SUSE-SU-2023:0170-1

Details

This update for xen fixes the following issues:

CVE-2022-23824: Fixed multiple speculative security issues (bsc#1205209).

Affected Packages

xen

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

4.14.5_10-150300.3.45.1

xen-devel

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.14.5_10-150300.3.45.1

xen-libs

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Micro 5.1SUSE Linux Enterprise Micro 5.2

Fixed in:

4.14.5_10-150300.3.45.1

xen-tools

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.14.5_10-150300.3.45.1

xen-tools-domU

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.14.5_10-150300.3.45.1

xen-tools-xendomains-wait-disk

SUSE Enterprise Storage 7.1SUSE Linux Enterprise High Performance Computing 15 SP3-ESPOSSUSE Linux Enterprise High Performance Computing 15 SP3-LTSSSUSE Linux Enterprise Real Time 15 SP3SUSE Linux Enterprise Server 15 SP3-LTSS

Fixed in:

4.14.5_10-150300.3.45.1

References

REPORT

https://bugzilla.suse.com/1027519

REPORT

https://bugzilla.suse.com/1205209

WEB

https://www.suse.com/security/cve/CVE-2022-23824

ADVISORY

https://www.suse.com/support/update/announcement/2023/suse-su-20230170-1/