gpp_maybe
Security update for xen
SUSE-SLE-SAP-12-SP2-2020-2822
This update for xen fixes the following issues: - CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336) - CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337) - CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338) - CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339) - CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340) - CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342) - CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343) - CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344) - CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534). - CVE-2020-0543: Fixed a leak of Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (bsc#1172205,XSA-320) - CVE-2020-15565: Fixed an issue cache write (bsc#1173378,XSA-321). - CVE-2020-15567: Fixed an issue with non-atomic modification of live EPT PTE (bsc#1173380,XSA-328)
-
Release DateOct 1 2020
-
ReferencesBugzilla: 1176344, 1173380, 1176348, 1172205, 1176350, 1176349, 1176347, 1176343, 1173378, 1176346, 1176345, 1175534
CVEs: CVE-2020-25595, CVE-2020-15567, CVE-2020-15565, CVE-2020-25604, CVE-2020-0543, CVE-2020-25597, CVE-2020-25599, CVE-2020-25600, CVE-2020-25601, CVE-2020-14364, CVE-2020-25596, CVE-2020-25603 -
Typesecurity
-
Severityimportant
cloud_download Downloads
SUSE Linux Enterprise Server for SAP Applications 12.2 x86_64
-
Packagesxen
Xen Virtualization: Hypervisor (aka VMM aka Microkernel)xen-doc-html4.7.6_10-43.67.1 lock rpm lock src
Xen Virtualization: HTML documentationxen-libs4.7.6_10-43.67.1 lock rpm
Xen Virtualization: Librariesxen-libs-32bit4.7.6_10-43.67.1 lock rpm
Xen Virtualization: Librariesxen-tools4.7.6_10-43.67.1 lock rpm
Xen Virtualization: Control tools for domain 0xen-tools-domU4.7.6_10-43.67.1 lock rpm
Xen Virtualization: Control tools for domain U4.7.6_10-43.67.1 lock rpm