SUSE-SU-2024:3586-1

Details

This update for xen fixes the following issues:

Security fixes:

CVE-2024-31145: Fixed error handling in x86 IOMMU identity mapping (XSA-460) (bsc#1228574)
CVE-2024-31146: Fixed PCI device pass-through with shared resources (XSA-461) (bsc#1228575)
CVE-2024-45817: Fixed Deadlock in vlapic_error() (XSA-462) (bsc#1230366)

Other fixes:

Upstream bug fixes (bsc#1027519)

Affected Packages

SUSE:Linux Enterprise Server 12 SP5xen

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server 12 SP5xen-doc-html

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server 12 SP5xen-libs

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server 12 SP5xen-libs-32bit

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server 12 SP5xen-tools

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server 12 SP5xen-tools-domU

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen-doc-html

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen-libs

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen-libs-32bit

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen-tools

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Server for SAP Applications 12 SP5xen-tools-domU

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Software Development Kit 12 SP5xen

Fixed in:

4.12.4_56-3.121.1

SUSE:Linux Enterprise Software Development Kit 12 SP5xen-devel

Fixed in:

4.12.4_56-3.121.1

References

REPORThttps://bugzilla.suse.com/1027519 REPORThttps://bugzilla.suse.com/1228574 REPORThttps://bugzilla.suse.com/1228575 REPORThttps://bugzilla.suse.com/1230366 WEBhttps://www.suse.com/security/cve/CVE-2024-31145 WEBhttps://www.suse.com/security/cve/CVE-2024-31146 WEBhttps://www.suse.com/security/cve/CVE-2024-45817 ADVISORYhttps://www.suse.com/support/update/announcement/2024/suse-su-20243586-1/

SUSE-SU-2024:3586-1

Details

Affected Packages

References

Upstream

Related

Ecosystems

Timeline