[Git][security-tracker-team/security-tracker][master] xen fixed in sid

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
db04a33c by Moritz Muehlenhoff at 2026-10-16T15:00:19+02:00
xen fixed in sid

- - - - -


1 changed file:

- data/CVE/list


Changes:

=====================================
data/CVE/list
=====================================
@@ -8356,28 +8356,28 @@ CVE-2026-109781 (Denial-of-service in the Printing: Output component. This vulne
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-108/#CVE-2026-109781
 	NOTE: https://www.mozilla.org/en-US/security/advisories/mfsa2026-109/#CVE-2026-109781
 CVE-2026-102699 ([This CNA information record relates to multiple CVEs; the text explai ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-519.html
 CVE-2026-102702 ([This CNA information record relates to multiple CVEs; the text explai ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-519.html
 CVE-2026-102701
 	NOT-FOR-US: tapdisk
 	NOTE: https://xenbits.xen.org/xsa/advisory-521.html
 CVE-2026-102700 (With its original introduction, GNTTAB_cache_flush was made available  ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-520.html
 CVE-2026-79611 (For XSA-308 logic was introduced, as VMX VMEntry checks do not like th ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-518.html
 CVE-2026-79610 (XSA-501 was about issues with v1 -> v2 and v2 -> v1 changes racing cer ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-517.html
 CVE-2026-79609 (XPTI (Xen Page Table Isolation) was introduced to mitigate Meltdown (C ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-516.html
 CVE-2026-79608 (The workaround for XSA-433 (Zenbleed, CVE-2023-20593) was later re-wor ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	NOTE: https://xenbits.xen.org/xsa/advisory-515.html
 CVE-2026-79607 (During Xenstore live update the state record for a Xenstore watch with ...)
 	- xen <not-affected> (Only affects Xen 4.22)
@@ -54738,17 +54738,17 @@ CVE-2026-79605
 	NOT-FOR-US: Xen Tapdisk
 	NOTE: https://xenbits.xen.org/xsa/advisory-513.html
 CVE-2026-79604
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-512.html
 CVE-2026-79603 (x86 PV guests can free memory pages while still keeping a stale TLB en ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-511.html
 CVE-2026-79602 (A guest with a PCI device assigned that has at least a BAR on the IO p ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-510.html
@@ -56594,7 +56594,7 @@ CVE-2026-62646 (A vulnerability has been identified in Reyrolle 7SR5 (All versio
 CVE-2026-62645 (A vulnerability has been identified in Reyrolle 7SR5 (All versions < V ...)
 	NOT-FOR-US: Siemens
 CVE-2026-62437 (When guests are terminated, various pieces of cleanup need carrying ou ...)
-	- xen <unfixed>
+	- xen 4.20.4+39-gf1e1321c87-1
 	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-509.html
@@ -654808,9 +654808,8 @@ CVE-2021-28690 (x86: TSX Async Abort protections not restored after S3 This issu
 	[stretch] - xen <end-of-life> (DSA 4602-1)
 	NOTE: https://xenbits.xen.org/xsa/advisory-377.html
 CVE-2021-28689 (x86: Speculative vulnerabilities with bare (non-shim) 32-bit PV guests ...)
-	- xen <unfixed> (unimportant)
 	NOTE: https://xenbits.xen.org/xsa/advisory-370.html
-	NOTE: Unfixable design/architecture limitation, no fix planned
+	NOTE: Unfixable design/architecture limitation in Xen, no fix planned
 CVE-2021-28688 (The fix for XSA-365 includes initialization of pointers such that subs ...)
 	{DLA-2690-1 DLA-2689-1}
 	- linux 5.10.28-1



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db04a33c64b2ecef1495b409e3f5f83e4e0a98be

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/db04a33c64b2ecef1495b409e3f5f83e4e0a98be
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261016/87a611bf/attachment-0001.htm>