[Git][security-tracker-team/security-tracker][master] Track fixes for two xen issues addressed via unstable

Salvatore Bonaccorso (@carnil) carnil at debian.org
Sun Feb 22 09:09:46 GMT 2026



Salvatore Bonaccorso pushed to branch master at Debian Security Tracker / security-tracker


Commits:
155a1b9c by Salvatore Bonaccorso at 2026-02-22T10:09:05+01:00
Track fixes for two xen issues addressed via unstable

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -85300,7 +85300,7 @@ CVE-2025-23970 (Incorrect Privilege Assignment vulnerability in aonetheme Servic
 CVE-2024-9453 (A vulnerability was found in Red Hat OpenShift Jenkins. The bearer tok ...)
 	NOT-FOR-US: Red Hat OpenShift Jenkins
 CVE-2026-23553 (In the context switch logic Xen attempts to skip an IBPB in the case o ...)
-	- xen <unfixed>
+	- xen 4.20.2+37-g61ff35323e-1
 	[trixie] - xen <postponed> (Minor issue, fix along with next Xen update)
 	[bookworm] - xen <postponed> (Minor issue, fix along with next Xen update)
 	[bullseye] - xen <end-of-life> (EOLed in Bullseye)
@@ -85309,7 +85309,7 @@ CVE-2025-58151 [varstored: TOCTOU issues with mapped guest memory]
 	- xen-api <removed>
 	NOTE: https://xenbits.xen.org/xsa/advisory-478.html
 CVE-2025-58150 (Shadow mode tracing code uses a set of per-CPU variables to avoid cumb ...)
-	- xen <unfixed>
+	- xen 4.20.2+37-g61ff35323e-1
 	[trixie] - xen <postponed> (Minor issue, fix along with next Xen update)
 	[bookworm] - xen <postponed> (Minor issue, fix along with next Xen update)
 	[bullseye] - xen <end-of-life> (EOLed in Bullseye)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/155a1b9c1ade1f9216548eed8debda6613c1af50

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/155a1b9c1ade1f9216548eed8debda6613c1af50
You're receiving this email because of your account on salsa.debian.org.


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20260222/89270951/attachment.htm>


More information about the debian-security-tracker-commits mailing list