-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 20 Dec 2024 18:46:37 +0100 Source: xen Binary: libxen-dev libxencall1 libxencall1-dbgsym libxendevicemodel1 libxendevicemodel1-dbgsym libxenevtchn1 libxenevtchn1-dbgsym libxenforeignmemory1 libxenforeignmemory1-dbgsym libxengnttab1 libxengnttab1-dbgsym libxenhypfs1 libxenhypfs1-dbgsym libxenmisc4.17 libxenmisc4.17-dbgsym libxenstore4 libxenstore4-dbgsym libxentoolcore1 libxentoolcore1-dbgsym libxentoollog1 libxentoollog1-dbgsym xen-doc xen-hypervisor-4.17-amd64 xen-hypervisor-4.17-amd64-dbg xen-hypervisor-common xen-system-amd64 xen-utils-4.17 xen-utils-4.17-dbg xen-utils-common xen-utils-common-dbgsym xenstore-utils xenstore-utils-dbgsym Architecture: amd64 Version: 4.17.5+23-ga4e5191dc0-1 Distribution: bookworm-security Urgency: medium Maintainer: amd64 / i386 Build Daemon (x86-csail-01) Changed-By: Hans van Kranenburg Description: libxen-dev - Public headers and libs for Xen libxencall1 - Xen runtime library - libxencall libxendevicemodel1 - Xen runtime libraries - libxendevicemodel libxenevtchn1 - Xen runtime libraries - libxenevtchn libxenforeignmemory1 - Xen runtime libraries - libxenforeignmemory libxengnttab1 - Xen runtime libraries - libxengnttab libxenhypfs1 - Xen runtime library - libxenhypfs libxenmisc4.17 - Xen runtime libraries - miscellaneous, versioned ABI libxenstore4 - Xen runtime libraries - libxenstore libxentoolcore1 - Xen runtime libraries - libxentoolcore libxentoollog1 - Xen runtime libraries - libxentoollog xen-doc - Xen documentation xen-hypervisor-4.17-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.17-amd64-dbg - debug symbols for Xen Hypervisor on AMD64 xen-hypervisor-common - Xen Hypervisor - common files xen-system-amd64 - Xen System on AMD64 (metapackage) xen-utils-4.17 - Xen administrative tools xen-utils-4.17-dbg - debug symbols for xen-utils-4.17 xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.17.5+23-ga4e5191dc0-1) bookworm-security; urgency=medium . * Update to new upstream version 4.17.5+23-ga4e5191dc0, which also contains security fixes for the following issues: - x86: shadow stack vs exceptions from emulation stubs XSA-451 CVE-2023-46841 - x86: Register File Data Sampling XSA-452 CVE-2023-28746 - GhostRace: Speculative Race Conditions XSA-453 CVE-2024-2193 - x86 HVM hypercalls may trigger Xen bug check XSA-454 CVE-2023-46842 - x86: Incorrect logic for BTC/SRSO mitigations XSA-455 CVE-2024-31142 - x86: Native Branch History Injection XSA-456 CVE-2024-2201 - double unlock in x86 guest IRQ handling XSA-458 CVE-2024-31143 - error handling in x86 IOMMU identity mapping XSA-460 CVE-2024-31145 - PCI device pass-through with shared resources XSA-461 CVE-2024-31146 - x86: Deadlock in vlapic_error() XSA-462 CVE-2024-45817 - Deadlock in x86 HVM standard VGA handling XSA-463 CVE-2024-45818 - libxl leaks data to PVH guests via ACPI tables XSA-464 CVE-2024-45819 * Note that the following XSA are not listed, because... - XSA-457 and XSA-465 have patches for the Linux kernel. - XSA-459 is within Xapi which is not shipped by this package. - XSA-466 contains a documentation update that was only applied to the current development version of Xen Checksums-Sha1: 506790a5e416b06528ba57a5c309827108289bc4 814780 libxen-dev_4.17.5+23-ga4e5191dc0-1_amd64.deb c9726ae1fe301267dd8150a07d8bd6f14eadf735 12532 libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 947b27afe331032620c53b5bbe65586856235a9b 32964 libxencall1_4.17.5+23-ga4e5191dc0-1_amd64.deb 0a3c0b0b854b478c3079aceed7678896b9c6ea1f 17380 libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 1b99200d85a3fb53f614fbe20e528e3b2ad00dae 33712 libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_amd64.deb e5521b402b55473a32a5ede0d747b48cdd2ded45 8248 libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 3f615d459f7751db5ca8bb64618646805bec44f0 31360 libxenevtchn1_4.17.5+23-ga4e5191dc0-1_amd64.deb 69f28c3c2e6fe0f81d4b604b4f03d14a26a83c9c 14532 libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb b89ec9787137779efc42835b4912a8265a9b41cc 33148 libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_amd64.deb a841e0a043f26f8052b3651b7ba8336a0cd2a4b0 17728 libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 77546e83bb14e08e04c8ec024060253e80228b3d 33604 libxengnttab1_4.17.5+23-ga4e5191dc0-1_amd64.deb 0057d9ce91e63b1ecaabb0c3ea738388aea8d142 12008 libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 6c0f66ecba702528392525f46d8f7435e5c2c5eb 33188 libxenhypfs1_4.17.5+23-ga4e5191dc0-1_amd64.deb b48d03434b7609ab9b235d570cf48a7765df9a79 1732784 libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 3b22770e6f584c23e878b2f87f7be69ba1c55dce 516768 libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb 368096a465b36a42764baa982961b5c939c700cc 34200 libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 4ad3258ab2ac839d0d3d2d3419267558d4af2584 39800 libxenstore4_4.17.5+23-ga4e5191dc0-1_amd64.deb e113063984f569b336efa188c412765459e4476b 5512 libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 59e947396ca56fdf25ac95f9d200309131672e41 30656 libxentoolcore1_4.17.5+23-ga4e5191dc0-1_amd64.deb 9ca383b7d34eed5867f9b5b1eb0f388f5bd00e95 10444 libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 451f4ad565743831ddfc070d273c09a329ce63e5 32464 libxentoollog1_4.17.5+23-ga4e5191dc0-1_amd64.deb 25a80d4bb52f661d9483987119207641a41f5261 535428 xen-doc_4.17.5+23-ga4e5191dc0-1_amd64.deb 3fa6002b6f24150311726726fa8fb88a563ff42b 1176884 xen-hypervisor-4.17-amd64-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb 1954f83febbc8cf7cc9d9739ca1e9146ee603744 2328104 xen-hypervisor-4.17-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb e1bac321d75597d162e5387b1ce40faad1770b3d 31772 xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_amd64.deb 09ba2995721145c8a28ec6ebebd6864aca8e4ee7 28512 xen-system-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb 277b330210bb4df99e0e30a6f3aa08bfeef6bcbd 4098844 xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb c82e020bc8cffd1ca75297f8ae2852550c2919fb 1354368 xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb 90f34dcf3d353f0b0dea12d780c635e5ff76a276 254608 xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 8d0790c9e079013daaf6c5e92d6f290f6776004a 275916 xen-utils-common_4.17.5+23-ga4e5191dc0-1_amd64.deb 027527142612ccab437d08c75dcd4785df1dc0fb 19502 xen_4.17.5+23-ga4e5191dc0-1_amd64-buildd.buildinfo 904680d528778629118b289f55c7ee39dd5887cf 21596 xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 76ed7dcf6db246855ae93e31c93cc73647975de8 48640 xenstore-utils_4.17.5+23-ga4e5191dc0-1_amd64.deb Checksums-Sha256: 4b0addcfa69c7d7ed94bdd8921fa5538c06a23b2c79b6aff4905c25d56dfbb0b 814780 libxen-dev_4.17.5+23-ga4e5191dc0-1_amd64.deb e2394e81fba37d950f56ed16d0d2319ada12f224953f39225e65d9b4eee97022 12532 libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 676363108aa19c4d0c87aab308914cd434b532aab7815b588379b09895b11768 32964 libxencall1_4.17.5+23-ga4e5191dc0-1_amd64.deb 49e954b22fdf1438a3e475e6f64f3e2490abfe1ca01b892760a553373e747330 17380 libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 8951cae190a20882c38e537e0d10d8ef8a5bdb6168414b6f83690178ac2a182f 33712 libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_amd64.deb 05be6026497a1ca5a2458a3ff6608fdf7c51a953cd8c88e8ad5b59add54f4961 8248 libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb b1826942deb62b4b07fbf538504bdab9704c585f8655237b84027f3a6ac99d9d 31360 libxenevtchn1_4.17.5+23-ga4e5191dc0-1_amd64.deb 0ca71c90252a644511c4885f14e3ca73ac1b55b75b328ff9a58b0ee28efb7086 14532 libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 9e7248e9703250d50391d4a4c7085a4af8ffbe923d84c350e67a1e3b6ce622d1 33148 libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_amd64.deb 100c1c9a516ea31346501d81542ce5d50c01ae8866eaf689e19c08ec479b45b9 17728 libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 5b0803fc9d314c0e46a1ee570e3225e5cc0089193fab4d85dccf960b7534a69a 33604 libxengnttab1_4.17.5+23-ga4e5191dc0-1_amd64.deb 9c20bb41bfb399b96c4d1f5af936f605c94e8022d3141100f5400f72b137d6c6 12008 libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 7c13fa02a29882dce3e5a60059a6b7b00b7cafc1b8c5fa66cb415da4b92d62ce 33188 libxenhypfs1_4.17.5+23-ga4e5191dc0-1_amd64.deb 1129268c4d8e4c7d36fe3880fd7adbba99398f2baec18528e6084916ee83b990 1732784 libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb f77bbd1266fca8a72441f22497e9ab1e176f02a769f6759e334cd5a6d4c06c73 516768 libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb 7ae347afe19d0581721fda06d6ef1e20a1ecbad2ee5fda82a66eaa96b45f80d4 34200 libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 26f8f4905923fe3a9ecb308608373e15485763ae961f43c8e7a5a3bb234e34c6 39800 libxenstore4_4.17.5+23-ga4e5191dc0-1_amd64.deb 5b8ae6f074f3d670ab8f64f68980ca4e1b8321d220851369c3913c3f4d5df276 5512 libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb df55b6b0bb49c805fc6007c095645fa9e2c45a939a0fbd1c38fb43fd98f87808 30656 libxentoolcore1_4.17.5+23-ga4e5191dc0-1_amd64.deb 2f34d6c6772c15d1080394c610ae8af1faf2590f9b786d09c38bf460adf344f3 10444 libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 26b6c8010a2601f3d0e9ee0d98bb9945e623dc2f0a7392b6e41c0ad51b8005ed 32464 libxentoollog1_4.17.5+23-ga4e5191dc0-1_amd64.deb 15c48910e582021da50c19177e49821c0239eb5f000fde947675ccccef2db60e 535428 xen-doc_4.17.5+23-ga4e5191dc0-1_amd64.deb 04904e4ad48de863bd3293e5e93824248eb54011432ed39af2d5c487bb62586d 1176884 xen-hypervisor-4.17-amd64-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb e47ebf099d636248b3e5cddae8296b146f3d5f57f6f8777e83ffc163f10db56b 2328104 xen-hypervisor-4.17-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb 51ab407fd2efdf1fe9f2dc9671ceca92ba0be1fb5a224d4dc23059da95240cbf 31772 xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_amd64.deb 7a68e9e9831bc49a3a0b3e1860a8b2e78f3b481fc6a0ca4517a98bd366d55af3 28512 xen-system-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb ec7c0e648c6b7b8bcfa6f026438acc2311b14c7384388eea68625abce4babb06 4098844 xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb 5494296dadce6fdd0faed5f32f6945859725e2f7d3f12e2f107e1682bab401d0 1354368 xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb f56dae6000fd6a6b0a73de4661b86d17cc530c10769159f375b71e0088cab8a9 254608 xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb bf2a607b5eb6e3d05bd74edf7a65db7fd7c235d917c9cb8cfb084ab8effff238 275916 xen-utils-common_4.17.5+23-ga4e5191dc0-1_amd64.deb 3af0a8af5da21276c19032c374116211a1845d98ffa8e1a8d04105e89721add9 19502 xen_4.17.5+23-ga4e5191dc0-1_amd64-buildd.buildinfo 4a3fdb942ae742e1436a8703b5ae81ad66c4907b78443601fd42d4a143f6152a 21596 xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb e2ce916bc778d6a1444ef7f51d0af6c6f5722ae56d7cc937bd24d46cb771a9b2 48640 xenstore-utils_4.17.5+23-ga4e5191dc0-1_amd64.deb Files: 913a3df2a47990b0a78b277290483f58 814780 libdevel optional libxen-dev_4.17.5+23-ga4e5191dc0-1_amd64.deb 2f08ae5b375a46e2541c1008f92ff074 12532 debug optional libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb d2219671ac98d739b573e61a91f2fe77 32964 libs optional libxencall1_4.17.5+23-ga4e5191dc0-1_amd64.deb 25ad78ce281d22b927eb450725736470 17380 debug optional libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb e0ee0ff02d8c0e487e22e7e09210e82c 33712 libs optional libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_amd64.deb 0222b560fe31f5ff211e72b88f81af70 8248 debug optional libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 9ac82df2d7d8c2de28502010d036e33f 31360 libs optional libxenevtchn1_4.17.5+23-ga4e5191dc0-1_amd64.deb 20b7426161397aa7ea1ba778d11e10eb 14532 debug optional libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb d7ba05cbae51c47c95f8ab329e1a629c 33148 libs optional libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_amd64.deb 8277511a1e7902d08179ab8b76ec64a2 17728 debug optional libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 83cba07d805ae29e409c93d8ebfcb199 33604 libs optional libxengnttab1_4.17.5+23-ga4e5191dc0-1_amd64.deb 82dac7f278a54be44bbc2853bdc6b03d 12008 debug optional libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 68bb8213ce64c54f1e5df11ff921f3cc 33188 libs optional libxenhypfs1_4.17.5+23-ga4e5191dc0-1_amd64.deb ba2d9cda938428a34d5451d75fe63549 1732784 debug optional libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 2bea1a346b10a53cb3f82e3dbcc2609e 516768 libs optional libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb 20f4f7322b3e7617526c839338cd196c 34200 debug optional libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb c15dbc1c7348adc36619887aab6d7099 39800 libs optional libxenstore4_4.17.5+23-ga4e5191dc0-1_amd64.deb e95318eb755eccc1d833db16ad43d923 5512 debug optional libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 50ac71f8afda68f0b7ae18494ae25d86 30656 libs optional libxentoolcore1_4.17.5+23-ga4e5191dc0-1_amd64.deb dc769c2e35d4b9f8d641ab724c9876c5 10444 debug optional libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 85984fec1dc3d1787b0c358049765ab0 32464 libs optional libxentoollog1_4.17.5+23-ga4e5191dc0-1_amd64.deb ef42b111ea9c636bc48ebb8de7029dd9 535428 doc optional xen-doc_4.17.5+23-ga4e5191dc0-1_amd64.deb aec7e6e78167fe7fff737f62780e61f1 1176884 debug optional xen-hypervisor-4.17-amd64-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb 43239f288022bdbe178b32d05471960d 2328104 kernel optional xen-hypervisor-4.17-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb c60fa0c0a5d7bc6f65b68384cb24e8f8 31772 kernel optional xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_amd64.deb 7f5dfad58f6fbcb29e3fd3b9931eb7cb 28512 admin optional xen-system-amd64_4.17.5+23-ga4e5191dc0-1_amd64.deb 6e73ba93a4522d2955bb55750fda3cd6 4098844 debug optional xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_amd64.deb 3fb4f25a27ac283f439c268ecc3622c6 1354368 admin optional xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_amd64.deb e9ef6706f5ee3670fabeac40e0f4ce4e 254608 debug optional xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb fd7a1ce3b1b71157bb2c3227c63d95a3 275916 admin optional xen-utils-common_4.17.5+23-ga4e5191dc0-1_amd64.deb c7b06ffd6b3c9831a0182a7163b90d08 19502 admin optional xen_4.17.5+23-ga4e5191dc0-1_amd64-buildd.buildinfo bc9a4a18a4ea71cf826bffd8206aa5ae 21596 debug optional xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_amd64.deb 3ba71f4355a46b1723dd8d643d4b8e38 48640 admin optional xenstore-utils_4.17.5+23-ga4e5191dc0-1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEvy6d65NNYPbL6IQIEQ1nooK/IAQFAmdpcZYACgkQEQ1nooK/ IARgFA/8Ccvb6qlgmdrDU7jPXA9iwblR0QaLqtvCIMSqhFSe03yjiRU/BUMKMcdx wmCIHOYPvjfha0U5bIJH5ARR3NX9kD/WxTXuleWm2uTkcJzi+uzCP2wKX/9e4kW7 PTFjSq6IBRL6GgXH2w61zOh1kX/fIKlErZ0Zx2imCyTs9HFX3BsbfX0ujG3oQbhN I3bnuDrHEFThK4QFgtPORNdcmcHfEgUiLAI4XseC16sEtKRcUIq775g873KPNPu0 a9ENithqo4/fVye0t01OnglCkCizH/5RJxcviA8IAXUkPKTtGZje9HX/4G2/EH6L mDJ6KWB9zLY5rJYvGwTL4o2TplJjtDQ5E0HE8/8hbQAvznhhSFLiy61ME7b5419I 9AqtocDoW//xeklvThc4W4HyfRpioPWkZIiughnEn19Vm4WykpzyyoOs+ZIUreAB /N/0ofG3g1rT/5l45JORDFsmrGIhSokxazaFVO65CmsNVTU9K9GPDGfMOiCslDnO ltFpge4yPxLnETiD9NuV8YzJphC5amm6Y5pgG6YM903XX6bKxgDW5sjTscUmyYHv FjuktTWSSSJTa87XpDTkVA7J0DN5ykp4PfSEWtTz8ftWBNVPSwYQ0zqfWZxqMetj 8ro3sFNNKfGUOSLWslULmwOvTCc5P7e5iz5tj4nEX6v2qZmnkck= =l2/L -----END PGP SIGNATURE-----