Уведомление безопасности SUSE-SU-2019:0020-1

Высокая (7.2)

(AV:L/AC:L/Au:N/C:C/I:C/A:C)

SUSE

xen (any) xen-debugsource (any) xen-doc-html (any) xen-libs (any) xen-libs-32bit (any) xen-libs-debuginfo (any) xen-libs-debuginfo-32bit (any) xen-tools (any) xen-tools-debuginfo (any) xen-tools-domU (any) xen-tools-domU-debuginfo (any)

Уведомление безопасности об уязвимостях SUSE Linux Enterprise Server 12-SP2-BCL, SUSE OpenStack Cloud 7, SUSE Linux Enterprise Server for SAP 12-SP2, SUSE Linux Enterprise Server 12-SP2-LTSS, SUSE Enterprise Storage 4

Проблема может быть решена обновлением операционной системы до следующих версий пакетов в зависимости от архитектуры:
SUSE Linux Enterprise Server 12-SP2-BCL:
x86_64:
xen-doc-html - 4.7.6_05-43.45.1
xen-tools-domU - 4.7.6_05-43.45.1
xen-libs-debuginfo - 4.7.6_05-43.45.1
xen-libs-32bit - 4.7.6_05-43.45.1
xen-tools-debuginfo - 4.7.6_05-43.45.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.45.1
xen-libs - 4.7.6_05-43.45.1
xen-debugsource - 4.7.6_05-43.45.1
xen - 4.7.6_05-43.45.1
xen-tools-domU-debuginfo - 4.7.6_05-43.45.1
xen-tools - 4.7.6_05-43.45.1
SUSE OpenStack Cloud 7:
x86_64:
xen-doc-html - 4.7.6_05-43.45.1
xen-tools-domU - 4.7.6_05-43.45.1
xen-libs-debuginfo - 4.7.6_05-43.45.1
xen-libs-32bit - 4.7.6_05-43.45.1
xen-tools-debuginfo - 4.7.6_05-43.45.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.45.1
xen-libs - 4.7.6_05-43.45.1
xen-debugsource - 4.7.6_05-43.45.1
xen - 4.7.6_05-43.45.1
xen-tools-domU-debuginfo - 4.7.6_05-43.45.1
xen-tools - 4.7.6_05-43.45.1
SUSE Linux Enterprise Server for SAP 12-SP2:
x86_64:
xen-doc-html - 4.7.6_05-43.45.1
xen-tools-domU - 4.7.6_05-43.45.1
xen-libs-debuginfo - 4.7.6_05-43.45.1
xen-libs-32bit - 4.7.6_05-43.45.1
xen-tools-debuginfo - 4.7.6_05-43.45.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.45.1
xen-libs - 4.7.6_05-43.45.1
xen-debugsource - 4.7.6_05-43.45.1
xen - 4.7.6_05-43.45.1
xen-tools-domU-debuginfo - 4.7.6_05-43.45.1
xen-tools - 4.7.6_05-43.45.1
SUSE Linux Enterprise Server 12-SP2-LTSS:
x86_64:
xen-doc-html - 4.7.6_05-43.45.1
xen-tools-domU - 4.7.6_05-43.45.1
xen-libs-debuginfo - 4.7.6_05-43.45.1
xen-libs-32bit - 4.7.6_05-43.45.1
xen-tools-debuginfo - 4.7.6_05-43.45.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.45.1
xen-libs - 4.7.6_05-43.45.1
xen-debugsource - 4.7.6_05-43.45.1
xen - 4.7.6_05-43.45.1
xen-tools-domU-debuginfo - 4.7.6_05-43.45.1
xen-tools - 4.7.6_05-43.45.1
SUSE Enterprise Storage 4:
x86_64:
xen-doc-html - 4.7.6_05-43.45.1
xen-tools-domU - 4.7.6_05-43.45.1
xen-libs-debuginfo - 4.7.6_05-43.45.1
xen-libs-32bit - 4.7.6_05-43.45.1
xen-tools-debuginfo - 4.7.6_05-43.45.1
xen-libs-debuginfo-32bit - 4.7.6_05-43.45.1
xen-libs - 4.7.6_05-43.45.1
xen-debugsource - 4.7.6_05-43.45.1
xen - 4.7.6_05-43.45.1
xen-tools-domU-debuginfo - 4.7.6_05-43.45.1
xen-tools - 4.7.6_05-43.45.1

http://lists.suse.com/pipermail/sle-security-updates/2019-January/005016.html
https://bugzilla.suse.com/1027519
https://bugzilla.suse.com/1105528
https://bugzilla.suse.com/1108940
https://bugzilla.suse.com/1114423
https://bugzilla.suse.com/1115040
https://bugzilla.suse.com/1115045
https://bugzilla.suse.com/1115047
https://bugzilla.suse.com/1116380
https://bugzilla.suse.com/1117756

Источник: CVE
Наименование: CVE-2018-18849
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-18849

Источник: CVE
Наименование: CVE-2018-19962
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19962

Источник: CVE
Наименование: CVE-2018-19965
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19965

Источник: CVE
Наименование: CVE-2018-19966
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19966

Источник: CVE
Наименование: CVE-2018-19961
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19961

Источник: CVE
Наименование: CVE-2018-19665
URL: http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-19665