Security update for xen
Announcement ID: | SUSE-SU-2021:2957-1 |
---|---|
Rating: | important |
References: | |
Cross-References: | |
CVSS scores: |
|
Affected Products: |
|
An update that solves 13 vulnerabilities can now be installed.
Description:
This update for xen fixes the following issues:
- CVE-2021-3594: slirp: invalid pointer initialization may lead to information disclosure (udp)(bsc#1187378).
- CVE-2021-3595: slirp: invalid pointer initialization may lead to information disclosure (tftp)(bsc#1187376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-20255: Fixed stack overflow via infinite recursion in eepro100 (bsc#1182654)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
-
CVE-2021-3592: slirp: invalid pointer initialization may lead to information disclosure (bootp)(bsc#1187369).
-
Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
Patch Instructions:
To install this SUSE update use the SUSE recommended
installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:
-
HPE Helion OpenStack 8
zypper in -t patch HPE-Helion-OpenStack-8-2021-2957=1
-
SUSE OpenStack Cloud 8
zypper in -t patch SUSE-OpenStack-Cloud-8-2021-2957=1
-
SUSE OpenStack Cloud Crowbar 8
zypper in -t patch SUSE-OpenStack-Cloud-Crowbar-8-2021-2957=1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP3
zypper in -t patch SUSE-SLE-SAP-12-SP3-2021-2957=1
-
SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3
zypper in -t patch SUSE-SLE-SERVER-12-SP3-BCL-2021-2957=1
-
SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3
zypper in -t patch SUSE-SLE-SERVER-12-SP3-ESPOS-2021-2957=1
-
SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3
zypper in -t patch SUSE-SLE-SERVER-12-SP3-2021-2957=1
Package List:
-
HPE Helion OpenStack 8 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE OpenStack Cloud 8 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE OpenStack Cloud Crowbar 8 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE Linux Enterprise Server for SAP Applications 12 SP3 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE Linux Enterprise Server 12 SP3 BCL 12-SP3 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE Linux Enterprise Server 12 SP3 ESPOS 12-SP3 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
-
SUSE Linux Enterprise Server 12 SP3 LTSS 12-SP3 (x86_64)
- xen-tools-4.9.4_20-3.91.1
- xen-libs-debuginfo-32bit-4.9.4_20-3.91.1
- xen-tools-debuginfo-4.9.4_20-3.91.1
- xen-libs-32bit-4.9.4_20-3.91.1
- xen-4.9.4_20-3.91.1
- xen-tools-domU-4.9.4_20-3.91.1
- xen-tools-domU-debuginfo-4.9.4_20-3.91.1
- xen-debugsource-4.9.4_20-3.91.1
- xen-libs-debuginfo-4.9.4_20-3.91.1
- xen-doc-html-4.9.4_20-3.91.1
- xen-libs-4.9.4_20-3.91.1
References:
- https://www.suse.com/security/cve/CVE-2021-0089.html
- https://www.suse.com/security/cve/CVE-2021-20255.html
- https://www.suse.com/security/cve/CVE-2021-28690.html
- https://www.suse.com/security/cve/CVE-2021-28692.html
- https://www.suse.com/security/cve/CVE-2021-28694.html
- https://www.suse.com/security/cve/CVE-2021-28695.html
- https://www.suse.com/security/cve/CVE-2021-28696.html
- https://www.suse.com/security/cve/CVE-2021-28697.html
- https://www.suse.com/security/cve/CVE-2021-28698.html
- https://www.suse.com/security/cve/CVE-2021-28699.html
- https://www.suse.com/security/cve/CVE-2021-3592.html
- https://www.suse.com/security/cve/CVE-2021-3594.html
- https://www.suse.com/security/cve/CVE-2021-3595.html
- https://bugzilla.suse.com/show_bug.cgi?id=1182654
- https://bugzilla.suse.com/show_bug.cgi?id=1186429
- https://bugzilla.suse.com/show_bug.cgi?id=1186433
- https://bugzilla.suse.com/show_bug.cgi?id=1186434
- https://bugzilla.suse.com/show_bug.cgi?id=1187369
- https://bugzilla.suse.com/show_bug.cgi?id=1187376
- https://bugzilla.suse.com/show_bug.cgi?id=1187378
- https://bugzilla.suse.com/show_bug.cgi?id=1189373
- https://bugzilla.suse.com/show_bug.cgi?id=1189376
- https://bugzilla.suse.com/show_bug.cgi?id=1189378
- https://bugzilla.suse.com/show_bug.cgi?id=1189380
- https://bugzilla.suse.com/show_bug.cgi?id=1189882