gpp_maybe Security update for xen

SUSE-SLE-SAP-12-SP4-2022-1285

This update for xen fixes the following issues: - CVE-2022-26356: Fixed potential race conditions in dirty memory tracking that could cause a denial of service in the host (bsc#1197423). - CVE-2022-26357: Fixed a potential race condition in memory cleanup for hosts using VT-d IOMMU hardware, which could lead to a denial of service in the host (bsc#1197425). - CVE-2022-26358,CVE-2022-26359,CVE-2022-26360,CVE-2022-26361: Fixed various memory corruption issues for hosts using VT-d or AMD-Vi IOMMU hardware. These could be leveraged by an attacker to cause a denial of service in the host (bsc#1197426). - CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: Added BHB speculation issue mitigations (bsc#1196915).

• Release Date
  Apr 20 2022
• References
  Bugzilla: 1197426, 1196915, 1197423, 1197425
  CVEs: CVE-2022-26358, CVE-2022-26360, CVE-2022-26356, CVE-2022-0002, CVE-2022-26359, CVE-2021-26401, CVE-2022-26361, CVE-2022-26357, CVE-2022-0001
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.11.4_28-2.73.1

  lock rpm

  lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.11.4_28-2.73.1

  lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.11.4_28-2.73.1

  lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.11.4_28-2.73.1

  lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.11.4_28-2.73.1

  lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.11.4_28-2.73.1

  lock rpm