Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2020:3653-1 Final 1 1 2020-12-07T16:26:50Z current 2020-12-07T16:26:50Z 2020-12-07T16:26:50Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES12-SP4-EC2-HVM-BYOS-2020-3653,Image SLES12-SP4-SAP-EC2-HVM-2020-3653,Image SLES12-SP4-SAP-EC2-HVM-BYOS-2020-3653,SUSE-2020-3653,SUSE-OpenStack-Cloud-9-2020-3653,SUSE-OpenStack-Cloud-Crowbar-9-2020-3653,SUSE-SLE-SAP-12-SP4-2020-3653,SUSE-SLE-SERVER-12-SP4-LTSS-2020-3653 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ Link for SUSE-SU-2020:3653-1 https://lists.suse.com/pipermail/sle-security-updates/2020-December/007928.html E-Mail link for SUSE-SU-2020:3653-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1177409 SUSE Bug 1177409 https://bugzilla.suse.com/1177412 SUSE Bug 1177412 https://bugzilla.suse.com/1177413 SUSE Bug 1177413 https://bugzilla.suse.com/1177414 SUSE Bug 1177414 https://bugzilla.suse.com/1178591 SUSE Bug 1178591 https://bugzilla.suse.com/1178963 SUSE Bug 1178963 https://www.suse.com/security/cve/CVE-2020-27670/ SUSE CVE CVE-2020-27670 page https://www.suse.com/security/cve/CVE-2020-27671/ SUSE CVE CVE-2020-27671 page https://www.suse.com/security/cve/CVE-2020-27672/ SUSE CVE CVE-2020-27672 page https://www.suse.com/security/cve/CVE-2020-27674/ SUSE CVE CVE-2020-27674 page https://www.suse.com/security/cve/CVE-2020-28368/ SUSE CVE CVE-2020-28368 page Image SLES12-SP4-EC2-HVM-BYOS Image SLES12-SP4-SAP-EC2-HVM Image SLES12-SP4-SAP-EC2-HVM-BYOS SUSE Linux Enterprise Server 12 SP4-LTSS SUSE Linux Enterprise Server for SAP Applications 12 SP4 SUSE OpenStack Cloud 9 SUSE OpenStack Cloud Crowbar 9 xen-libs-4.11.4_14-2.45.1 xen-tools-domU-4.11.4_14-2.45.1 xen-4.11.4_14-2.45.1 xen-devel-4.11.4_14-2.45.1 xen-doc-html-4.11.4_14-2.45.1 xen-libs-32bit-4.11.4_14-2.45.1 xen-libs-64bit-4.11.4_14-2.45.1 xen-tools-4.11.4_14-2.45.1 xen-libs-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS xen-tools-domU-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-EC2-HVM-BYOS xen-libs-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-SAP-EC2-HVM xen-tools-domU-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-SAP-EC2-HVM xen-libs-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS xen-tools-domU-4.11.4_14-2.45.1 as a component of Image SLES12-SP4-SAP-EC2-HVM-BYOS xen-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-doc-html-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-libs-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-libs-32bit-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-tools-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-tools-domU-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server 12 SP4-LTSS xen-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-doc-html-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-libs-32bit-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-tools-domU-4.11.4_14-2.45.1 as a component of SUSE Linux Enterprise Server for SAP Applications 12 SP4 xen-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-doc-html-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-libs-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-libs-32bit-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-tools-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-tools-domU-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud 9 xen-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 xen-doc-html-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 xen-libs-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 xen-libs-32bit-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 xen-tools-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 xen-tools-domU-4.11.4_14-2.45.1 as a component of SUSE OpenStack Cloud Crowbar 9 An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because an AMD IOMMU page-table entry can be half-updated. CVE-2020-27670 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_14-2.45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ https://www.suse.com/security/cve/CVE-2020-27670.html CVE-2020-27670 https://bugzilla.suse.com/1177414 SUSE Bug 1177414 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in Xen through 4.14.x allowing x86 HVM and PVH guest OS users to cause a denial of service (data corruption), cause a data leak, or possibly gain privileges because coalescing of per-page IOMMU TLB flushes is mishandled. CVE-2020-27671 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_14-2.45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ https://www.suse.com/security/cve/CVE-2020-27671.html CVE-2020-27671 https://bugzilla.suse.com/1177413 SUSE Bug 1177413 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in Xen through 4.14.x allowing x86 guest OS users to cause a host OS denial of service, achieve data corruption, or possibly gain privileges by exploiting a race condition that leads to a use-after-free involving 2MiB and 1GiB superpages. CVE-2020-27672 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_14-2.45.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ https://www.suse.com/security/cve/CVE-2020-27672.html CVE-2020-27672 https://bugzilla.suse.com/1177412 SUSE Bug 1177412 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 https://bugzilla.suse.com/1183925 SUSE Bug 1183925 An issue was discovered in Xen through 4.14.x allowing x86 PV guest OS users to gain guest OS privileges by modifying kernel memory contents, because invalidation of TLB entries is mishandled during use of an INVLPG-like attack technique. CVE-2020-27674 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_14-2.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ https://www.suse.com/security/cve/CVE-2020-27674.html CVE-2020-27674 https://bugzilla.suse.com/1177409 SUSE Bug 1177409 https://bugzilla.suse.com/1178658 SUSE Bug 1178658 Xen through 4.14.x allows guest OS administrators to obtain sensitive information (such as AES keys from outside the guest) via a side-channel attack on a power/energy monitoring interface, aka a "Platypus" attack. NOTE: there is only one logically independent fix: to change the access control for each such interface in Xen. CVE-2020-28368 Image SLES12-SP4-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM-BYOS:xen-tools-domU-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-libs-4.11.4_14-2.45.1 Image SLES12-SP4-SAP-EC2-HVM:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server 12 SP4-LTSS:xen-tools-domU-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-doc-html-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-32bit-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-libs-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-4.11.4_14-2.45.1 SUSE Linux Enterprise Server for SAP Applications 12 SP4:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud 9:xen-tools-domU-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-doc-html-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-32bit-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-libs-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-4.11.4_14-2.45.1 SUSE OpenStack Cloud Crowbar 9:xen-tools-domU-4.11.4_14-2.45.1 moderate To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2020/suse-su-20203653-1/ https://www.suse.com/security/cve/CVE-2020-28368.html CVE-2020-28368 https://bugzilla.suse.com/1178591 SUSE Bug 1178591 https://bugzilla.suse.com/1178658 SUSE Bug 1178658