Oval Definition:oval:org.opensuse.security:def:51890
Revision Date:2021-05-19Version:1
Title:Security update for xen (Important)
Description:

This update for xen fixes the following issues:

Security issue fixed:

- CVE-2021-28689: Fixed some x86 speculative vulnerabilities with bare (non-shim) 32-bit PV guests (XSA-370) (bsc#1185104)

- Make sure xencommons is in a format as expected by fillup. (bsc#1185682)

Each comment needs to be followed by an enabled key. Otherwise fillup will remove manually enabled key=value pairs, along with everything that looks like a stale comment, during next pkg update

- A recent systemd update caused a regression in xenstored.service systemd now fails to track units that use systemd-notify (bsc#1183790) - Added a delay between the call to systemd-notify and the final exit of the wrapper script (bsc#1185021, bsc#1185196)
Family:unixClass:patch
Status:Reference(s):1036463
1121563
1124122
1125352
1125604
1126056
1127557
1130230
1132348
1132400
1132721
1133506
1133509
1138459
1156669
1158095
1159478
1159479
1159482
1159486
1163026
1163102
1163103
1163104
1172698
1172704
1174230
1176384
1176756
1176899
1177977
1183790
1185021
1185104
1185196
1185682
CVE-2010-0624
CVE-2010-2522
CVE-2010-2523
CVE-2010-2640
CVE-2010-2641
CVE-2010-2642
CVE-2010-2643
CVE-2010-2891
CVE-2011-3635
CVE-2012-0035
CVE-2013-4238
CVE-2014-3421
CVE-2014-3422
CVE-2014-3423
CVE-2014-3424
CVE-2014-9112
CVE-2016-2037
CVE-2019-10160
CVE-2019-14889
CVE-2019-15604
CVE-2019-15605
CVE-2019-15606
CVE-2019-18388
CVE-2019-18389
CVE-2019-18390
CVE-2019-18391
CVE-2019-2737
CVE-2019-2739
CVE-2019-2740
CVE-2019-2758
CVE-2019-2805
CVE-2019-2938
CVE-2019-2974
CVE-2019-3842
CVE-2019-3843
CVE-2019-3844
CVE-2019-6454
CVE-2020-15673
CVE-2020-15676
CVE-2020-15677
CVE-2020-15678
CVE-2020-15683
CVE-2020-15969
CVE-2020-5208
CVE-2020-8023
CVE-2021-28689
SUSE-SU-2019:1364-2
SUSE-SU-2019:2064-1
SUSE-SU-2019:3306-1
SUSE-SU-2020:0017-1
SUSE-SU-2020:0130-1
SUSE-SU-2020:0405-1
SUSE-SU-2020:0455-1
SUSE-SU-2020:1856-1
SUSE-SU-2020:3091-1
SUSE-SU-2021:1648-1
Platform(s):openSUSE Leap 15.0
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Desktop 12
SUSE Linux Enterprise Desktop 12 SP1
SUSE Linux Enterprise Desktop 12 SP2
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Desktop 12 SP4
SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1
SUSE Linux Enterprise Module for Server Applications 15
SUSE Linux Enterprise Module for Server Applications 15 SP1
SUSE Linux Enterprise Module for Web Scripting 15
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-ESPOS
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Server for SAP Applications 12 SP4
SUSE Linux Enterprise Server for SAP Applications 15
SUSE Linux Enterprise Workstation Extension 15 SP2
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • elfutils-0.168-lp150.2 is installed
  • OR elfutils-lang-0.168-lp150.2 is installed
  • OR libasm1-0.168-lp150.2 is installed
  • OR libdw1-0.168-lp150.2 is installed
  • OR libdw1-32bit-0.168-lp150.2 is installed
  • OR libebl-plugins-0.168-lp150.2 is installed
  • OR libebl-plugins-32bit-0.168-lp150.2 is installed
  • OR libelf1-0.168-lp150.2 is installed
  • OR libelf1-32bit-0.168-lp150.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • acroread-9.5.5-0.5.5 is installed
  • OR acroread-cmaps-9.4.6-0.4.5 is installed
  • OR acroread-fonts-ja-9.4.6-0.4.5 is installed
  • OR acroread-fonts-ko-9.4.6-0.4.5 is installed
  • OR acroread-fonts-zh_CN-9.4.6-0.4.5 is installed
  • OR acroread-fonts-zh_TW-9.4.6-0.4.5 is installed
  • OR acroread_ja-9.4.2-0.4 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • libsndfile-1.0.20-2.6 is installed
  • OR libsndfile-32bit-1.0.20-2.6 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 is installed
  • AND mipv6d-2.0.2.umip.0.4-19 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP1 is installed
  • AND Package Information
  • evince-3.10.3-1 is installed
  • OR evince-lang-3.10.3-1 is installed
  • OR libevdocument3-4-3.10.3-1 is installed
  • OR libevview3-3-3.10.3-1 is installed
  • OR typelib-1_0-EvinceDocument-3_0-3.10.3-1 is installed
  • OR typelib-1_0-EvinceView-3_0-3.10.3-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP2 is installed
  • AND Package Information
  • libsmi-0.4.8-18 is installed
  • OR libsmi2-0.4.8-18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP3 is installed
  • AND Package Information
  • cpio-2.11-35 is installed
  • OR cpio-lang-2.11-35 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Desktop 12 SP4 is installed
  • AND Package Information
  • colord-1.3.3-12 is installed
  • OR colord-gtk-lang-0.1.26-6 is installed
  • OR colord-lang-1.3.3-12 is installed
  • OR libcolord-gtk1-0.1.26-6 is installed
  • OR libcolord2-1.3.3-12 is installed
  • OR libcolord2-32bit-1.3.3-12 is installed
  • OR libcolorhug2-1.3.3-12 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP1 is installed
  • AND Package Information
  • libsystemd0-mini-234-24.30 is installed
  • OR libudev-devel-32bit-234-24.30 is installed
  • OR libudev-mini-devel-234-24.30 is installed
  • OR libudev-mini1-234-24.30 is installed
  • OR nss-myhostname-234-24.30 is installed
  • OR nss-myhostname-32bit-234-24.30 is installed
  • OR nss-mymachines-234-24.30 is installed
  • OR nss-mymachines-32bit-234-24.30 is installed
  • OR nss-systemd-234-24.30 is installed
  • OR systemd-234-24.30 is installed
  • OR systemd-logger-234-24.30 is installed
  • OR systemd-mini-234-24.30 is installed
  • OR systemd-mini-bash-completion-234-24.30 is installed
  • OR systemd-mini-container-mini-234-24.30 is installed
  • OR systemd-mini-coredump-mini-234-24.30 is installed
  • OR systemd-mini-devel-234-24.30 is installed
  • OR systemd-mini-sysvinit-234-24.30 is installed
  • OR udev-mini-234-24.30 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 is installed
  • AND Package Information
  • libmysqld-devel-10.2.29-3.23 is installed
  • OR libmysqld19-10.2.29-3.23 is installed
  • OR mariadb-10.2.29-3.23 is installed
  • OR mariadb-client-10.2.29-3.23 is installed
  • OR mariadb-errormessages-10.2.29-3.23 is installed
  • OR mariadb-tools-10.2.29-3.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Server Applications 15 SP1 is installed
  • AND Package Information
  • libvirglrenderer0-0.6.0-4.3 is installed
  • OR virglrenderer-0.6.0-4.3 is installed
  • OR virglrenderer-devel-0.6.0-4.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 is installed
  • AND Package Information
  • nodejs10-10.19.0-1.18 is installed
  • OR nodejs10-devel-10.19.0-1.18 is installed
  • OR nodejs10-docs-10.19.0-1.18 is installed
  • OR npm10-10.19.0-1.18 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1 is installed
  • AND Package Information
  • krb5-appl-clients-1.0.3-1 is installed
  • OR krb5-appl-servers-1.0.3-1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • xen-4.5.5_28-22.61 is installed
  • OR xen-doc-html-4.5.5_28-22.61 is installed
  • OR xen-kmp-default-4.5.5_28_k3.12.74_60.64.110-22.61 is installed
  • OR xen-libs-4.5.5_28-22.61 is installed
  • OR xen-libs-32bit-4.5.5_28-22.61 is installed
  • OR xen-tools-4.5.5_28-22.61 is installed
  • OR xen-tools-domU-4.5.5_28-22.61 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND busybox-1.21.1-3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND Package Information
  • kernel-default-4.4.121-92.109 is installed
  • OR kernel-default-base-4.4.121-92.109 is installed
  • OR kernel-default-devel-4.4.121-92.109 is installed
  • OR kernel-devel-4.4.121-92.109 is installed
  • OR kernel-macros-4.4.121-92.109 is installed
  • OR kernel-source-4.4.121-92.109 is installed
  • OR kernel-syms-4.4.121-92.109 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed
  • OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_103-92_53-default-11-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_16-11-2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • accountsservice-0.6.42-14 is installed
  • OR accountsservice-lang-0.6.42-14 is installed
  • OR libaccountsservice0-0.6.42-14 is installed
  • OR typelib-1_0-AccountsService-1_0-0.6.42-14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND sudo-1.8.20p2-3.14 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-ESPOS is installed
  • AND Package Information
  • cups-1.7.5-20.26 is installed
  • OR cups-client-1.7.5-20.26 is installed
  • OR cups-libs-1.7.5-20.26 is installed
  • OR cups-libs-32bit-1.7.5-20.26 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • libpython3_4m1_0-3.4.6-25.29 is installed
  • OR python3-3.4.6-25.29 is installed
  • OR python3-base-3.4.6-25.29 is installed
  • OR python3-curses-3.4.6-25.29 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • freeradius-server-3.0.15-2.11 is installed
  • OR freeradius-server-doc-3.0.15-2.11 is installed
  • OR freeradius-server-krb5-3.0.15-2.11 is installed
  • OR freeradius-server-ldap-3.0.15-2.11 is installed
  • OR freeradius-server-libs-3.0.15-2.11 is installed
  • OR freeradius-server-mysql-3.0.15-2.11 is installed
  • OR freeradius-server-perl-3.0.15-2.11 is installed
  • OR freeradius-server-postgresql-3.0.15-2.11 is installed
  • OR freeradius-server-python-3.0.15-2.11 is installed
  • OR freeradius-server-sqlite-3.0.15-2.11 is installed
  • OR freeradius-server-utils-3.0.15-2.11 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • dracut-044.1-9 is installed
  • OR dracut-fips-044.1-9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • libldap-2_4-2-2.4.46-9.31 is installed
  • OR libldap-2_4-2-32bit-2.4.46-9.31 is installed
  • OR libldap-data-2.4.46-9.31 is installed
  • OR openldap2-2.4.46-9.31 is installed
  • OR openldap2-back-meta-2.4.46-9.31 is installed
  • OR openldap2-back-perl-2.4.46-9.31 is installed
  • OR openldap2-client-2.4.46-9.31 is installed
  • OR openldap2-devel-2.4.46-9.31 is installed
  • OR openldap2-devel-32bit-2.4.46-9.31 is installed
  • OR openldap2-devel-static-2.4.46-9.31 is installed
  • OR openldap2-ppolicy-check-password-1.2-9.31 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 12 SP4 is installed
  • AND Package Information
  • xen-4.11.4_18-2.54.1 is installed
  • OR xen-doc-html-4.11.4_18-2.54.1 is installed
  • OR xen-libs-4.11.4_18-2.54.1 is installed
  • OR xen-libs-32bit-4.11.4_18-2.54.1 is installed
  • OR xen-tools-4.11.4_18-2.54.1 is installed
  • OR xen-tools-domU-4.11.4_18-2.54.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server for SAP Applications 15 is installed
  • AND Package Information
  • libssh-0.7.5-6.9 is installed
  • OR libssh-devel-0.7.5-6.9 is installed
  • OR libssh4-0.7.5-6.9 is installed
  • OR libssh4-32bit-0.7.5-6.9 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP2 is installed
  • AND Package Information
  • MozillaThunderbird-78.4.0-3.99 is installed
  • OR MozillaThunderbird-translations-common-78.4.0-3.99 is installed
  • OR MozillaThunderbird-translations-other-78.4.0-3.99 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 6 is installed
  • AND python-pycrypto-2.6.1-2 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • openstack-nova-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cells-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-cert-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-compute-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-conductor-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-console-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-consoleauth-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-doc-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-novncproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-placement-api-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-scheduler-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-serialproxy-14.0.10~dev13-4.11 is installed
  • OR openstack-nova-vncproxy-14.0.10~dev13-4.11 is installed
  • OR python-nova-14.0.10~dev13-4.11 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • ghostscript-9.27-23.31 is installed
  • OR ghostscript-x11-9.27-23.31 is installed
  • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND slf4j-1.7.12-3.3 is installed
  • BACK