gpp_maybe Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP4-2022-2597

This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469). Fixed several upstream bugs (bsc#1027519).

• Release Date
  Jul 29 2022
• References
  Bugzilla: 1201469, 1200549, 1201394, 1027519, 1199965, 1199966
  CVEs: CVE-2022-26362, CVE-2022-26364, CVE-2022-23825, CVE-2022-26363, CVE-2022-33745, CVE-2022-21166, CVE-2022-29900, CVE-2022-21123, CVE-2022-21125, CVE-2022-23816
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.16.1_06-150400.4.8.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.16.1_06-150400.4.8.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.16.1_06-150400.4.8.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.16.1_06-150400.4.8.1 lock rpm