[Pkg-xen-devel] xen_4.17.5+23-ga4e5191dc0-1_source.changes ACCEPTED into proposed-updates->stable-new

[Debian FTP Masters]

Thank you for your contribution to Debian.

Mapping stable-security to proposed-updates.

Accepted:

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 20 Dec 2024 18:46:37 +0100
Source: xen
Architecture: source
Version: 4.17.5+23-ga4e5191dc0-1
Distribution: bookworm-security
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel at lists.alioth.debian.org>
Changed-By: Hans van Kranenburg <hans at knorrie.org>
Changes:
 xen (4.17.5+23-ga4e5191dc0-1) bookworm-security; urgency=medium
 .
   * Update to new upstream version 4.17.5+23-ga4e5191dc0, which also contains
     security fixes for the following issues:
     - x86: shadow stack vs exceptions from emulation stubs
       XSA-451 CVE-2023-46841
     - x86: Register File Data Sampling
       XSA-452 CVE-2023-28746
     - GhostRace: Speculative Race Conditions
       XSA-453 CVE-2024-2193
     - x86 HVM hypercalls may trigger Xen bug check
       XSA-454 CVE-2023-46842
     - x86: Incorrect logic for BTC/SRSO mitigations
       XSA-455 CVE-2024-31142
     - x86: Native Branch History Injection
       XSA-456 CVE-2024-2201
     - double unlock in x86 guest IRQ handling
       XSA-458 CVE-2024-31143
     - error handling in x86 IOMMU identity mapping
       XSA-460 CVE-2024-31145
     - PCI device pass-through with shared resources
       XSA-461 CVE-2024-31146
     - x86: Deadlock in vlapic_error()
       XSA-462 CVE-2024-45817
     - Deadlock in x86 HVM standard VGA handling
       XSA-463 CVE-2024-45818
     - libxl leaks data to PVH guests via ACPI tables
       XSA-464 CVE-2024-45819
   * Note that the following XSA are not listed, because...
     - XSA-457 and XSA-465 have patches for the Linux kernel.
     - XSA-459 is within Xapi which is not shipped by this package.
     - XSA-466 contains a documentation update that was only applied to the
       current development version of Xen
Checksums-Sha1:
 58955395775ef7b26486be377055e64ac003a3ee 4357 xen_4.17.5+23-ga4e5191dc0-1.dsc
 b509f4187aa7edf79279e982b16b4615dff207cd 4683344 xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
 4e8ebe8a5d25bfad852447c4a822ca1c2690dc4e 137128 xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz
Checksums-Sha256:
 17639361d2f96b98acc51d303fc7c804f475782afd2a90f875ba3f73ebf5895f 4357 xen_4.17.5+23-ga4e5191dc0-1.dsc
 eb54014e42e4b2f91012b8256f3dd368c5aa4da6735c43eb9752c8e244fb01b6 4683344 xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
 bda63ae7e8c540a155b416c1f123812701c8e0f87eb9326cc6d593657412b025 137128 xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz
Files:
 3651a7ba34b1be81f3959cbbdffcc101 4357 admin optional xen_4.17.5+23-ga4e5191dc0-1.dsc
 0aa7b58e13607128f9318825e787522f 4683344 admin optional xen_4.17.5+23-ga4e5191dc0.orig.tar.xz
 f950ae18261d155cc5a06ec44a491e5c 137128 admin optional xen_4.17.5+23-ga4e5191dc0-1.debian.tar.xz

-----BEGIN PGP SIGNATURE-----
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=eALy
-----END PGP SIGNATURE-----

-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: application/pgp-signature
Size: 228 bytes
Desc: not available
URL: <http://alioth-lists.debian.net/pipermail/pkg-xen-devel/attachments/20241226/b5c75a52/attachment.sig>