Security update for xen
This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1163019 - CVE-2020-8608: potential OOB access due to unsafe snprintf() usages - bsc#1169392 - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy - bsc#1168140 - CVE-2020-11740, CVE-2020-11741: multiple xenoprof issues - bsc#1161181 - CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host - bsc#1157888 - CVE-2019-19579: Device quarantine for alternate pci assignment methods - bsc#1158004 - CVE-2019-19583: VMX: VMentry failure with debug exceptions and blocked states - bsc#1158005 - CVE-2019-19578: Linear pagetable use / entry miscounts - bsc#1158006 - CVE-2019-19580: Further issues with restartable PV type change operations - bsc#1158007 - CVE-2019-19577: dynamic height for the IOMMU pagetables - bsc#1154448 - CVE-2019-18420: VCPUOP_initialise DoS - bsc#1154456 - CVE-2019-18425: missing descriptor table limit checking in x86 PV emulation - bsc#1154458 - CVE-2019-18421: Issues with restartable PV type change operations - bsc#1154461 - CVE-2019-18424: passed through PCI devices may corrupt host memory after deassignment - bsc#1155945 - CVE-2018-12207: Machine Check Error Avoidance on Page Size Change (aka IFU issue) - bsc#1152497 - CVE-2019-11135: TSX Asynchronous Abort (TAA) issue
02 / AFFECTED SOFTWARE
Affected packages
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
This update for xen fixes the following issues: - bsc#1174543 - secure boot related fixes - bsc#1163019 - CVE-2020-8608: potential OOB access due to unsafe snprintf() usages - bsc#1169392 - CVE-2020-11742: Bad continuation handling in GNTTABOP_copy - bsc#1168140 - CVE-2020-11740, CVE-2020-11741: multiple xenoprof issues - bsc#1161181 - CVE-2020-7211: potential directory traversal using relative paths via tftp server on Windows host - bsc#1157888 - CVE-2019-19579: Device quarantine for alternate pci assignment methods - bsc#1158004 - CVE-2019-19583: VMX: VMentry failure with debug exceptions and blocked states - bsc#1158005 - CVE-2019-19578: Linear pagetable use / entry miscounts - bsc#1158006 - CVE-2019-19580: Further issues with restartable PV type change operations - bsc#1158007 - CVE-2019-19577: dynamic height for the IOMMU pagetables - bsc#1154448 - CVE-2019-18420: VCPUOP_initialise DoS - bsc#1154456 - CVE-2019-18425: missing descriptor table limit checking in x86 PV emulation - bsc#1154458 - CVE-2019-18421: Issues with restartable PV type change operations - bsc#1154461 - CVE-2019-18424: passed through PCI devices may corrupt host memory after deassignment - bsc#1155945 - CVE-2018-12207: Machine Check Error Avoidance on Page Size Change (aka IFU issue) - bsc#1152497 - CVE-2019-11135: TSX Asynchronous Abort (TAA) issue
05 / REFERENCES
Further evidence
- https://bugzilla.suse.com/1152497
- https://bugzilla.suse.com/1154448
- https://bugzilla.suse.com/1154456
- https://bugzilla.suse.com/1154458
- https://bugzilla.suse.com/1154461
- https://bugzilla.suse.com/1155945
- https://bugzilla.suse.com/1157888
- https://bugzilla.suse.com/1158004
- https://bugzilla.suse.com/1158005
- https://bugzilla.suse.com/1158006
- https://bugzilla.suse.com/1158007
- https://bugzilla.suse.com/1161181
- https://bugzilla.suse.com/1163019
- https://bugzilla.suse.com/1168140
- https://bugzilla.suse.com/1169392
- https://bugzilla.suse.com/1174543
- https://www.suse.com/security/cve/CVE-2018-12207
- https://www.suse.com/security/cve/CVE-2019-11135
- https://www.suse.com/security/cve/CVE-2019-18420
- https://www.suse.com/security/cve/CVE-2019-18421
- https://www.suse.com/security/cve/CVE-2019-18424
- https://www.suse.com/security/cve/CVE-2019-18425
- https://www.suse.com/security/cve/CVE-2019-19577
- https://www.suse.com/security/cve/CVE-2019-19578
- https://www.suse.com/security/cve/CVE-2019-19579
- https://www.suse.com/security/cve/CVE-2019-19580
- https://www.suse.com/security/cve/CVE-2019-19583
- https://www.suse.com/security/cve/CVE-2020-11740
- https://www.suse.com/security/cve/CVE-2020-11741
- https://www.suse.com/security/cve/CVE-2020-11742
- https://www.suse.com/security/cve/CVE-2020-7211
- https://www.suse.com/security/cve/CVE-2020-8608
- https://www.suse.com/support/update/announcement/2020/suse-su-202014444-1/