File _patchinfo of Package patchinfo.19911

<patchinfo incident="19911">
  <issue tracker="bnc" id="1179148">kdump of HVM fails, soft-reset not handled by libxl</issue>
  <issue tracker="bnc" id="1181989">openQA job causes libvirtd to dump core when running kdump inside domain</issue>
  <issue tracker="bnc" id="1180491">"Panic on CPU 0: IO-APIC + timer doesn't work!"</issue>
  <issue tracker="bnc" id="1186433">VUL-0: EMBARGOED: CVE-2021-0089: xen: Speculative Code Store Bypass (XSA-375)</issue>
  <issue tracker="bnc" id="1186428">VUL-0: EMBARGOED: CVE-2021-28693: xen: xen/arm: Boot modules are not scrubbed (XSA-372)</issue>
  <issue tracker="bnc" id="1186429">VUL-0: EMBARGOED: CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (XSA-373)</issue>
  <issue tracker="bnc" id="1186434">VUL-0: EMBARGOED: CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (XSA-377)</issue>
  <issue tracker="bnc" id="1027519">Xen: Missing upstream bug fixes</issue>
  <issue tracker="bnc" id="1189373">CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)</issue>
  <issue tracker="bnc" id="1189376">CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)</issue>
  <issue tracker="bnc" id="1189378">CVE-2021-28698: long running loops in grant table handling. (XSA-380)</issue>
  <issue tracker="bnc" id="1189380">CVE-2021-28699: inadequate grant-v2 status frames array bounds check. (XSA-382)</issue>
  <issue tracker="bnc" id="1189381">CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)</issue>
  <issue tracker="bnc" id="1179246">Dom0 hangs when pinning CPUs for dom0 with HVM guest</issue>
  <issue tracker="bnc" id="1188050">Fixed Xen SLES11SP4 guest hangs on cluster</issue>
  <issue tracker="bnc" id="1180846">Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck</issue>
  <issue tracker="bnc" id="1183243">Core cannot be opened when using xl dump-core of VM with PTF</issue>
  <issue tracker="bnc" id="1189882">Prevent superpage allocation in the LAPIC and ACPI_INFO range</issue>
  <issue tracker="cve" id="2021-28690"/>
  <issue tracker="cve" id="2021-0089"/>
  <issue tracker="cve" id="2021-28692"/>
  <issue tracker="cve" id="2021-28693"/>
  <issue tracker="cve" id="2021-28694"/>
  <issue tracker="cve" id="2021-28695"/>
  <issue tracker="cve" id="2021-28696"/>
  <issue tracker="cve" id="2021-28697"/>
  <issue tracker="cve" id="2021-28698"/>
  <issue tracker="cve" id="2021-28699"/>
  <issue tracker="cve" id="2021-28700"/>
  <packager>charlesa</packager>
  <rating>important</rating>
  <category>security</category>
  <summary>Security update for xen</summary>
  <description>This update for xen fixes the following issues:

Security issues fixed:

- CVE-2021-28693: xen/arm: Boot modules are not scrubbed (bsc#1186428)
- CVE-2021-28692: xen: inappropriate x86 IOMMU timeout detection / handling (bsc#1186429)
- CVE-2021-0089: xen: Speculative Code Store Bypass (bsc#1186433)
- CVE-2021-28690: xen: x86: TSX Async Abort protections not restored after S3 (bsc#1186434)

- CVE-2021-28694,CVE-2021-28695,CVE-2021-28696: IOMMU page mapping issues on x86 (XSA-378)(bsc#1189373).
- CVE-2021-28697: grant table v2 status pages may remain accessible after de-allocation (XSA-379)(bsc#1189376).
- CVE-2021-28698: long running loops in grant table handling (XSA-380)(bsc#1189378).
- CVE-2021-28699: inadequate grant-v2 status frames array bounds check (XSA-382)(bsc#1189380).
- CVE-2021-28700: No memory limit for dom0less domUs (XSA-383)(bsc#1189381).

Other issues fixed:

- Fixed "Panic on CPU 0: IO-APIC + timer doesn't work!" (bsc#1180491)
- Upstream bug fixes (bsc#1027519)
- Dom0 hangs when pinning CPUs for dom0 with HVM guest (bsc#1179246).
- Fixed Xen SLES11SP4 guest hangs on cluster (bsc#1188050).
- Fixed PVHVM SLES12 SP5 - NMI Watchdog CPU Stuck (bsc#1180846).
- Core cannot be opened when using xl dump-core of VM with PTF (bsc#1183243).
- Prevent superpage allocation in the LAPIC and ACPI_INFO range (bsc#1189882).
</description>
</patchinfo>