Oval Definition:oval:org.opensuse.security:def:57271
Revision Date:2020-12-01Version:1
Title:Security update for Xen
Description:



XEN was updated 4.1.3 to fix multiple bugs and security issues.

The following security issues have been fixed:

* CVE-2012-3494: xen: hypercall set_debugreg vulnerability (XSA-12) * CVE-2012-3495: xen: hypercall physdev_get_free_pirq vulnerability (XSA-13) * CVE-2012-3496: xen: XENMEM_populate_physmap DoS vulnerability (XSA-14) * CVE-2012-3498: xen: PHYSDEVOP_map_pirq index vulnerability (XSA-16) * CVE-2012-3515: xen: Qemu VT100 emulation vulnerability (XSA-17)

Also the following bugs have been fixed:

* pvscsi support of attaching Luns - bnc#776995

The following related bugs in vm-install 0.5.12 have been fixed:

* bnc#776300 - vm-install does not pass --extra-args in --upgrade * Add for support Open Enterprise Server 11 * Add support for Windows 8 and Windows Server 2012 * Add support for Ubuntu 12 (Precise Pangolin)

Security Issue references:

* CVE-2012-3496 * CVE-2012-3494 * CVE-2012-3495 * CVE-2012-3498 * CVE-2012-3515

Family:unixClass:patch
Status:Reference(s):1007959
1007962
1008842
1009026
1010032
1010395
1010401
1010402
1010404
1010410
1010422
1010427
1010517
1011913
1012382
1012910
1013994
1014136
1015609
1017461
1017641
1018263
1018419
1019163
1019614
1019618
1020048
1021669
1021762
1022340
1022785
1023866
1024015
1025683
1026024
1026405
1026462
1026505
1026509
1026692
1026722
1027054
1027066
1027153
1027179
1027189
1027190
1027195
1027273
1027616
1028017
1028027
1028041
1028158
1028217
1028325
1028415
1028819
1028895
1029220
1029514
1029634
1029986
1030118
1030213
1031003
1031052
1031200
1031206
1031208
1031440
1031481
1031579
1031660
1031662
1031717
1031831
1032006
1032673
1032681
1056336
1060354
1060355
1060360
1060361
1060362
1060364
1065641
1069708
1071471
1079798
1079799
1079800
1079801
1088268
1090036
1096723
1102682
1105323
1106191
1107832
1110233
1110924
1111007
1111011
1111014
1112188
1114423
1114988
1115040
1115047
1117756
1123157
1126140
1126141
1126192
1126195
1126196
1126201
1127223
1127308
1128574
1129623
1130324
1133037
1141619
776300
776995
777084
777086
777088
777090
777091
897662
937752
951844
968697
969755
970083
977572
977860
978056
980892
981634
982783
987899
988281
991173
992549
998106
CVE-2009-5155
CVE-2012-3494
CVE-2012-3495
CVE-2012-3496
CVE-2012-3498
CVE-2012-3515
CVE-2015-5122
CVE-2015-5123
CVE-2016-10200
CVE-2016-2117
CVE-2016-5285
CVE-2016-5290
CVE-2016-5291
CVE-2016-5296
CVE-2016-5297
CVE-2016-6318
CVE-2016-9064
CVE-2016-9066
CVE-2016-9074
CVE-2016-9191
CVE-2017-0861
CVE-2017-13672
CVE-2017-14491
CVE-2017-14492
CVE-2017-14493
CVE-2017-14494
CVE-2017-14495
CVE-2017-14496
CVE-2017-15868
CVE-2017-16227
CVE-2017-16939
CVE-2017-2596
CVE-2017-2671
CVE-2017-5495
CVE-2017-6074
CVE-2017-6214
CVE-2017-6345
CVE-2017-6346
CVE-2017-6347
CVE-2017-6353
CVE-2017-7187
CVE-2017-7261
CVE-2017-7294
CVE-2017-7308
CVE-2017-7374
CVE-2018-1000026
CVE-2018-1000199
CVE-2018-10839
CVE-2018-10902
CVE-2018-10938
CVE-2018-14633
CVE-2018-17182
CVE-2018-17958
CVE-2018-17962
CVE-2018-17963
CVE-2018-18438
CVE-2018-18849
CVE-2018-19665
CVE-2018-19961
CVE-2018-19962
CVE-2018-19966
CVE-2018-19967
CVE-2018-5378
CVE-2018-5379
CVE-2018-5380
CVE-2018-5381
CVE-2018-5390
CVE-2019-1010006
CVE-2019-11459
CVE-2019-6778
CVE-2019-9169
CVE-2019-9824
CVE-2019-9924
SUSE-SU-2015:1258-1
SUSE-SU-2016:3014-1
SUSE-SU-2017:1183-1
SUSE-SU-2017:2618-1
SUSE-SU-2018:0275-1
SUSE-SU-2018:0455-1
SUSE-SU-2018:1264-1
SUSE-SU-2019:0825-1
SUSE-SU-2019:0838-2
SUSE-SU-2019:1958-1
SUSE-SU-2019:2098-1
Platform(s):openSUSE Leap 15.0
openSUSE Leap 15.1
SUSE Linux Enterprise Desktop 11 SP2
SUSE Linux Enterprise Desktop 11 SP3
SUSE Linux Enterprise Server 12 SP1-LTSS
SUSE Linux Enterprise Server 12 SP2
SUSE Linux Enterprise Server 12 SP2-BCL
SUSE Linux Enterprise Server 12 SP2-ESPOS
SUSE Linux Enterprise Server 12 SP2-LTSS
SUSE Linux Enterprise Server 12 SP3
SUSE Linux Enterprise Server 12 SP3-BCL
SUSE Linux Enterprise Server 12 SP3-LTSS
SUSE Linux Enterprise Server 12 SP3-TERADATA
SUSE Linux Enterprise Server 12 SP4
SUSE OpenStack Cloud 7
SUSE OpenStack Cloud 8
SUSE OpenStack Cloud Crowbar 8
Product(s):
Definition Synopsis
  • openSUSE Leap 15.0 is installed
  • AND Package Information
  • gnome-keyring-3.20.1-lp150.2 is installed
  • OR gnome-keyring-lang-3.20.1-lp150.2 is installed
  • OR gnome-keyring-pam-3.20.1-lp150.2 is installed
  • OR libgck-modules-gnome-keyring-3.20.1-lp150.2 is installed
    • Definition Synopsis
  • openSUSE Leap 15.1 is installed
  • AND enigmail-2.0.11-31 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP2 is installed
  • AND Package Information
  • vm-install-0.5.12-0.5 is installed
  • OR xen-4.1.3_02-0.5 is installed
  • OR xen-doc-html-4.1.3_02-0.5 is installed
  • OR xen-doc-pdf-4.1.3_02-0.5 is installed
  • OR xen-kmp-default-4.1.3_02_3.0.38_0.5-0.5 is installed
  • OR xen-kmp-trace-4.1.3_02_3.0.38_0.5-0.5 is installed
  • OR xen-libs-4.1.3_02-0.5 is installed
  • OR xen-libs-32bit-4.1.3_02-0.5 is installed
  • OR xen-tools-4.1.3_02-0.5 is installed
  • OR xen-tools-domU-4.1.3_02-0.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Desktop 11 SP3 is installed
  • AND Package Information
  • flash-player-11.2.202.491-0.11 is installed
  • OR flash-player-gnome-11.2.202.491-0.11 is installed
  • OR flash-player-kde4-11.2.202.491-0.11 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP1-LTSS is installed
  • AND Package Information
  • kgraft-patch-3_12_69-60_64_35-default-9-2 is installed
  • OR kgraft-patch-3_12_69-60_64_35-xen-9-2 is installed
  • OR kgraft-patch-SLE12-SP1_Update_14-9-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2 is installed
  • AND Package Information
  • cracklib-2.9.0-7 is installed
  • OR libcrack2-2.9.0-7 is installed
  • OR libcrack2-32bit-2.9.0-7 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-BCL is installed
  • AND shadow-4.2.1-27.9 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-ESPOS is installed
  • AND Package Information
  • glibc-2.22-62.13 is installed
  • OR glibc-32bit-2.22-62.13 is installed
  • OR glibc-devel-2.22-62.13 is installed
  • OR glibc-devel-32bit-2.22-62.13 is installed
  • OR glibc-html-2.22-62.13 is installed
  • OR glibc-i18ndata-2.22-62.13 is installed
  • OR glibc-info-2.22-62.13 is installed
  • OR glibc-locale-2.22-62.13 is installed
  • OR glibc-locale-32bit-2.22-62.13 is installed
  • OR glibc-profile-2.22-62.13 is installed
  • OR glibc-profile-32bit-2.22-62.13 is installed
  • OR nscd-2.22-62.13 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP2-LTSS is installed
  • AND Package Information
  • kgraft-patch-4_4_114-92_64-default-7-2 is installed
  • OR kgraft-patch-SLE12-SP2_Update_18-7-2 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3 is installed
  • AND Package Information
  • bash-4.3-82 is installed
  • OR bash-doc-4.3-82 is installed
  • OR libreadline6-6.3-82 is installed
  • OR libreadline6-32bit-6.3-82 is installed
  • OR readline-doc-6.3-82 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-BCL is installed
  • AND Package Information
  • libpolkit0-0.113-5.18 is installed
  • OR polkit-0.113-5.18 is installed
  • OR typelib-1_0-Polkit-1_0-0.113-5.18 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-LTSS is installed
  • AND Package Information
  • bzip2-1.0.6-30.5 is installed
  • OR bzip2-doc-1.0.6-30.5 is installed
  • OR libbz2-1-1.0.6-30.5 is installed
  • OR libbz2-1-32bit-1.0.6-30.5 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP3-TERADATA is installed
  • AND Package Information
  • gnome-shell-search-provider-nautilus-3.20.3-23.6 is installed
  • OR libnautilus-extension1-3.20.3-23.6 is installed
  • OR nautilus-3.20.3-23.6 is installed
  • OR nautilus-lang-3.20.3-23.6 is installed
    • Definition Synopsis
  • SUSE Linux Enterprise Server 12 SP4 is installed
  • AND Package Information
  • xen-4.11.3_02-2.20 is installed
  • OR xen-doc-html-4.11.3_02-2.20 is installed
  • OR xen-libs-4.11.3_02-2.20 is installed
  • OR xen-libs-32bit-4.11.3_02-2.20 is installed
  • OR xen-tools-4.11.3_02-2.20 is installed
  • OR xen-tools-domU-4.11.3_02-2.20 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 7 is installed
  • AND Package Information
  • dnsmasq-2.78-18.3 is installed
  • OR dnsmasq-utils-2.78-18.3 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud 8 is installed
  • AND Package Information
  • mariadb-10.2.22-4.11 is installed
  • OR mariadb-client-10.2.22-4.11 is installed
  • OR mariadb-errormessages-10.2.22-4.11 is installed
  • OR mariadb-galera-10.2.22-4.11 is installed
  • OR mariadb-tools-10.2.22-4.11 is installed
    • Definition Synopsis
  • SUSE OpenStack Cloud Crowbar 8 is installed
  • AND Package Information
  • libmysqlclient18-10.0.38-29.27 is installed
  • OR mariadb-10.0.38-29.27 is installed
    • BACK