The security stories that matter, explained by our team — with the concrete steps to take.
Collected every two hours from specialised publications — each link leads to the original article.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 10 vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Retbleed - arbitrary speculative code execution with return instructions [XSA-407, CVE-2022-23816, CVE-2022-23825, CVE-2022-29900]
Linux disk/nic frontends data leaks [XSA-403, CVE-2022-26365, CVE-2022-33740, CVE-2022-33741, CVE-2022-3374]
x86: MMIO Stale Data vulnerabilities [XSA-404, CVE-2022-21123, CVE-2022-21125, CVE-2022-21166]
An update that fixes three vulnerabilities is now available.
An update that fixes 9 vulnerabilities is now available.
stop building for ix86 and armv7hl due to missing build dependency x86 pv: Race condition in typeref acquisition [XSA-401, CVE-2022-26362] x86 pv: Insufficient…
An update that fixes three vulnerabilities is now available.
An update that fixes 7 vulnerabilities is now available.
Racy interactions between dirty vram tracking and paging log dirty hypercalls [XSA-397, CVE-2022-26356] race in VT-d domain ID cleanup [XSA-399, CVE-2022-26357…
Multiple speculative security issues [XSA-398]
Multiple speculative security issues [XSA-398]
guests may exceed their designated memory limit [XSA-385, CVE-2021-28706] PoD operations on misaligned GFNs [XSA-388, CVE-2021-28704, CVE-2021-28707 CVE-2021-2…
guests may exceed their designated memory limit [XSA-385, CVE-2021-28706] PoD operations on misaligned GFNs [XSA-388, CVE-2021-28704, CVE-2021-28707 CVE-2021-2…
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702]
PCI devices with RMRRs not deassigned correctly [XSA-386, CVE-2021-28702] (#2011248)