Debian FTP Masters
2024-Dec-26 15:24 UTC
[Pkg-xen-devel] xen_4.17.5+23-ga4e5191dc0-1_source.changes ACCEPTED into proposed-updates->stable-new
Thank you for your contribution to Debian.
Mapping stable-security to proposed-updates.
Accepted:
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 20 Dec 2024 18:46:37 +0100
Source: xen
Architecture: source
Version: 4.17.5+23-ga4e5191dc0-1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel at lists.alioth.debian.org>
Changed-By: Hans van Kranenburg <hans at knorrie.org>
Changes:
xen (4.17.5+23-ga4e5191dc0-1) bookworm-security; urgency=medium
.
* Update to new upstream version 4.17.5+23-ga4e5191dc0, which also contains
security fixes for the following issues:
- x86: shadow stack vs exceptions from emulation stubs
XSA-451 CVE-2023-46841
- x86: Register File Data Sampling
XSA-452 CVE-2023-28746
- GhostRace: Speculative Race Conditions
XSA-453 CVE-2024-2193
- x86 HVM hypercalls may trigger Xen bug check
XSA-454 CVE-2023-46842
- x86: Incorrect logic for BTC/SRSO mitigations
XSA-455 CVE-2024-31142
- x86: Native Branch History Injection
XSA-456 CVE-2024-2201
- double unlock in x86 guest IRQ handling
XSA-458 CVE-2024-31143
- error handling in x86 IOMMU identity mapping
XSA-460 CVE-2024-31145
- PCI device pass-through with shared resources
XSA-461 CVE-2024-31146
- x86: Deadlock in vlapic_error()
XSA-462 CVE-2024-45817
- Deadlock in x86 HVM standard VGA handling
XSA-463 CVE-2024-45818
- libxl leaks data to PVH guests via ACPI tables
XSA-464 CVE-2024-45819
* Note that the following XSA are not listed, because...
- XSA-457 and XSA-465 have patches for the Linux kernel.
- XSA-459 is within Xapi which is not shipped by this package.
- XSA-466 contains a documentation update that was only applied to the
current development version of Xen
Checksums-Sha1:
58955395775ef7b26486be377055e64ac003a3ee 4357 xen_4.17.5+23-ga4e5191dc0-1.dsc
b509f4187aa7edf79279e982b16b4615dff207cd 4683344
xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
4e8ebe8a5d25bfad852447c4a822ca1c2690dc4e 137128
xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz
Checksums-Sha256:
17639361d2f96b98acc51d303fc7c804f475782afd2a90f875ba3f73ebf5895f 4357
xen_4.17.5+23-ga4e5191dc0-1.dsc
eb54014e42e4b2f91012b8256f3dd368c5aa4da6735c43eb9752c8e244fb01b6 4683344
xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
bda63ae7e8c540a155b416c1f123812701c8e0f87eb9326cc6d593657412b025 137128
xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz
Files:
3651a7ba34b1be81f3959cbbdffcc101 4357 admin optional
xen_4.17.5+23-ga4e5191dc0-1.dsc
0aa7b58e13607128f9318825e787522f 4683344 admin optional
xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
f950ae18261d155cc5a06ec44a491e5c 137128 admin optional
xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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eALy
-----END PGP SIGNATURE-----
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL:
<http://alioth-lists.debian.net/pipermail/pkg-xen-devel/attachments/20241226/b5c75a52/attachment.sig>