Oval Definition:	oval:org.opensuse.security:def:6260
Revision Date: 2021-12-07 Version: 1 Title: Security update for xen (Moderate) Description: This update for xen fixes the following issues: - CVE-2021-28702: Fixed PCI devices with RMRRs not deassigned correctly (XSA-386) (bsc#1191363). - CVE-2021-28704, CVE-2021-28707, CVE-2021-28708: Fixed PoD operations on misaligned GFNs (XSA-388) (bsc#1192557). - CVE-2021-28705, CVE-2021-28709: Fixed issues with partially successful P2M updates on x86 (XSA-389) (bsc#1192559). - CVE-2021-28706: Fixed guests may exceed their designated memory limit (XSA-385) (bsc#1192554). - Update to Xen 4.14.3 bug fix release (bsc#1027519). Family: unix Class: patch Status: Reference(s): 1027519 1191363 1192554 1192557 1192559 CVE-2006-7250 CVE-2008-5077 CVE-2008-5984 CVE-2009-0368 CVE-2009-0590 CVE-2009-0591 CVE-2009-0789 CVE-2009-1377 CVE-2009-1378 CVE-2009-1379 CVE-2009-1386 CVE-2009-1387 CVE-2009-2625 CVE-2009-3560 CVE-2009-3720 CVE-2009-5029 CVE-2010-0740 CVE-2010-0742 CVE-2010-1172 CVE-2010-1633 CVE-2010-2494 CVE-2010-2939 CVE-2010-3864 CVE-2010-4523 CVE-2010-5298 CVE-2011-0014 CVE-2011-0460 CVE-2011-1521 CVE-2011-3207 CVE-2011-3210 CVE-2011-3389 CVE-2011-4108 CVE-2011-4576 CVE-2011-4577 CVE-2011-4619 CVE-2011-4944 CVE-2012-0027 CVE-2012-0050 CVE-2012-0845 CVE-2012-0876 CVE-2012-0884 CVE-2012-1147 CVE-2012-1148 CVE-2012-1150 CVE-2012-1165 CVE-2012-2110 CVE-2012-2686 CVE-2012-3406 CVE-2012-4412 CVE-2012-4929 CVE-2012-5468 CVE-2012-6702 CVE-2012-6706 CVE-2013-0166 CVE-2013-0169 CVE-2013-0242 CVE-2013-0292 CVE-2013-1752 CVE-2013-1753 CVE-2013-1914 CVE-2013-1984 CVE-2013-1995 CVE-2013-1998 CVE-2013-2207 CVE-2013-4237 CVE-2013-4238 CVE-2013-4282 CVE-2013-4332 CVE-2013-4353 CVE-2013-4458 CVE-2013-6449 CVE-2013-6450 CVE-2013-7423 CVE-2014-0076 CVE-2014-0160 CVE-2014-0195 CVE-2014-0198 CVE-2014-0221 CVE-2014-0224 CVE-2014-0475 CVE-2014-1912 CVE-2014-3470 CVE-2014-3505 CVE-2014-3506 CVE-2014-3507 CVE-2014-3508 CVE-2014-3509 CVE-2014-3510 CVE-2014-3511 CVE-2014-3512 CVE-2014-3513 CVE-2014-3567 CVE-2014-3568 CVE-2014-3569 CVE-2014-3570 CVE-2014-3571 CVE-2014-3572 CVE-2014-3686 CVE-2014-4043 CVE-2014-4650 CVE-2014-5119 CVE-2014-5139 CVE-2014-6040 CVE-2014-7185 CVE-2014-7817 CVE-2014-8121 CVE-2014-8275 CVE-2014-9402 CVE-2014-9761 CVE-2015-0204 CVE-2015-0205 CVE-2015-0206 CVE-2015-0209 CVE-2015-0210 CVE-2015-0286 CVE-2015-0287 CVE-2015-0288 CVE-2015-0289 CVE-2015-0293 CVE-2015-1283 CVE-2015-1472 CVE-2015-1473 CVE-2015-1781 CVE-2015-1788 CVE-2015-1789 CVE-2015-1790 CVE-2015-1791 CVE-2015-1792 CVE-2015-1793 CVE-2015-1794 CVE-2015-1863 CVE-2015-3193 CVE-2015-3194 CVE-2015-3195 CVE-2015-3196 CVE-2015-3197 CVE-2015-3247 CVE-2015-4141 CVE-2015-4142 CVE-2015-4143 CVE-2015-5130 CVE-2015-5260 CVE-2015-5261 CVE-2015-5310 CVE-2015-7547 CVE-2015-8041 CVE-2015-8776 CVE-2015-8777 CVE-2015-8778 CVE-2015-8779 CVE-2016-0701 CVE-2016-0702 CVE-2016-0705 CVE-2016-0718 CVE-2016-0749 CVE-2016-0772 CVE-2016-0797 CVE-2016-0798 CVE-2016-0800 CVE-2016-1000110 CVE-2016-1234 CVE-2016-2105 CVE-2016-2106 CVE-2016-2107 CVE-2016-2109 CVE-2016-2150 CVE-2016-2176 CVE-2016-2177 CVE-2016-2178 CVE-2016-2179 CVE-2016-2180 CVE-2016-2181 CVE-2016-2182 CVE-2016-2183 CVE-2016-3075 CVE-2016-3706 CVE-2016-4429 CVE-2016-5300 CVE-2016-5636 CVE-2016-5699 CVE-2016-6302 CVE-2016-6303 CVE-2016-6304 CVE-2016-6306 CVE-2016-6354 CVE-2016-7052 CVE-2016-7055 CVE-2016-7056 CVE-2016-7945 CVE-2016-7946 CVE-2016-9063 CVE-2016-9577 CVE-2016-9578 CVE-2017-1000158 CVE-2017-1000366 CVE-2017-1000408 CVE-2017-1000409 CVE-2017-12132 CVE-2017-12133 CVE-2017-13078 CVE-2017-13079 CVE-2017-13080 CVE-2017-13081 CVE-2017-13087 CVE-2017-13088 CVE-2017-15670 CVE-2017-15671 CVE-2017-15804 CVE-2017-16997 CVE-2017-18207 CVE-2017-18269 CVE-2017-3731 CVE-2017-3732 CVE-2017-6318 CVE-2017-7506 CVE-2017-8804 CVE-2017-9233 CVE-2018-1000001 CVE-2018-1000030 CVE-2018-10873 CVE-2018-10893 CVE-2018-11236 CVE-2018-11237 CVE-2018-16741 CVE-2018-16742 CVE-2018-16743 CVE-2018-16744 CVE-2018-16745 CVE-2018-6485 CVE-2018-6551 CVE-2021-28702 CVE-2021-28704 CVE-2021-28705 CVE-2021-28706 CVE-2021-28707 CVE-2021-28708 CVE-2021-28709 Platform(s): openSUSE 13.1 openSUSE 13.1 NonFree openSUSE 13.2 openSUSE 13.2 NonFree openSUSE Leap 42.1 SUSE Cloud Compute Node for SUSE Linux Enterprise 12 5 SUSE Linux Enterprise Build System Kit 12 SP1 SUSE Linux Enterprise Build System Kit 12 SP2 SUSE Linux Enterprise Build System Kit 12 SP3 SUSE Linux Enterprise Build System Kit 12 SP4 SUSE Linux Enterprise Desktop 11 SP2 SUSE Linux Enterprise Desktop 11 SP3 SUSE Linux Enterprise Desktop 12 SUSE Linux Enterprise Desktop 12 SP1 SUSE Linux Enterprise Desktop 12 SP2 SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise for SAP 12 SP1 SUSE Linux Enterprise High Availability 12 SP2 SUSE Linux Enterprise High Availability 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Live Patching 12 SUSE Linux Enterprise Live Patching 12 SP3 SUSE Linux Enterprise Module for Legacy Software 12 SUSE Linux Enterprise Module for Open Buildservice Development Tools 15 SP3 SUSE Linux Enterprise Module for Public Cloud 12 SUSE Linux Enterprise Module for Web Scripting 12 SUSE Linux Enterprise Server 11 SP1 SUSE Linux Enterprise Server 11 SP2 SUSE Linux Enterprise Server 11 SP3 SUSE Linux Enterprise Server 11 SP4 SUSE Linux Enterprise Server 12 SUSE Linux Enterprise Server 12 SP1 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for VMWare 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP2 SUSE Linux Enterprise Software Development Kit 11 SP3 SUSE Linux Enterprise Software Development Kit 11 SP4 SUSE Linux Enterprise Software Development Kit 12 SUSE Linux Enterprise Software Development Kit 12 SP1 SUSE Linux Enterprise Software Development Kit 12 SP2 SUSE Linux Enterprise Software Development Kit 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP4 Product(s): Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP1 is installed AND Package Information kdelibs4-4.12.0-10 is installed OR kdelibs4-branding-upstream-4.12.0-10 is installed OR kdelibs4-core-4.12.0-10 is installed OR kdelibs4-doc-4.12.0-10 is installed OR libkde4-devel-4.12.0-10 is installed OR libkdecore4-devel-4.12.0-10 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP2 is installed AND Package Information ghostscript-mini-9.15-17 is installed OR ghostscript-mini-devel-9.15-17 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP3 is installed AND kernel-zfcpdump-4.4.82-6.3 is installed Definition Synopsis SUSE Linux Enterprise Build System Kit 12 SP4 is installed AND Package Information krb5-mini-1.12.5-40.31 is installed OR krb5-mini-devel-1.12.5-40.31 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP2 is installed AND Package Information MozillaFirefox-17.0.9esr-0.3.1 is installed OR MozillaFirefox-translations-17.0.9esr-0.3.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 11 SP3 is installed AND Package Information Mesa-9.0.3-0.19.1 is installed OR Mesa-32bit-9.0.3-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 is installed AND tcpdump-4.5.1-4 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP1 is installed AND xfsprogs-3.2.1-3 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP2 is installed AND bogofilter-1.2.4-5 is installed Definition Synopsis SUSE Linux Enterprise Desktop 12 SP4 is installed AND Package Information dbus-1-glib-0.100.2-3 is installed OR dbus-1-glib-32bit-0.100.2-3 is installed Definition Synopsis SUSE Linux Enterprise for SAP 12 SP1 is installed AND Package Information bind-9.9.9P1-62 is installed OR bind-chrootenv-9.9.9P1-62 is installed OR bind-devel-9.9.9P1-62 is installed OR bind-doc-9.9.9P1-62 is installed OR bind-libs-9.9.9P1-62 is installed OR bind-libs-32bit-9.9.9P1-62 is installed OR bind-utils-9.9.9P1-62 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP2 is installed AND ctdb-4.4.2-29 is installed Definition Synopsis SUSE Linux Enterprise High Availability 12 SP4 is installed AND ruby2.1-rubygem-bundler-1.7.3-3 is installed Definition Synopsis SUSE Linux Enterprise High Performance Computing 12 SP5 is installed AND Package Information ImageMagick-config-6-SUSE-6.8.8.1-71.126 is installed OR ImageMagick-config-6-upstream-6.8.8.1-71.126 is installed OR libMagickCore-6_Q16-1-6.8.8.1-71.126 is installed OR libMagickWand-6_Q16-1-6.8.8.1-71.126 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 is installed AND Package Information kgraft-patch-4_4_49-92_11-default-5-2 is installed OR kgraft-patch-SLE12-SP2_Update_5-5-2 is installed Definition Synopsis SUSE Linux Enterprise Live Patching 12 SP3 is installed AND Package Information kgraft-patch-4_4_82-6_6-default-3-2 is installed OR kgraft-patch-SLE12-SP3_Update_2-3-2 is installed Definition Synopsis SUSE Linux Enterprise Module for Legacy Software 12 is installed AND Package Information java-1_6_0-ibm-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-fonts-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-jdbc-1.6.0_sr16.1-5 is installed OR java-1_6_0-ibm-plugin-1.6.0_sr16.1-5 is installed Definition Synopsis SUSE Linux Enterprise Module for Public Cloud 12 is installed AND Package Information kernel-ec2-3.12.32-33 is installed OR kernel-ec2-devel-3.12.32-33 is installed OR kernel-ec2-extra-3.12.32-33 is installed Definition Synopsis SUSE Linux Enterprise Module for Web Scripting 12 is installed AND Package Information nodejs6-6.9.5-7 is installed OR nodejs6-devel-6.9.5-7 is installed OR nodejs6-docs-6.9.5-7 is installed OR npm6-6.9.5-7 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP1 is installed AND Package Information openswan-2.6.16-1.34.3 is installed OR openswan-doc-2.6.16-1.34.3 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP2 is installed AND LibVNCServer-0.9.1-154.24 is installed Definition Synopsis Release Information SUSE Linux Enterprise Server 11 SP3 is installed AND libgcrypt-1.5.0-0.19.1 is installed OR libgcrypt11-1.5.0-0.19.1 is installed OR libgcrypt11-32bit-1.5.0-0.19.1 is installed OR libgcrypt11-x86-1.5.0-0.19.1 is installed OR Package Information SUSE Linux Enterprise Server for VMWare 11 SP3 is installed AND libgcrypt-1.5.0-0.19.1 is installed OR libgcrypt11-1.5.0-0.19.1 is installed OR libgcrypt11-32bit-1.5.0-0.19.1 is installed OR libgcrypt11-x86-1.5.0-0.19.1 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP3 is installed AND Package Information MozillaFirefox-17.0.4esr-0.10.42 is installed OR MozillaFirefox-translations-17.0.4esr-0.10.42 is installed Definition Synopsis SUSE Linux Enterprise Server 11 SP4 is installed AND apache2-mod_jk-1.2.40-0.2.1 is installed Definition Synopsis SUSE Linux Enterprise Server 12 is installed AND coolkey-1.1.0-147 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP1 is installed AND apache-commons-httpclient-3.1-4 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP2 is installed AND Package Information DirectFB-1.7.1-6 is installed OR lib++dfb-1_7-1-1.7.1-6 is installed OR libdirectfb-1_7-1-1.7.1-6 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP3 is installed AND apache2-mod_jk-1.2.40-5 is installed Definition Synopsis SUSE Linux Enterprise Server 12 SP4 is installed AND Package Information avahi-0.6.32-30 is installed OR avahi-lang-0.6.32-30 is installed OR avahi-utils-0.6.32-30 is installed OR libavahi-client3-0.6.32-30 is installed OR libavahi-client3-32bit-0.6.32-30 is installed OR libavahi-common3-0.6.32-30 is installed OR libavahi-common3-32bit-0.6.32-30 is installed OR libavahi-core7-0.6.32-30 is installed OR libdns_sd-0.6.32-30 is installed OR libdns_sd-32bit-0.6.32-30 is installed Definition Synopsis SUSE Linux Enterprise Server for Raspberry Pi 12 SP2 is installed AND wget-1.14-10 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP2 is installed AND Package Information libjpeg-turbo-1.5.3-31.19 is installed OR libjpeg62-62.2.0-31.19 is installed OR libjpeg62-32bit-62.2.0-31.19 is installed OR libjpeg62-turbo-1.5.3-31.19 is installed OR libjpeg8-8.1.2-31.19 is installed OR libjpeg8-32bit-8.1.2-31.19 is installed OR libturbojpeg0-8.1.2-31.19 is installed Definition Synopsis SUSE Linux Enterprise Server for SAP Applications 12 SP3 is installed AND Package Information kgraft-patch-4_4_143-94_47-default-7-2 is installed OR kgraft-patch-SLE12-SP3_Update_16-7-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP2 is installed AND fastjar-0.95-1.24.1 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP3 is installed AND Package Information MozillaFirefox-38.5.0esr-28.2 is installed OR MozillaFirefox-devel-38.5.0esr-28.2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 11 SP4 is installed AND Package Information cpp48-4.8.3+r212056-2.17 is installed OR gcc48-4.8.3+r212056-2.17 is installed OR gcc48-32bit-4.8.3+r212056-2.17 is installed OR gcc48-c++-4.8.3+r212056-2.17 is installed OR gcc48-fortran-4.8.3+r212056-2.17 is installed OR gcc48-fortran-32bit-4.8.3+r212056-2.17 is installed OR gcc48-info-4.8.3+r212056-2.17 is installed OR gcc48-locale-4.8.3+r212056-2.17 is installed OR libasan0-4.8.3+r212056-2.17 is installed OR libatomic1-4.8.3+r212056-2.17 is installed OR libgfortran3-4.8.3+r212056-2.17 is installed OR libgfortran3-32bit-4.8.3+r212056-2.17 is installed OR libitm1-4.8.3+r212056-2.17 is installed OR libquadmath0-4.8.3+r212056-2.17 is installed OR libquadmath0-32bit-4.8.3+r212056-2.17 is installed OR libstdc++48-devel-4.8.3+r212056-2.17 is installed OR libstdc++48-devel-32bit-4.8.3+r212056-2.17 is installed OR libtsan0-4.8.3+r212056-2.17 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 is installed AND cups-devel-1.7.5-2 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP1 is installed AND Package Information FastCGI-2.4.0-167 is installed OR perl-FastCGI-2.4.0-167 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP2 is installed AND Package Information bsh2-2.0.0.b5-3 is installed OR bsh2-classgen-2.0.0.b5-3 is installed OR bsh2-javadoc-2.0.0.b5-3 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP3 is installed AND alsa-devel-1.0.27.2-15 is installed Definition Synopsis SUSE Linux Enterprise Software Development Kit 12 SP4 is installed AND Package Information DirectFB-devel-1.7.1-6 is installed OR lib++dfb-devel-1.7.1-6 is installed
BACK