Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2018:1456-1 Final 1 1 2018-05-29T05:35:57Z current 2018-05-29T05:35:57Z 2018-05-29T05:35:57Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: Security issues fixed: - CVE-2018-3639: Spectre V4 – Speculative Store Bypass aka 'Memory Disambiguation' (bsc#1092631) This feature can be controlled by the 'ssbd=on/off' commandline flag for the XEN hypervisor. - CVE-2018-10982: x86 vHPET interrupt injection errors (XSA-261 bsc#1090822) - CVE-2018-10981: qemu may drive Xen into unbounded loop (XSA-262 bsc#1090823) Other bugfixes: - Upstream patches from Jan (bsc#1027519) - additional fixes related to Page Table Isolation (XPTI). (bsc#1074562 XSA-254) - qemu-system-i386 cannot handle more than 4 HW NICs (bsc#1090296) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-SLE-DESKTOP-12-SP3-2018-996,SUSE-SLE-SDK-12-SP3-2018-996,SUSE-SLE-SERVER-12-SP3-2018-996 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2018/suse-su-20181456-1/ Link for SUSE-SU-2018:1456-1 https://lists.suse.com/pipermail/sle-security-updates/2018-May/004096.html E-Mail link for SUSE-SU-2018:1456-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027519 SUSE Bug 1027519 https://bugzilla.suse.com/1074562 SUSE Bug 1074562 https://bugzilla.suse.com/1090296 SUSE Bug 1090296 https://bugzilla.suse.com/1090822 SUSE Bug 1090822 https://bugzilla.suse.com/1090823 SUSE Bug 1090823 https://bugzilla.suse.com/1092631 SUSE Bug 1092631 https://www.suse.com/security/cve/CVE-2018-10981/ SUSE CVE CVE-2018-10981 page https://www.suse.com/security/cve/CVE-2018-10982/ SUSE CVE CVE-2018-10982 page https://www.suse.com/security/cve/CVE-2018-3639/ SUSE CVE CVE-2018-3639 page SUSE Linux Enterprise Desktop 12 SP3 SUSE Linux Enterprise Server 12 SP3 SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE Linux Enterprise Software Development Kit 12 SP3 xen-4.9.2_06-3.32.1 xen-libs-4.9.2_06-3.32.1 xen-libs-32bit-4.9.2_06-3.32.1 xen-devel-4.9.2_06-3.32.1 xen-doc-html-4.9.2_06-3.32.1 xen-tools-4.9.2_06-3.32.1 xen-tools-domU-4.9.2_06-3.32.1 xen-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-libs-32bit-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Desktop 12 SP3 xen-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-doc-html-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-libs-32bit-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-tools-domU-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server 12 SP3 xen-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-doc-html-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-32bit-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-domU-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-devel-4.9.2_06-3.32.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP3 An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (host OS infinite loop) in situations where a QEMU device model attempts to make invalid transitions between states of a request. CVE-2018-10981 SUSE Linux Enterprise Desktop 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Software Development Kit 12 SP3:xen-devel-4.9.2_06-3.32.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181456-1/ https://www.suse.com/security/cve/CVE-2018-10981.html CVE-2018-10981 https://bugzilla.suse.com/1090823 SUSE Bug 1090823 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.10.x allowing x86 HVM guest OS users to cause a denial of service (unexpectedly high interrupt number, array overrun, and hypervisor crash) or possibly gain hypervisor privileges by setting up an HPET timer to deliver interrupts in IO-APIC mode, aka vHPET interrupt injection. CVE-2018-10982 SUSE Linux Enterprise Desktop 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Software Development Kit 12 SP3:xen-devel-4.9.2_06-3.32.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181456-1/ https://www.suse.com/security/cve/CVE-2018-10982.html CVE-2018-10982 https://bugzilla.suse.com/1090822 SUSE Bug 1090822 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Systems with microprocessors utilizing speculative execution and speculative execution of memory reads before the addresses of all prior memory writes are known may allow unauthorized disclosure of information to an attacker with local user access via a side-channel analysis, aka Speculative Store Bypass (SSB), Variant 4. CVE-2018-3639 SUSE Linux Enterprise Desktop 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Desktop 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.2_06-3.32.1 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.2_06-3.32.1 SUSE Linux Enterprise Software Development Kit 12 SP3:xen-devel-4.9.2_06-3.32.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2018/suse-su-20181456-1/ https://www.suse.com/security/cve/CVE-2018-3639.html CVE-2018-3639 https://bugzilla.suse.com/1074701 SUSE Bug 1074701 https://bugzilla.suse.com/1085235 SUSE Bug 1085235 https://bugzilla.suse.com/1085308 SUSE Bug 1085308 https://bugzilla.suse.com/1087078 SUSE Bug 1087078 https://bugzilla.suse.com/1087082 SUSE Bug 1087082 https://bugzilla.suse.com/1092631 SUSE Bug 1092631 https://bugzilla.suse.com/1092885 SUSE Bug 1092885 https://bugzilla.suse.com/1094912 SUSE Bug 1094912 https://bugzilla.suse.com/1098813 SUSE Bug 1098813 https://bugzilla.suse.com/1100394 SUSE Bug 1100394 https://bugzilla.suse.com/1102640 SUSE Bug 1102640 https://bugzilla.suse.com/1105412 SUSE Bug 1105412 https://bugzilla.suse.com/1111963 SUSE Bug 1111963 https://bugzilla.suse.com/1172781 SUSE Bug 1172781 https://bugzilla.suse.com/1172782 SUSE Bug 1172782 https://bugzilla.suse.com/1172783 SUSE Bug 1172783 https://bugzilla.suse.com/1173489 SUSE Bug 1173489 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 https://bugzilla.suse.com/1215674 SUSE Bug 1215674