Alerts This Week
Warning Icon 1 905
Alerts This Week
Warning Icon 1 905

SUSE: 2020:1124-1 Important: Xen Multiple Security Fixes

suse
Calendar Grey April 28, 2020
Dist Suse Esm H88
The SUSE Security Patch tackles security concerns related to xen and delivers key remedies for exposed weaknesses.
An update that solves 5 vulnerabilities and has 7 fixes is now available

Summary

This update for xen fixes the following issues: Security issues fixed: - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy (bsc#1169392). - CVE-2020-11740, CVE-2020-11741: xen: XSA-313 multiple xenoprof issues (bsc#1168140). - CVE-2020-11739: Missing memory barriers in read-write unlock paths (bsc#1168142). - CVE-2020-11743: Bad error path in GNTTABOP_map_grant (bsc#1168143). - arm: a CPU may speculate past the ERET instruction (bsc#1160932). Non-security issues fixed: - Xenstored Crashed during VM install (bsc#1167152) - DomU hang: soft lockup CPU #0 stuck under high load (bsc#1165206, bsc#1134506) - Update API compatibility versions, fixes issues for libvirt. (bsc#1167007, bsc#1157490) - aacraid blocks xen commands (bsc#1155200) Patch Instructions:

Topics%20covered

Topics Covered

security advisory security issue DoS important system update xen SUSE Linux Enterprise

References

#1027519 #1134506 #1155200 #1157490 #1160932

#1165206 #1167007 #1167152 #1168140 #1168142

#1168143 #1169392

Cross- CVE-2020-11739 CVE-2020-11740 CVE-2020-11741

CVE-2020-11742 CVE-2020-11743

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15-SP1

SUSE Linux Enterprise Module for Open Buildservice Development Tools 15-SP1

SUSE Linux Enterprise Module for Basesystem 15-SP1

https://www.suse.com/security/cve/CVE-2020-11739.html

https://www.suse.com/security/cve/CVE-2020-11740.html

https://www.suse.com/security/cve/CVE-2020-11741.html

https://www.suse.com/security/cve/CVE-2020-11742.html

https://www.suse.com/security/cve/CVE-2020-11743.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1134506

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1124-1
Rating: important

Topics%20covered

Topics Covered

security advisory security issue DoS important system update xen SUSE Linux Enterprise

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here