Oval Definition:oval:org.opensuse.security:def:69536
Revision Date:2021-09-03Version:1
Title:Security update for xen (Important)
Description:

This update for xen fixes the following issues:

- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378). - CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429). - CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433). - CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380). - CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373). - CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376). - CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434).

- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
Family:unixClass:patch
Status:Reference(s):1168326
1168352
1173576
1186429
1186433
1186434
1189373
1189376
1189378
1189380
1189882
CVE-2020-12417
CVE-2020-12418
CVE-2020-12419
CVE-2020-12420
CVE-2020-12421
CVE-2020-7064
CVE-2020-7066
CVE-2021-0089
CVE-2021-28690
CVE-2021-28692
CVE-2021-28694
CVE-2021-28695
CVE-2021-28696
CVE-2021-28697
CVE-2021-28698
CVE-2021-28699
SUSE-SU-2020:1199-1
SUSE-SU-2020:1900-1
Platform(s):SUSE Linux Enterprise Module for Web Scripting 15 SP1
SUSE Linux Enterprise Server 15-LTSS
SUSE Linux Enterprise Workstation Extension 15 SP1
Product(s):
Definition Synopsis
  • SUSE Linux Enterprise Module for Web Scripting 15 SP1 is installed
  • AND Package Information
  • apache2-mod_php7-7.2.5-4.55 is installed
  • OR libtidy5-5.4.0-3.2 is installed
  • OR php7-7.2.5-4.55 is installed
  • OR php7-bcmath-7.2.5-4.55 is installed
  • OR php7-bz2-7.2.5-4.55 is installed
  • OR php7-calendar-7.2.5-4.55 is installed
  • OR php7-ctype-7.2.5-4.55 is installed
  • OR php7-curl-7.2.5-4.55 is installed
  • OR php7-dba-7.2.5-4.55 is installed
  • OR php7-devel-7.2.5-4.55 is installed
  • OR php7-dom-7.2.5-4.55 is installed
  • OR php7-enchant-7.2.5-4.55 is installed
  • OR php7-exif-7.2.5-4.55 is installed
  • OR php7-fastcgi-7.2.5-4.55 is installed
  • OR php7-fileinfo-7.2.5-4.55 is installed
  • OR php7-fpm-7.2.5-4.55 is installed
  • OR php7-ftp-7.2.5-4.55 is installed
  • OR php7-gd-7.2.5-4.55 is installed
  • OR php7-gettext-7.2.5-4.55 is installed
  • OR php7-gmp-7.2.5-4.55 is installed
  • OR php7-iconv-7.2.5-4.55 is installed
  • OR php7-intl-7.2.5-4.55 is installed
  • OR php7-json-7.2.5-4.55 is installed
  • OR php7-ldap-7.2.5-4.55 is installed
  • OR php7-mbstring-7.2.5-4.55 is installed
  • OR php7-mysql-7.2.5-4.55 is installed
  • OR php7-odbc-7.2.5-4.55 is installed
  • OR php7-opcache-7.2.5-4.55 is installed
  • OR php7-openssl-7.2.5-4.55 is installed
  • OR php7-pcntl-7.2.5-4.55 is installed
  • OR php7-pdo-7.2.5-4.55 is installed
  • OR php7-pear-7.2.5-4.55 is installed
  • OR php7-pear-Archive_Tar-7.2.5-4.55 is installed
  • OR php7-pgsql-7.2.5-4.55 is installed
  • OR php7-phar-7.2.5-4.55 is installed
  • OR php7-posix-7.2.5-4.55 is installed
  • OR php7-readline-7.2.5-4.55 is installed
  • OR php7-shmop-7.2.5-4.55 is installed
  • OR php7-snmp-7.2.5-4.55 is installed
  • OR php7-soap-7.2.5-4.55 is installed
  • OR php7-sockets-7.2.5-4.55 is installed
  • OR php7-sodium-7.2.5-4.55 is installed
  • OR php7-sqlite-7.2.5-4.55 is installed
  • OR php7-sysvmsg-7.2.5-4.55 is installed
  • OR php7-sysvsem-7.2.5-4.55 is installed
  • OR php7-sysvshm-7.2.5-4.55 is installed
  • OR php7-tidy-7.2.5-4.55 is installed
  • OR php7-tokenizer-7.2.5-4.55 is installed
  • OR php7-wddx-7.2.5-4.55 is installed
  • OR php7-xmlreader-7.2.5-4.55 is installed
  • OR php7-xmlrpc-7.2.5-4.55 is installed
  • OR php7-xmlwriter-7.2.5-4.55 is installed
  • OR php7-xsl-7.2.5-4.55 is installed
  • OR php7-zip-7.2.5-4.55 is installed
  • OR php7-zlib-7.2.5-4.55 is installed
  • OR tidy-5.4.0-3.2 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Server 15-LTSS is installed
  • AND Package Information
  • xen-4.10.4_26-3.61.1 is installed
  • OR xen-devel-4.10.4_26-3.61.1 is installed
  • OR xen-libs-4.10.4_26-3.61.1 is installed
  • OR xen-tools-4.10.4_26-3.61.1 is installed
  • OR xen-tools-domU-4.10.4_26-3.61.1 is installed
  • Definition Synopsis
  • SUSE Linux Enterprise Workstation Extension 15 SP1 is installed
  • AND Package Information
  • MozillaThunderbird-68.10.0-3.88 is installed
  • OR MozillaThunderbird-translations-common-68.10.0-3.88 is installed
  • OR MozillaThunderbird-translations-other-68.10.0-3.88 is installed
  • BACK