gpp_maybe Security update for xen

SUSE-SLE-SERVER-12-SP2-2019-2783

This update for xen fixes the following issues: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of service (bsc#1146874). - CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU emulator which could have led to execution of arbitrary code with privileges of the QEMU process (bsc#1143797).

• Release Date
  Oct 25 2019
• References
  Bugzilla: 1126195, 1126196, 1149813, 1127400, 1143797, 1126192, 1126198, 1126140, 1146874, 1126201, 1126141
  CVEs: CVE-2019-14378, CVE-2019-17340, CVE-2019-17344, CVE-2019-15890, CVE-2019-17346, CVE-2019-12068, CVE-2019-17343, CVE-2019-17347, CVE-2019-17341, CVE-2019-17342, CVE-2019-17348
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Server LTSS 12.2 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.7.6_06-43.54.2 lock rpm lock src

  xen-doc-html
  Xen Virtualization: HTML documentation

  4.7.6_06-43.54.2 lock rpm

  xen-libs
  Xen Virtualization: Libraries

  4.7.6_06-43.54.2 lock rpm

  xen-libs-32bit
  Xen Virtualization: Libraries

  4.7.6_06-43.54.2 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.7.6_06-43.54.2 lock rpm

  xen-tools-domU
  Xen Virtualization: Control tools for domain U

  4.7.6_06-43.54.2 lock rpm