SUSE-SU-2025:02316-1

Опубликовано: 15 июл. 2025

Источник: suse-cvrf

Описание

Security update for xen

This update for xen fixes the following issues:

CVE-2024-36350, CVE-2024-36357: More AMD transient execution attacks (bsc#1246112, XSA-471)
CVE-2025-27465: Incorrect stubs exception handling for flags recovery (bsc#1244644, XSA-470)

Список пакетов

Image SLES15-SP6

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-3P

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Basic

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Standard

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-Aliyun

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-GDC

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-EC2-ECS-HVM

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-HPC-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Hardened-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Hardened-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Hardened-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Hardened-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure-3P

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure-LI-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-BYOS

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-BYOS

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAP-Hardened-GCE

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAPCAL

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAPCAL-Azure

xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAPCAL-EC2

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

Image SLES15-SP6-SAPCAL-GCE

xen-libs-4.18.5_04-150600.3.28.1

SUSE Linux Enterprise Module for Basesystem 15 SP6

xen-libs-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

SUSE Linux Enterprise Module for Server Applications 15 SP6

xen-4.18.5_04-150600.3.28.1

xen-devel-4.18.5_04-150600.3.28.1

xen-tools-4.18.5_04-150600.3.28.1

xen-tools-xendomains-wait-disk-4.18.5_04-150600.3.28.1

openSUSE Leap 15.6

xen-4.18.5_04-150600.3.28.1

xen-devel-4.18.5_04-150600.3.28.1

xen-doc-html-4.18.5_04-150600.3.28.1

xen-libs-4.18.5_04-150600.3.28.1

xen-libs-32bit-4.18.5_04-150600.3.28.1

xen-tools-4.18.5_04-150600.3.28.1

xen-tools-domU-4.18.5_04-150600.3.28.1

xen-tools-xendomains-wait-disk-4.18.5_04-150600.3.28.1

Ссылки

https://www.suse.com/support/update/announcement/2025/suse-su-202502316-1/
Link for SUSE-SU-2025:02316-1
https://lists.suse.com/pipermail/sle-security-updates/2025-July/021816.html
E-Mail link for SUSE-SU-2025:02316-1
https://www.suse.com/support/security/rating/
SUSE Security Ratings
https://bugzilla.suse.com/1238896
SUSE Bug 1238896
https://bugzilla.suse.com/1244644
SUSE Bug 1244644
https://bugzilla.suse.com/1246112
SUSE Bug 1246112
https://www.suse.com/security/cve/CVE-2024-36350/
SUSE CVE CVE-2024-36350 page
https://www.suse.com/security/cve/CVE-2024-36357/
SUSE CVE CVE-2024-36357 page
https://www.suse.com/security/cve/CVE-2025-27465/
SUSE CVE CVE-2025-27465 page

Описание

A transient execution vulnerability in some AMD processors may allow an attacker to infer data from previous stores, potentially resulting in the leakage of privileged information.

Затронутые продукты

Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_04-150600.3.28.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-36350.html
CVE-2024-36350
https://bugzilla.suse.com/1238896
SUSE Bug 1238896

Описание

A transient execution vulnerability in some AMD processors may allow an attacker to infer data in the L1D cache, potentially resulting in the leakage of sensitive information across privileged boundaries.

Затронутые продукты

Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_04-150600.3.28.1

Ссылки

https://www.suse.com/security/cve/CVE-2024-36357.html
CVE-2024-36357
https://bugzilla.suse.com/1238896
SUSE Bug 1238896

Описание

Certain instructions need intercepting and emulating by Xen. In some cases Xen emulates the instruction by replaying it, using an executable stub. Some instructions may raise an exception, which is supposed to be handled gracefully. Certain replayed instructions have additional logic to set up and recover the changes to the arithmetic flags. For replayed instructions where the flags recovery logic is used, the metadata for exception handling was incorrect, preventing Xen from handling the the exception gracefully, treating it as fatal instead.

Затронутые продукты

Image SLES15-SP6-Azure-3P:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Basic:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-Azure-Standard:xen-libs-4.18.5_04-150600.3.28.1

Image SLES15-SP6-BYOS-Azure:xen-libs-4.18.5_04-150600.3.28.1

Ссылки

https://www.suse.com/security/cve/CVE-2025-27465.html
CVE-2025-27465
https://bugzilla.suse.com/1244644
SUSE Bug 1244644

SUSE-SU-2025:02316-1

Описание

Список пакетов

Image SLES15-SP6

Image SLES15-SP6-Azure-3P

Image SLES15-SP6-Azure-Basic

Image SLES15-SP6-Azure-Standard

Image SLES15-SP6-BYOS

Image SLES15-SP6-BYOS-Azure

Image SLES15-SP6-BYOS-EC2

Image SLES15-SP6-BYOS-GCE

Image SLES15-SP6-CHOST-BYOS

Image SLES15-SP6-CHOST-BYOS-Aliyun

Image SLES15-SP6-CHOST-BYOS-Azure

Image SLES15-SP6-CHOST-BYOS-EC2

Image SLES15-SP6-CHOST-BYOS-GCE

Image SLES15-SP6-CHOST-BYOS-GDC

Image SLES15-SP6-CHOST-BYOS-SAP-CCloud

Image SLES15-SP6-EC2

Image SLES15-SP6-EC2-ECS-HVM

Image SLES15-SP6-GCE

Image SLES15-SP6-HPC

Image SLES15-SP6-HPC-Azure

Image SLES15-SP6-HPC-BYOS

Image SLES15-SP6-HPC-BYOS-Azure

Image SLES15-SP6-HPC-BYOS-EC2

Image SLES15-SP6-HPC-BYOS-GCE

Image SLES15-SP6-HPC-EC2

Image SLES15-SP6-HPC-GCE

Image SLES15-SP6-Hardened-BYOS

Image SLES15-SP6-Hardened-BYOS-Azure

Image SLES15-SP6-Hardened-BYOS-EC2

Image SLES15-SP6-Hardened-BYOS-GCE

Image SLES15-SP6-SAP

Image SLES15-SP6-SAP-Azure

Image SLES15-SP6-SAP-Azure-3P

Image SLES15-SP6-SAP-Azure-LI-BYOS

Image SLES15-SP6-SAP-Azure-LI-BYOS-Production

Image SLES15-SP6-SAP-Azure-VLI-BYOS

Image SLES15-SP6-SAP-Azure-VLI-BYOS-Production

Image SLES15-SP6-SAP-BYOS

Image SLES15-SP6-SAP-BYOS-Azure

Image SLES15-SP6-SAP-BYOS-EC2

Image SLES15-SP6-SAP-BYOS-GCE

Image SLES15-SP6-SAP-EC2

Image SLES15-SP6-SAP-GCE

Image SLES15-SP6-SAP-Hardened

Image SLES15-SP6-SAP-Hardened-Azure

Image SLES15-SP6-SAP-Hardened-BYOS

Image SLES15-SP6-SAP-Hardened-BYOS-Azure

Image SLES15-SP6-SAP-Hardened-BYOS-EC2

Image SLES15-SP6-SAP-Hardened-BYOS-GCE

Image SLES15-SP6-SAP-Hardened-EC2

Image SLES15-SP6-SAP-Hardened-GCE

Image SLES15-SP6-SAPCAL

Image SLES15-SP6-SAPCAL-Azure

Image SLES15-SP6-SAPCAL-EC2

Image SLES15-SP6-SAPCAL-GCE

SUSE Linux Enterprise Module for Basesystem 15 SP6

SUSE Linux Enterprise Module for Server Applications 15 SP6

openSUSE Leap 15.6

Ссылки

Уязвимость: CVE-2024-36350

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2024-36357

Описание

Затронутые продукты

Ссылки

Уязвимость: CVE-2025-27465

Описание

Затронутые продукты

Ссылки