Security update for xen

Announcement ID:	SUSE-SU-2020:2788-1
Rating:	important
References:	bsc#1027519 bsc#1175534 bsc#1176339 bsc#1176341 bsc#1176343 bsc#1176344 bsc#1176345 bsc#1176346 bsc#1176347 bsc#1176348 bsc#1176349 bsc#1176350
Cross-References:	CVE-2020-14364 CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25598 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25602 CVE-2020-25603 CVE-2020-25604
CVSS scores:	CVE-2020-14364 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-14364 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-25595 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25596 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25596 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25597 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25597 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25598 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25598 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25599 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2020-25599 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25600 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2020-25600 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25601 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25601 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25602 ( SUSE ): 6.2 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVE-2020-25602 ( NVD ): 6.0 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:N/I:N/A:H CVE-2020-25603 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25603 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25604 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25604 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:	SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE Linux Enterprise Software Development Kit 12 SP5

An update that solves 11 vulnerabilities and has one security fix can now be installed.

Description:

This update for xen fixes the following issues:

• CVE-2020-25602: Fixed an issue where there was a crash when handling guest access to MSR_MISC_ENABLE was thrown (bsc#1176339,XSA-333)
• CVE-2020-25598: Added a missing unlock in XENMEM_acquire_resource error path (bsc#1176341,XSA-334)
• CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
• CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
• CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
• CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
• CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
• CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
• CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
• CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
• CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
• Various bug fixes (bsc#1027519)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE Linux Enterprise Software Development Kit 12 SP5
  zypper in -t patch SUSE-SLE-SDK-12-SP5-2020-2788=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-2788=1
• SUSE Linux Enterprise High Performance Computing 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-2788=1
• SUSE Linux Enterprise Server 12 SP5
  zypper in -t patch SUSE-SLE-SERVER-12-SP5-2020-2788=1

Package List:

• SUSE Linux Enterprise Software Development Kit 12 SP5 (aarch64 x86_64)
  • xen-debugsource-4.12.3_08-3.24.1
  • xen-devel-4.12.3_08-3.24.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP5 (x86_64)
  • xen-doc-html-4.12.3_08-3.24.1
  • xen-tools-4.12.3_08-3.24.1
  • xen-libs-debuginfo-4.12.3_08-3.24.1
  • xen-tools-domU-debuginfo-4.12.3_08-3.24.1
  • xen-4.12.3_08-3.24.1
  • xen-debugsource-4.12.3_08-3.24.1
  • xen-libs-32bit-4.12.3_08-3.24.1
  • xen-tools-debuginfo-4.12.3_08-3.24.1
  • xen-libs-4.12.3_08-3.24.1
  • xen-tools-domU-4.12.3_08-3.24.1
  • xen-libs-debuginfo-32bit-4.12.3_08-3.24.1
• SUSE Linux Enterprise High Performance Computing 12 SP5 (x86_64)
  • xen-doc-html-4.12.3_08-3.24.1
  • xen-tools-4.12.3_08-3.24.1
  • xen-libs-debuginfo-4.12.3_08-3.24.1
  • xen-tools-domU-debuginfo-4.12.3_08-3.24.1
  • xen-4.12.3_08-3.24.1
  • xen-debugsource-4.12.3_08-3.24.1
  • xen-libs-32bit-4.12.3_08-3.24.1
  • xen-tools-debuginfo-4.12.3_08-3.24.1
  • xen-libs-4.12.3_08-3.24.1
  • xen-tools-domU-4.12.3_08-3.24.1
  • xen-libs-debuginfo-32bit-4.12.3_08-3.24.1
• SUSE Linux Enterprise Server 12 SP5 (x86_64)
  • xen-doc-html-4.12.3_08-3.24.1
  • xen-tools-4.12.3_08-3.24.1
  • xen-libs-debuginfo-4.12.3_08-3.24.1
  • xen-tools-domU-debuginfo-4.12.3_08-3.24.1
  • xen-4.12.3_08-3.24.1
  • xen-debugsource-4.12.3_08-3.24.1
  • xen-libs-32bit-4.12.3_08-3.24.1
  • xen-tools-debuginfo-4.12.3_08-3.24.1
  • xen-libs-4.12.3_08-3.24.1
  • xen-tools-domU-4.12.3_08-3.24.1
  • xen-libs-debuginfo-32bit-4.12.3_08-3.24.1

References:

• https://www.suse.com/security/cve/CVE-2020-14364.html
• https://www.suse.com/security/cve/CVE-2020-25595.html
• https://www.suse.com/security/cve/CVE-2020-25596.html
• https://www.suse.com/security/cve/CVE-2020-25597.html
• https://www.suse.com/security/cve/CVE-2020-25598.html
• https://www.suse.com/security/cve/CVE-2020-25599.html
• https://www.suse.com/security/cve/CVE-2020-25600.html
• https://www.suse.com/security/cve/CVE-2020-25601.html
• https://www.suse.com/security/cve/CVE-2020-25602.html
• https://www.suse.com/security/cve/CVE-2020-25603.html
• https://www.suse.com/security/cve/CVE-2020-25604.html
• https://bugzilla.suse.com/show_bug.cgi?id=1027519
• https://bugzilla.suse.com/show_bug.cgi?id=1175534
• https://bugzilla.suse.com/show_bug.cgi?id=1176339
• https://bugzilla.suse.com/show_bug.cgi?id=1176341
• https://bugzilla.suse.com/show_bug.cgi?id=1176343
• https://bugzilla.suse.com/show_bug.cgi?id=1176344
• https://bugzilla.suse.com/show_bug.cgi?id=1176345
• https://bugzilla.suse.com/show_bug.cgi?id=1176346
• https://bugzilla.suse.com/show_bug.cgi?id=1176347
• https://bugzilla.suse.com/show_bug.cgi?id=1176348
• https://bugzilla.suse.com/show_bug.cgi?id=1176349
• https://bugzilla.suse.com/show_bug.cgi?id=1176350