shield Security update for xen

SUSE-SLE-Module-Basesystem-15-SP4-2023-3395

This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling". (bsc#1214083, XSA-435) - CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)

• Release Date
  Aug 23 2023
• References
  Bugzilla: 1027519, 1213616, 1214082, 1214083
  CVEs: CVE-2023-20569, CVE-2022-40982, CVE-2023-20593
• Type
  security
• Severity
  moderate

cloud_download Downloads

Basesystem Module 15.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.16.5_02-150400.4.31.1 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.16.5_02-150400.4.31.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.16.5_02-150400.4.31.1 lock rpm