Security update for xen

Announcement ID:	SUSE-SU-2020:2822-1
Rating:	important
References:	bsc#1172205 bsc#1173378 bsc#1173380 bsc#1175534 bsc#1176343 bsc#1176344 bsc#1176345 bsc#1176346 bsc#1176347 bsc#1176348 bsc#1176349 bsc#1176350
Cross-References:	CVE-2020-0543 CVE-2020-14364 CVE-2020-15565 CVE-2020-15567 CVE-2020-25595 CVE-2020-25596 CVE-2020-25597 CVE-2020-25599 CVE-2020-25600 CVE-2020-25601 CVE-2020-25603 CVE-2020-25604
CVSS scores:	CVE-2020-0543 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N CVE-2020-0543 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVE-2020-14364 ( SUSE ): 5.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-14364 ( NVD ): 5.0 CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:C/C:L/I:L/A:L CVE-2020-15565 ( SUSE ): 7.9 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:H CVE-2020-15565 ( NVD ): 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-15567 ( SUSE ): 6.4 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:N/I:L/A:H CVE-2020-15567 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25595 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25595 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25596 ( SUSE ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25596 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25597 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25597 ( NVD ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25599 ( SUSE ): 8.2 CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H CVE-2020-25599 ( NVD ): 7.0 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25600 ( SUSE ): 7.1 CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H CVE-2020-25600 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25601 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25601 ( NVD ): 5.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H CVE-2020-25603 ( SUSE ): 7.8 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H CVE-2020-25603 ( NVD ): 7.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVE-2020-25604 ( SUSE ): 6.5 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:N/A:H CVE-2020-25604 ( NVD ): 4.7 CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:H
Affected Products:	SUSE Linux Enterprise High Performance Computing 12 SP2 SUSE Linux Enterprise High Performance Computing 12 SP3 SUSE Linux Enterprise High Performance Computing 12 SP4 SUSE Linux Enterprise High Performance Computing 12 SP5 SUSE Linux Enterprise Point of Service Image Server 12 12-SP2 SUSE Linux Enterprise Server 12 SP2 SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2 SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server 12 SP5 SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP5 SUSE OpenStack Cloud 7

An update that solves 12 vulnerabilities can now be installed.

Description:

This update for xen fixes the following issues:

• CVE-2020-25604: Fixed a race condition when migrating timers between x86 HVM vCPU-s (bsc#1176343,XSA-336)
• CVE-2020-25595: Fixed an issue where PCI passthrough code was reading back hardware registers (bsc#1176344,XSA-337)
• CVE-2020-25597: Fixed an issue where a valid event channels may not turn invalid (bsc#1176346,XSA-338)
• CVE-2020-25596: Fixed a potential denial of service in x86 pv guest kernel via SYSENTER (bsc#1176345,XSA-339)
• CVE-2020-25603: Fixed an issue due to missing barriers when accessing/allocating an event channel (bsc#1176347,XSA-340)
• CVE-2020-25600: Fixed out of bounds event channels available to 32-bit x86 domains (bsc#1176348,XSA-342)
• CVE-2020-25599: Fixed race conditions with evtchn_reset() (bsc#1176349,XSA-343)
• CVE-2020-25601: Fixed an issue due to lack of preemption in evtchn_reset() / evtchn_destroy() (bsc#1176350,XSA-344)
• CVE-2020-14364: Fixed an out-of-bounds read/write access while processing usb packets (bsc#1175534).
• CVE-2020-0543: Fixed a leak of Special Register Buffer Data Sampling (SRBDS) aka "CrossTalk" (bsc#1172205,XSA-320)
• CVE-2020-15565: Fixed an issue cache write (bsc#1173378,XSA-321).
• CVE-2020-15567: Fixed an issue with non-atomic modification of live EPT PTE (bsc#1173380,XSA-328)

Patch Instructions:

To install this SUSE update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

• SUSE OpenStack Cloud 7
  zypper in -t patch SUSE-OpenStack-Cloud-7-2020-2822=1
• SUSE Linux Enterprise Point of Service Image Server 12 12-SP2
  zypper in -t patch SUSE-SLE-POS-12-SP2-CLIENT-2020-2822=1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2
  zypper in -t patch SUSE-SLE-SAP-12-SP2-2020-2822=1
• SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-BCL-2020-2822=1
• SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-ESPOS-2020-2822=1
• SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2
  zypper in -t patch SUSE-SLE-SERVER-12-SP2-2020-2822=1

Package List:

• SUSE OpenStack Cloud 7 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1
• SUSE Linux Enterprise Point of Service Image Server 12 12-SP2 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1
• SUSE Linux Enterprise Server for SAP Applications 12 SP2 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1
• SUSE Linux Enterprise Server 12 SP2 BCL 12-SP2 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1
• SUSE Linux Enterprise Server 12 SP2 ESPOS 12-SP2 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1
• SUSE Linux Enterprise Server 12 SP2 LTSS 12-SP2 (x86_64)
  • xen-libs-4.7.6_10-43.67.1
  • xen-libs-debuginfo-32bit-4.7.6_10-43.67.1
  • xen-tools-debuginfo-4.7.6_10-43.67.1
  • xen-4.7.6_10-43.67.1
  • xen-tools-4.7.6_10-43.67.1
  • xen-doc-html-4.7.6_10-43.67.1
  • xen-libs-debuginfo-4.7.6_10-43.67.1
  • xen-debugsource-4.7.6_10-43.67.1
  • xen-tools-domU-debuginfo-4.7.6_10-43.67.1
  • xen-libs-32bit-4.7.6_10-43.67.1
  • xen-tools-domU-4.7.6_10-43.67.1

References:

• https://www.suse.com/security/cve/CVE-2020-0543.html
• https://www.suse.com/security/cve/CVE-2020-14364.html
• https://www.suse.com/security/cve/CVE-2020-15565.html
• https://www.suse.com/security/cve/CVE-2020-15567.html
• https://www.suse.com/security/cve/CVE-2020-25595.html
• https://www.suse.com/security/cve/CVE-2020-25596.html
• https://www.suse.com/security/cve/CVE-2020-25597.html
• https://www.suse.com/security/cve/CVE-2020-25599.html
• https://www.suse.com/security/cve/CVE-2020-25600.html
• https://www.suse.com/security/cve/CVE-2020-25601.html
• https://www.suse.com/security/cve/CVE-2020-25603.html
• https://www.suse.com/security/cve/CVE-2020-25604.html
• https://bugzilla.suse.com/show_bug.cgi?id=1172205
• https://bugzilla.suse.com/show_bug.cgi?id=1173378
• https://bugzilla.suse.com/show_bug.cgi?id=1173380
• https://bugzilla.suse.com/show_bug.cgi?id=1175534
• https://bugzilla.suse.com/show_bug.cgi?id=1176343
• https://bugzilla.suse.com/show_bug.cgi?id=1176344
• https://bugzilla.suse.com/show_bug.cgi?id=1176345
• https://bugzilla.suse.com/show_bug.cgi?id=1176346
• https://bugzilla.suse.com/show_bug.cgi?id=1176347
• https://bugzilla.suse.com/show_bug.cgi?id=1176348
• https://bugzilla.suse.com/show_bug.cgi?id=1176349
• https://bugzilla.suse.com/show_bug.cgi?id=1176350