gpp_maybe Security update for xen

SUSE-SLE-Module-Basesystem-15-SP4-2023-4476

This update for xen fixes the following issues: - CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747). - CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746). - CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748). - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). - CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). - Upstream bug fixes (bsc#1027519)

• Release Date
  Nov 17 2023
• References
  Bugzilla: 1215747, 1027519, 1215145, 1216654, 1215748, 1216807, 1215746, 1215474
  CVEs: CVE-2023-34325, CVE-2023-46836, CVE-2023-34322, CVE-2023-46835, CVE-2023-34327, CVE-2023-20588, CVE-2023-34328, CVE-2023-34326
• Type
  security
• Severity
  important

cloud_download Downloads

Basesystem Module 15.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.16.5_08-150400.4.40.1 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.16.5_08-150400.4.40.1 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.16.5_08-150400.4.40.1 lock rpm