Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:0003-1 Final 1 1 2019-01-02T10:39:50Z current 2019-01-02T10:39:50Z 2019-01-02T10:39:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - Update to Xen 4.11.1 bug fix release (bsc#1027519) - CVE-2018-17963: Fixed an integer overflow issue in the QEMU emulator, which could occur when a packet with large packet size is processed. A user inside a guest could have used this flaw to crash the qemu process resulting in a Denial of Service (DoS). (bsc#1111014) - CVE-2018-18849: Fixed an out of bounds memory access in the LSI53C895A SCSI host bus adapter emulation, which allowed a user and/or process to crash the qemu process resulting in a Denial of Service (DoS). (bsc#1114423) - CVE-2018-18883: Fixed an issue related to inproper restriction of nested VT-x, which allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS). (XSA-278) (bsc#1114405) - CVE-2018-19961, CVE-2018-19962: Fixed an issue related to insufficient TLB flushing with AMD IOMMUs, which potentially allowed a guest to escalate its privileges, may cause a Denial of Service (DoS) affecting the entire host, or may be able to access data it is not supposed to access. (XSA-275) (bsc#1115040) - CVE-2018-19963: Fixed the allocation of pages used to communicate with external emulators, which may have cuased Xen to crash, resulting in a Denial of Service (DoS). (XSA-276) (bsc#1115043) - CVE-2018-19965: Fixed an issue related to the INVPCID instruction in case non-canonical addresses are accessed, which may allow a guest to cause Xen to crash, resulting in a Denial of Service (DoS) affecting the entire host. (XSA-279) (bsc#1115045) - CVE-2018-19966: Fixed an issue related to a previous fix for XSA-240, which conflicted with shadow paging and allowed a guest to cause Xen to crash, resulting in a Denial of Service (DoS) (XSA-280) (bsc#1115047) - CVE-2018-19967: Fixed HLE constructs that allowed guests to lock up the host, resulting in a Denial of Service (DoS). (XSA-282) (bsc#1114988) - CVE-2018-19964: Fixed the incorrect error handling of p2m page removals, which allowed a guest to cause a deadlock, resulting in a Denial of Service (DoS) affecting the entire host. (XSA-277) (bsc#1115044) - CVE-2018-19665: Fixed an integer overflow resulting in memory corruption in various Bluetooth functions, allowing this to crash qemu process resulting in Denial of Service (DoS). (bsc#1117756). Other bugs fixed: - Fixed an issue related to a domU hang on SLE12-SP3 HV (bsc#1108940) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-EC2-HVM-BYOS-2019-3,Image SLES12-SP4-SAP-EC2-HVM-2019-3,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2019-3,SUSE-2019-3,SUSE-SLE-DESKTOP-12-SP4-2019-3,SUSE-SLE-SDK-12-SP4-2019-3,SUSE-SLE-SERVER-12-SP4-2019-3 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ Link for SUSE-SU-2019:0003-1 https://lists.suse.com/pipermail/sle-security-updates/2019-January/005011.html E-Mail link for SUSE-SU-2019:0003-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1027519 SUSE Bug 1027519 https://bugzilla.suse.com/1108940 SUSE Bug 1108940 https://bugzilla.suse.com/1111014 SUSE Bug 1111014 https://bugzilla.suse.com/1114405 SUSE Bug 1114405 https://bugzilla.suse.com/1114423 SUSE Bug 1114423 https://bugzilla.suse.com/1114988 SUSE Bug 1114988 https://bugzilla.suse.com/1115040 SUSE Bug 1115040 https://bugzilla.suse.com/1115043 SUSE Bug 1115043 https://bugzilla.suse.com/1115044 SUSE Bug 1115044 https://bugzilla.suse.com/1115045 SUSE Bug 1115045 https://bugzilla.suse.com/1115047 SUSE Bug 1115047 https://bugzilla.suse.com/1117756 SUSE Bug 1117756 https://www.suse.com/security/cve/CVE-2018-17963/ SUSE CVE CVE-2018-17963 page https://www.suse.com/security/cve/CVE-2018-18849/ SUSE CVE CVE-2018-18849 page https://www.suse.com/security/cve/CVE-2018-18883/ SUSE CVE CVE-2018-18883 page https://www.suse.com/security/cve/CVE-2018-19665/ SUSE CVE CVE-2018-19665 page https://www.suse.com/security/cve/CVE-2018-19961/ SUSE CVE CVE-2018-19961 page https://www.suse.com/security/cve/CVE-2018-19962/ SUSE CVE CVE-2018-19962 page https://www.suse.com/security/cve/CVE-2018-19963/ SUSE CVE CVE-2018-19963 page https://www.suse.com/security/cve/CVE-2018-19964/ SUSE CVE CVE-2018-19964 page https://www.suse.com/security/cve/CVE-2018-19965/ SUSE CVE CVE-2018-19965 page https://www.suse.com/security/cve/CVE-2018-19966/ SUSE CVE CVE-2018-19966 page https://www.suse.com/security/cve/CVE-2018-19967/ SUSE CVE CVE-2018-19967 page Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS SUSE Linux Enterprise Desktop 12 SP4 SUSE Linux Enterprise Server 12 SP4 SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE Linux Enterprise Software Development Kit 12 SP4 xen-libs-4.11.1_02-2.3.1 xen-tools-domU-4.11.1_02-2.3.1 xen-4.11.1_02-2.3.1 xen-devel-4.11.1_02-2.3.1 xen-doc-html-4.11.1_02-2.3.1 xen-libs-32bit-4.11.1_02-2.3.1 xen-libs-64bit-4.11.1_02-2.3.1 xen-tools-4.11.1_02-2.3.1 xen-libs-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS xen-tools-domU-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS xen-libs-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM xen-tools-domU-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM xen-libs-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS xen-tools-domU-4.11.1_02-2.3.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS xen-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-libs-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-libs-32bit-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Desktop 12 SP4 xen-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-doc-html-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-libs-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-libs-32bit-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-tools-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-tools-domU-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server 12 SP4 xen-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-doc-html-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs-32bit-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools-domU-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-devel-4.11.1_02-2.3.1 as a component of SUSE Linux Enterprise Software Development Kit 12 SP4 qemu_deliver_packet_iov in net/net.c in Qemu accepts packet sizes greater than INT_MAX, which allows attackers to cause a denial of service or possibly have unspecified other impact. CVE-2018-17963 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-17963.html CVE-2018-17963 https://bugzilla.suse.com/1111013 SUSE Bug 1111013 https://bugzilla.suse.com/1111014 SUSE Bug 1111014 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 In Qemu 3.0.0, lsi_do_msgin in hw/scsi/lsi53c895a.c allows out-of-bounds access by triggering an invalid msg_len value. CVE-2018-18849 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-18849.html CVE-2018-18849 https://bugzilla.suse.com/1114422 SUSE Bug 1114422 https://bugzilla.suse.com/1114423 SUSE Bug 1114423 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen 4.9.x through 4.11.x, on Intel x86 platforms, allowing x86 HVM and PVH guests to cause a host OS denial of service (NULL pointer dereference) or possibly have unspecified other impact because nested VT-x is not properly restricted. CVE-2018-18883 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-18883.html CVE-2018-18883 https://bugzilla.suse.com/1114405 SUSE Bug 1114405 The Bluetooth subsystem in QEMU mishandles negative values for length variables, leading to memory corruption. CVE-2018-19665 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19665.html CVE-2018-19665 https://bugzilla.suse.com/1117749 SUSE Bug 1117749 https://bugzilla.suse.com/1117756 SUSE Bug 1117756 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because TLB flushes do not always occur after IOMMU mapping changes. CVE-2018-19961 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19961.html CVE-2018-19961 https://bugzilla.suse.com/1115040 SUSE Bug 1115040 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x on AMD x86 platforms, possibly allowing guest OS users to gain host OS privileges because small IOMMU mappings are unsafely combined into larger ones. CVE-2018-19962 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19962.html CVE-2018-19962 https://bugzilla.suse.com/1115040 SUSE Bug 1115040 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen 4.11 allowing HVM guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because x86 IOREQ server resource accounting (for external emulators) was mishandled. CVE-2018-19963 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19963.html CVE-2018-19963 https://bugzilla.suse.com/1115043 SUSE Bug 1115043 An issue was discovered in Xen 4.11.x allowing x86 guest OS users to cause a denial of service (host OS hang) because the p2m lock remains unavailable indefinitely in certain error conditions. CVE-2018-19964 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19964.html CVE-2018-19964 https://bugzilla.suse.com/1115044 SUSE Bug 1115044 An issue was discovered in Xen through 4.11.x allowing 64-bit PV guest OS users to cause a denial of service (host OS crash) because #GP[0] can occur after a non-canonical address is passed to the TLB flushing code. NOTE: this issue exists because of an incorrect CVE-2017-5754 (aka Meltdown) mitigation. CVE-2018-19965 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19965.html CVE-2018-19965 https://bugzilla.suse.com/1115045 SUSE Bug 1115045 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service (host OS crash) or possibly gain host OS privileges because of an interpretation conflict for a union data structure associated with shadow paging. NOTE: this issue exists because of an incorrect fix for CVE-2017-15595. CVE-2018-19966 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19966.html CVE-2018-19966 https://bugzilla.suse.com/1115047 SUSE Bug 1115047 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x on Intel x86 platforms allowing guest OS users to cause a denial of service (host OS hang) because Xen does not work around Intel's mishandling of certain HLE transactions associated with the KACQUIRE instruction prefix. CVE-2018-19967 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.1_02-2.3.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Desktop 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.1_02-2.3.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.1_02-2.3.1 SUSE Linux Enterprise Software Development Kit 12 SP4:xen-devel-4.11.1_02-2.3.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20190003-1/ https://www.suse.com/security/cve/CVE-2018-19967.html CVE-2018-19967 https://bugzilla.suse.com/1114988 SUSE Bug 1114988 https://bugzilla.suse.com/1178658 SUSE Bug 1178658