Alerts This Week
Warning Icon 1 764
Alerts This Week
Warning Icon 1 764

SUSE: 2020:1609-1 Important: Xen Side Channel Attack Fix

suse
Calendar Grey June 11, 2020
Dist Suse Esm H88
Vital SUSE Safety Update for xen tackles side-channel vulnerabilities, providing essential remedies and update directives.
An update that solves one vulnerability and has three fixes is now available

Summary

This update for xen to version 4.12.3 fixes the following issues: - CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or "CrossTalk" (bsc#1172205). - Added support for new 64bit libxl memory API (bsc#1167007 and bsc#1157490). Patch Instructions: To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". Alternatively you can run the command listed for your product: - SUSE Linux Enterprise Module for Server Applications 15-SP1: zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP1-2020-1609=1 - SUSE Linux Enterprise Module for Basesystem 15-SP1:

Topics%20covered

Topics Covered

security advisory update important fixes SUSE xen side channel

References

#1027519 #1157490 #1167007 #1172205

Cross- CVE-2020-0543

Affected Products:

SUSE Linux Enterprise Module for Server Applications 15-SP1

SUSE Linux Enterprise Module for Basesystem 15-SP1

https://www.suse.com/security/cve/CVE-2020-0543.html

https://bugzilla.suse.com/1027519

https://bugzilla.suse.com/1157490

https://bugzilla.suse.com/1167007

https://bugzilla.suse.com/1172205

Severity
important
Lowest
Low
Medium
High
Critical

Announcement ID: SUSE-SU-2020:1609-1
Rating: important

Topics%20covered

Topics Covered

security advisory update important fixes SUSE xen side channel

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here