Oval Definition:oval:org.opensuse.security:def:50827
Revision Date:2020-12-01Version:1
Title:Security update for xen (Important)
Description:

This update for xen fixes the following issues:

- CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333) - CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334) - CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336) - CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337) - CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338) - CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339) - CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340) - CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342) - CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343) - CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)

- Various bug fixes (bsc#1027519)
Family:unixClass:patch
Status:Reference(s):1027519
1051510
1055117
1063993
1071995
1079730
1082318
1083647
1083710
1100408
1101982
1103203
1103678
1103991
1111666
1112646
1114957
1116717
1117275
1119222
1119493
1121600
1123080
1123156
1123179
1127034
1127315
1129770
1133021
1133297
1134097
1134390
1134399
1135335
1135642
1137001
1137458
1137534
1137535
1137584
1137609
1137827
1139358
1140133
1140139
1140322
1140652
1140887
1140888
1140889
1140891
1140893
1140903
1140945
1140948
1140954
1140955
1140956
1140957
1140958
1140959
1140960
1140961
1140962
1140964
1140971
1140972
1140992
1141401
1141402
1141452
1141453
1141454
1141478
1142023
1142112
1142220
1142221
1142265
1142350
1142351
1142354
1142359
1142450
1142701
1142868
1143003
1143105
1143185
1143189
1143191
1143507
1159329
1160467
1160468
1161719
1163809
1166916
1172356
1172405
1172442
1172443
1174091
1174157
1174543
1174628
1176339
1176341
1176343
1176344
1176345
1176346
1176347
1176348
1176349
1176350
1176756
1177872
1177943
1178512
CVE-2018-16872
CVE-2018-18954
CVE-2018-19364
CVE-2018-19489
CVE-2018-20855
CVE-2019-1125
CVE-2019-11810
CVE-2019-12450
CVE-2019-13631
CVE-2019-13648
CVE-2019-14283
CVE-2019-14284
CVE-2019-14896
CVE-2019-14897
CVE-2019-20907
CVE-2019-6778
CVE-2019-8835
CVE-2019-8844
CVE-2019-8846
CVE-2020-11080
CVE-2020-14344
CVE-2020-14344
CVE-2020-14556
CVE-2020-14577
CVE-2020-14578
CVE-2020-14579
CVE-2020-14581
CVE-2020-14583
CVE-2020-14593
CVE-2020-14621
CVE-2020-14779
CVE-2020-14781
CVE-2020-14782
CVE-2020-14792
CVE-2020-14796
CVE-2020-14797
CVE-2020-14798
CVE-2020-14803
CVE-2020-15683
CVE-2020-15969
CVE-2020-25595
CVE-2020-25596
CVE-2020-25597
CVE-2020-25598
CVE-2020-25599
CVE-2020-25600
CVE-2020-25601
CVE-2020-25602
CVE-2020-25603
CVE-2020-25604
CVE-2020-28196
CVE-2020-3862
CVE-2020-3864
CVE-2020-3865
CVE-2020-3867
CVE-2020-3868
CVE-2020-7598
CVE-2020-8022
CVE-2020-8174
SUSE-SU-2019:0423-1
SUSE-SU-2019:1594-1
SUSE-SU-2019:2068-1
SUSE-SU-2020:0468-1
SUSE-SU-2020:1576-1
SUSE-SU-2020:1789-1
SUSE-SU-2020:2159-1
SUSE-SU-2020:2197-1
SUSE-SU-2020:2790-1
Platform(s):SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for additional PackageHub packages 15
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Live Patching 15
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2
SUSE Linux Enterprise Module for Public Cloud 15
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP1
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • bind-libs-9.9.4P2-0.6 is installed
  • OR bind-libs-32bit-9.9.4P2-0.6 is installed
  • OR bind-utils-9.9.4P2-0.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND hardlink-1.0-6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • evince-3.10.3-1 is installed
  • OR evince-lang-3.10.3-1 is installed
  • OR libevdocument3-4-3.10.3-1 is installed
  • OR libevview3-3-3.10.3-1 is installed
  • OR typelib-1_0-EvinceDocument-3_0-3.10.3-1 is installed
  • OR typelib-1_0-EvinceView-3_0-3.10.3-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND busybox-1.21.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • cracklib-2.9.0-7 is installed
  • OR libcrack2-2.9.0-7 is installed
  • OR libcrack2-32bit-2.9.0-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • cron-4.2-58 is installed
  • OR cronie-1.4.11-58 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for additional PackageHub packages 15 is installed
  • AND Package Information
  • glib2-2.54.3-4.15 is installed
  • OR glib2-devel-32bit-2.54.3-4.15 is installed
  • OR glib2-tools-32bit-2.54.3-4.15 is installed
  • OR libgthread-2_0-0-32bit-2.54.3-4.15 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • xen-4.12.3_08-3.28 is installed
  • OR xen-libs-4.12.3_08-3.28 is installed
  • OR xen-tools-domU-4.12.3_08-3.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Live Patching 15 is installed
  • AND Package Information
  • kernel-livepatch-4_12_14-150_22-default-6-2 is installed
  • OR kernel-livepatch-SLE15_Update_11-6-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • libX11-1.6.5-3.6 is installed
  • OR libX11-devel-32bit-1.6.5-3.6 is installed
  • OR libxcb-1.13-3.5 is installed
  • OR libxcb-composite0-32bit-1.13-3.5 is installed
  • OR libxcb-damage0-32bit-1.13-3.5 is installed
  • OR libxcb-devel-32bit-1.13-3.5 is installed
  • OR libxcb-dpms0-32bit-1.13-3.5 is installed
  • OR libxcb-randr0-32bit-1.13-3.5 is installed
  • OR libxcb-record0-32bit-1.13-3.5 is installed
  • OR libxcb-res0-32bit-1.13-3.5 is installed
  • OR libxcb-screensaver0-32bit-1.13-3.5 is installed
  • OR libxcb-shape0-32bit-1.13-3.5 is installed
  • OR libxcb-xf86dri0-32bit-1.13-3.5 is installed
  • OR libxcb-xinerama0-32bit-1.13-3.5 is installed
  • OR libxcb-xinput0-32bit-1.13-3.5 is installed
  • OR libxcb-xkb1-32bit-1.13-3.5 is installed
  • OR libxcb-xtest0-32bit-1.13-3.5 is installed
  • OR libxcb-xv0-32bit-1.13-3.5 is installed
  • OR libxcb-xvmc0-32bit-1.13-3.5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP2 is installed
  • AND Package Information
  • libzstd-devel-static-1.4.4-1.3 is installed
  • OR zstd-1.4.4-1.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 15 is installed
  • AND Package Information
  • kernel-azure-4.12.14-5.38 is installed
  • OR kernel-azure-base-4.12.14-5.38 is installed
  • OR kernel-azure-devel-4.12.14-5.38 is installed
  • OR kernel-devel-azure-4.12.14-5.38 is installed
  • OR kernel-source-azure-4.12.14-5.38 is installed
  • OR kernel-syms-azure-4.12.14-5.38 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • qemu-2.11.2-9.20 is installed
  • OR qemu-arm-2.11.2-9.20 is installed
  • OR qemu-block-curl-2.11.2-9.20 is installed
  • OR qemu-block-iscsi-2.11.2-9.20 is installed
  • OR qemu-block-rbd-2.11.2-9.20 is installed
  • OR qemu-block-ssh-2.11.2-9.20 is installed
  • OR qemu-guest-agent-2.11.2-9.20 is installed
  • OR qemu-ipxe-1.0.0+-9.20 is installed
  • OR qemu-kvm-2.11.2-9.20 is installed
  • OR qemu-lang-2.11.2-9.20 is installed
  • OR qemu-ppc-2.11.2-9.20 is installed
  • OR qemu-s390-2.11.2-9.20 is installed
  • OR qemu-seabios-1.11.0-9.20 is installed
  • OR qemu-sgabios-8-9.20 is installed
  • OR qemu-vgabios-1.11.0-9.20 is installed
  • OR qemu-x86-2.11.2-9.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • ecryptfs-utils-103-5 is installed
  • OR ecryptfs-utils-32bit-103-5 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • openvpn-2.3.8-16.20 is installed
  • OR openvpn-auth-pam-plugin-2.3.8-16.20 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • eog-3.20.4-7 is installed
  • OR eog-lang-3.20.4-7 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • MozillaFirefox-52.8.1esr-109.34 is installed
  • OR MozillaFirefox-devel-52.8.1esr-109.34 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • gnutls-3.2.15-18.6 is installed
  • OR libgnutls-openssl27-3.2.15-18.6 is installed
  • OR libgnutls28-3.2.15-18.6 is installed
  • OR libgnutls28-32bit-3.2.15-18.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • gpg2-2.0.24-9.3 is installed
  • OR gpg2-lang-2.0.24-9.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND clamav-0.99.2-32 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • libecpg6-10.9-1.12 is installed
  • OR libpq5-10.9-1.12 is installed
  • OR libpq5-32bit-10.9-1.12 is installed
  • OR postgresql10-10.9-1.12 is installed
  • OR postgresql10-contrib-10.9-1.12 is installed
  • OR postgresql10-docs-10.9-1.12 is installed
  • OR postgresql10-libs-10.9-1.12 is installed
  • OR postgresql10-plperl-10.9-1.12 is installed
  • OR postgresql10-plpython-10.9-1.12 is installed
  • OR postgresql10-pltcl-10.9-1.12 is installed
  • OR postgresql10-server-10.9-1.12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • gnome-shell-search-provider-nautilus-3.20.3-23.6 is installed
  • OR libnautilus-extension1-3.20.3-23.6 is installed
  • OR nautilus-3.20.3-23.6 is installed
  • OR nautilus-lang-3.20.3-23.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND libusbmuxd4-1.0.10-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • nodejs8-8.17.0-3.32 is installed
  • OR nodejs8-devel-8.17.0-3.32 is installed
  • OR nodejs8-docs-8.17.0-3.32 is installed
  • OR npm8-8.17.0-3.32 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • tomcat-9.0.35-3.57 is installed
  • OR tomcat-admin-webapps-9.0.35-3.57 is installed
  • OR tomcat-el-3_0-api-9.0.35-3.57 is installed
  • OR tomcat-jsp-2_3-api-9.0.35-3.57 is installed
  • OR tomcat-lib-9.0.35-3.57 is installed
  • OR tomcat-servlet-4_0-api-9.0.35-3.57 is installed
  • OR tomcat-webapps-9.0.35-3.57 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND enigmail-2.1.2-3.19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • xorg-x11-server-1.20.3-22.5.5 is installed
  • OR xorg-x11-server-wayland-1.20.3-22.5.5 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND crowbar-openstack-3.0+git.1456169766.1e60d19-1 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • java-1_7_0-openjdk-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-demo-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-devel-1.7.0.181-43.15 is installed
  • OR java-1_7_0-openjdk-headless-1.7.0.181-43.15 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • glib2-2.48.2-12.15 is installed
  • OR glib2-lang-2.48.2-12.15 is installed
  • OR glib2-tools-2.48.2-12.15 is installed
  • OR libgio-2_0-0-2.48.2-12.15 is installed
  • OR libgio-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libglib-2_0-0-2.48.2-12.15 is installed
  • OR libglib-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-2.48.2-12.15 is installed
  • OR libgmodule-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-2.48.2-12.15 is installed
  • OR libgobject-2_0-0-32bit-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-2.48.2-12.15 is installed
  • OR libgthread-2_0-0-32bit-2.48.2-12.15 is installed
  • BACK