gpp_maybe Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP5-2023-4475

This update for xen fixes the following issues: - CVE-2023-20588: AMD CPU transitional execution leak via division by zero (XSA-439) (bsc#1215474). - CVE-2023-34322: top-level shadow reference dropped too early for 64-bit PV guests (XSA-438) (bsc#1215145). - CVE-2023-34325: Multiple vulnerabilities in libfsimage disk handling (XSA-443) (bsc#1215747). - CVE-2023-34326: x86/AMD: missing IOMMU TLB flushing (XSA-442) (bsc#1215746). - CVE-2023-34327,CVE-2023-34328: x86/AMD: Debug Mask handling (XSA-444) (bsc#1215748). - CVE-2023-46835: x86/AMD: mismatch in IOMMU quarantine page table levels (XSA-445) (bsc#1216654). - CVE-2023-46836: x86: BTC/SRSO fixes not fully effective (XSA-446) (bsc#1216807). - Upstream bug fixes (bsc#1027519)

• Release Date
  Nov 17 2023
• References
  Bugzilla: 1027519, 1215145, 1216807, 1215746, 1215474, 1215748, 1216654, 1215747
  CVEs: CVE-2023-34326, CVE-2023-34325, CVE-2023-20588, CVE-2023-46835, CVE-2023-34322, CVE-2023-34327, CVE-2023-46836, CVE-2023-34328
• Type
  security
• Severity
  important

cloud_download Downloads

Server Applications Module 15.5 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.17.2_08-150500.3.15.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.17.2_08-150500.3.15.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.17.2_08-150500.3.15.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.17.2_08-150500.3.15.1 lock rpm