SUSE-SU-2021:1028-1

See a problem?
Import Source
https://ftp.suse.com/pub/projects/security/osv/SUSE-SU-2021:1028-1.json
JSON Data
https://api.osv.dev/v1/vulns/SUSE-SU-2021:1028-1
Related
Published
2021-04-06T15:54:42Z
Modified
2021-04-06T15:54:42Z
Summary
Security update for xen
Details

This update for xen fixes the following issues:

  • CVE-2021-3308: VUL-0: xen: IRQ vector leak on x86 (bsc#1181254, XSA-360)
  • CVE-2021-28687: HVM soft-reset crashes toolstack (bsc#1183072, XSA-368)
  • L3: conring size for XEN HV's with huge memory to small. Inital Xen logs cut (bsc#1177204)
  • L3: XEN domU crashed on resume when using the xl unpause command (bsc#1182576)
  • L3: xen: no needsreboot flag set (bsc#1180690)
  • kdump of HVM fails, soft-reset not handled by libxl (bsc#1179148)
  • openQA job causes libvirtd to dump core when running kdump inside domain (bsc#1181989)
  • Upstream bug fixes (bsc#1027519)
References

Affected packages

SUSE:Linux Enterprise Module for Basesystem 15 SP2 / xen

Package

Name
xen
Purl
purl:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Basesystem%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.13.2_08-3.25.3

Ecosystem specific 

{
    "binaries": [
        {
            "xen-libs": "4.13.2_08-3.25.3",
            "xen-tools-domU": "4.13.2_08-3.25.3"
        }
    ]
}

SUSE:Linux Enterprise Module for Server Applications 15 SP2 / xen

Package

Name
xen
Purl
purl:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Module%20for%20Server%20Applications%2015%20SP2

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.13.2_08-3.25.3

Ecosystem specific 

{
    "binaries": [
        {
            "xen-tools": "4.13.2_08-3.25.3",
            "xen-tools-xendomains-wait-disk": "4.13.2_08-3.25.3",
            "xen-devel": "4.13.2_08-3.25.3",
            "xen": "4.13.2_08-3.25.3"
        }
    ]
}

SUSE:Linux Enterprise Micro 5.0 / xen

Package

Name
xen
Purl
purl:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20Micro%205.0

Affected ranges

Type
ECOSYSTEM
Events
Introduced
0Unknown introduced version / All previous versions are affected
Fixed
4.13.2_08-3.25.3

Ecosystem specific 

{
    "binaries": [
        {
            "xen-libs": "4.13.2_08-3.25.3"
        }
    ]
}