Oval Definition:	oval:org.opensuse.security:def:59397
Revision Date: 2020-12-01 Version: 1 Title: Security update for xen (Important) Description: This update for xen fixes several issues. This feature was added: - Added support for qemu monitor command These security issues were fixed: - CVE-2018-3639: Prevent attackers with local user access from extracting information via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4 (bsc#1092631). - CVE-2017-5753,CVE-2017-5715,CVE-2017-5754: Improved Spectre v2 mitigations (bsc#1074562). This non-security issue was fixed: - bsc#1086039 - Dom0 does not represent DomU cpu flags Family: unix Class: patch Status: Reference(s): 1027519 1047002 1054979 1074562 1086039 1092631 1099498 1105437 1105459 1105460 1109105 1109412 1109413 1109414 1111479 1111480 1111996 1112229 1112534 1112535 1113247 1113252 1113255 1114592 1115245 1116827 1117022 1117274 1117313 1117327 1117331 1117751 1117776 1118460 1118462 1118463 1118830 1118831 1120640 1120943 1121034 1121035 1121056 1125623 1125666 1133131 1133232 1135254 1138034 1138461 1141897 1141913 1142649 1142654 1142690 1142772 1148517 1149145 1160305 1160498 1160770 1163985 1165787 1174633 1174635 1174638 CVE-2014-3566 CVE-2014-4975 CVE-2014-8080 CVE-2014-8090 CVE-2015-1855 CVE-2015-3900 CVE-2015-4047 CVE-2015-7551 CVE-2016-2339 CVE-2017-10790 CVE-2017-5715 CVE-2017-5753 CVE-2017-5754 CVE-2018-1000876 CVE-2018-10844 CVE-2018-10845 CVE-2018-10846 CVE-2018-17183 CVE-2018-17358 CVE-2018-17359 CVE-2018-17360 CVE-2018-17961 CVE-2018-17985 CVE-2018-18073 CVE-2018-18284 CVE-2018-18309 CVE-2018-18483 CVE-2018-18484 CVE-2018-18605 CVE-2018-18606 CVE-2018-18607 CVE-2018-19409 CVE-2018-19475 CVE-2018-19476 CVE-2018-19477 CVE-2018-19636 CVE-2018-19637 CVE-2018-19638 CVE-2018-19639 CVE-2018-19640 CVE-2018-19931 CVE-2018-19932 CVE-2018-20030 CVE-2018-20623 CVE-2018-20651 CVE-2018-20671 CVE-2018-3639 CVE-2019-1010180 CVE-2019-10164 CVE-2019-10206 CVE-2019-12855 CVE-2019-14250 CVE-2019-15847 CVE-2019-17015 CVE-2019-17016 CVE-2019-17017 CVE-2019-17021 CVE-2019-17022 CVE-2019-17024 CVE-2019-17026 CVE-2019-9278 CVE-2020-10188 CVE-2020-14345 CVE-2020-14346 CVE-2020-14347 CVE-2020-1720 SUSE-SU-2018:1699-2 SUSE-SU-2018:2825-2 SUSE-SU-2019:1122-1 SUSE-SU-2019:1783-1 SUSE-SU-2019:2274-1 SUSE-SU-2019:2453-1 SUSE-SU-2019:2650-1 SUSE-SU-2020:0068-1 SUSE-SU-2020:0394-1 SUSE-SU-2020:0457-1 SUSE-SU-2020:0715-1 SUSE-SU-2020:1533-1 Platform(s): openSUSE Leap 15.0 openSUSE Leap 15.0 NonFree openSUSE Leap 15.1 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-ESPOS SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-ESPOS SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server 12 SP3-TERADATA SUSE Linux Enterprise Server 12 SP4 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 Product(s): Definition Synopsis openSUSE Leap 15.0 is installed AND Package Information cups-pk-helper-0.2.6-lp150.1 is installed OR cups-pk-helper-lang-0.2.6-lp150.1 is installed Definition Synopsis openSUSE Leap 15.0 NonFree is installed AND opera-54.0.2952.41-lp150.2.3 is installed Definition Synopsis openSUSE Leap 15.1 is installed AND squid-4.8-lp151.2.3 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-BCL is installed AND Package Information xen-4.7.5_04-43.33 is installed OR xen-doc-html-4.7.5_04-43.33 is installed OR xen-libs-4.7.5_04-43.33 is installed OR xen-libs-32bit-4.7.5_04-43.33 is installed OR xen-tools-4.7.5_04-43.33 is installed OR xen-tools-domU-4.7.5_04-43.33 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2-ESPOS is installed AND Package Information ghostscript-9.26-23.16 is installed OR ghostscript-x11-9.26-23.16 is installed OR libspectre-0.2.7-12.4 is installed OR libspectre1-0.2.7-12.4 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 12 SP3 is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed OR Package Information SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND MozillaFirefox-60.7.2-109.80 is installed OR MozillaFirefox-translations-common-60.7.2-109.80 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND ipsec-tools-0.8.0-18 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-BCL is installed AND Package Information libpython3_4m1_0-3.4.6-25.29 is installed OR python3-3.4.6-25.29 is installed OR python3-base-3.4.6-25.29 is installed OR python3-curses-3.4.6-25.29 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-ESPOS is installed AND Package Information bzip2-1.0.6-30.8 is installed OR bzip2-doc-1.0.6-30.8 is installed OR libbz2-1-1.0.6-30.8 is installed OR libbz2-1-32bit-1.0.6-30.8 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-LTSS is installed AND Package Information java-1_8_0-ibm-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-alsa-1.8.0_sr5.40-30.54 is installed OR java-1_8_0-ibm-plugin-1.8.0_sr5.40-30.54 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3-TERADATA is installed AND Package Information xen-4.9.3_03-3.44 is installed OR xen-doc-html-4.9.3_03-3.44 is installed OR xen-libs-4.9.3_03-3.44 is installed OR xen-libs-32bit-4.9.3_03-3.44 is installed OR xen-tools-4.9.3_03-3.44 is installed OR xen-tools-domU-4.9.3_03-3.44 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR avahi-utils-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE OpenStack Cloud 8 is installed AND ansible-2.4.6.0-3.6 is installed Definition Synopsis SUSE OpenStack Cloud Crowbar 8 is installed AND python-Twisted-15.2.1-9.8 is installed
BACK