Security update for xen

Announcement ID:	SUSE-SU-2020:2789-1
Rating:	important
References:	bsc#1176343 bsc#1176344 bsc#1176345 bsc#1176346 bsc#1176347 bsc#1176348 bsc#1176349 bsc#1176350
Cross-References:	CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25603 CVE-2020-25604
CVSS scores:	CVE-2020-25595 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25596 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25596 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25597 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25597 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25599 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2020-25599 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25600 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2020-25600 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25601 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25601 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25603 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25603 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25604 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25604 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:	SUSE Linux Enterprise High Performance Computing 15 SUSE Linux Enterprise High Performance Computing 15 LTSS 15 SUSE Linux Enterprise Server 15 SUSE Linux Enterprise Server 15 LTSS 15 SUSE Linux Enterprise Server ESPOS 15 SUSE Linux Enterprise Server for SAP Applications 15

An update that solves eight vulnerabilities can now be installed.

Description:

This update for xen fixes the following issues:

• CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
• CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
• CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
• CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
• CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
• CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
• CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
• CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Server ESPOS 15
  zypper in -t patch SUSE-SLE-Product-HPC-15-2020-2789=1
• SUSE Linux Enterprise High Performance Computing 15 LTSS 15
  zypper in -t patch SUSE-SLE-Product-HPC-15-2020-2789=1
• SUSE Linux Enterprise Server 15 LTSS 15
  zypper in -t patch SUSE-SLE-Product-SLES-15-2020-2789=1
• SUSE Linux Enterprise Server for SAP Applications 15
  zypper in -t patch SUSE-SLE-Product-SLES_SAP-15-2020-2789=1

Package List:

• SUSE Linux Enterprise Server ESPOS 15 (x86_64)
  • xen-tools-debuginfo-4.10.4_16-3.41.1
  • xen-tools-domU-debuginfo-4.10.4_16-3.41.1
  • xen-libs-4.10.4_16-3.41.1
  • xen-debugsource-4.10.4_16-3.41.1
  • xen-4.10.4_16-3.41.1
  • xen-libs-debuginfo-4.10.4_16-3.41.1
  • xen-devel-4.10.4_16-3.41.1
  • xen-tools-domU-4.10.4_16-3.41.1
  • xen-tools-4.10.4_16-3.41.1
• SUSE Linux Enterprise High Performance Computing 15 LTSS 15 (x86_64)
  • xen-tools-debuginfo-4.10.4_16-3.41.1
  • xen-tools-domU-debuginfo-4.10.4_16-3.41.1
  • xen-libs-4.10.4_16-3.41.1
  • xen-debugsource-4.10.4_16-3.41.1
  • xen-4.10.4_16-3.41.1
  • xen-libs-debuginfo-4.10.4_16-3.41.1
  • xen-devel-4.10.4_16-3.41.1
  • xen-tools-domU-4.10.4_16-3.41.1
  • xen-tools-4.10.4_16-3.41.1
• SUSE Linux Enterprise Server 15 LTSS 15 (x86_64)
  • xen-tools-debuginfo-4.10.4_16-3.41.1
  • xen-tools-domU-debuginfo-4.10.4_16-3.41.1
  • xen-libs-4.10.4_16-3.41.1
  • xen-debugsource-4.10.4_16-3.41.1
  • xen-4.10.4_16-3.41.1
  • xen-libs-debuginfo-4.10.4_16-3.41.1
  • xen-devel-4.10.4_16-3.41.1
  • xen-tools-domU-4.10.4_16-3.41.1
  • xen-tools-4.10.4_16-3.41.1
• SUSE Linux Enterprise Server for SAP Applications 15 (x86_64)
  • xen-tools-debuginfo-4.10.4_16-3.41.1
  • xen-tools-domU-debuginfo-4.10.4_16-3.41.1
  • xen-libs-4.10.4_16-3.41.1
  • xen-debugsource-4.10.4_16-3.41.1
  • xen-4.10.4_16-3.41.1
  • xen-libs-debuginfo-4.10.4_16-3.41.1
  • xen-devel-4.10.4_16-3.41.1
  • xen-tools-domU-4.10.4_16-3.41.1
  • xen-tools-4.10.4_16-3.41.1

References:

• https://www.suse.com/security/cve/CVE-2020-25595.html
• https://www.suse.com/security/cve/CVE-2020-25596.html
• https://www.suse.com/security/cve/CVE-2020-25597.html
• https://www.suse.com/security/cve/CVE-2020-25599.html
• https://www.suse.com/security/cve/CVE-2020-25600.html
• https://www.suse.com/security/cve/CVE-2020-25601.html
• https://www.suse.com/security/cve/CVE-2020-25603.html
• https://www.suse.com/security/cve/CVE-2020-25604.html
• https://bugzilla.suse.com/show_bug.cgi?id=1176343
• https://bugzilla.suse.com/show_bug.cgi?id=1176344
• https://bugzilla.suse.com/show_bug.cgi?id=1176345
• https://bugzilla.suse.com/show_bug.cgi?id=1176346
• https://bugzilla.suse.com/show_bug.cgi?id=1176347
• https://bugzilla.suse.com/show_bug.cgi?id=1176348
• https://bugzilla.suse.com/show_bug.cgi?id=1176349
• https://bugzilla.suse.com/show_bug.cgi?id=1176350