Описание
Security update for xen
This update for xen fixes the following issues:
Update Xen to version 4.14.4 (bsc#1027519)
Transient execution side-channel attacks attacking the Branch History Buffer (BHB), named 'Branch Target Injection' and 'Intra-Mode Branch History Injection' are now mitigated.
Security issues fixed:
- CVE-2022-0001, CVE-2022-0002, CVE-2021-26401: BHB speculation issues (bsc#1196915).
Non-security issues fixed:
- Fixed issue around xl and virsh operation - virsh list not giving any output (bsc#1191668).
Список пакетов
openSUSE Leap 15.3
Ссылки
- E-Mail link for openSUSE-SU-2022:0940-1
- SUSE Security Ratings
- SUSE Bug 1027519
- SUSE Bug 1191668
- SUSE Bug 1194267
- SUSE Bug 1196915
- SUSE CVE CVE-2021-26401 page
- SUSE CVE CVE-2022-0001 page
- SUSE CVE CVE-2022-0002 page
Описание
LFENCE/JMP (mitigation V2-2) may not sufficiently mitigate CVE-2017-5715 on some AMD CPUs.
Затронутые продукты
Ссылки
- CVE-2021-26401
- SUSE Bug 1191580
- SUSE Bug 1196901
- SUSE Bug 1209630
Описание
Non-transparent sharing of branch predictor selectors between contexts in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Затронутые продукты
Ссылки
- CVE-2022-0001
- SUSE Bug 1191580
- SUSE Bug 1196901
Описание
Non-transparent sharing of branch predictor within a context in some Intel(R) Processors may allow an authorized user to potentially enable information disclosure via local access.
Затронутые продукты
Ссылки
- CVE-2022-0002
- SUSE Bug 1191580
- SUSE Bug 1196901