| Revision Date: | 2020-12-01 | Version: | 1 |
| Title: | Security update for xen (Important) |
| Description: |
This update for xen fixes several issues.
These security issues were fixed:
- CVE-2017-14316: Missing bound check in function `alloc_heap_pages` for an internal array allowed attackers using crafted hypercalls to execute arbitrary code within Xen (XSA-231, bsc#1056278) - CVE-2017-14318: The function __gnttab_cache_flush missed a check for grant tables, allowing a malicious guest to crash the host or for x86 PV guests to potentially escalate privileges (XSA-232, bsc#1056280) - CVE-2017-14317: A race in cxenstored may have cause a double-free allowind for DoS of the xenstored daemon (XSA-233, bsc#1056281). - CVE-2017-14319: An error while handling grant mappings allowed malicious or buggy x86 PV guest to escalate its privileges or crash the hypervisor (XSA-234, bsc#1056282).
These non-security issues were fixed:
- bsc#1057358: Fixed boot into SUSE Linux Enterprise 12.3 with secure boot - bsc#1055695: Fixed restoring updates for HVM guests for ballooned domUs
|
| Family: | unix | Class: | patch |
| Status: | | Reference(s): | 1005633
1005634
1005635
1005637
1005638
1005640
1005642
1005643
1005645
1005646
1005778
1005780
1005781
1012382
1014136
1017967
1021578
1026236
1027197
1027519
1031460
1034845
1036470
1037243
1039616
1042160
1042863
1042882
1042893
1042915
1042923
1042924
1042931
1042938
1043074
1043297
1047487
1048688
1055695
1056278
1056280
1056281
1056282
1057358
1059463
1063043
1064311
1065180
1068032
1068951
1070116
1071009
1072166
1072216
1072556
1072866
1072890
1072962
1073090
1073525
1073792
1073809
1073868
1073874
1073912
1087082
1087083
1091764
1096141
1097375
1100147
1107832
1108963
1110233
1111634
1111635
1130103
1133528
1171186
963897
964063
966170
966172
998760
CVE-2007-5970
CVE-2008-0928
CVE-2008-1945
CVE-2008-2382
CVE-2008-4539
CVE-2008-7247
CVE-2009-4019
CVE-2009-4028
CVE-2009-4030
CVE-2010-0750
CVE-2010-5298
CVE-2011-1485
CVE-2012-3515
CVE-2012-5615
CVE-2013-1976
CVE-2013-4148
CVE-2013-4149
CVE-2013-4150
CVE-2013-4151
CVE-2013-4288
CVE-2013-4526
CVE-2013-4527
CVE-2013-4529
CVE-2013-4530
CVE-2013-4531
CVE-2013-4533
CVE-2013-4534
CVE-2013-4535
CVE-2013-4536
CVE-2013-4537
CVE-2013-4538
CVE-2013-4539
CVE-2013-4540
CVE-2013-4541
CVE-2013-4542
CVE-2013-4544
CVE-2013-6399
CVE-2014-0142
CVE-2014-0143
CVE-2014-0144
CVE-2014-0145
CVE-2014-0146
CVE-2014-0147
CVE-2014-0150
CVE-2014-0182
CVE-2014-0195
CVE-2014-0198
CVE-2014-0221
CVE-2014-0222
CVE-2014-0223
CVE-2014-0224
CVE-2014-2494
CVE-2014-3461
CVE-2014-3470
CVE-2014-3640
CVE-2014-4207
CVE-2014-4258
CVE-2014-4260
CVE-2014-4274
CVE-2014-4287
CVE-2014-6463
CVE-2014-6464
CVE-2014-6469
CVE-2014-6474
CVE-2014-6478
CVE-2014-6484
CVE-2014-6489
CVE-2014-6491
CVE-2014-6494
CVE-2014-6495
CVE-2014-6496
CVE-2014-6500
CVE-2014-6505
CVE-2014-6507
CVE-2014-6520
CVE-2014-6530
CVE-2014-6551
CVE-2014-6555
CVE-2014-6559
CVE-2014-6564
CVE-2014-6568
CVE-2014-7840
CVE-2014-8106
CVE-2014-8964
CVE-2014-9622
CVE-2015-0374
CVE-2015-0381
CVE-2015-0382
CVE-2015-0391
CVE-2015-0411
CVE-2015-0432
CVE-2015-0433
CVE-2015-0441
CVE-2015-0499
CVE-2015-0501
CVE-2015-0505
CVE-2015-1779
CVE-2015-2325
CVE-2015-2326
CVE-2015-2568
CVE-2015-2571
CVE-2015-2573
CVE-2015-3152
CVE-2015-3209
CVE-2015-3218
CVE-2015-3255
CVE-2015-3256
CVE-2015-3456
CVE-2015-4037
CVE-2015-4625
CVE-2015-5154
CVE-2015-5225
CVE-2015-5278
CVE-2015-5279
CVE-2015-6815
CVE-2015-6855
CVE-2015-7295
CVE-2016-7167
CVE-2016-8615
CVE-2016-8616
CVE-2016-8617
CVE-2016-8618
CVE-2016-8619
CVE-2016-8620
CVE-2016-8621
CVE-2016-8622
CVE-2016-8623
CVE-2016-8624
CVE-2017-10911
CVE-2017-10912
CVE-2017-10913
CVE-2017-10914
CVE-2017-10915
CVE-2017-10916
CVE-2017-10917
CVE-2017-10918
CVE-2017-10920
CVE-2017-10921
CVE-2017-10922
CVE-2017-14316
CVE-2017-14317
CVE-2017-14318
CVE-2017-14319
CVE-2017-17805
CVE-2017-17806
CVE-2017-5715
CVE-2017-5753
CVE-2017-5754
CVE-2017-6318
CVE-2017-8112
CVE-2017-8309
CVE-2017-8905
CVE-2017-9330
CVE-2017-9374
CVE-2017-9503
CVE-2017-9799
CVE-2018-1000807
CVE-2018-1000808
CVE-2018-14633
CVE-2018-14634
CVE-2018-17182
CVE-2018-3639
CVE-2018-3640
CVE-2018-7167
CVE-2019-3859
CVE-2020-12387
CVE-2020-12388
CVE-2020-12389
CVE-2020-12392
CVE-2020-12393
CVE-2020-12395
CVE-2020-6831
SUSE-SU-2016:2699-1
SUSE-SU-2017:0713-1
SUSE-SU-2017:1812-1
SUSE-SU-2017:2420-1
SUSE-SU-2017:3000-1
SUSE-SU-2018:0010-1
SUSE-SU-2018:1892-1
SUSE-SU-2018:1935-1
SUSE-SU-2018:4063-1
SUSE-SU-2019:1060-1
SUSE-SU-2020:1218-1
|
| Platform(s): | openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 12 SP3
SUSE Linux Enterprise Server 12 SP1
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 6
SUSE OpenStack Cloud 6-LTSS
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
| Product(s): | |
| Definition Synopsis |
| openSUSE Leap 15.0 is installed AND Package Information
cpio-2.12-lp150.1 is installed
OR cpio-lang-2.12-lp150.1 is installed
OR cpio-mt-2.12-lp150.1 is installed
|
| Definition Synopsis |
| openSUSE Leap 15.1 is installed
AND Package Information
SDL2-2.0.8-lp151.4.6 is installed
OR libSDL2-2_0-0-2.0.8-lp151.4.6 is installed
OR libSDL2-2_0-0-32bit-2.0.8-lp151.4.6 is installed
OR libSDL2-devel-2.0.8-lp151.4.6 is installed
OR libSDL2-devel-32bit-2.0.8-lp151.4.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Desktop 12 SP3 is installed
AND Package Information
xen-4.9.0_12-3.15 is installed
OR xen-libs-4.9.0_12-3.15 is installed
OR xen-libs-32bit-4.9.0_12-3.15 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1 is installed
AND Package Information
libmysqlclient18-10.0.21-1 is installed
OR libmysqlclient18-32bit-10.0.21-1 is installed
OR mariadb-10.0.21-1 is installed
OR mariadb-client-10.0.21-1 is installed
OR mariadb-errormessages-10.0.21-1 is installed
OR mariadb-tools-10.0.21-1 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP1-LTSS is installed
AND Package Information
kgraft-patch-3_12_74-60_64_93-default-5-2 is installed
OR kgraft-patch-3_12_74-60_64_93-xen-5-2 is installed
OR kgraft-patch-SLE12-SP1_Update_28-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2 is installed
AND Package Information
libpolkit0-0.113-5.6 is installed
OR polkit-0.113-5.6 is installed
OR typelib-1_0-Polkit-1_0-0.113-5.6 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-BCL is installed
AND wpa_supplicant-2.6-15.10 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
AND Package Information
java-1_7_1-ibm-1.7.1_sr4.25-38.23 is installed
OR java-1_7_1-ibm-alsa-1.7.1_sr4.25-38.23 is installed
OR java-1_7_1-ibm-devel-1.7.1_sr4.25-38.23 is installed
OR java-1_7_1-ibm-jdbc-1.7.1_sr4.25-38.23 is installed
OR java-1_7_1-ibm-plugin-1.7.1_sr4.25-38.23 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP2-LTSS is installed
AND Package Information
kgraft-patch-4_4_74-92_29-default-11-2 is installed
OR kgraft-patch-SLE12-SP2_Update_10-11-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3 is installed
AND apache-commons-httpclient-3.1-4 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-LTSS is installed
AND Package Information
kgraft-patch-4_4_175-94_79-default-5-2 is installed
OR kgraft-patch-SLE12-SP3_Update_23-5-2 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
AND gd-2.1.0-24.12 is installed
|
| Definition Synopsis |
| SUSE Linux Enterprise Server 12 SP4 is installed
AND Package Information
at-3.1.14-8.6 is installed
OR flex-2.5.37-8 is installed
OR flex-32bit-2.5.37-8 is installed
OR libQtWebKit4-4.8.7+2.3.4-4.7 is installed
OR libQtWebKit4-32bit-4.8.7+2.3.4-4.7 is installed
OR libbonobo-2.32.1-16 is installed
OR libbonobo-32bit-2.32.1-16 is installed
OR libbonobo-doc-2.32.1-16 is installed
OR libbonobo-lang-2.32.1-16 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6 is installed
AND Package Information
xen-4.5.5_12-22.18 is installed
OR xen-doc-html-4.5.5_12-22.18 is installed
OR xen-kmp-default-4.5.5_12_k3.12.74_60.64.45-22.18 is installed
OR xen-libs-4.5.5_12-22.18 is installed
OR xen-libs-32bit-4.5.5_12-22.18 is installed
OR xen-tools-4.5.5_12-22.18 is installed
OR xen-tools-domU-4.5.5_12-22.18 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 6-LTSS is installed
AND python-setuptools-18.0.1-4.8 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 7 is installed
AND Package Information
storm-1.0.5-5 is installed
OR storm-nimbus-1.0.5-5 is installed
OR storm-supervisor-1.0.5-5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud 8 is installed
AND Package Information
kernel-default-4.4.180-94.113 is installed
OR kernel-default-base-4.4.180-94.113 is installed
OR kernel-default-devel-4.4.180-94.113 is installed
OR kernel-default-kgraft-4.4.180-94.113 is installed
OR kernel-devel-4.4.180-94.113 is installed
OR kernel-macros-4.4.180-94.113 is installed
OR kernel-source-4.4.180-94.113 is installed
OR kernel-syms-4.4.180-94.113 is installed
OR kgraft-patch-4_4_180-94_113-default-1-4.5 is installed
OR kgraft-patch-SLE12-SP3_Update_30-1-4.5 is installed
|
| Definition Synopsis |
| SUSE OpenStack Cloud Crowbar 8 is installed
AND Package Information
ntp-4.2.8p15-88 is installed
OR ntp-doc-4.2.8p15-88 is installed
|