[Git][security-tracker-team/security-tracker][master] xen DSA

[Moritz Muehlenhoff (@jmm)]

Moritz Muehlenhoff pushed to branch master at Debian Security Tracker / security-tracker


Commits:
3d63481f by Moritz Mühlenhoff at 2026-10-18T19:45:08+02:00
xen DSA

- - - - -


3 changed files:

- data/CVE/list
- data/DSA/list
- data/dsa-needed.txt


Changes:

=====================================
data/CVE/list
=====================================
@@ -58148,17 +58148,14 @@ CVE-2026-79605
 	NOTE: https://xenbits.xen.org/xsa/advisory-513.html
 CVE-2026-79604
 	- xen 4.20.4+39-gf1e1321c87-1
-	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-512.html
 CVE-2026-79603 (x86 PV guests can free memory pages while still keeping a stale TLB en ...)
 	- xen 4.20.4+39-gf1e1321c87-1
-	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-511.html
 CVE-2026-79602 (A guest with a PCI device assigned that has at least a BAR on the IO p ...)
 	- xen 4.20.4+39-gf1e1321c87-1
-	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-510.html
 CVE-2026-79577 (An issue in the /cas/login component of sso-master v1.0.0 allows attac ...)
@@ -60004,7 +60001,6 @@ CVE-2026-62645 (A vulnerability has been identified in Reyrolle 7SR5 (All versio
 	NOT-FOR-US: Siemens
 CVE-2026-62437 (When guests are terminated, various pieces of cleanup need carrying ou ...)
 	- xen 4.20.4+39-gf1e1321c87-1
-	[trixie] - xen <postponed> (Minor issue, fix along with future DSA)
 	[bookworm] - xen <postponed> (Minor issue)
 	NOTE: https://xenbits.xen.org/xsa/advisory-509.html
 CVE-2026-61517 (Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an OS command  ...)


=====================================
data/DSA/list
=====================================
@@ -1,3 +1,6 @@
+[18 Oct 2026] DSA-6571-1 xen - security update
+	{CVE-2026-62437 CVE-2026-79602 CVE-2026-79603 CVE-2026-79604 CVE-2026-79608 CVE-2026-79609 CVE-2026-79610 CVE-2026-79611 CVE-2026-102699 CVE-2026-102700 CVE-2026-102702}
+	[trixie] - xen 4.20.4+39-gf1e1321c87-0+deb13u1
 [18 Oct 2026] DSA-6570-1 haproxy - security update
 	[trixie] - haproxy 3.0.11-1+deb13u4
 [18 Oct 2026] DSA-6567-2 cifs-utils - regression update


=====================================
data/dsa-needed.txt
=====================================
@@ -177,8 +177,6 @@ weechat
 --
 wordpress
 --
-xen (jmm)
---
 xorg-server (carnil)
 --
 zlib (carnil)



View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d63481f1af9baf33dabd52a03261a5d00089684

-- 
View it on GitLab: https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/3d63481f1af9baf33dabd52a03261a5d00089684
You're receiving this email because of your account on salsa.debian.org. Manage all notifications: https://salsa.debian.org/-/profile/notifications | Help: https://salsa.debian.org/help


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://alioth-lists.debian.net/pipermail/debian-security-tracker-commits/attachments/20261018/8f765482/attachment-0001.htm>