[Pkg-xen-devel] Bug#1120075: xen: CVE-2025-27465 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 CVE-2025-58144 CVE-2025-58145 CVE-2025-58147 CVE-2025-58148 CVE-2025-58149

[Hans van Kranenburg]

Hi!

On 11/4/25 9:07 PM, Salvatore Bonaccorso wrote:
> Source: xen
> Version: 4.20.0+68-g35cb38b222-1
> Severity: grave
> Tags: security upstream
> Justification: user security hole
> X-Debbugs-Cc: carnil at debian.org, Debian Security Team <team at security.debian.org>
> 
> Hi,
> 
> The following vulnerabilities were published for xen.
> 
> [...]

FYI, Maxi and I are working on this now, the (security-)updates for
unstable (4.20), stable (4.20) and oldstable (4.17).

We're currently running into a FTBFS on arm64 with unstable chroot, and
are consulting upstream about that. Otherwise, things seem OK so far.

So, you can expect us to reach out to the Security Team soon about this. :)

Thanks,
Hans