Security update for xen
Announcement ID: | SUSE-SU-2022:2065-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves seven vulnerabilities can now be installed.
Description:
This update for xen fixes the following issues:
- CVE-2022-26358, CVE-2022-26359, CVE-2022-26360, CVE-2022-26361: Fixed IOMMU: RMRR (VT-d) and unity map (AMD-Vi) handling issues (XSA-400) (bsc#1197426)
- CVE-2022-26362: Fixed race condition in typeref acquisition (bsc#1199965)
- CVE-2022-26363, CVE-2022-26364: Fixed insufficient care with non-coherent mappings (bsc#1199966)
Special Instructions and Notes:
- Please reboot the system after installing this update.
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
openSUSE Leap 15.3
zypper in -t patch SUSE-2022-2065=1
-
Basesystem Module 15-SP3
zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-2065=1
-
Server Applications Module 15-SP3
zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-2065=1
-
SUSE Linux Enterprise Micro 5.1
zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-2065=1
-
SUSE Linux Enterprise Micro 5.2
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2065=1
-
SUSE Linux Enterprise Micro for Rancher 5.2
zypper in -t patch SUSE-SUSE-MicroOS-5.2-2022-2065=1
Package List:
-
openSUSE Leap 15.3 (aarch64 x86_64 i586)
- xen-libs-debuginfo-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
- xen-devel-4.14.5_02-150300.3.29.1
- xen-tools-domU-4.14.5_02-150300.3.29.1
- xen-tools-domU-debuginfo-4.14.5_02-150300.3.29.1
- xen-libs-4.14.5_02-150300.3.29.1
-
openSUSE Leap 15.3 (x86_64)
- xen-libs-32bit-4.14.5_02-150300.3.29.1
- xen-libs-32bit-debuginfo-4.14.5_02-150300.3.29.1
-
openSUSE Leap 15.3 (aarch64 x86_64)
- xen-tools-4.14.5_02-150300.3.29.1
- xen-4.14.5_02-150300.3.29.1
- xen-tools-debuginfo-4.14.5_02-150300.3.29.1
- xen-doc-html-4.14.5_02-150300.3.29.1
-
openSUSE Leap 15.3 (noarch)
- xen-tools-xendomains-wait-disk-4.14.5_02-150300.3.29.1
-
openSUSE Leap 15.3 (aarch64_ilp32)
- xen-libs-64bit-4.14.5_02-150300.3.29.1
- xen-libs-64bit-debuginfo-4.14.5_02-150300.3.29.1
-
Basesystem Module 15-SP3 (x86_64)
- xen-libs-debuginfo-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
- xen-tools-domU-4.14.5_02-150300.3.29.1
- xen-tools-domU-debuginfo-4.14.5_02-150300.3.29.1
- xen-libs-4.14.5_02-150300.3.29.1
-
Server Applications Module 15-SP3 (x86_64)
- xen-tools-4.14.5_02-150300.3.29.1
- xen-tools-debuginfo-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
- xen-devel-4.14.5_02-150300.3.29.1
- xen-4.14.5_02-150300.3.29.1
-
Server Applications Module 15-SP3 (noarch)
- xen-tools-xendomains-wait-disk-4.14.5_02-150300.3.29.1
-
SUSE Linux Enterprise Micro 5.1 (x86_64)
- xen-libs-debuginfo-4.14.5_02-150300.3.29.1
- xen-libs-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
-
SUSE Linux Enterprise Micro 5.2 (x86_64)
- xen-libs-debuginfo-4.14.5_02-150300.3.29.1
- xen-libs-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
-
SUSE Linux Enterprise Micro for Rancher 5.2 (x86_64)
- xen-libs-debuginfo-4.14.5_02-150300.3.29.1
- xen-libs-4.14.5_02-150300.3.29.1
- xen-debugsource-4.14.5_02-150300.3.29.1
References:
- https://www.suse.com/security/cve/CVE-2022-26358.html
- https://www.suse.com/security/cve/CVE-2022-26359.html
- https://www.suse.com/security/cve/CVE-2022-26360.html
- https://www.suse.com/security/cve/CVE-2022-26361.html
- https://www.suse.com/security/cve/CVE-2022-26362.html
- https://www.suse.com/security/cve/CVE-2022-26363.html
- https://www.suse.com/security/cve/CVE-2022-26364.html
- https://bugzilla.suse.com/show_bug.cgi?id=1027519
- https://bugzilla.suse.com/show_bug.cgi?id=1197426
- https://bugzilla.suse.com/show_bug.cgi?id=1199965
- https://bugzilla.suse.com/show_bug.cgi?id=1199966