gpp_maybe Security update for xen

SUSE-SLE-SAP-12-SP4-2022-2560

This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469).

• Release Date
  Jul 27 2022
• References
  Bugzilla: 1200549, 1199965, 1201394, 1201469, 1199966
  CVEs: CVE-2022-21123, CVE-2022-23825, CVE-2022-26362, CVE-2022-21166, CVE-2022-23816, CVE-2022-21125, CVE-2022-33745, CVE-2022-26364, CVE-2022-29900, CVE-2022-26363
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server for SAP Applications 12.4 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.11.4_30-2.76.1

  lock rpm

  lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.11.4_30-2.76.1

  lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.11.4_30-2.76.1

  lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.11.4_30-2.76.1

  lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.11.4_30-2.76.1

  lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.11.4_30-2.76.1

  lock rpm