openSUSE Leap 42.3: openSUSE-SU-2018:1274-1 critical: xen Denial Of Service

This update for xen to version 4.9.2 fixes several issues.

This feature was added:

- Added script, udev rule and systemd service to watch for vcpu

online/offline events in a HVM domU. They are triggered via 'xl vcpu-set

domU N'

These security issues were fixed:

- CVE-2018-8897: Prevent mishandling of debug exceptions on x86 (XSA-260,

bsc#1090820)

- Handle HPET timers in IO-APIC mode correctly to prevent malicious or

buggy HVM guests from causing a hypervisor crash or potentially

privilege escalation/information leaks (XSA-261, bsc#1090822)

- Prevent unbounded loop, induced by qemu allowing an attacker to

permanently keep a physical CPU core busy (XSA-262, bsc#1090823)

- CVE-2018-10472: x86 HVM guest OS users (in certain configurations) were

able to read arbitrary dom0 files via QMP live insertion of a CDROM, in

conjunction with specifying the target file as the backing file of a

snapshot (bsc#1089152).

-...