gpp_maybe Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP5-2023-2535

This update for xen fixes the following issues: Security fixes: - CVE-2022-42336: Fix an issue where guests configuring AMD Speculative Store Bypass Disable would have no effect (XSA-431) (bsc#1211433). - CVE-2022-42335: Fixed an issue where guests running under shadow mode with a PCI devices passed through could force the hypervisor to dereference arbitrary memory, leading to a denial of service (XSA-430) (bsc#1210315). Non-security fixes: - Fixed a build warning false positive (bsc#1210570). - Added missing debug-info to xen-syms (bsc#1209237). - Updated to version 4.17.1 (bsc#1027519). - Fixed a failure during VM destruction when using host-assisted kexec and kdump (bsc#1209245). - Other upstream fixes (bsc#1027519).

• Release Date
  Jun 19 2023
• References
  Bugzilla: 1027519, 1211433, 1208736, 1210315, 1209245, 1210570, 1209237
  CVEs: CVE-2022-42335, CVE-2022-42336
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.5 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.17.1_04-150500.3.3.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.17.1_04-150500.3.3.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.17.1_04-150500.3.3.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.17.1_04-150500.3.3.1 lock rpm