Lucene search

K
suseSuseOPENSUSE-SU-2020:0985-1
HistoryJul 18, 2020 - 12:00 a.m.

Security update for xen (important)

2020-07-1800:00:00
lists.opensuse.org
49

0.001 Low

EPSS

Percentile

19.4%

An update that solves 5 vulnerabilities and has one errata
is now available.

Description:

This update for xen fixes the following issues:

  • CVE-2020-15563: Fixed inverted code paths in x86 dirty VRAM tracking
    (bsc#1173377).
  • CVE-2020-15565: Fixed insufficient cache write-back under VT-d
    (bsc#1173378).
  • CVE-2020-15566: Fixed incorrect error handling in event channel port
    allocation (bsc#1173376).
  • CVE-2020-15567: Fixed non-atomic modification of live EPT PTE
    (bsc#1173380).
  • CVE-2020-0543: Special Register Buffer Data Sampling (SRBDS) aka
    “CrossTalk” (bsc#1172205).

Additional upstream bug fixes (bsc#1027519)

This update was imported from the SUSE:SLE-15-SP2:Update update project.

Patch Instructions:

To install this openSUSE Security Update use the SUSE recommended installation methods
like YaST online_update or “zypper patch”.

Alternatively you can run the command listed for your product:

  • openSUSE Leap 15.2:

    zypper in -t patch openSUSE-2020-985=1

OSVersionArchitecturePackageVersionFilename
openSUSE Leap15.2i586< - openSUSE Leap 15.2 (i586 x86_64):- openSUSE Leap 15.2 (i586 x86_64):.i586.rpm
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (i586 x86_64):- openSUSE Leap 15.2 (i586 x86_64):.x86_64.rpm
openSUSE Leap15.2x86_64< - openSUSE Leap 15.2 (x86_64):- openSUSE Leap 15.2 (x86_64):.x86_64.rpm
openSUSE Leap15.2noarch< - openSUSE Leap 15.2 (noarch):- openSUSE Leap 15.2 (noarch):.noarch.rpm