shield Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP5-2024-1295

This update for xen fixes the following issues: - CVE-2023-46842: Fixed denial of service due to Xen bug check triggered by HVM hypercalls (XSA-454) in xen x86 (bsc#1221984) - CVE-2024-31142: Fixed incorrect logic for BTC/SRSO mitigations (XSA-455) in xen x86 (bsc#1222302) - CVE-2024-2201: Fixed memory disclosure via Native Branch History Injection (XSA-456) in xen x86 (bsc#1222453) Other fixes: - Update to Xen 4.17.4 (bsc#1027519)

• Release Date
  Apr 15 2024
• References
  Bugzilla: 1221984, 1027519, 1222302, 1222453
  CVEs: CVE-2023-46842, CVE-2024-2201, CVE-2024-31142
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.5 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.17.4_02-150500.3.30.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.17.4_02-150500.3.30.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.17.4_02-150500.3.30.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.17.4_02-150500.3.30.1 lock rpm