Debian FTP Masters
2023-Aug-20 15:12 UTC
[Pkg-xen-devel] xen_4.17.2-1_source.changes ACCEPTED into unstable
Thank you for your contribution to Debian.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 20 Aug 2023 16:08:59 +0200
Source: xen
Architecture: source
Version: 4.17.2-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel at lists.alioth.debian.org>
Changed-By: Maximilian Engelhardt <maxi at daemonizer.de>
Closes: 1042102
Changes:
xen (4.17.2-1) unstable; urgency=medium
.
* Update to new upstream version 4.17.2, which also contains
security fixes for the following issues: (Closes: #1042102)
- x86/AMD: Zenbleed
XSA-433 CVE-2023-20593
- x86/AMD: Speculative Return Stack Overflow
XSA-434 CVE-2023-20569
- x86/Intel: Gather Data Sampling
XSA-435 CVE-2022-40982
- arm: Guests can trigger a deadlock on Cortex-A77
XSA-436 CVE-2023-34320
* Note that the following XSA are not listed, because...
- XSA-432 has patches for the Linux kernel.
Checksums-Sha1:
33783409f02961684dfe99d716d2ea0c46a775ea 4362 xen_4.17.2-1.dsc
85b3e06f6f688ebf187359a228d1ff06d0694e59 4665484 xen_4.17.2.orig.tar.xz
f2832893f12637f3cd10a5b07092c48052119289 136680 xen_4.17.2-1.debian.tar.xz
Checksums-Sha256:
c46b0bbb11fba45d4cf1f37ad90f35e242809394b04455b4842467284c2f15bc 4362
xen_4.17.2-1.dsc
58e5f47cfc57e74e890ee0d502ee34ed76cecedd7a7303f66c8855b1c971c32b 4665484
xen_4.17.2.orig.tar.xz
3e0ca3a8c470722ce41482b605df0a7abaaabccc57a40fd96dc693e6be16608d 136680
xen_4.17.2-1.debian.tar.xz
Files:
851315a0dd4af98e830bbb8b99305f8c 4362 admin optional xen_4.17.2-1.dsc
0891e2e77f5f2c6052c7bae4d7243c3d 4665484 admin optional xen_4.17.2.orig.tar.xz
8d17d02fcc5af0a34a902a519a86fb93 136680 admin optional
xen_4.17.2-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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9SK1
-----END PGP SIGNATURE-----