shield Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP5-2023-3447

This update for xen fixes the following issues: - CVE-2023-20569: Fixed side channel attack Inception or RAS Poisoning. (bsc#1214082, XSA-434) - CVE-2022-40982: Fixed transient execution attack called "Gather Data Sampling". (bsc#1214083, XSA-435) - CVE-2023-20593: Fixed a ZenBleed issue in "Zen 2" CPUs that could allow an attacker to potentially access sensitive information. (bsc#1213616, XSA-433)

• Release Date
  Aug 28 2023
• References
  Bugzilla: 1214082, 1027519, 1213616, 1214083, 1212684
  CVEs: CVE-2023-20593, CVE-2022-40982, CVE-2023-20569
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.5 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.17.2_02-150500.3.6.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.17.2_02-150500.3.6.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.17.2_02-150500.3.6.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.17.2_02-150500.3.6.1 lock rpm