shield Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP4-2023-3395

This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling". (bsc#1214083, XSA-435) - CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)

• Release Date
  Aug 23 2023
• References
  Bugzilla: 1027519, 1213616, 1214082, 1214083
  CVEs: CVE-2023-20569, CVE-2022-40982, CVE-2023-20593
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.16.5_02-150400.4.31.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.16.5_02-150400.4.31.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.16.5_02-150400.4.31.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.16.5_02-150400.4.31.1 lock rpm