openSUSE Security Update: Security update for xen
______________________________________________________________________________

Announcement ID: openSUSE-SU-2020:1844-1
Rating: important
References: #1177409 #1177412 #1177413 #1177414
Cross-References: CVE-2020-27670 CVE-2020-27671 CVE-2020-27672
CVE-2020-27673
Affected Products:
openSUSE Leap 15.1
______________________________________________________________________________

An update that fixes four vulnerabilities is now available.

Description:

This update for xen fixes the following issues:

– bsc#1177409 – VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like
flushes may leave stale TLB entries (XSA-286)
– bsc#1177412 – VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping
code (XSA-345)
– bsc#1177413 – VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB
flushes (XSA-346)
– bsc#1177414 – VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table
updates (XSA-347)

This update was imported from the SUSE:SLE-15-SP1:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

– openSUSE Leap 15.1:

zypper in -t patch openSUSE-2020-1844=1

Package List:

– openSUSE Leap 15.1 (i586 x86_64):

xen-debugsource-4.12.3_10-lp151.2.27.1
xen-devel-4.12.3_10-lp151.2.27.1
xen-libs-4.12.3_10-lp151.2.27.1
xen-libs-debuginfo-4.12.3_10-lp151.2.27.1
xen-tools-domU-4.12.3_10-lp151.2.27.1
xen-tools-domU-debuginfo-4.12.3_10-lp151.2.27.1

– openSUSE Leap 15.1 (x86_64):

xen-4.12.3_10-lp151.2.27.1
xen-doc-html-4.12.3_10-lp151.2.27.1
xen-libs-32bit-4.12.3_10-lp151.2.27.1
xen-libs-32bit-debuginfo-4.12.3_10-lp151.2.27.1
xen-tools-4.12.3_10-lp151.2.27.1
xen-tools-debuginfo-4.12.3_10-lp151.2.27.1

References:

https://protect2.fireeye.com/v1/url?k=abc7f04d-f45bea53-abc06d81-000babd90757-ccf46c3e05c6c3d2&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2020-27670.html
https://protect2.fireeye.com/v1/url?k=f29a10a3-ad060abd-f29d8d6f-000babd90757-12b345a4b54e5566&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2020-27671.html
https://protect2.fireeye.com/v1/url?k=d870ed1d-87ecf703-d87770d1-000babd90757-8e17a7849ea0889a&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2020-27672.html
https://protect2.fireeye.com/v1/url?k=adf7c3e3-f26bd9fd-adf05e2f-000babd90757-af50f10fea598b79&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fwww.suse.com%2Fsecurity%2Fcve%2FCVE-2020-27673.html
https://protect2.fireeye.com/v1/url?k=ea77ee1a-b5ebf404-ea7073d6-000babd90757-90bc8c76c467728f&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fbugzilla.suse.com%2F1177409
https://protect2.fireeye.com/v1/url?k=02988488-5d049e96-029f1944-000babd90757-ab86979824601b3b&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fbugzilla.suse.com%2F1177412
https://protect2.fireeye.com/v1/url?k=df99e931-8005f32f-df9e74fd-000babd90757-5f3c7f718ab99c80&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fbugzilla.suse.com%2F1177413
https://protect2.fireeye.com/v1/url?k=c1ac5446-9e304e58-c1abc98a-000babd90757-35a78cad0496ecab&q=1&e=d5c508b6-4f57-475d-b65f-3bd24dfbf227&u=https%3A%2F%2Fbugzilla.suse.com%2F1177414

—
To unsubscribe, e-mail: opensuse-security-announce+unsubscribe@opensuse.org
For additional commands, e-mail: opensuse-security-announce+help@opensuse.org