SUSE-SU-2020:3916-1

    Dashboard / Vulnerabilities / SUSE-SU-2020:3916-1

    SUSE-SU-2020:3916-1

    Published: 22 Dec 2020Last Modified: 4 Feb 2026

    Summary: Security update for xen

    Details: This update for xen fixes the following issues: - CVE-2020-29480: Fixed an issue which could have allowed leak of non-sensitive data to administrator guests (bsc#117949 XSA-115). - CVE-2020-29481: Fixed an issue which could have allowd to new domains to inherit existing node permissions (bsc#1179498 XSA-322). - CVE-2020-29483: Fixed an issue where guests could disturb domain cleanup (bsc#1179502 XSA-325). - CVE-2020-29484: Fixed an issue where guests could crash xenstored via watchs (bsc#1179501 XSA-324). - CVE-2020-29566: Fixed an undue recursion in x86 HVM context switch code (bsc#1179506 XSA-348). - CVE-2020-29570: Fixed an issue where FIFO event channels control block related ordering (bsc#1179514 XSA-358). - CVE-2020-29571: Fixed an issue where FIFO event channels control structure ordering (bsc#1179516 XSA-359). - Fixed an issue where dump-core shows missing nr_pages during core (bsc#1176782). - Multiple other bugs (bsc#1027519)

    References: https://www.suse.com/support/update/announcement/2020/suse-su-20203916-1/, https://bugzilla.suse.com/1027519, https://bugzilla.suse.com/1176782, https://bugzilla.suse.com/1179496, https://bugzilla.suse.com/1179498, https://bugzilla.suse.com/1179501, https://bugzilla.suse.com/1179502, https://bugzilla.suse.com/1179506, https://bugzilla.suse.com/1179514, https://bugzilla.suse.com/1179516, https://www.suse.com/security/cve/CVE-2020-29480, https://www.suse.com/security/cve/CVE-2020-29481, https://www.suse.com/security/cve/CVE-2020-29483, https://www.suse.com/security/cve/CVE-2020-29484, https://www.suse.com/security/cve/CVE-2020-29566, https://www.suse.com/security/cve/CVE-2020-29570, https://www.suse.com/security/cve/CVE-2020-29571

    Affected packages

    Package

    Name: xen

    Purl: pkg:rpm/suse/xen&distro=SUSE%20Linux%20Enterprise%20High%20Performance%20Computing%2015-ESPOS

    Affected ranges

    Type: ECOSYSTEM

    Events:

    Introduced- 0
    Fixed -4.10.4_24-3.53.1

    Affected versions

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High
    SUSE-SU-2020:3916-1 | CVE-DB