gpp_maybe Security update for xen

SUSE-SUSE-MicroOS-5.2-2022-2599

This update for xen fixes the following issues: - CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (XSA-402) (bsc#1199966). - CVE-2022-21123, CVE-2022-21125, CVE-2022-21166: Fixed MMIO stale data vulnerabilities on x86 (XSA-404) (bsc#1200549). - CVE-2022-26362: Fixed a race condition in typeref acquisition (XSA-401) (bsc#1199965). - CVE-2022-33745: Fixed insufficient TLB flush for x86 PV guests in shadow mode (XSA-408) (bsc#1201394). - CVE-2022-23816, CVE-2022-23825, CVE-2022-29900: Fixed RETBLEED vulnerability, arbitrary speculative code execution with return instructions (XSA-407) (bsc#1201469). Fixed several upstream bugs (bsc#1027519).

• Release Date
  Jul 29 2022
• References
  Bugzilla: 1201469, 1199965, 1199966, 1027519, 1200549, 1201394
  CVEs: CVE-2022-23825, CVE-2022-21123, CVE-2022-33745, CVE-2022-21125, CVE-2022-26363, CVE-2022-29900, CVE-2022-26362, CVE-2022-23816, CVE-2022-21166, CVE-2022-26364
• Type
  security
• Severity
  important

cloud_download Downloads

SUSE Linux Enterprise Micro 5.2 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.14.5_04-150300.3.32.1 lock src

  xen-libs
  Xen Virtualization: Libraries

  4.14.5_04-150300.3.32.1 lock rpm