Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2769-1 Final 1 1 2019-10-24T11:23:02Z current 2019-10-24T11:23:02Z 2019-10-24T11:23:02Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: Security issues fixed: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of service (bsc#1146874). - CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU emulator which could have led to execution of arbitrary code with privileges of the QEMU process (bsc#1143797). Other issue fixed: - Fixed an issue where libxenlight could not restore domain vsa6535522 on live migration (bsc#1133818). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). HPE-Helion-OpenStack-8-2019-2769,SUSE-2019-2769,SUSE-OpenStack-Cloud-8-2019-2769,SUSE-OpenStack-Cloud-Crowbar-8-2019-2769,SUSE-SLE-SAP-12-SP3-2019-2769,SUSE-SLE-SERVER-12-SP3-2019-2769,SUSE-SLE-SERVER-12-SP3-BCL-2019-2769,SUSE-Storage-5-2019-2769 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ Link for SUSE-SU-2019:2769-1 https://lists.suse.com/pipermail/sle-security-updates/2019-October/006050.html E-Mail link for SUSE-SU-2019:2769-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1126140 SUSE Bug 1126140 https://bugzilla.suse.com/1126141 SUSE Bug 1126141 https://bugzilla.suse.com/1126192 SUSE Bug 1126192 https://bugzilla.suse.com/1126195 SUSE Bug 1126195 https://bugzilla.suse.com/1126196 SUSE Bug 1126196 https://bugzilla.suse.com/1126197 SUSE Bug 1126197 https://bugzilla.suse.com/1126198 SUSE Bug 1126198 https://bugzilla.suse.com/1126201 SUSE Bug 1126201 https://bugzilla.suse.com/1127400 SUSE Bug 1127400 https://bugzilla.suse.com/1133818 SUSE Bug 1133818 https://bugzilla.suse.com/1143797 SUSE Bug 1143797 https://bugzilla.suse.com/1146874 SUSE Bug 1146874 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://www.suse.com/security/cve/CVE-2018-12126/ SUSE CVE CVE-2018-12126 page https://www.suse.com/security/cve/CVE-2018-12127/ SUSE CVE CVE-2018-12127 page https://www.suse.com/security/cve/CVE-2018-12130/ SUSE CVE CVE-2018-12130 page https://www.suse.com/security/cve/CVE-2019-11091/ SUSE CVE CVE-2019-11091 page https://www.suse.com/security/cve/CVE-2019-12068/ SUSE CVE CVE-2019-12068 page https://www.suse.com/security/cve/CVE-2019-14378/ SUSE CVE CVE-2019-14378 page https://www.suse.com/security/cve/CVE-2019-15890/ SUSE CVE CVE-2019-15890 page https://www.suse.com/security/cve/CVE-2019-17340/ SUSE CVE CVE-2019-17340 page https://www.suse.com/security/cve/CVE-2019-17341/ SUSE CVE CVE-2019-17341 page https://www.suse.com/security/cve/CVE-2019-17342/ SUSE CVE CVE-2019-17342 page https://www.suse.com/security/cve/CVE-2019-17343/ SUSE CVE CVE-2019-17343 page https://www.suse.com/security/cve/CVE-2019-17344/ SUSE CVE CVE-2019-17344 page https://www.suse.com/security/cve/CVE-2019-17345/ SUSE CVE CVE-2019-17345 page https://www.suse.com/security/cve/CVE-2019-17346/ SUSE CVE CVE-2019-17346 page https://www.suse.com/security/cve/CVE-2019-17347/ SUSE CVE CVE-2019-17347 page https://www.suse.com/security/cve/CVE-2019-17348/ SUSE CVE CVE-2019-17348 page HPE Helion OpenStack 8 SUSE Enterprise Storage 5 SUSE Linux Enterprise Server 12 SP3-BCL SUSE Linux Enterprise Server 12 SP3-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP3 SUSE OpenStack Cloud 8 SUSE OpenStack Cloud Crowbar 8 xen-4.9.4_04-3.56.2 xen-doc-html-4.9.4_04-3.56.2 xen-libs-4.9.4_04-3.56.2 xen-libs-32bit-4.9.4_04-3.56.2 xen-tools-4.9.4_04-3.56.2 xen-tools-domU-4.9.4_04-3.56.2 xen-devel-4.9.4_04-3.56.2 xen-libs-64bit-4.9.4_04-3.56.2 xen-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-doc-html-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-libs-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-libs-32bit-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-tools-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-tools-domU-4.9.4_04-3.56.2 as a component of HPE Helion OpenStack 8 xen-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-libs-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-tools-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE Enterprise Storage 5 xen-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-libs-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-tools-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-BCL xen-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-libs-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-tools-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server 12 SP3-LTSS xen-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP3 xen-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-libs-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-tools-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud 8 xen-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 xen-doc-html-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 xen-libs-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 xen-libs-32bit-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 xen-tools-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 xen-tools-domU-4.9.4_04-3.56.2 as a component of SUSE OpenStack Cloud Crowbar 8 Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12126 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2018-12126.html CVE-2018-12126 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1135524 SUSE Bug 1135524 https://bugzilla.suse.com/1137916 SUSE Bug 1137916 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1149725 SUSE Bug 1149725 https://bugzilla.suse.com/1149726 SUSE Bug 1149726 https://bugzilla.suse.com/1149729 SUSE Bug 1149729 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12127 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2018-12127.html CVE-2018-12127 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2018-12130 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2018-12130.html CVE-2018-12130 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1135409 SUSE Bug 1135409 https://bugzilla.suse.com/1137916 SUSE Bug 1137916 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing speculative execution may allow an authenticated user to potentially enable information disclosure via a side channel with local access. A list of impacted products can be found here: https://www.intel.com/content/dam/www/public/us/en/documents/corporate-information/SA00233-microcode-update-guidance_05132019.pdf CVE-2019-11091 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-11091.html CVE-2019-11091 https://bugzilla.suse.com/1103186 SUSE Bug 1103186 https://bugzilla.suse.com/1111331 SUSE Bug 1111331 https://bugzilla.suse.com/1132686 SUSE Bug 1132686 https://bugzilla.suse.com/1133319 SUSE Bug 1133319 https://bugzilla.suse.com/1135394 SUSE Bug 1135394 https://bugzilla.suse.com/1138043 SUSE Bug 1138043 https://bugzilla.suse.com/1138534 SUSE Bug 1138534 https://bugzilla.suse.com/1141977 SUSE Bug 1141977 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1201877 SUSE Bug 1201877 In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well. CVE-2019-12068 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-12068.html CVE-2019-12068 https://bugzilla.suse.com/1146873 SUSE Bug 1146873 https://bugzilla.suse.com/1146874 SUSE Bug 1146874 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-14378.html CVE-2019-14378 https://bugzilla.suse.com/1143794 SUSE Bug 1143794 https://bugzilla.suse.com/1143797 SUSE Bug 1143797 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVE-2019-15890 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-15890.html CVE-2019-15890 https://bugzilla.suse.com/1149811 SUSE Bug 1149811 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled. CVE-2019-17340 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17340.html CVE-2019-17340 https://bugzilla.suse.com/1126140 SUSE Bug 1126140 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device. CVE-2019-17341 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17341.html CVE-2019-17341 https://bugzilla.suse.com/1126141 SUSE Bug 1126141 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced. CVE-2019-17342 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17342.html CVE-2019-17342 https://bugzilla.suse.com/1126192 SUSE Bug 1126192 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. CVE-2019-17343 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17343.html CVE-2019-17343 https://bugzilla.suse.com/1126195 SUSE Bug 1126195 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. CVE-2019-17344 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17344.html CVE-2019-17344 https://bugzilla.suse.com/1126196 SUSE Bug 1126196 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen 4.8.x through 4.11.x allowing x86 PV guest OS users to cause a denial of service because mishandling of failed IOMMU operations causes a bug check during the cleanup of a crashed guest. CVE-2019-17345 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17345.html CVE-2019-17345 https://bugzilla.suse.com/1126197 SUSE Bug 1126197 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes. CVE-2019-17346 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17346.html CVE-2019-17346 https://bugzilla.suse.com/1126198 SUSE Bug 1126198 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels). CVE-2019-17347 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17347.html CVE-2019-17347 https://bugzilla.suse.com/1126201 SUSE Bug 1126201 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching. CVE-2019-17348 HPE Helion OpenStack 8:xen-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-doc-html-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-libs-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-4.9.4_04-3.56.2 HPE Helion OpenStack 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-doc-html-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-libs-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-4.9.4_04-3.56.2 SUSE Enterprise Storage 5:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-BCL:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server 12 SP3-LTSS:xen-tools-domU-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-doc-html-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-32bit-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-libs-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-4.9.4_04-3.56.2 SUSE Linux Enterprise Server for SAP Applications 12 SP3:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud 8:xen-tools-domU-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-doc-html-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-32bit-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-libs-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-4.9.4_04-3.56.2 SUSE OpenStack Cloud Crowbar 8:xen-tools-domU-4.9.4_04-3.56.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192769-1/ https://www.suse.com/security/cve/CVE-2019-17348.html CVE-2019-17348 https://bugzilla.suse.com/1127400 SUSE Bug 1127400