shield Security update for xen

SUSE-SLE-Module-Server-Applications-15-SP5-2024-3980

This update for xen fixes the following issues: Security issues fixed: - CVE-2024-45818: xen: Deadlock in x86 HVM standard VGA handling (bsc#1232622) - CVE-2024-45819: xen: libxl leaks data to PVH guests via ACPI tables (bsc#1232624) - CVE-2024-45817: xen: x86: Deadlock in vlapic_error() (bsc#1230366) Non-security issues fixed: - Removed usage of net-tools-deprecated from supportconfig plugin (bsc#1232542) - Upstream bug fixes (bsc#1027519)

• Release Date
  Nov 12 2024
• References
  Bugzilla: 1027519, 1232622, 1232542, 1230366, 1232624
  CVEs: CVE-2024-45819, CVE-2024-45817, CVE-2024-45818
• Type
  security
• Severity
  moderate

cloud_download Downloads

Server Applications Module 15.5 x86_64

• Packages
  xen
  Xen Virtualization: Hypervisor (aka VMM aka Microkernel)

  4.17.5_06-150500.3.42.1 lock rpm lock src

  xen-devel
  Xen Virtualization: Headers and libraries for development

  4.17.5_06-150500.3.42.1 lock rpm

  xen-tools
  Xen Virtualization: Control tools for domain 0

  4.17.5_06-150500.3.42.1 lock rpm

  xen-tools-xendomains-wait-disk
  Adds a new xendomains-wait-disks.service

  4.17.5_06-150500.3.42.1 lock rpm