Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3049-1 Final 1 1 2020-10-27T15:08:32Z current 2020-10-27T15:08:32Z 2020-10-27T15:08:32Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - bsc#1177409 - VUL-0: CVE-2020-27673: xen: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286) - bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen mapping code (XSA-345) - bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU TLB flushes (XSA-346) - bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page table updates (XSA-347) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Container suse/sles/15.2/virt-launcher:0.38.1-2020-3049,Image SLES15-SP2-Azure-Basic-2020-3049,Image SLES15-SP2-Azure-Standard-2020-3049,Image SLES15-SP2-BYOS-Azure-2020-3049,Image SLES15-SP2-BYOS-EC2-HVM-2020-3049,Image SLES15-SP2-BYOS-GCE-2020-3049,Image SLES15-SP2-CHOST-BYOS-Aliyun-2020-3049,Image SLES15-SP2-CHOST-BYOS-Azure-2020-3049,Image SLES15-SP2-CHOST-BYOS-EC2-2020-3049,Image SLES15-SP2-CHOST-BYOS-GCE-2020-3049,Image SLES15-SP2-EC2-ECS-HVM-2020-3049,Image SLES15-SP2-EC2-HVM-2020-3049,Image SLES15-SP2-GCE-2020-3049,Image SLES15-SP2-HPC-Azure-2020-3049,Image SLES15-SP2-HPC-BYOS-Azure-2020-3049,Image SLES15-SP2-HPC-BYOS-EC2-HVM-2020-3049,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure-2020-3049,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM-2020-3049,Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE-2020-3049,Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure-2020-3049,Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM-2020-3049,Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE-2020-3049,Image SLES15-SP2-SAP-Azure-2020-3049,Image SLES15-SP2-SAP-Azure-LI-BYOS-Production-2020-3049,Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production-2020-3049,Image SLES15-SP2-SAP-BYOS-Azure-2020-3049,Image SLES15-SP2-SAP-BYOS-EC2-HVM-2020-3049,Image SLES15-SP2-SAP-BYOS-GCE-2020-3049,Image SLES15-SP2-SAP-EC2-HVM-2020-3049,Image SLES15-SP2-SAP-GCE-2020-3049,SUSE-2020-3049,SUSE-SLE-Module-Basesystem-15-SP2-2020-3049,SUSE-SLE-Module-Server-Applications-15-SP2-2020-3049 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203049-1/ Link for SUSE-SU-2020:3049-1 https://lists.suse.com/pipermail/sle-security-updates/2020-October/007633.html E-Mail link for SUSE-SU-2020:3049-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1177409 SUSE Bug 1177409 https://bugzilla.suse.com/1177412 SUSE Bug 1177412 https://bugzilla.suse.com/1177413 SUSE Bug 1177413 https://bugzilla.suse.com/1177414 SUSE Bug 1177414 https://www.suse.com/security/cve/CVE-2020-27670/ SUSE CVE CVE-2020-27670 page https://www.suse.com/security/cve/CVE-2020-27671/ SUSE CVE CVE-2020-27671 page https://www.suse.com/security/cve/CVE-2020-27672/ SUSE CVE CVE-2020-27672 page https://www.suse.com/security/cve/CVE-2020-27673/ SUSE CVE CVE-2020-27673 page Container suse/sles/15.2/virt-launcher:0.38.1 Image SLES15-SP2-Azure-Basic Image SLES15-SP2-Azure-Standard Image SLES15-SP2-BYOS-Azure Image SLES15-SP2-BYOS-EC2-HVM Image SLES15-SP2-BYOS-GCE Image SLES15-SP2-CHOST-BYOS-Aliyun Image SLES15-SP2-CHOST-BYOS-Azure Image SLES15-SP2-CHOST-BYOS-EC2 Image SLES15-SP2-CHOST-BYOS-GCE Image SLES15-SP2-EC2-ECS-HVM Image SLES15-SP2-EC2-HVM Image SLES15-SP2-GCE Image SLES15-SP2-HPC-Azure Image SLES15-SP2-HPC-BYOS-Azure Image SLES15-SP2-HPC-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE Image SLES15-SP2-SAP-Azure Image SLES15-SP2-SAP-Azure-LI-BYOS-Production Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production Image SLES15-SP2-SAP-BYOS-Azure Image SLES15-SP2-SAP-BYOS-EC2-HVM Image SLES15-SP2-SAP-BYOS-GCE Image SLES15-SP2-SAP-EC2-HVM Image SLES15-SP2-SAP-GCE SUSE Linux Enterprise Module for Basesystem 15 SP2 SUSE Linux Enterprise Module for Server Applications 15 SP2 xen-libs-4.13.1_10-3.13.1 xen-tools-domU-4.13.1_10-3.13.1 xen-4.13.1_10-3.13.1 xen-devel-4.13.1_10-3.13.1 xen-doc-html-4.13.1_10-3.13.1 xen-libs-32bit-4.13.1_10-3.13.1 xen-libs-64bit-4.13.1_10-3.13.1 xen-tools-4.13.1_10-3.13.1 xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 xen-libs-4.13.1_10-3.13.1 as a component of Container suse/sles/15.2/virt-launcher:0.38.1 xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Azure-Basic xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Azure-Standard xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-BYOS-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-BYOS-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-CHOST-BYOS-Aliyun xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-CHOST-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-CHOST-BYOS-EC2 xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-CHOST-BYOS-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-EC2-ECS-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-EC2-ECS-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-HPC-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-HPC-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-HPC-BYOS-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-Azure-LI-BYOS-Production xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-BYOS-Azure xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-BYOS-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-BYOS-GCE xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-EC2-HVM xen-tools-domU-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-EC2-HVM xen-libs-4.13.1_10-3.13.1 as a component of Image SLES15-SP2-SAP-GCE xen-libs-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xen-tools-domU-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Basesystem 15 SP2 xen-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xen-devel-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xen-tools-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 as a component of SUSE Linux Enterprise Module for Server Applications 15 SP2 An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated. CVE-2020-27670 Container suse/sles/15.2/virt-launcher:0.38.1:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Basic:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Standard:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-GCE:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203049-1/ https://www.suse.com/security/cve/CVE-2020-27670.html CVE-2020-27670 https://bugzilla.suse.com/1177414 SUSE Bug 1177414 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled. CVE-2020-27671 Container suse/sles/15.2/virt-launcher:0.38.1:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Basic:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Standard:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-GCE:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203049-1/ https://www.suse.com/security/cve/CVE-2020-27671.html CVE-2020-27671 https://bugzilla.suse.com/1177413 SUSE Bug 1177413 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages. CVE-2020-27672 Container suse/sles/15.2/virt-launcher:0.38.1:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Basic:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Standard:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-GCE:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203049-1/ https://www.suse.com/security/cve/CVE-2020-27672.html CVE-2020-27672 https://bugzilla.suse.com/1177412 SUSE Bug 1177412 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in the Linux kernel through 5.9.1, as used with Xen through 4.14.x. Guest OS users can cause a denial of service (host OS hang) via a high rate of events to dom0, aka CID-e99502f76271. CVE-2020-27673 Container suse/sles/15.2/virt-launcher:0.38.1:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Basic:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Azure-Standard:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Aliyun:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-EC2:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-CHOST-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-ECS-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-HPC-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Proxy-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-Manager-4-1-Server-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-LI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure-VLI-BYOS-Production:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-Azure:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-BYOS-GCE:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-libs-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-EC2-HVM:xen-tools-domU-4.13.1_10-3.13.1 Image SLES15-SP2-SAP-GCE:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-libs-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Basesystem 15 SP2:xen-tools-domU-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-devel-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-4.13.1_10-3.13.1 SUSE Linux Enterprise Module for Server Applications 15 SP2:xen-tools-xendomains-wait-disk-4.13.1_10-3.13.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203049-1/ https://www.suse.com/security/cve/CVE-2020-27673.html CVE-2020-27673 https://bugzilla.suse.com/1177411 SUSE Bug 1177411 https://bugzilla.suse.com/1184583 SUSE Bug 1184583