SUSE-SU-2020:1632-1

MEDIUM6.5

Security update for xen

Published Jun 17, 2020

Modified 6 years ago

Fix available

Details

Description of the patch:

This update for xen to version 4.11.4 fixes the following issues:

CVE-2020-0543: Fixed a side channel attack against special registers which could have resulted in leaking of read values to cores other than the one which called it. This attack is known as Special Register Buffer Data Sampling (SRBDS) or 'CrossTalk' (bsc#1172205).

Affected Packages

xen-devel

SUSE Linux Enterprise Desktop 12 SP4SUSE Linux Enterprise Server 12 SP4SUSE Linux Enterprise Server for SAP Applications 12 SP4SUSE Linux Enterprise Software Development Kit 12 SP4

Fixed in:

4.11.4_02-2.26.1

References

ADVISORY

https://bugzilla.suse.com/1027519

ADVISORY

https://bugzilla.suse.com/1172205

ADVISORY

https://lists.suse.com/pipermail/sle-security-updates/2020-June/006959.html

ADVISORY

https://www.suse.com/security/cve/CVE-2020-0543/

WEB