Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2019:2783-1 Final 1 1 2019-10-25T12:28:11Z current 2019-10-25T12:28:11Z 2019-10-25T12:28:11Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - CVE-2019-15890: Fixed a use-after-free in SLiRP networking implementation of QEMU emulator which could have led to Denial of Service (bsc#1149813). - CVE-2019-12068: Fixed an issue in lsi which could lead to an infinite loop and denial of service (bsc#1146874). - CVE-2019-14378: Fixed a heap buffer overflow in SLiRp networking implementation of QEMU emulator which could have led to execution of arbitrary code with privileges of the QEMU process (bsc#1143797). The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). SUSE-2019-2783,SUSE-OpenStack-Cloud-7-2019-2783,SUSE-SLE-SAP-12-SP2-2019-2783,SUSE-SLE-SERVER-12-SP2-2019-2783,SUSE-SLE-SERVER-12-SP2-BCL-2019-2783,SUSE-Storage-4-2019-2783 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ Link for SUSE-SU-2019:2783-1 https://lists.suse.com/pipermail/sle-security-updates/2019-October/006058.html E-Mail link for SUSE-SU-2019:2783-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1126140 SUSE Bug 1126140 https://bugzilla.suse.com/1126141 SUSE Bug 1126141 https://bugzilla.suse.com/1126192 SUSE Bug 1126192 https://bugzilla.suse.com/1126195 SUSE Bug 1126195 https://bugzilla.suse.com/1126196 SUSE Bug 1126196 https://bugzilla.suse.com/1126198 SUSE Bug 1126198 https://bugzilla.suse.com/1126201 SUSE Bug 1126201 https://bugzilla.suse.com/1127400 SUSE Bug 1127400 https://bugzilla.suse.com/1143797 SUSE Bug 1143797 https://bugzilla.suse.com/1146874 SUSE Bug 1146874 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://www.suse.com/security/cve/CVE-2019-12068/ SUSE CVE CVE-2019-12068 page https://www.suse.com/security/cve/CVE-2019-14378/ SUSE CVE CVE-2019-14378 page https://www.suse.com/security/cve/CVE-2019-15890/ SUSE CVE CVE-2019-15890 page https://www.suse.com/security/cve/CVE-2019-17340/ SUSE CVE CVE-2019-17340 page https://www.suse.com/security/cve/CVE-2019-17341/ SUSE CVE CVE-2019-17341 page https://www.suse.com/security/cve/CVE-2019-17342/ SUSE CVE CVE-2019-17342 page https://www.suse.com/security/cve/CVE-2019-17343/ SUSE CVE CVE-2019-17343 page https://www.suse.com/security/cve/CVE-2019-17344/ SUSE CVE CVE-2019-17344 page https://www.suse.com/security/cve/CVE-2019-17346/ SUSE CVE CVE-2019-17346 page https://www.suse.com/security/cve/CVE-2019-17347/ SUSE CVE CVE-2019-17347 page https://www.suse.com/security/cve/CVE-2019-17348/ SUSE CVE CVE-2019-17348 page SUSE Enterprise Storage 4 SUSE Linux Enterprise Server 12 SP2-BCL SUSE Linux Enterprise Server 12 SP2-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP2 SUSE OpenStack Cloud 7 xen-4.7.6_06-43.54.2 xen-devel-4.7.6_06-43.54.2 xen-doc-html-4.7.6_06-43.54.2 xen-libs-4.7.6_06-43.54.2 xen-libs-32bit-4.7.6_06-43.54.2 xen-tools-4.7.6_06-43.54.2 xen-tools-domU-4.7.6_06-43.54.2 xen-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-doc-html-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-libs-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-libs-32bit-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-tools-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-tools-domU-4.7.6_06-43.54.2 as a component of SUSE Enterprise Storage 4 xen-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-doc-html-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-libs-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-libs-32bit-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-tools-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-tools-domU-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-BCL xen-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-doc-html-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-libs-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-libs-32bit-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-tools-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-tools-domU-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server 12 SP2-LTSS xen-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-doc-html-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-libs-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-libs-32bit-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-tools-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-tools-domU-4.7.6_06-43.54.2 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP2 xen-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 xen-doc-html-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 xen-libs-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 xen-libs-32bit-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 xen-tools-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 xen-tools-domU-4.7.6_06-43.54.2 as a component of SUSE OpenStack Cloud 7 In QEMU 1:4.1-1, 1:2.1+dfsg-12+deb8u6, 1:2.8+dfsg-6+deb9u8, 1:3.1+dfsg-8~deb10u1, 1:3.1+dfsg-8+deb10u2, and 1:2.1+dfsg-12+deb8u12 (fixed), when executing script in lsi_execute_script(), the LSI scsi adapter emulator advances 's->dsp' index to read next opcode. This can lead to an infinite loop if the next opcode is empty. Move the existing loop exit after 10k iterations so that it covers no-op opcodes as well. CVE-2019-12068 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-12068.html CVE-2019-12068 https://bugzilla.suse.com/1146873 SUSE Bug 1146873 https://bugzilla.suse.com/1146874 SUSE Bug 1146874 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 ip_reass in ip_input.c in libslirp 4.0.0 has a heap-based buffer overflow via a large packet because it mishandles a case involving the first fragment. CVE-2019-14378 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-14378.html CVE-2019-14378 https://bugzilla.suse.com/1143794 SUSE Bug 1143794 https://bugzilla.suse.com/1143797 SUSE Bug 1143797 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 libslirp 4.0.0, as used in QEMU 4.1.0, has a use-after-free in ip_reass in ip_input.c. CVE-2019-15890 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-15890.html CVE-2019-15890 https://bugzilla.suse.com/1149811 SUSE Bug 1149811 https://bugzilla.suse.com/1149813 SUSE Bug 1149813 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 guest OS users to cause a denial of service or gain privileges because grant-table transfer requests are mishandled. CVE-2019-17340 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17340.html CVE-2019-17340 https://bugzilla.suse.com/1126140 SUSE Bug 1126140 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a page-writability race condition during addition of a passed-through PCI device. CVE-2019-17341 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17341.html CVE-2019-17341 https://bugzilla.suse.com/1126141 SUSE Bug 1126141 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging a race condition that arose when XENMEM_exchange was introduced. CVE-2019-17342 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17342.html CVE-2019-17342 https://bugzilla.suse.com/1126192 SUSE Bug 1126192 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges by leveraging incorrect use of the HVM physmap concept for PV domains. CVE-2019-17343 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17343.html CVE-2019-17343 https://bugzilla.suse.com/1126195 SUSE Bug 1126195 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service by leveraging a long-running operation that exists to support restartability of PTE updates. CVE-2019-17344 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17344.html CVE-2019-17344 https://bugzilla.suse.com/1126196 SUSE Bug 1126196 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because of an incompatibility between Process Context Identifiers (PCID) and TLB flushes. CVE-2019-17346 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17346.html CVE-2019-17346 https://bugzilla.suse.com/1126198 SUSE Bug 1126198 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service or gain privileges because a guest can manipulate its virtualised %cr4 in a way that is incompatible with Linux (and possibly other guest kernels). CVE-2019-17347 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17347.html CVE-2019-17347 https://bugzilla.suse.com/1126201 SUSE Bug 1126201 An issue was discovered in Xen through 4.11.x allowing x86 PV guest OS users to cause a denial of service because of an incompatibility between Process Context Identifiers (PCID) and shadow-pagetable switching. CVE-2019-17348 SUSE Enterprise Storage 4:xen-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-doc-html-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-libs-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-4.7.6_06-43.54.2 SUSE Enterprise Storage 4:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-BCL:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server 12 SP2-LTSS:xen-tools-domU-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-doc-html-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-32bit-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-libs-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-4.7.6_06-43.54.2 SUSE Linux Enterprise Server for SAP Applications 12 SP2:xen-tools-domU-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-doc-html-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-32bit-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-libs-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-4.7.6_06-43.54.2 SUSE OpenStack Cloud 7:xen-tools-domU-4.7.6_06-43.54.2 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2019/suse-su-20192783-1/ https://www.suse.com/security/cve/CVE-2019-17348.html CVE-2019-17348 https://bugzilla.suse.com/1127400 SUSE Bug 1127400