Описание
Security update for xen
This update for xen fixes the following issues:
- bsc#1174543 - secure boot related fixes
- bsc#1163019 - CVE-2020-8608: Potential OOB access due to unsafe snprintf() usages
Список пакетов
HPE Helion OpenStack 8
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE Enterprise Storage 5
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE Linux Enterprise Server 12 SP3-BCL
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE Linux Enterprise Server 12 SP3-LTSS
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE Linux Enterprise Server for SAP Applications 12 SP3
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE OpenStack Cloud 8
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
SUSE OpenStack Cloud Crowbar 8
xen-4.9.4_10-3.71.1
xen-doc-html-4.9.4_10-3.71.1
xen-libs-4.9.4_10-3.71.1
xen-libs-32bit-4.9.4_10-3.71.1
xen-tools-4.9.4_10-3.71.1
xen-tools-domU-4.9.4_10-3.71.1
Ссылки
- Link for SUSE-SU-2020:2171-1
- E-Mail link for SUSE-SU-2020:2171-1
- SUSE Security Ratings
- SUSE Bug 1163019
- SUSE Bug 1174543
- SUSE CVE CVE-2020-8608 page
Описание
In libslirp 4.1.0, as used in QEMU 4.2.0, tcp_subr.c misuses snprintf return values, leading to a buffer overflow in later code.
Затронутые продукты
HPE Helion OpenStack 8:xen-4.9.4_10-3.71.1
HPE Helion OpenStack 8:xen-doc-html-4.9.4_10-3.71.1
HPE Helion OpenStack 8:xen-libs-32bit-4.9.4_10-3.71.1
HPE Helion OpenStack 8:xen-libs-4.9.4_10-3.71.1
Ссылки
- CVE-2020-8608
- SUSE Bug 1163018
- SUSE Bug 1163019