Summary
This update for xen to version 4.12.1 fixes the following issues:
- Fixed an issue which made Xen crash on AMD ROME based machines (bsc#1135799).
- Xenpvnetboot is now ported correctly to Python 3 (bsc#1138563).
- Added code to change LIBXL_HOTPLUG_TIMEOUT at runtime (bsc#1120095).
The included README has details about the impact of this change
- Fixed an issue where the speculative mitigation facilities reported wrong status (bsc#1143563).
- Fixed an issue where Xen could not connect socket to /var/run/libvirt/libvirt-sock (bsc#1137471).
- Fixed an HPS bug which did not allow to install Windows Server 2016 with 2 CPUs setting or above
(bsc#1137717).
- Fixed a segmentation fault in Libvrtd during live migration to a VM (bsc#1145774).
- LTO is now disabled (bsc#1133296).
- Fixed an issue where Xen could not pre-allocate 1 shadow page (bsc#1145240).
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| SUSE · SLES 15 SP1 Linux Enterprise Module for Basesystem 15 SP1 | xen | 4.12.1_02-3.3.1 |
| SUSE · SLES 15 SP1 Linux Enterprise Module for Server Applications 15 SP1 | xen | 4.12.1_02-3.3.1 |
Vulnerabilities 6
-
Medium 5.9
Microarchitectural Fill Buffer Data Sampling (MFBDS): Fill buffers on some microprocessors utilizing speculative execut…
-
Medium 5.6
Microarchitectural Store Buffer Data Sampling (MSBDS): Store buffers on some microprocessors utilizing speculative exec…
-
Medium 5.6
Microarchitectural Load Port Data Sampling (MLPDS): Load ports on some microprocessors utilizing speculative execution …
-
Medium 5.6
Microarchitectural Data Sampling Uncacheable Memory (MDSUM): Uncacheable memory on some microprocessors utilizing specu…
-
Unscored —
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) …
-
Unscored —
An issue was discovered in Xen through 4.12.x allowing Arm domU attackers to cause a denial of service (infinite loop) …
References
-
report
https://bugzilla.suse.com/1027519
-
report
https://bugzilla.suse.com/1111331
-
report
https://bugzilla.suse.com/1120095
-
report
https://bugzilla.suse.com/1133296
-
report
https://bugzilla.suse.com/1135799
-
report
https://bugzilla.suse.com/1137471
-
report
https://bugzilla.suse.com/1137717
-
report
https://bugzilla.suse.com/1138294
-
report
https://bugzilla.suse.com/1138563
-
report
https://bugzilla.suse.com/1143563
-
report
https://bugzilla.suse.com/1145240
-
report
https://bugzilla.suse.com/1145774
-
web
https://www.suse.com/security/cve/CVE-2018-12126
-
web
https://www.suse.com/security/cve/CVE-2018-12127
-
web
https://www.suse.com/security/cve/CVE-2018-12130
-
web
https://www.suse.com/security/cve/CVE-2019-11091
-
web
https://www.suse.com/security/cve/CVE-2019-17349
-
web
https://www.suse.com/security/cve/CVE-2019-17350