SUSE-SU-2024:4116-1

Опубликовано: 29 нояб. 2024

Источник: suse-cvrf

Описание

Security update for xen

This update for xen fixes the following issues:

CVE-2024-45818: Fixed deadlock in x86 HVM standard VGA handling (XSA-463) (bsc#1232622).
CVE-2024-45819: Fixed libxl data leaks to PVH guests via ACPI tables (XSA-464) (bsc#1232624).

Bug fixes:

Remove usage of net-tools-deprecated from supportconfig plugin (bsc#1232542).

Список пакетов

Image SLES15-SP4-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-HPC-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Hardened-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Hardened-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Hardened-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Hardened-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-BYOS

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-3-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-Micro-5-4-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Azure-LI-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-BYOS

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-BYOS

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAP-Hardened-GCE

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAPCAL

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAPCAL-Azure

xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAPCAL-EC2

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-SAPCAL-GCE

xen-libs-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise Micro 5.3

xen-libs-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise Micro 5.4

xen-libs-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise Server 15 SP4-LTSS

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

SUSE Linux Enterprise Server for SAP Applications 15 SP4

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

SUSE Manager Proxy 4.3

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

SUSE Manager Server 4.3

xen-4.16.6_06-150400.4.65.1

xen-devel-4.16.6_06-150400.4.65.1

xen-libs-4.16.6_06-150400.4.65.1

xen-tools-4.16.6_06-150400.4.65.1

xen-tools-domU-4.16.6_06-150400.4.65.1

xen-tools-xendomains-wait-disk-4.16.6_06-150400.4.65.1

Ссылки

https://www.suse.com/support/update/announcement/2024/suse-su-20244116-1/
Link for SUSE-SU-2024:4116-1
https://lists.suse.com/pipermail/sle-security-updates/2024-November/019878.html
E-Mail link for SUSE-SU-2024:4116-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1232542
SUSE Bug 1232542
https://bugzilla.suse.com/1232622
SUSE Bug 1232622
https://bugzilla.suse.com/1232624
SUSE Bug 1232624
https://www.suse.com/security/cve/CVE-2024-45818/
SUSE CVE CVE-2024-45818 page
https://www.suse.com/security/cve/CVE-2024-45819/
SUSE CVE CVE-2024-45819 page

Описание

The hypervisor contains code to accelerate VGA memory accesses for HVM guests, when the (virtual) VGA is in "standard" mode. Locking involved there has an unusual discipline, leaving a lock acquired past the return from the function that acquired it. This behavior results in a problem when emulating an instruction with two memory accesses, both of which touch VGA memory (plus some further constraints which aren't relevant here). When emulating the 2nd access, the lock that is already being held would be attempted to be re-acquired, resulting in a deadlock. This deadlock was already found when the code was first introduced, but was analysed incorrectly and the fix was incomplete. Analysis in light of the new finding cannot find a way to make the existing locking discipline work. In staging, this logic has all been removed because it was discovered to be accidentally disabled since Xen 4.7. Therefore, we are fixing the locking problem by backporting the removal of most of the feature. Note that even with the feature disabled, the lock would still be acquired for any accesses to the VGA MMIO region.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-EC2:xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-EC2:xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-GCE:xen-libs-4.16.6_06-150400.4.65.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-45818.html
CVE-2024-45818
https://bugzilla.suse.com/1232622
SUSE Bug 1232622

Описание

PVH guests have their ACPI tables constructed by the toolstack. The construction involves building the tables in local memory, which are then copied into guest memory. While actually used parts of the local memory are filled in correctly, excess space that is being allocated is left with its prior contents.

Затронутые продукты

Image SLES15-SP4-BYOS-Azure:xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-EC2:xen-libs-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-EC2:xen-tools-domU-4.16.6_06-150400.4.65.1

Image SLES15-SP4-BYOS-GCE:xen-libs-4.16.6_06-150400.4.65.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-45819.html
CVE-2024-45819
https://bugzilla.suse.com/1232624
SUSE Bug 1232624

SUSE-SU-2024:4116-1

Описание

Список пакетов

Image SLES15-SP4-BYOS

Image SLES15-SP4-BYOS-Azure

Image SLES15-SP4-BYOS-EC2

Image SLES15-SP4-BYOS-GCE

Image SLES15-SP4-HPC-BYOS

Image SLES15-SP4-HPC-BYOS-Azure

Image SLES15-SP4-HPC-BYOS-EC2

Image SLES15-SP4-HPC-BYOS-GCE

Image SLES15-SP4-HPC-EC2

Image SLES15-SP4-HPC-GCE

Image SLES15-SP4-Hardened-BYOS

Image SLES15-SP4-Hardened-BYOS-Azure

Image SLES15-SP4-Hardened-BYOS-EC2

Image SLES15-SP4-Hardened-BYOS-GCE

Image SLES15-SP4-Manager-Proxy-4-3-BYOS

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Proxy-4-3-BYOS-GCE

Image SLES15-SP4-Manager-Server-4-3

Image SLES15-SP4-Manager-Server-4-3-Azure-llc

Image SLES15-SP4-Manager-Server-4-3-Azure-ltd

Image SLES15-SP4-Manager-Server-4-3-BYOS

Image SLES15-SP4-Manager-Server-4-3-BYOS-Azure

Image SLES15-SP4-Manager-Server-4-3-BYOS-EC2

Image SLES15-SP4-Manager-Server-4-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3

Image SLES15-SP4-Micro-5-3-BYOS

Image SLES15-SP4-Micro-5-3-BYOS-Azure

Image SLES15-SP4-Micro-5-3-BYOS-EC2

Image SLES15-SP4-Micro-5-3-BYOS-GCE

Image SLES15-SP4-Micro-5-3-EC2

Image SLES15-SP4-Micro-5-4

Image SLES15-SP4-Micro-5-4-BYOS

Image SLES15-SP4-Micro-5-4-BYOS-Azure

Image SLES15-SP4-Micro-5-4-BYOS-EC2

Image SLES15-SP4-Micro-5-4-BYOS-GCE

Image SLES15-SP4-Micro-5-4-EC2

Image SLES15-SP4-Micro-5-4-GCE

Image SLES15-SP4-SAP

Image SLES15-SP4-SAP-Azure

Image SLES15-SP4-SAP-Azure-LI-BYOS

Image SLES15-SP4-SAP-Azure-LI-BYOS-Production

Image SLES15-SP4-SAP-Azure-VLI-BYOS

Image SLES15-SP4-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP4-SAP-BYOS

Image SLES15-SP4-SAP-BYOS-Azure

Image SLES15-SP4-SAP-BYOS-EC2

Image SLES15-SP4-SAP-BYOS-GCE

Image SLES15-SP4-SAP-EC2

Image SLES15-SP4-SAP-GCE

Image SLES15-SP4-SAP-Hardened

Image SLES15-SP4-SAP-Hardened-Azure

Image SLES15-SP4-SAP-Hardened-BYOS

Image SLES15-SP4-SAP-Hardened-BYOS-Azure

Image SLES15-SP4-SAP-Hardened-BYOS-EC2

Image SLES15-SP4-SAP-Hardened-BYOS-GCE

Image SLES15-SP4-SAP-Hardened-GCE

Image SLES15-SP4-SAPCAL

Image SLES15-SP4-SAPCAL-Azure

Image SLES15-SP4-SAPCAL-EC2

Image SLES15-SP4-SAPCAL-GCE

SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS

SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS

SUSE Linux Enterprise Micro 5.3

SUSE Linux Enterprise Micro 5.4

SUSE Linux Enterprise Server 15 SP4-LTSS

SUSE Linux Enterprise Server for SAP Applications 15 SP4

SUSE Manager Proxy 4.3

SUSE Manager Server 4.3

Ссылки

Уязвимость: CVE-2024-45818

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-45819

Описание

Затронутые продукты