This update for xen fixes the following issues :

Security issue fixed :

  - CVE-2020-28368: Fixed the Intel RAPL sidechannel attack,     aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed :

  - Updated to Xen 4.12.4 bug fix release (bsc#1027519).

  - Fixed a panic during MSI cleanup on AMD hardware     (bsc#1027519).

  - Adjusted help for --max_iters, default is 5     (bsc#1177950).

This update was imported from the SUSE:SLE-15-SP1:Update update project.

This update for xen fixes the following issues :

bsc#1178963 - stack corruption from XSA-346 change (XSA-355)

bsc#1177409 - CVE-2020-27674: x86 PV guest INVLPG-like flushes may leave stale TLB entries (XSA-286)

bsc#1177412 - CVE-2020-27672: Race condition in Xen mapping code (XSA-345)

bsc#1177413 - CVE-2020-27671: undue deferral of IOMMU TLB flushes (XSA-346)

bsc#1177414 - CVE-2020-27670: unsafe AMD IOMMU page table updates (XSA-347)

bsc#1178591 - CVE-2020-28368: Intel RAPL sidechannel attack aka PLATYPUS attack aka XSA-351

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change (XSA-355)

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

stack corruption from XSA-346 change [XSA-355]

----

Information leak via power sidechannel [XSA-351]

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

  - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346     change (XSA-355) 

This update was imported from the SUSE:SLE-15-SP2:Update update project.

This update for xen fixes the following issues :

Security issue fixed :

CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issue fixed :

Adjusted help for --max_iters, default is 5 (bsc#1177950).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

This update for xen fixes the following issues :

Security issue fixed :

CVE-2020-28368: Fixed the Intel RAPL sidechannel attack, aka PLATYPUS attack, aka XSA-351 (bsc#1178591).

Non-security issues fixed :

Updated to Xen 4.12.4 bug fix release (bsc#1027519).

Fixed a panic during MSI cleanup on AMD hardware (bsc#1027519).

Adjusted help for --max_iters, default is 5 (bsc#1177950).

Note that Tenable Network Security has extracted the preceding description block directly from the SUSE security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

ID	名前	製品	ファミリー	公開日	更新日	深刻度
143301	openSUSE Security Update : xen (openSUSE-2020-2030)	Nessus	SuSE Local Security Checks	2020/11/30	2024/2/8	medium
143674	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3631-1)	Nessus	SuSE Local Security Checks	2020/12/9	2022/5/11	high
143675	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3612-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/6	medium
143397	Fedora 33 : xen (2020-d71fa5f0b9)	Nessus	Fedora Local Security Checks	2020/12/1	2024/2/7	medium
143506	openSUSE Security Update : xen (openSUSE-2020-2162)	Nessus	SuSE Local Security Checks	2020/12/7	2024/2/6	high
143703	SUSE SLES12 Security Update : xen (SUSE-SU-2020:3415-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/6	medium
143861	SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3611-1)	Nessus	SuSE Local Security Checks	2020/12/9	2022/5/11	high
143881	SUSE SLED15 / SLES15 Security Update : xen (SUSE-SU-2020:3413-1)	Nessus	SuSE Local Security Checks	2020/12/9	2024/2/5	medium

検出

プラグインの検索

medium

high

medium

medium

high

medium

high

medium