Security update for xen SUSE Patch security@suse.de SUSE Security Team SUSE-SU-2021:1250-1 Final 1 1 2021-04-19T06:58:03Z current 2021-04-19T06:58:03Z 2021-04-19T06:58:03Z cve-database/bin/generate-cvrf.pl 2017-02-24T01:00:00Z Security update for xen This update for xen fixes the following issues: - CVE-2021-27379: Fixed an issue where entries in the IOMMU were not being updated under certain circumstances due to improper backport of XSA-321 (XSA-366, bsc#1182431) The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). Image SLES15-EC2-CHOST-HVM-BYOS-2021-1250,Image SLES15-EC2-HVM-BYOS-2021-1250,Image SLES15-SAP-EC2-HVM-2021-1250,Image SLES15-SAP-EC2-HVM-BYOS-2021-1250,SUSE-2021-1250,SUSE-SLE-Product-HPC-15-2021-1250,SUSE-SLE-Product-SLES_SAP-15-2021-1250 Copyright SUSE LLC under the Creative Commons License 4.0 with Attribution (CC-BY-4.0) https://www.suse.com/support/update/announcement/2021/suse-su-20211250-1/ Link for SUSE-SU-2021:1250-1 https://lists.suse.com/pipermail/sle-security-updates/2021-April/008653.html E-Mail link for SUSE-SU-2021:1250-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings https://bugzilla.suse.com/1178591 SUSE Bug 1178591 https://bugzilla.suse.com/1182431 SUSE Bug 1182431 https://www.suse.com/security/cve/CVE-2021-27379/ SUSE CVE CVE-2021-27379 page Image SLES15-EC2-CHOST-HVM-BYOS Image SLES15-EC2-HVM-BYOS Image SLES15-SAP-EC2-HVM Image SLES15-SAP-EC2-HVM-BYOS SUSE Linux Enterprise High Performance Computing 15-ESPOS SUSE Linux Enterprise High Performance Computing 15-LTSS SUSE Linux Enterprise Server for SAP Applications 15 xen-libs-4.10.4_24-3.56.1 xen-tools-domU-4.10.4_24-3.56.1 xen-4.10.4_24-3.56.1 xen-devel-4.10.4_24-3.56.1 xen-doc-html-4.10.4_24-3.56.1 xen-libs-32bit-4.10.4_24-3.56.1 xen-libs-64bit-4.10.4_24-3.56.1 xen-tools-4.10.4_24-3.56.1 xen-libs-4.10.4_24-3.56.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS xen-tools-domU-4.10.4_24-3.56.1 as a component of Image SLES15-EC2-CHOST-HVM-BYOS xen-libs-4.10.4_24-3.56.1 as a component of Image SLES15-EC2-HVM-BYOS xen-tools-domU-4.10.4_24-3.56.1 as a component of Image SLES15-EC2-HVM-BYOS xen-libs-4.10.4_24-3.56.1 as a component of Image SLES15-SAP-EC2-HVM xen-tools-domU-4.10.4_24-3.56.1 as a component of Image SLES15-SAP-EC2-HVM xen-libs-4.10.4_24-3.56.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS xen-tools-domU-4.10.4_24-3.56.1 as a component of Image SLES15-SAP-EC2-HVM-BYOS xen-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS xen-devel-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS xen-libs-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS xen-tools-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS xen-tools-domU-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-ESPOS xen-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xen-devel-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xen-libs-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xen-tools-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xen-tools-domU-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise High Performance Computing 15-LTSS xen-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xen-devel-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xen-libs-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xen-tools-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 xen-tools-domU-4.10.4_24-3.56.1 as a component of SUSE Linux Enterprise Server for SAP Applications 15 An issue was discovered in Xen through 4.11.x, allowing x86 Intel HVM guest OS users to achieve unintended read/write DMA access, and possibly cause a denial of service (host OS crash) or gain privileges. This occurs because a backport missed a flush, and thus IOMMU updates were not always correct. NOTE: this issue exists because of an incomplete fix for CVE-2020-15565. CVE-2021-27379 Image SLES15-EC2-CHOST-HVM-BYOS:xen-libs-4.10.4_24-3.56.1 Image SLES15-EC2-CHOST-HVM-BYOS:xen-tools-domU-4.10.4_24-3.56.1 Image SLES15-EC2-HVM-BYOS:xen-libs-4.10.4_24-3.56.1 Image SLES15-EC2-HVM-BYOS:xen-tools-domU-4.10.4_24-3.56.1 Image SLES15-SAP-EC2-HVM-BYOS:xen-libs-4.10.4_24-3.56.1 Image SLES15-SAP-EC2-HVM-BYOS:xen-tools-domU-4.10.4_24-3.56.1 Image SLES15-SAP-EC2-HVM:xen-libs-4.10.4_24-3.56.1 Image SLES15-SAP-EC2-HVM:xen-tools-domU-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:xen-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:xen-devel-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:xen-libs-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:xen-tools-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-ESPOS:xen-tools-domU-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:xen-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:xen-devel-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:xen-libs-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:xen-tools-4.10.4_24-3.56.1 SUSE Linux Enterprise High Performance Computing 15-LTSS:xen-tools-domU-4.10.4_24-3.56.1 SUSE Linux Enterprise Server for SAP Applications 15:xen-4.10.4_24-3.56.1 SUSE Linux Enterprise Server for SAP Applications 15:xen-devel-4.10.4_24-3.56.1 SUSE Linux Enterprise Server for SAP Applications 15:xen-libs-4.10.4_24-3.56.1 SUSE Linux Enterprise Server for SAP Applications 15:xen-tools-4.10.4_24-3.56.1 SUSE Linux Enterprise Server for SAP Applications 15:xen-tools-domU-4.10.4_24-3.56.1 important To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch". https://www.suse.com/support/update/announcement/2021/suse-su-20211250-1/ https://www.suse.com/security/cve/CVE-2021-27379.html CVE-2021-27379 https://bugzilla.suse.com/1182431 SUSE Bug 1182431