Oval Definition:oval:org.opensuse.security:def:5104
Revision Date:2021-09-02Version:1
Title:Security update for xen (Important)
Description:

This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428) - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429) - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433) - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434) - CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654) - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). - CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). - CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381). - CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure (bootp)(bsc#1187369). - CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure (udp)(bsc#1187378). - CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure (tftp)(bsc#1187376).

Other issues fixed:

- Fixed 'Panic on CPU 0: IO-APIC + timer doesn't work!' (bsc#1180491) - Fixed an issue with xencommons, where file format expecations by fillup did not allign (bsc#1185682) - Upstream bug fixes (bsc#1027519)

- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246). - Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050). - Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846). - Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243) - Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
Family:unixClass:patch
Status:Reference(s):1027519
1171437
1172175
1172176
1172307
1173159
1173160
1173161
1173359
1179246
1180491
1180846
1182654
1183243
1185682
1186428
1186429
1186433
1186434
1187369
1187376
1187378
1188050
1189373
1189376
1189378
1189380
1189381
1189882
CVE-2009-0946
CVE-2009-3297
CVE-2010-0405
CVE-2010-2497
CVE-2010-2640
CVE-2010-2641
CVE-2010-2642
CVE-2010-2643
CVE-2010-2805
CVE-2010-3053
CVE-2010-3054
CVE-2010-3311
CVE-2010-3814
CVE-2010-3855
CVE-2010-4352
CVE-2010-4352
CVE-2011-0226
CVE-2011-0541
CVE-2011-1145
CVE-2011-2513
CVE-2011-2514
CVE-2011-2721
CVE-2011-3200
CVE-2011-3256
CVE-2011-3377
CVE-2011-3439
CVE-2011-3627
CVE-2012-1126
CVE-2012-1127
CVE-2012-1128
CVE-2012-1129
CVE-2012-1130
CVE-2012-1131
CVE-2012-1132
CVE-2012-1133
CVE-2012-1134
CVE-2012-1135
CVE-2012-1136
CVE-2012-1137
CVE-2012-1138
CVE-2012-1139
CVE-2012-1140
CVE-2012-1141
CVE-2012-1142
CVE-2012-1143
CVE-2012-1144
CVE-2012-1457
CVE-2012-1458
CVE-2012-1459
CVE-2012-2451
CVE-2012-3422
CVE-2012-3423
CVE-2012-3524
CVE-2012-3524
CVE-2012-4540
CVE-2012-5668
CVE-2012-5669
CVE-2012-5670
CVE-2013-0157
CVE-2013-1926
CVE-2013-1927
CVE-2013-2002
CVE-2013-2003
CVE-2013-2005
CVE-2013-2168
CVE-2013-2168
CVE-2013-4349
CVE-2013-4758
CVE-2013-6370
CVE-2013-6371
CVE-2014-2240
CVE-2014-2241
CVE-2014-3477
CVE-2014-3477
CVE-2014-3532
CVE-2014-3532
CVE-2014-3533
CVE-2014-3533
CVE-2014-3634
CVE-2014-3635
CVE-2014-3635
CVE-2014-3636
CVE-2014-3636
CVE-2014-3637
CVE-2014-3637
CVE-2014-3638
CVE-2014-3638
CVE-2014-3639
CVE-2014-3639
CVE-2014-7824
CVE-2014-8148
CVE-2014-9114
CVE-2015-0245
CVE-2015-5218
CVE-2015-5234
CVE-2015-5235
CVE-2020-10730
CVE-2020-10745
CVE-2020-10760
CVE-2020-11076
CVE-2020-11077
CVE-2020-14303
CVE-2021-0089
CVE-2021-20255
CVE-2021-28690
CVE-2021-28692
CVE-2021-28693
CVE-2021-28694
CVE-2021-28695
CVE-2021-28696
CVE-2021-28697
CVE-2021-28698
CVE-2021-28699
CVE-2021-28700
CVE-2021-3592
CVE-2021-3594
CVE-2021-3595
SUSE-SU-2020:1913-1
SUSE-SU-2020:1919-1
SUSE-SU-2021:2924-1
Platform(s):openSUSE 13.1
SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 11 SP4
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise High Availability 12 SP1
SUSE Linux Enterprise High Availability 12 SP2
SUSE Linux Enterprise High Availability 12 SP3
SUSE Linux Enterprise High Availability 12 SP4
SUSE Linux Enterprise High Availability 12 SP5
SUSE Linux Enterprise High Availability 15 SP1
SUSE Linux Enterprise High Availability 15 SP2
SUSE Linux Enterprise High Performance Computing 12 SP5
SUSE Linux Enterprise Live Patching 12
SUSE Linux Enterprise Live Patching 12 SP3
SUSE Linux Enterprise Module for Advanced Systems Management 12
SUSE Linux Enterprise Module for Containers 12
SUSE Linux Enterprise Module for Legacy Software 12
SUSE Linux Enterprise Module for Public Cloud 12
SUSE Linux Enterprise Module for Web Scripting 12
SUSE Linux Enterprise Point of Sale 12 SP2
SUSE Linux Enterprise Server 11 SP2
SUSE Linux Enterprise Server 11 SP3
SUSE Linux Enterprise Server 11 SP4
SUSE Linux Enterprise Server 12
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 12 SP5
SUSE Linux Enterprise Server 12-LTSS
SUSE Linux Enterprise Server for Raspberry Pi 12 SP2
SUSE Linux Enterprise Server for Rasperry Pi 12 SP2
SUSE Linux Enterprise Server for SAP Applications 12 SP5
SUSE Linux Enterprise Software Development Kit 11 SP4
SUSE Linux Enterprise Software Development Kit 12 SP1
SUSE Linux Enterprise Software Development Kit 12 SP2
SUSE Linux Enterprise Software Development Kit 12 SP3
SUSE Linux Enterprise Software Development Kit 12 SP4
SUSE Linux Enterprise Software Development Kit 12 SP5
SUSE Linux Enterprise Workstation Extension 12
SUSE Linux Enterprise Workstation Extension 12 SP1
SUSE Linux Enterprise Workstation Extension 12 SP2
SUSE OpenStack Cloud 5
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • Mesa-9.0.3-0.19.1 is installed
  • OR Mesa-32bit-9.0.3-0.19.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND clamav-0.98.4-1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • dbus-1-1.8.16-14 is installed
  • OR dbus-1-x11-1.8.16-14 is installed
  • OR libdbus-1-3-1.8.16-14 is installed
  • OR libdbus-1-3-32bit-1.8.16-14 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND cifs-utils-6.5-8 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • augeas-1.2.0-15 is installed
  • OR augeas-lenses-1.2.0-15 is installed
  • OR libaugeas0-1.2.0-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • cron-4.2-58 is installed
  • OR cronie-1.4.11-58 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP1 is installed
  • AND Package Information
  • ctdb-4.2.4-28.24 is installed
  • OR samba-4.2.4-28.24 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP2 is installed
  • AND Package Information
  • libpacemaker3-1.1.15-19 is installed
  • OR pacemaker-1.1.15-19 is installed
  • OR pacemaker-cli-1.1.15-19 is installed
  • OR pacemaker-cts-1.1.15-19 is installed
  • OR pacemaker-remote-1.1.15-19 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP3 is installed
  • AND conntrack-tools-1.4.2-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP4 is installed
  • AND lighttpd-1.4.35-3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 12 SP5 is installed
  • AND python-requests-2.18.2-8.4 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 SP1 is installed
  • AND Package Information
  • ctdb-4.9.5+git.343.4bc358522a9-3.38 is installed
  • OR samba-4.9.5+git.343.4bc358522a9-3.38 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Availability 15 SP2 is installed
  • AND Package Information
  • ruby2.5-rubygem-puma-4.3.5-3.3 is installed
  • OR rubygem-puma-4.3.5-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise High Performance Computing 12 SP5 is installed
  • AND Package Information
  • apache-commons-beanutils-1.9.2-3.3 is installed
  • OR apache-commons-beanutils-javadoc-1.9.2-3.3 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 is installed
  • AND Package Information
  • kgraft-patch-3_12_32-33-default-2-3.1 is installed
  • OR kgraft-patch-3_12_32-33-xen-2-3.1 is installed
  • OR kgraft-patch-3_12_36-38-default-2-3.1 is installed
  • OR kgraft-patch-3_12_36-38-xen-2-3.1 is installed
  • OR kgraft-patch-SLE12_Update_1-2-3.1 is installed
  • OR kgraft-patch-SLE12_Update_2-2-3.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Live Patching 12 SP3 is installed
  • AND Package Information
  • kgraft-patch-4_4_73-5-default-2-2.3.2 is installed
  • OR kgraft-patch-SLE12-SP3_Update_0-2-2.3.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Advanced Systems Management 12 is installed
  • AND Package Information
  • salt-2016.11.4-45.2 is installed
  • OR salt-api-2016.11.4-45.2 is installed
  • OR salt-bash-completion-2016.11.4-45.2 is installed
  • OR salt-cloud-2016.11.4-45.2 is installed
  • OR salt-doc-2016.11.4-45.2 is installed
  • OR salt-master-2016.11.4-45.2 is installed
  • OR salt-minion-2016.11.4-45.2 is installed
  • OR salt-proxy-2016.11.4-45.2 is installed
  • OR salt-ssh-2016.11.4-45.2 is installed
  • OR salt-syndic-2016.11.4-45.2 is installed
  • OR salt-zsh-completion-2016.11.4-45.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 12 is installed
  • AND python-PyYAML-3.10-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Legacy Software 12 is installed
  • AND Package Information
  • cups154-1.5.4-5.1 is installed
  • OR cups154-client-1.5.4-5.1 is installed
  • OR cups154-filters-1.5.4-5.1 is installed
  • OR cups154-libs-1.5.4-5.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Public Cloud 12 is installed
  • AND Package Information
  • kernel-ec2-3.12.39-47.1 is installed
  • OR kernel-ec2-devel-3.12.39-47.1 is installed
  • OR kernel-ec2-extra-3.12.39-47.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 12 is installed
  • AND Package Information
  • apache2-mod_php5-5.5.14-7.1 is installed
  • OR php5-5.5.14-7.1 is installed
  • OR php5-bcmath-5.5.14-7.1 is installed
  • OR php5-bz2-5.5.14-7.1 is installed
  • OR php5-calendar-5.5.14-7.1 is installed
  • OR php5-ctype-5.5.14-7.1 is installed
  • OR php5-curl-5.5.14-7.1 is installed
  • OR php5-dba-5.5.14-7.1 is installed
  • OR php5-dom-5.5.14-7.1 is installed
  • OR php5-enchant-5.5.14-7.1 is installed
  • OR php5-exif-5.5.14-7.1 is installed
  • OR php5-fastcgi-5.5.14-7.1 is installed
  • OR php5-fileinfo-5.5.14-7.1 is installed
  • OR php5-fpm-5.5.14-7.1 is installed
  • OR php5-ftp-5.5.14-7.1 is installed
  • OR php5-gd-5.5.14-7.1 is installed
  • OR php5-gettext-5.5.14-7.1 is installed
  • OR php5-gmp-5.5.14-7.1 is installed
  • OR php5-iconv-5.5.14-7.1 is installed
  • OR php5-intl-5.5.14-7.1 is installed
  • OR php5-json-5.5.14-7.1 is installed
  • OR php5-ldap-5.5.14-7.1 is installed
  • OR php5-mbstring-5.5.14-7.1 is installed
  • OR php5-mcrypt-5.5.14-7.1 is installed
  • OR php5-mysql-5.5.14-7.1 is installed
  • OR php5-odbc-5.5.14-7.1 is installed
  • OR php5-openssl-5.5.14-7.1 is installed
  • OR php5-pcntl-5.5.14-7.1 is installed
  • OR php5-pdo-5.5.14-7.1 is installed
  • OR php5-pear-5.5.14-7.1 is installed
  • OR php5-pgsql-5.5.14-7.1 is installed
  • OR php5-pspell-5.5.14-7.1 is installed
  • OR php5-shmop-5.5.14-7.1 is installed
  • OR php5-snmp-5.5.14-7.1 is installed
  • OR php5-soap-5.5.14-7.1 is installed
  • OR php5-sockets-5.5.14-7.1 is installed
  • OR php5-sqlite-5.5.14-7.1 is installed
  • OR php5-suhosin-5.5.14-7.1 is installed
  • OR php5-sysvmsg-5.5.14-7.1 is installed
  • OR php5-sysvsem-5.5.14-7.1 is installed
  • OR php5-sysvshm-5.5.14-7.1 is installed
  • OR php5-tokenizer-5.5.14-7.1 is installed
  • OR php5-wddx-5.5.14-7.1 is installed
  • OR php5-xmlreader-5.5.14-7.1 is installed
  • OR php5-xmlrpc-5.5.14-7.1 is installed
  • OR php5-xmlwriter-5.5.14-7.1 is installed
  • OR php5-xsl-5.5.14-7.1 is installed
  • OR php5-zip-5.5.14-7.1 is installed
  • OR php5-zlib-5.5.14-7.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Point of Sale 12 SP2 is installed
  • AND Package Information
  • salt-2016.11.4-45.2 is installed
  • OR salt-minion-2016.11.4-45.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP2 is installed
  • AND NetworkManager-gnome-0.7.1-5.22.28 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP3 is installed
  • AND Package Information
  • openssh-6.2p2-0.9.1 is installed
  • OR openssh-askpass-6.2p2-0.9.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 11 SP4 is installed
  • AND Package Information
  • Mesa-9.0.3-0.28.29.2 is installed
  • OR Mesa-32bit-9.0.3-0.28.29.2 is installed
  • OR Mesa-x86-9.0.3-0.28.29.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 is installed
  • AND apache2-mod_nss-1.0.8-9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • MozillaFirefox-45.3.0esr-78.1 is installed
  • OR MozillaFirefox-translations-45.3.0esr-78.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • libpulse-mainloop-glib0-5.0-2 is installed
  • OR libpulse-mainloop-glib0-32bit-5.0-2 is installed
  • OR libpulse0-5.0-2 is installed
  • OR libpulse0-32bit-5.0-2 is installed
  • OR pulseaudio-5.0-2 is installed
  • OR pulseaudio-esound-compat-5.0-2 is installed
  • OR pulseaudio-gdm-hooks-5.0-2 is installed
  • OR pulseaudio-lang-5.0-2 is installed
  • OR pulseaudio-module-x11-5.0-2 is installed
  • OR pulseaudio-module-zeroconf-5.0-2 is installed
  • OR pulseaudio-utils-5.0-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • alsa-1.0.27.2-15 is installed
  • OR alsa-docs-1.0.27.2-15 is installed
  • OR libasound2-1.0.27.2-15 is installed
  • OR libasound2-32bit-1.0.27.2-15 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • apache2-2.4.23-29.24 is installed
  • OR apache2-doc-2.4.23-29.24 is installed
  • OR apache2-example-pages-2.4.23-29.24 is installed
  • OR apache2-prefork-2.4.23-29.24 is installed
  • OR apache2-utils-2.4.23-29.24 is installed
  • OR apache2-worker-2.4.23-29.24 is installed
    • Definition Synopsis
  • Release Information
  • SUSE Linux Enterprise Server 12 SP5 is installed
  • OR SUSE Linux Enterprise Server for SAP Applications 12 SP5 is installed
  • OR SUSE Linux Enterprise Software Development Kit 12 SP5 is installed
  • AND xen-devel-4.12.4_12-3.49.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_44-52_18-default-6-2.2 is installed
  • OR kgraft-patch-3_12_44-52_18-xen-6-2.2 is installed
  • OR kgraft-patch-SLE12_Update_7-6-2.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed
  • AND Package Information
  • libXpm-3.5.11-5 is installed
  • OR libXpm4-3.5.11-5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 11 SP4 is installed
  • AND Package Information
  • libtiff-devel-3.8.2-141.168.1 is installed
  • OR libtiff-devel-32bit-3.8.2-141.168.1 is installed
  • OR tiff-3.8.2-141.168.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP1 is installed
  • AND xorg-x11-server-sdk-7.6_1.15.2-36 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP2 is installed
  • AND Package Information
  • DirectFB-devel-1.7.1-6 is installed
  • OR lib++dfb-devel-1.7.1-6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP3 is installed
  • AND LibVNCServer-devel-0.9.9-16 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Software Development Kit 12 SP4 is installed
  • AND LibVNCServer-devel-0.9.9-17.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 is installed
  • AND Package Information
  • flash-player-11.2.202.411-4.1 is installed
  • OR flash-player-gnome-11.2.202.411-4.1 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP1 is installed
  • AND Package Information
  • kernel-default-3.12.51-60.20.2 is installed
  • OR kernel-default-extra-3.12.51-60.20.2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 12 SP2 is installed
  • AND Package Information
  • kernel-default-4.4.21-90.1 is installed
  • OR kernel-default-extra-4.4.21-90.1 is installed
    • BACK