Security update for xen

SUSE Security Update: Security update for xen
Announcement ID: SUSE-SU-2022:0940-1
Rating: important
References: #1027519 #1191668 #1194267 #1196915
Cross-References:CVE-2021-26401 CVE-2022-0001 CVE-2022-0002
Affected Products:
  • SUSE Linux Enterprise Desktop 15-SP3
  • SUSE Linux Enterprise High Performance Computing 15-SP3
  • SUSE Linux Enterprise Micro 5.1
  • SUSE Linux Enterprise Module for Basesystem 15-SP3
  • SUSE Linux Enterprise Module for Server Applications 15-SP3
  • SUSE Linux Enterprise Server 15-SP3
  • SUSE Linux Enterprise Server for SAP Applications 15-SP3
  • SUSE Manager Proxy 4.2
  • SUSE Manager Server 4.2

An update that solves three vulnerabilities and has one errata is now available.

Description:

This update for xen fixes the following issues:
Update Xen to version 4.14.4 (bsc#1027519)
Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named "Branch Target Injection" and "Intra-Mode Branch History Injection" are now mitigated.
Security issues fixed:

  • CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).

Non-security issues fixed:
  • Fixed issue around xl and virsh operation - virsh list not giving any output (bsc#1191668).

Special Instructions and Notes:

Please reboot the system after installing this update.

Patch Instructions:

To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
Alternatively you can run the command listed for your product:

  • SUSE Linux Enterprise Module for Server Applications 15-SP3:
    zypper in -t patch SUSE-SLE-Module-Server-Applications-15-SP3-2022-940=1
  • SUSE Linux Enterprise Module for Basesystem 15-SP3:
    zypper in -t patch SUSE-SLE-Module-Basesystem-15-SP3-2022-940=1
  • SUSE Linux Enterprise Micro 5.1:
    zypper in -t patch SUSE-SUSE-MicroOS-5.1-2022-940=1

Package List:

  • SUSE Linux Enterprise Module for Server Applications 15-SP3 (x86_64):
    • xen-4.14.4_02-150300.3.21.1
    • xen-debugsource-4.14.4_02-150300.3.21.1
    • xen-devel-4.14.4_02-150300.3.21.1
    • xen-tools-4.14.4_02-150300.3.21.1
    • xen-tools-debuginfo-4.14.4_02-150300.3.21.1
  • SUSE Linux Enterprise Module for Server Applications 15-SP3 (noarch):
    • xen-tools-xendomains-wait-disk-4.14.4_02-150300.3.21.1
  • SUSE Linux Enterprise Module for Basesystem 15-SP3 (x86_64):
    • xen-debugsource-4.14.4_02-150300.3.21.1
    • xen-libs-4.14.4_02-150300.3.21.1
    • xen-libs-debuginfo-4.14.4_02-150300.3.21.1
    • xen-tools-domU-4.14.4_02-150300.3.21.1
    • xen-tools-domU-debuginfo-4.14.4_02-150300.3.21.1
  • SUSE Linux Enterprise Micro 5.1 (x86_64):
    • xen-debugsource-4.14.4_02-150300.3.21.1
    • xen-libs-4.14.4_02-150300.3.21.1
    • xen-libs-debuginfo-4.14.4_02-150300.3.21.1

References: