SUSE-SU-2024:4073-1

Details

Description of the patch:

This update for xen fixes the following issues:

Security issues fixed:

CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622)
CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624)
CVE-2024-45817: xen: x86: Deadlock in vlapic_error() (bsc#1230366)

Non-security issue fixed:

Removed usage of net-tools-deprecated from supportconfig plugin (bsc#1232542)

Affected Packages

xen

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

xen-devel

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

xen-libs

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

xen-tools

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

xen-tools-domU

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

xen-tools-xendomains-wait-disk

SUSE Linux Enterprise High Performance Computing 15 SP2SUSE Linux Enterprise High Performance Computing 15 SP2-LTSSSUSE Linux Enterprise Server 15 SP2SUSE Linux Enterprise Server 15 SP2-LTSSSUSE Linux Enterprise Server for SAP Applications 15 SP2

Fixed in:

4.13.5_16-150200.3.99.1

References

ADVISORY

https://bugzilla.suse.com/1230366

ADVISORY

https://bugzilla.suse.com/1232542

ADVISORY

https://bugzilla.suse.com/1232622

ADVISORY

https://bugzilla.suse.com/1232624

ADVISORY