-07.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa466-xen.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2024-12-17 12:00","title":"Xen hypercall page unsafe against speculative attacks","version":3,"version_time":"2024-12-17 12:18","xsa":"466"},{"cve":["CVE-2025-1713"],"files":[{"name":"xsa467.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2025-02-27 12:53","title":"deadlock potential with VT-d and legacy PCI device pass-through","version":1,"version_time":"2025-02-27 12:53","xsa":"467"},{"cve":["CVE-2025-27462","CVE-2025-27463","CVE-2025-27464"],"files":[{"name":"xsa468/xenbus-01.patch"},{"name":"xsa468/xencons-01.patch"},{"name":"xsa468/xencons-02.patch"},{"name":"xsa468/xeniface-01.patch"},{"name":"xsa468/xeniface-02.patch"},{"name":"xsa468/xeniface-03.patch"},{"name":"xsa468/xeniface-04.patch"}],"public_time":"2025-05-27 12:00","title":"WinPVDrivers: Excessive permissions on user-exposed devices","version":3,"version_time":"2025-05-27 12:07","xsa":"468"},{"cve":["CVE-2024-28956"],"files":[{"name":"xsa469/xsa469-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa469/xsa469-4.18-01.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-02.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-03.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-04.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-05.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-06.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.18-07.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa469/xsa469-4.19-01.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-02.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-03.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-04.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-05.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-06.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.19-07.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa469/xsa469-4.20-01.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-02.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-03.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-04.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-05.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-06.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-4.20-07.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa469/xsa469-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa469/xsa469-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2025-05-12 17:05","title":"x86: Indirect Target Selection","version":2,"version_time":"2025-05-12 17:15","xsa":"469"},{"cve":["CVE-2025-27465"],"files":[{"name":"xsa470.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","xen-unstable"]]},{"name":"xsa470-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2025-07-01 12:00","title":"x86: Incorrect stubs exception handling for flags recovery","version":2,"version_time":"2025-07-01 12:00","xsa":"470"},{"cve":["CVE-2024-36350","CVE-2024-36357"],"files":[{"name":"xsa471/xsa471-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa471/xsa471-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa471/xsa471-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa471/xsa471-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-08.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-09.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-10.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-11.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-12.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-13.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-14.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-15.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-16.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-18.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.17-19.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa471/xsa471-4.18-01.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-02.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-03.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-04.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-05.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-06.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-07.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-08.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-09.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-10.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-11.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-12.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-13.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-14.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-15.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-16.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-17.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.18-18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa471/xsa471-4.19-01.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-02.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-03.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-04.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-05.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-06.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-07.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-08.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-09.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-10.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-11.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-12.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-13.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-14.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-15.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.19-16.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa471/xsa471-4.20-01.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-02.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-03.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-04.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-05.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-06.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-07.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-08.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-09.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-10.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-11.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-12.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-13.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-14.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-4.20-15.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa471/xsa471-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa471/xsa471-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2025-07-08 14:07","title":"x86: Transitive Scheduler Attacks","version":3,"version_time":"2025-11-05 12:57","xsa":"471"},{"cve":["CVE-2025-27466","CVE-2025-58142","CVE-2025-58143"],"files":[{"name":"xsa472-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa472-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]},{"name":"xsa472-3.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2025-09-09 12:00","title":"Mutiple vulnerabilities in the Viridian interface","version":2,"version_time":"2025-09-09 12:00","xsa":"472"},{"cve":["CVE-2025-58144","CVE-2025-58145"],"files":[{"name":"xsa473-1.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","xen-unstable"]]},{"name":"xsa473-2.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","xen-unstable"]]},{"name":"xsa473-4.18-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.18.x"]]},{"name":"xsa473-4.18-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.18.x"]]}],"public_time":"2025-09-09 12:00","title":"Arm issues with page refcounting","version":2,"version_time":"2025-09-09 12:00","xsa":"473"},{"cve":["CVE-2025-58146"],"files":[{"name":"xsa474.patch"}],"public_time":"2025-09-09 12:00","title":"XAPI UTF-8 string handling","version":2,"version_time":"2025-09-09 12:00","xsa":"474"},{"cve":["CVE-2025-58147","CVE-2025-58148"],"files":[{"name":"xsa475-1.patch","project":"xen","upstream":"Xen","versions":[["4.20.x","xen-unstable"]]},{"name":"xsa475-2.patch","project":"xen","upstream":"Xen","versions":[["4.20.x","xen-unstable"]]},{"name":"xsa475-4.19-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.19.x"]]},{"name":"xsa475-4.19-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.19.x"]]}],"public_time":"2025-10-21 12:00","title":"x86: Incorrect input sanitisation in Viridian hypercalls","version":2,"version_time":"2025-10-21 12:00","xsa":"475"},{"cve":["CVE-2025-58149"],"files":[{"name":"xsa476.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa476-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa476-4.20.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","4.20.x"]]}],"public_time":"2025-10-24 12:14","title":"Incorrect removal of permissions on PCI device unplug","version":1,"version_time":"2025-10-24 12:14","xsa":"476"},{"cve":["CVE-2025-58150"],"files":[{"name":"xsa477.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","xen-unstable"]]},{"name":"xsa477-4.18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]}],"public_time":"2026-01-27 12:00","title":"x86: buffer overrun with shadow paging + tracing","version":2,"version_time":"2026-01-27 12:00","xsa":"477"},{"cve":["CVE-2025-58151"],"files":[{"name":"xsa478.patch"}],"public_time":"2026-01-27 12:00","title":"varstored: TOCTOU issues with mapped guest memory","version":2,"version_time":"2026-01-27 12:00","xsa":"478"},{"cve":["CVE-2026-23553"],"files":[{"name":"xsa479.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","xen-unstable"]]}],"public_time":"2026-01-27 12:00","title":"x86: incomplete IBPB for vCPU isolation","version":2,"version_time":"2026-01-27 12:00","xsa":"479"},{"cve":["CVE-2026-23554"],"files":[{"name":"xsa480.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","xen-unstable"]]}],"public_time":"2026-03-17 12:00","title":"Use after free of paging structures in EPT","version":3,"version_time":"2026-03-17 12:05","xsa":"480"},{"cve":["CVE-2026-23555"],"files":[{"name":"xsa481.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","xen-unstable"]]}],"public_time":"2026-03-17 12:00","title":"Xenstored DoS by unprivileged domain","version":2,"version_time":"2026-03-17 12:05","xsa":"481"},{"cve":["CVE-2026-31788"],"files":[{"name":"xsa482-linux-1.patch","project":"Linux","upstream":"Linux","versions":[[null]]},{"name":"xsa482-linux-2.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2026-03-24 12:00","title":"Linux privcmd driver can circumvent kernel lockdown","version":3,"version_time":"2026-03-24 12:21","xsa":"482"},{"cve":["CVE-2026-23556"],"files":[{"name":"xsa483.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","xen-unstable"]]},{"name":"xsa483-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa483-xapi.patch"}],"public_time":"2026-04-28 12:00","title":"oxenstored keeps quota related use counts across domain destruction","version":2,"version_time":"2026-04-28 12:01","xsa":"483"},{"cve":["CVE-2026-23557"],"files":[{"name":"xsa484.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","xen-unstable"]]},{"name":"xsa484-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]}],"public_time":"2026-04-28 12:00","title":"Xenstored DoS via XS_RESET_WATCHES command","version":2,"version_time":"2026-04-28 12:01","xsa":"484"},{"cve":["CVE-2026-31786"],"files":[{"name":"xsa485-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2026-04-28 12:00","title":"Linux kernel out of bounds read via Xen-related sysfs file","version":2,"version_time":"2026-04-28 12:01","xsa":"485"},{"cve":["CVE-2026-23558"],"files":[{"name":"xsa486.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","xen-unstable"]]},{"name":"xsa486-4.18.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.18.x"]]}],"public_time":"2026-04-28 12:00","title":"grant table v2 race in status page mapping","version":2,"version_time":"2026-04-28 12:01","xsa":"486"},{"cve":["CVE-2026-31787"],"files":[{"name":"xsa487-linux.patch","project":"Linux","upstream":"Linux","versions":[[null]]}],"public_time":"2026-04-28 12:00","title":"Linux kernel double free in Xen privcmd driver","version":2,"version_time":"2026-04-28 12:01","xsa":"487"},{"cve":["CVE-2025-54505"],"files":[{"name":"xsa488.patch","project":"xen","upstream":"Xen","versions":[["4.21.x","xen-unstable"]]},{"name":"xsa488-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa488-4.18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa488-4.20.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","4.20.x"]]}],"public_time":"2026-04-17 17:02","title":"x86: Floating Point Divider State Sampling","version":2,"version_time":"2026-04-28 17:39","xsa":"488"},{"cve":["CVE-2026-23559","CVE-2026-23560","CVE-2026-23561","CVE-2026-23562","CVE-2026-42486"],"public_time":"2026-04-28 18:05","title":"Multiple RBAC issues in XAPI","version":2,"version_time":"2026-04-29 16:36","xsa":"489"},{"cve":["CVE-2025-54518"],"files":[{"name":"xsa490.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa490-4.17-1.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa490-4.17-2.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa490-4.21.patch","project":"xen","upstream":"Xen","versions":[["4.18.x","4.21.x"]]}],"public_time":"2026-05-12 16:02","title":"x86: CPU Opcode Cache corruption","version":1,"version_time":"2026-05-12 16:02","xsa":"490"},{"cve":["CVE-2026-42487"],"files":[{"name":"xsa491.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa491-4.21.patch","project":"xen","upstream":"Xen","versions":[["4.17.x","4.21.x"]]}],"public_time":"2026-06-09 12:00","title":"x86 HVM I/O port list traversal","version":2,"version_time":"2026-06-09 12:00","xsa":"491"},{"cve":["CVE-2026-42489","CVE-2026-42490"],"files":[{"name":"xsa492/xsa492-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-4.17-00.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-08.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-09.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-10.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-11.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-12.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-13.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-14.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-15.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-16.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.17-17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa492/xsa492-4.18-00.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-01.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-02.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-03.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-04.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-05.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-06.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-07.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-08.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-09.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-10.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-11.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-12.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-13.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-14.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-15.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-16.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-17.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.18-18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa492/xsa492-4.19-00.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-01.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-02.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-03.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-04.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-05.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-06.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-07.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-08.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-09.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-10.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-11.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-12.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-13.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-14.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-15.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-16.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-17.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.19-18.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa492/xsa492-4.20-01.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-02.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-03.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-04.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-05.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-06.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-07.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-08.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-09.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-10.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-11.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-12.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-13.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-14.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-15.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-16.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-17.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.20-18.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa492/xsa492-4.21-01.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-02.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-03.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-04.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-05.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-06.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-07.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-08.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-09.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-10.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-11.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-12.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-13.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-14.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-15.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-16.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-17.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-18.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-19.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-4.21-20.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa492/xsa492-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-05.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-06.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-07.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-08.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-09.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-10.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-11.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-12.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-13.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-14.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-15.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-16.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-17.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-18.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-19.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa492/xsa492-20.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2026-06-09 12:00","title":"domctl lock open to abuse","version":3,"version_time":"2026-06-09 12:01","xsa":"492"},{"cve":["CVE-2025-10263"],"files":[{"name":"xsa493/xsa493-01.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa493/xsa493-02.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa493/xsa493-03.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa493/xsa493-4.17-01.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-02.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-03.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-04.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-05.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-06.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-07.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-08.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.17-09.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa493/xsa493-4.18-01.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa493/xsa493-4.18-02.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa493/xsa493-4.18-03.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa493/xsa493-4.18-04.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa493/xsa493-4.18-05.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa493/xsa493-4.19-01.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa493/xsa493-4.19-02.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa493/xsa493-4.19-03.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa493/xsa493-4.19-04.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa493/xsa493-4.19-05.patch","project":"xen","upstream":"Xen","versions":[["4.19.x"]]},{"name":"xsa493/xsa493-4.20-01.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa493/xsa493-4.20-02.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa493/xsa493-4.20-03.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa493/xsa493-4.20-04.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa493/xsa493-4.20-05.patch","project":"xen","upstream":"Xen","versions":[["4.20.x"]]},{"name":"xsa493/xsa493-4.21-01.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa493/xsa493-4.21-02.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa493/xsa493-4.21-03.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa493/xsa493-4.21-04.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa493/xsa493-4.21-05.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]},{"name":"xsa493/xsa493-04.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]}],"public_time":"2026-06-09 12:00","title":"Arm: Completion of memory accesses not guaranteed by completion of a TLBI","version":2,"version_time":"2026-06-09 12:01","xsa":"493"},{"cve":["CVE-2026-42488"],"files":[{"name":"xsa494.patch","project":"xen","upstream":"Xen","versions":[["xen-unstable"]]},{"name":"xsa494-4.17.patch","project":"xen","upstream":"Xen","versions":[["4.17.x"]]},{"name":"xsa494-4.18.patch","project":"xen","upstream":"Xen","versions":[["4.18.x"]]},{"name":"xsa494-4.20.patch","project":"xen","upstream":"Xen","versions":[["4.19.x","4.20.x"]]},{"name":"xsa494-4.21.patch","project":"xen","upstream":"Xen","versions":[["4.21.x"]]}],"public_time":"2026-06-09 12:00","title":"x86: mismatched mapcache metadata","version":3,"version_time":"2026-06-09 12:01","xsa":"494"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"495"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"496"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"497"},{"cve":["CVE-2026-42491"],"files":[{"name":"xsa498.patch"}],"public_time":"2026-07-14 12:00","title":"XAPI: Missing TLS verification in some SDKs","version":2,"version_time":"2026-07-14 12:05","xsa":"498"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"499"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"500"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"501"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"502"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"503"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"504"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"505"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"506"},{"cve":["embargoed"],"public_time":"2026-07-28 12:00","xsa":"507"},{"public_time":"2026-07-28 12:00","xsa":"508"}]}]