This update for xen fixes the following issues :

Security issue fixed :

  - CVE-2020-28368: Fixed the Intel RAPL sidechannel attack,     aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed :

  - Updated to Xen 4.12.4 bug fix release (bsc#1027519).

  - Fixed a panic during MSI cleanup on AMD hardware     (bsc#1027519).

  - Adjusted help for --max_iters, default is 5     (bsc#1177950).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for xen fixes the following issues :

bsc#1178963 - stack corruption from XSA-346 change (XSA-355)

bsc#1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)

bsc#1177412 - CVE-2020-27672: Race condition in Xen mapping code (XSA-345)

bsc#1177413 - CVE-2020-27671: undue deferral of IOMMU TLB flushes (XSA-346)

bsc#1177414 - CVE-2020-27670: unsafe AMD IOMMU page table updates (XSA-347)

bsc#1178591 - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

stack corruption from XSA-346 change [XSA-355]

----

Information leak via power sidechannel [XSA-351]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

  - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346     change (XSA-355) 

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for xen fixes the following issues :

Security issue fixed :

CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issue fixed :

Adjusted help for --max_iters, default is 5 (bsc#1177950).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

Security issue fixed :

CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed :

Updated to Xen 4.12.4 bug fix release (bsc#1027519).

Fixed a panic during MSI cleanup on AMD hardware (bsc#1027519).

Adjusted help for --max_iters, default is 5 (bsc#1177950).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	Name	Product	Family	Published	Updated	Severity
143301	openSUSE Security Update : xen (openSUSE-2020-2030)	Nessus	SuSE Local Security Checks	11/30/2020	2/8/2024	medium
143674	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3631-1)	Nessus	SuSE Local Security Checks	12/9/2020	5/11/2022	high
143675	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3612-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/6/2024	medium
143397	Fedora 33 : xen (2020-d71fa5f0b9)	Nessus	Fedora Local Security Checks	12/1/2020	2/7/2024	medium
143506	openSUSE Security Update : xen (openSUSE-2020-2162)	Nessus	SuSE Local Security Checks	12/7/2020	2/6/2024	high
143703	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/6/2024	medium
143861	SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3611-1)	Nessus	SuSE Local Security Checks	12/9/2020	5/11/2022	high
143881	SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3413-1)	Nessus	SuSE Local Security Checks	12/9/2020	2/5/2024	medium

Detections

Analytics

Plugins Search

medium

high

medium

medium

high

medium

high

medium