[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"repo-stars":3,"vuln-SUSE-SU-2021:1648-1":6},{"stargazers_count":4,"fetched_at":5},7,"2026-06-04T14:53:31.930Z",{"id":7,"descriptions":8,"cisa":9,"weaknesses":10,"exploits":11,"aliases":12,"duplicate_of":9,"upstream":13,"downstream":16,"duplicates":17,"related":18,"reserved_at":9,"published_at":20,"modified_at":21,"state":9,"summary":22,"references_raw":24,"kevs":57,"epss":9,"epss_history":58,"metrics":59,"affected":60},"SUSE-SU-2021:1648-1","Security update for xen\n\nThis update for xen fixes the following issues:\n\nSecurity issue fixed:\n\n- CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare (non-shim) 32-bit PV guests (XSA-370) (bsc#1185104)\n\n- Make sure xencommons is in a format as expected by fillup. (bsc#1185682)\n\n  Each comment needs to be followed by an enabled key. Otherwise\n  fillup will remove manually enabled key=value pairs, along with\n  everything that looks like a stale comment, during next pkg update\n\n- A recent systemd update caused a regression in xenstored.service\n  systemd now fails to track units that use systemd-notify (bsc#1183790)\n- Added a delay between the call to systemd-notify and the final exit\n  of the wrapper script (bsc#1185021, bsc#1185196)\n",null,[],[],[],[14],{"_key":15},"CVE-2021-28689",[],[],[19],{"_key":15},"2021-05-19T12:00:08Z","2025-05-02T04:31:20.229791Z",{"cisa_kev":23,"cisa_ransomware":23,"cisa_vendor":9,"epss_severity":9,"epss_score":9,"severity":9,"severity_score":9,"severity_version":9,"severity_source":9,"severity_vector":9,"severity_status":9},false,[25,31,36,40,44,48,52],{"url":26,"sources":27,"tags":29},"https://www.suse.com/support/update/announcement/2021/suse-su-20211648-1/",[28],"osv_suse",[30],"Advisory",{"url":32,"sources":33,"tags":34},"https://bugzilla.suse.com/1183790",[28],[35],"REPORT",{"url":37,"sources":38,"tags":39},"https://bugzilla.suse.com/1185021",[28],[35],{"url":41,"sources":42,"tags":43},"https://bugzilla.suse.com/1185104",[28],[35],{"url":45,"sources":46,"tags":47},"https://bugzilla.suse.com/1185196",[28],[35],{"url":49,"sources":50,"tags":51},"https://bugzilla.suse.com/1185682",[28],[35],{"url":53,"sources":54,"tags":55},"https://www.suse.com/security/cve/CVE-2021-28689",[28],[56],"WEB",[],[],[],[61,74,78,82],{"ecosystem":62,"name":63,"vendor":64,"product":65,"cpe_part":9,"purl_type":66,"purl_namespace":64,"purl_name":65,"source":9,"versions":67},"SUSE Linux Enterprise","xen","suse","xen&distro=SUSE Linux Enterprise Server 12 SP4-LTSS","rpm",[68],{"version":69,"is_range":70,"range_type":71,"version_start":9,"version_start_type":9,"version_end":72,"version_end_type":73,"fixed_in":9},"lt4_11_4_18_2_54_1",true,"ecosystem","4.11.4_18-2.54.1","excluding",{"ecosystem":62,"name":63,"vendor":64,"product":75,"cpe_part":9,"purl_type":66,"purl_namespace":64,"purl_name":75,"source":9,"versions":76},"xen&distro=SUSE Linux Enterprise Server for SAP Applications 12 SP4",[77],{"version":69,"is_range":70,"range_type":71,"version_start":9,"version_start_type":9,"version_end":72,"version_end_type":73,"fixed_in":9},{"ecosystem":62,"name":63,"vendor":64,"product":79,"cpe_part":9,"purl_type":66,"purl_namespace":64,"purl_name":79,"source":9,"versions":80},"xen&distro=SUSE OpenStack Cloud 9",[81],{"version":69,"is_range":70,"range_type":71,"version_start":9,"version_start_type":9,"version_end":72,"version_end_type":73,"fixed_in":9},{"ecosystem":62,"name":63,"vendor":64,"product":83,"cpe_part":9,"purl_type":66,"purl_namespace":64,"purl_name":83,"source":9,"versions":84},"xen&distro=SUSE OpenStack Cloud Crowbar 9",[85],{"version":69,"is_range":70,"range_type":71,"version_start":9,"version_start_type":9,"version_end":72,"version_end_type":73,"fixed_in":9}]