Oval Definition:oval:org.opensuse.security:def:65040
Revision Date:2020-12-01Version:1
Title:Security update for xen (Important)
Description:

This update for xen fixes the following issues:

- CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333) - CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334) - CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336) - CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337) - CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338) - CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339) - CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340) - CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342) - CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343) - CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)

- Various bug fixes (bsc#1027519)
Family:unixClass:patch
Status:Reference(s):1027519
1096726
1100369
1109160
1118367
1118368
1128220
1156205
1157051
1161168
1170667
1170713
1171313
1171740
1172958
1173307
1173311
1173983
1175443
1176092
1176339
1176341
1176343
1176344
1176345
1176346
1176347
1176348
1176349
1176350
1176674
906079
CVE-2017-3136
CVE-2018-15664
CVE-2018-5741
CVE-2019-6477
CVE-2020-25595
CVE-2020-25596
CVE-2020-25597
CVE-2020-25598
CVE-2020-25599
CVE-2020-25600
CVE-2020-25601
CVE-2020-25602
CVE-2020-25603
CVE-2020-25604
CVE-2020-8616
CVE-2020-8617
CVE-2020-8618
CVE-2020-8619
CVE-2020-8620
CVE-2020-8621
CVE-2020-8622
CVE-2020-8623
CVE-2020-8624
openSUSE-SU-2020:1699-1
SUSE-SU-2019:1562-1
SUSE-SU-2020:2790-1
Platform(s):openSUSE Leap 15.2
SUSE Linux Enterprise Module for Basesystem 15 SP1
SUSE Linux Enterprise Module for Containers 15 SP1
Product(s):
Definition Synopsis
  • openSUSE Leap 15.2 is installed
  • AND Package Information
  • bind-9.16.6-lp152.14.3 is installed
  • OR bind-chrootenv-9.16.6-lp152.14.3 is installed
  • OR bind-devel-9.16.6-lp152.14.3 is installed
  • OR bind-devel-32bit-9.16.6-lp152.14.3 is installed
  • OR bind-doc-9.16.6-lp152.14.3 is installed
  • OR bind-utils-9.16.6-lp152.14.3 is installed
  • OR libbind9-1600-9.16.6-lp152.14.3 is installed
  • OR libbind9-1600-32bit-9.16.6-lp152.14.3 is installed
  • OR libdns1605-9.16.6-lp152.14.3 is installed
  • OR libdns1605-32bit-9.16.6-lp152.14.3 is installed
  • OR libirs-devel-9.16.6-lp152.14.3 is installed
  • OR libirs1601-9.16.6-lp152.14.3 is installed
  • OR libirs1601-32bit-9.16.6-lp152.14.3 is installed
  • OR libisc1606-9.16.6-lp152.14.3 is installed
  • OR libisc1606-32bit-9.16.6-lp152.14.3 is installed
  • OR libisccc1600-9.16.6-lp152.14.3 is installed
  • OR libisccc1600-32bit-9.16.6-lp152.14.3 is installed
  • OR libisccfg1600-9.16.6-lp152.14.3 is installed
  • OR libisccfg1600-32bit-9.16.6-lp152.14.3 is installed
  • OR libns1604-9.16.6-lp152.14.3 is installed
  • OR libns1604-32bit-9.16.6-lp152.14.3 is installed
  • OR libuv-1.18.0-lp152.4.3 is installed
  • OR libuv-devel-1.18.0-lp152.4.3 is installed
  • OR libuv1-1.18.0-lp152.4.3 is installed
  • OR libuv1-32bit-1.18.0-lp152.4.3 is installed
  • OR python3-bind-9.16.6-lp152.14.3 is installed
  • OR sysuser-shadow-2.0-lp152.5.3 is installed
  • OR sysuser-tools-2.0-lp152.5.3 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Basesystem 15 SP1 is installed
  • AND Package Information
  • xen-4.12.3_08-3.28 is installed
  • OR xen-libs-4.12.3_08-3.28 is installed
  • OR xen-tools-domU-4.12.3_08-3.28 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Module for Containers 15 SP1 is installed
  • AND Package Information
  • docker-18.09.6_ce-6.20 is installed
  • OR docker-bash-completion-18.09.6_ce-6.20 is installed
  • BACK