SUSE: Security Advisory (SUSE-SU-2023:4025-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

shadow Security breach

shadow is a suite of tools for maintaining Debian systems. utils is a utility program by Fred Smith, a personal developer. A security vulnerability exists in shadow-utils that stems from an inability to clear the buffer used to store the first entry, which could allow an attacker with sufficient...

SUSE SLED15 / SLES15 / openSUSE 15 Security Update : shadow (SUSE-SU-2023:4024-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by a vulnerability as referenced in the SUSE-SU-2023:4024-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding descriptio...

SUSE SLES12 Security Update : shadow (SUSE-SU-2023:4023-1)

The remote SUSE Linux SLES12 / SLESSAP12 host has a package installed that is affected by a vulnerability as referenced in the SUSE-SU-2023:4023-1 advisory. - CVE-2023-4641: Fixed potential password leak bsc1214806. Tenable has extracted the preceding description block directly from the SUSE...

SUSE: Security Advisory (SUSE-SU-2023:4023-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE-SU-2023:4027-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE-SU-2023:4025-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE-SU-2023:4024-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

SUSE-SU-2023:4023-1 Security update for shadow

This update for shadow fixes the following issues: - CVE-2023-4641: Fixed potential password leak bsc1214806...

Wing Disrupts the Market by Introducing Affordable SaaS Security

Today, mid-sized companies and their CISOs are struggling to handle the growing threat of SaaS security with limited manpower and tight budgets. Now, this may be changing. By focusing on the critical SaaS security needs of these companies, a new approach has emerged that can be launched for $1,50...

Privilege Escalation

xen is vulnerable to Privilege Escalation. This vulnerability exists due to a flaw in the shadow mode implementation which can be used to bypass the policy mechanisms allowing an attacker to exploit this vulnerability to gain elevated privileges...

SUSE: Security Advisory (SUSE-SU-2023:3903-1)

The remote host is missing an update for the SPDX-FileCopyrightText: 2023 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders. SPDX-License-Identifier: GPL-2.0-only ifdescription...

SUSE SLES15 Security Update : xen (SUSE-SU-2023:3902-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3902-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...

SUSE SLES15: xen / xen-devel / xen-libs / xen-tools / xen-tools-domU / etc (SUSE-SU-2023:3895-1)

The remote SUSE Linux SLES15 / SLESSAP15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3895-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed...

SUSE-SU-2023:3894-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests XSA-438 bsc1215145. - CVE-2023-20593: Fixed AMD Zenbleed...

OESA-2023-1687 shadow security update

This package includes the necessary programs for converting plain password files to the shadow password format and to manage user and group accounts. Security Fixes: When gpasswd1 asks for the new password, it asks twice as is usual for confirming the new password. Each of those 2 password prompt...

SUSE SLED15: xen / xen-devel / xen-doc-html / xen-libs / xen-libs-32bit / etc (SUSE-SU-2023:3832-1)

The remote SUSE Linux SLED15 / SLEDSAP15 / SLES15 / SLESSAP15 / openSUSE 15 host has packages installed that are affected by multiple vulnerabilities as referenced in the SUSE-SU-2023:3832-1 advisory. - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439...

SUSE-SU-2023:3832-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests XSA-438 bsc1215145...

SUSE-SU-2023:3831-1 Security update for xen

This update for xen fixes the following issues: - CVE-2023-20588: Fixed AMD CPU transitional execution leak via division by zero XSA-439 bsc1215474. - CVE-2023-34322: Fixed top-level shadow reference dropped too early for 64-bit PV guests XSA-438 bsc1215145...

SUSE CVE-2023-34322

For migration as well as to work around kernels unaware of L1TF see XSA-273, PV guests may be run in shadow paging mode. Since Xen itself needs to be mapped when PV guests run, Xen and shadowed PV guests run directly the respective shadow page tables. For 64-bit PV guests this means running on th...