Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

suse-cvrf логотип

SUSE-SU-2025:02316-1

Опубликовано: 15 июл. 2025
Источник: suse-cvrf

Описание

Security update for xen

This update for xen fixes the following issues:

  • CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471)
  • CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)

Список пакетов

Image SLES15-SP6
xen-libs-4.18.5_04-150600.3.28.1
xen-tools-domU-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2
xen-libs-4.18.5_04-150600.3.28.1
xen-tools-domU-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2-ECS-HVM
xen-libs-4.18.5_04-150600.3.28.1
xen-tools-domU-4.18.5_04-150600.3.28.1
SUSE Linux Enterprise Module for Basesystem 15 SP6
xen-libs-4.18.5_04-150600.3.28.1
xen-tools-domU-4.18.5_04-150600.3.28.1
SUSE Linux Enterprise Module for Server Applications 15 SP6
xen-4.18.5_04-150600.3.28.1
xen-devel-4.18.5_04-150600.3.28.1
xen-tools-4.18.5_04-150600.3.28.1
xen-tools-xendomains-wait-disk-4.18.5_04-150600.3.28.1
openSUSE Leap 15.6
xen-4.18.5_04-150600.3.28.1
xen-devel-4.18.5_04-150600.3.28.1
xen-doc-html-4.18.5_04-150600.3.28.1
xen-libs-4.18.5_04-150600.3.28.1
xen-libs-32bit-4.18.5_04-150600.3.28.1
xen-tools-4.18.5_04-150600.3.28.1
xen-tools-domU-4.18.5_04-150600.3.28.1
xen-tools-xendomains-wait-disk-4.18.5_04-150600.3.28.1

Ссылки

Описание

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

Затронутые продукты
Image SLES15-SP6-EC2-ECS-HVM:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2-ECS-HVM:xen-tools-domU-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-tools-domU-4.18.5_04-150600.3.28.1
Ссылки

Описание

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Затронутые продукты
Image SLES15-SP6-EC2-ECS-HVM:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2-ECS-HVM:xen-tools-domU-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-tools-domU-4.18.5_04-150600.3.28.1
Ссылки

Описание

unknown

Затронутые продукты
Image SLES15-SP6-EC2-ECS-HVM:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2-ECS-HVM:xen-tools-domU-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-libs-4.18.5_04-150600.3.28.1
Image SLES15-SP6-EC2:xen-tools-domU-4.18.5_04-150600.3.28.1
Ссылки
Уязвимость SUSE-SU-2025:02316-1