openSUSE Leap 15.1: 2020:0599-1 Important: Xen Security Issues Fixed
opensuse
May 1, 2020
An update that solves 5 vulnerabilities and has 7 fixes is now available.
Description
This update for xen fixes the following issues:
Security issues fixed:
- CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392).
- CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues
(bsc#1168140).
- CVE-2020-11739: Missing memory barriers in read-write unlock paths
(bsc#1168142).
- CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143).
- arm: a CPU may speculate past the ERET instruction (bsc#1160932).
Non-security issues fixed:
- Xenstored Crashed during VM install (bsc#1167152)
- DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206,
bsc#1134506)
- Update API compatibility versions, fixes issues for libvirt.
(bsc#1167007, bsc#1157490)
- aacraid blocks xen commands (bsc#1155200)
This update was imported from the SUSE:SLE-15-SP1:Update update project.
Topics Covered
Patch
Patch Instructions:
To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
- openSUSE Leap 15.1:
zypper in -t patch openSUSE-2020-599=1
Package List
- openSUSE Leap 15.1 (i586 x86_64):
xen-debugsource-4.12.2_04-lp151.2.15.1
xen-devel-4.12.2_04-lp151.2.15.1
xen-libs-4.12.2_04-lp151.2.15.1
xen-libs-debuginfo-4.12.2_04-lp151.2.15.1
xen-tools-domU-4.12.2_04-lp151.2.15.1
xen-tools-domU-debuginfo-4.12.2_04-lp151.2.15.1
- openSUSE Leap 15.1 (x86_64):
xen-4.12.2_04-lp151.2.15.1
xen-doc-html-4.12.2_04-lp151.2.15.1
xen-libs-32bit-4.12.2_04-lp151.2.15.1
xen-libs-32bit-debuginfo-4.12.2_04-lp151.2.15.1
xen-tools-4.12.2_04-lp151.2.15.1
xen-tools-debuginfo-4.12.2_04-lp151.2.15.1
References
https://www.suse.com/security/cve/CVE-2020-11739.html
https://www.suse.com/security/cve/CVE-2020-11740.html
https://www.suse.com/security/cve/CVE-2020-11741.html
https://www.suse.com/security/cve/CVE-2020-11742.html
https://www.suse.com/security/cve/CVE-2020-11743.html
https://bugzilla.suse.com/1027519
https://bugzilla.suse.com/1134506
https://bugzilla.suse.com/1155200
https://bugzilla.suse.com/1157490
https://bugzilla.suse.com/1160932
https://bugzilla.suse.com/1165206
https://bugzilla.suse.com/1167007
https://bugzilla.suse.com/1167152
https://bugzilla.suse.com/1168140
https://bugzilla.suse.com/1168142
https://bugzilla.suse.com/1168143
https://bugzilla.suse.com/1169392
--
PREVIOUS
NEXT
Severity
important
Lowest
Low
Medium
High
Critical
Announcement ID: openSUSE-SU-2020:0599-1
Rating: important
Affected Products:
openSUSE Leap 15.1
le.
Topics Covered
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!