gpp_maybe Security update for xen

SUSE-SLE-SAP-12-SP4-2021-2955

This update for xen fixes the following issues: Security issues fixed: - CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429) - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434) - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433) - CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654) - CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure (bootp)(bsc#1187369). - CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure (udp)(bsc#1187378). - CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure (tftp)(bsc#1187376). - CVE-2021-3308: Fixed IRQ vector leak on x86 (XSA-360)(bsc#1181254). - Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).

• Release Date
  Sep 3 2021
• References
  Bugzilla: 1189376, 1181254, 1189373, 1186434, 1182654, 1186433, 1186429, 1189380, 1187378, 1189378, 1187376, 1187369, 1189882
  CVEs: CVE-2021-28698, CVE-2021-3592, CVE-2021-28697, CVE-2021-3595, CVE-2021-28696, CVE-2021-28699, CVE-2021-28692, CVE-2021-28694, CVE-2021-20255, CVE-2021-28690, CVE-2021-0089, CVE-2021-3594, CVE-2021-28695, CVE-2021-3308
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.11.4_20-2.60.1

  lock rpm

  lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.11.4_20-2.60.1

  lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.11.4_20-2.60.1

  lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.11.4_20-2.60.1

  lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.11.4_20-2.60.1

  lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.11.4_20-2.60.1

  lock rpm