Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02290-1

Опубликовано: 11 июл. 2025
Источник: suse-cvrf

Описание

Security update for xen

This update for xen fixes the following issues:

  • CVE-2024-28956: Fixed Intel CPU: Indirect Target Selection (ITS) (XSA-469) (bsc#1243117)
  • CVE-2025-1713: Fixed deadlock potential with VT-d and legacy PCI device pass-through (XSA-467) (bsc#1238043)

Список пакетов

Image SLES12-SP5-EC2-BYOS
xen-libs-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-ECS-On-Demand
xen-libs-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-On-Demand
xen-libs-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-SAP-BYOS
xen-libs-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-SAP-On-Demand
xen-libs-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1
SUSE Linux Enterprise Server LTSS Extended Security 12 SP5
xen-4.12.4_60-3.127.1
xen-devel-4.12.4_60-3.127.1
xen-doc-html-4.12.4_60-3.127.1
xen-libs-4.12.4_60-3.127.1
xen-libs-32bit-4.12.4_60-3.127.1
xen-tools-4.12.4_60-3.127.1
xen-tools-domU-4.12.4_60-3.127.1

Ссылки

Описание

Exposure of Sensitive Information in Shared Microarchitectural Structures during Transient Execution for some Intel(R) Processors may allow an authenticated user to potentially enable information disclosure via local access.

Затронутые продукты
Image SLES12-SP5-EC2-BYOS:xen-libs-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-BYOS:xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-ECS-On-Demand:xen-libs-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-ECS-On-Demand:xen-tools-domU-4.12.4_60-3.127.1
Ссылки

Описание

When setting up interrupt remapping for legacy PCI(-X) devices, including PCI(-X) bridges, a lookup of the upstream bridge is required. This lookup, itself involving acquiring of a lock, is done in a context where acquiring that lock is unsafe. This can lead to a deadlock.

Затронутые продукты
Image SLES12-SP5-EC2-BYOS:xen-libs-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-BYOS:xen-tools-domU-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-ECS-On-Demand:xen-libs-4.12.4_60-3.127.1
Image SLES12-SP5-EC2-ECS-On-Demand:xen-tools-domU-4.12.4_60-3.127.1
Ссылки