Oval Definition:	oval:org.opensuse.security:def:55495
Revision Date: 2020-12-01 Version: 1 Title: Security update for xen (Moderate) Description: Xen was updated 4.4.2_01 to address three security issues and functional bugs. The following vulnerabilities were fixed: - Long latency MMIO mapping operations are not preemptible (XSA-125, CVE-2015-2752, bnc#922705) - Unmediated PCI command register access in qemu (XSA-126, CVE-2015-2756, bnc#922706) - Certain domctl operations may be abused to lock up the host (XSA-127, CVE-2015-2751, bnc#922709) The following non-security bugs were fixed: - xen dmesg contains bogus output in early boot (bnc#923758) - Xentop doesn't display disk statistics for VMs using qdisks (bnc#921842) The following functionality was enabled: - Enable spice support in qemu for x86_64 - Add Qxl vga support Family: unix Class: patch Status: Reference(s): 1004220 1005023 1005522 1005523 1005524 1005525 1005526 1005527 1005528 1027575 1030472 1030476 1033084 1033085 1033087 1033088 1033089 1033090 1038564 1042892 1046191 1049825 1050751 1052311 1052368 1076696 1087320 1098377 1101591 1106390 1107067 1109893 1110542 1111319 1111973 1112723 1112726 1112911 1113296 1114981 1115518 1115916 1115917 1116995 1117998 1119971 1120323 1120629 1120630 1120631 1120852 1121759 1123685 1125007 1127155 1131823 1134226 1137977 1140039 1145521 779952 802648 802746 912878 921842 922705 922706 922709 923758 931625 931626 931627 931628 932770 932790 932996 988651 CVE-2009-3736 CVE-2012-4510 CVE-2013-0166 CVE-2013-0169 CVE-2015-1038 CVE-2015-2751 CVE-2015-2752 CVE-2015-2756 CVE-2015-3209 CVE-2015-4103 CVE-2015-4104 CVE-2015-4105 CVE-2015-4106 CVE-2015-4163 CVE-2015-4164 CVE-2015-7577 CVE-2016-0753 CVE-2016-10254 CVE-2016-10255 CVE-2016-5542 CVE-2016-5554 CVE-2016-5556 CVE-2016-5568 CVE-2016-5573 CVE-2016-5582 CVE-2016-5597 CVE-2017-1000112 CVE-2017-2636 CVE-2017-5731 CVE-2017-5732 CVE-2017-5733 CVE-2017-5734 CVE-2017-5735 CVE-2017-7533 CVE-2017-7607 CVE-2017-7608 CVE-2017-7610 CVE-2017-7611 CVE-2017-7612 CVE-2017-7613 CVE-2017-7645 CVE-2017-8890 CVE-2017-9242 CVE-2018-10852 CVE-2018-16062 CVE-2018-16403 CVE-2018-16864 CVE-2018-16865 CVE-2018-16866 CVE-2018-18310 CVE-2018-18520 CVE-2018-18521 CVE-2018-20532 CVE-2018-20533 CVE-2018-20534 CVE-2018-3613 CVE-2019-3811 CVE-2019-7150 CVE-2019-7665 SUSE-SU-2015:0701-1 SUSE-SU-2015:1045-1 SUSE-SU-2015:1433-1 SUSE-SU-2016:2887-1 SUSE-SU-2017:2049-1 SUSE-SU-2017:2423-1 SUSE-SU-2017:2424-1 SUSE-SU-2018:4194-1 SUSE-SU-2019:0135-1 SUSE-SU-2019:0556-1 SUSE-SU-2019:1733-1 SUSE-SU-2019:2265-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.1 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP1-LTSS SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 6 SUSE OpenStack Cloud 7 SUSE OpenStack Cloud 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information bind-9.11.2-lp150.7 is installed OR bind-chrootenv-9.11.2-lp150.7 is installed OR bind-utils-9.11.2-lp150.7 is installed OR libbind9-160-9.11.2-lp150.7 is installed OR libdns169-9.11.2-lp150.7 is installed OR libirs160-9.11.2-lp150.7 is installed OR libisc166-9.11.2-lp150.7 is installed OR libisccc160-9.11.2-lp150.7 is installed OR libisccfg160-9.11.2-lp150.7 is installed OR liblwres160-9.11.2-lp150.7 is installed OR python3-bind-9.11.2-lp150.7 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND Package Information gnutls-3.6.7-lp151.2.3 is installed OR gnutls-guile-3.6.7-lp151.2.3 is installed OR libgnutls-dane-devel-3.6.7-lp151.2.3 is installed OR libgnutls-dane0-3.6.7-lp151.2.3 is installed OR libgnutls-devel-3.6.7-lp151.2.3 is installed OR libgnutls-devel-32bit-3.6.7-lp151.2.3 is installed OR libgnutls30-3.6.7-lp151.2.3 is installed OR libgnutls30-32bit-3.6.7-lp151.2.3 is installed OR libgnutlsxx-devel-3.6.7-lp151.2.3 is installed OR libgnutlsxx28-3.6.7-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information libopenssl0_9_8-0.9.8j-0.50 is installed OR libopenssl0_9_8-32bit-0.9.8j-0.50 is installed OR openssl-0.9.8j-0.50 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information xen-4.2.5_08-0.9 is installed OR xen-doc-html-4.2.5_08-0.9 is installed OR xen-doc-pdf-4.2.5_08-0.9 is installed OR xen-kmp-default-4.2.5_08_3.0.101_0.47.55-0.9 is installed OR xen-kmp-pae-4.2.5_08_3.0.101_0.47.55-0.9 is installed OR xen-libs-4.2.5_08-0.9 is installed OR xen-libs-32bit-4.2.5_08-0.9 is installed OR xen-tools-4.2.5_08-0.9 is installed OR xen-tools-domU-4.2.5_08-0.9 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND Package Information xen-4.4.2_02-15 is installed OR xen-kmp-default-4.4.2_02_k3.12.38_44-15 is installed OR xen-libs-4.4.2_02-15 is installed OR xen-libs-32bit-4.4.2_02-15 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP3 is installed AND Package Information elfutils-0.158-7.7 is installed OR libasm1-0.158-7.7 is installed OR libdw1-0.158-7.7 is installed OR libdw1-32bit-0.158-7.7 is installed OR libebl1-0.158-7.7 is installed OR libebl1-32bit-0.158-7.7 is installed OR libelf1-0.158-7.7 is installed OR libelf1-32bit-0.158-7.7 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information ovmf-2017+git1510945757.b2662641d5-3.5 is installed OR qemu-ovmf-x86_64-2017+git1510945757.b2662641d5-3.5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND Package Information cups-pk-helper-0.2.5-3 is installed OR cups-pk-helper-lang-0.2.5-3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1-LTSS is installed AND Package Information kgraft-patch-3_12_69-60_64_29-default-6-2 is installed OR kgraft-patch-3_12_69-60_64_29-xen-6-2 is installed OR kgraft-patch-SLE12-SP1_Update_12-6-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information gpgme-1.5.1-1 is installed OR libgpgme11-1.5.1-1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information MozillaFirefox-60.6.1esr-109.63 is installed OR MozillaFirefox-devel-60.6.1esr-109.63 is installed OR MozillaFirefox-translations-common-60.6.1esr-109.63 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.35-30.50 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.35-30.50 is installed OR java-1_8_0-ibm-devel-1.8.0_sr5.35-30.50 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.35-30.50 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-LTSS is installed AND Package Information kgraft-patch-4_4_120-92_70-default-3-2 is installed OR kgraft-patch-SLE12-SP2_Update_20-3-2 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND git-core-2.12.3-26 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information evince-3.20.2-6.27 is installed OR evince-browser-plugin-3.20.2-6.27 is installed OR evince-lang-3.20.2-6.27 is installed OR evince-plugin-djvudocument-3.20.2-6.27 is installed OR evince-plugin-dvidocument-3.20.2-6.27 is installed OR evince-plugin-pdfdocument-3.20.2-6.27 is installed OR evince-plugin-psdocument-3.20.2-6.27 is installed OR evince-plugin-tiffdocument-3.20.2-6.27 is installed OR evince-plugin-xpsdocument-3.20.2-6.27 is installed OR libevdocument3-4-3.20.2-6.27 is installed OR libevview3-3-3.20.2-6.27 is installed OR nautilus-evince-3.20.2-6.27 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND ucode-intel-20191112a-13.56 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information libsoup-2.62.2-5.7 is installed OR libsoup-2_4-1-2.62.2-5.7 is installed OR libsoup-2_4-1-32bit-2.62.2-5.7 is installed OR libsoup-lang-2.62.2-5.7 is installed OR typelib-1_0-Soup-2_4-2.62.2-5.7 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND apache2-mod_nss-1.0.14-19.3 is installed Definition Synopsis SUSE OpenStack Cloud 6 is installed AND ruby2.1-rubygem-activerecord-4_2-4.2.2-5 is installed Definition Synopsis SUSE OpenStack Cloud 7 is installed AND couchdb-1.7.2-2.8 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND python-ecdsa-0.13.3-5.10 is installed
BACK