-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 20 Dec 2024 18:46:37 +0100 Source: xen Binary: libxen-dev libxencall1 libxencall1-dbgsym libxendevicemodel1 libxendevicemodel1-dbgsym libxenevtchn1 libxenevtchn1-dbgsym libxenforeignmemory1 libxenforeignmemory1-dbgsym libxengnttab1 libxengnttab1-dbgsym libxenhypfs1 libxenhypfs1-dbgsym libxenmisc4.17 libxenmisc4.17-dbgsym libxenstore4 libxenstore4-dbgsym libxentoolcore1 libxentoolcore1-dbgsym libxentoollog1 libxentoollog1-dbgsym xen-doc xen-hypervisor-4.17-arm64 xen-hypervisor-4.17-arm64-dbg xen-hypervisor-common xen-system-arm64 xen-utils-4.17 xen-utils-4.17-dbg xen-utils-common xen-utils-common-dbgsym xenstore-utils xenstore-utils-dbgsym Architecture: arm64 Version: 4.17.5+23-ga4e5191dc0-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-03) Changed-By: Hans van Kranenburg Description: libxen-dev - Public headers and libs for Xen libxencall1 - Xen runtime library - libxencall libxendevicemodel1 - Xen runtime libraries - libxendevicemodel libxenevtchn1 - Xen runtime libraries - libxenevtchn libxenforeignmemory1 - Xen runtime libraries - libxenforeignmemory libxengnttab1 - Xen runtime libraries - libxengnttab libxenhypfs1 - Xen runtime library - libxenhypfs libxenmisc4.17 - Xen runtime libraries - miscellaneous, versioned ABI libxenstore4 - Xen runtime libraries - libxenstore libxentoolcore1 - Xen runtime libraries - libxentoolcore libxentoollog1 - Xen runtime libraries - libxentoollog xen-doc - Xen documentation xen-hypervisor-4.17-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.17-arm64-dbg - debug symbols for Xen Hypervisor on ARM64 xen-hypervisor-common - Xen Hypervisor - common files xen-system-arm64 - Xen System on ARM64 (metapackage) xen-utils-4.17 - Xen administrative tools xen-utils-4.17-dbg - debug symbols for xen-utils-4.17 xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.17.5+23-ga4e5191dc0-1) bookworm-security; urgency=medium . * Update to new upstream version 4.17.5+23-ga4e5191dc0, which also contains security fixes for the following issues: - x86: shadow stack vs exceptions from emulation stubs XSA-451 CVE-2023-46841 - x86: Register File Data Sampling XSA-452 CVE-2023-28746 - GhostRace: Speculative Race Conditions XSA-453 CVE-2024-2193 - x86 HVM hypercalls may trigger Xen bug check XSA-454 CVE-2023-46842 - x86: Incorrect logic for BTC/SRSO mitigations XSA-455 CVE-2024-31142 - x86: Native Branch History Injection XSA-456 CVE-2024-2201 - double unlock in x86 guest IRQ handling XSA-458 CVE-2024-31143 - error handling in x86 IOMMU identity mapping XSA-460 CVE-2024-31145 - PCI device pass-through with shared resources XSA-461 CVE-2024-31146 - x86: Deadlock in vlapic_error() XSA-462 CVE-2024-45817 - Deadlock in x86 HVM standard VGA handling XSA-463 CVE-2024-45818 - libxl leaks data to PVH guests via ACPI tables XSA-464 CVE-2024-45819 * Note that the following XSA are not listed, because... - XSA-457 and XSA-465 have patches for the Linux kernel. - XSA-459 is within Xapi which is not shipped by this package. - XSA-466 contains a documentation update that was only applied to the current development version of Xen Checksums-Sha1: ee3198b8c6a34edc14bae5fbe91982f34d3956bf 737504 libxen-dev_4.17.5+23-ga4e5191dc0-1_arm64.deb 0dba7fed6532bde24fe6f0082ca91befb8c4f095 12584 libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb bb6bce16a7366f2147a7c7df0ccdd44599b1d4d8 32708 libxencall1_4.17.5+23-ga4e5191dc0-1_arm64.deb fa1082a4aa0c7bedf0995157dd92bdb57bba1749 18052 libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 5fbe270484cc28b79e23549fb6281cb135074444 33692 libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_arm64.deb 4f45d8472b6a0c2bf0a9e50f5b4f6e6c543b77be 8252 libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 015d97f35029909651cd3cd377575544e6ba23dc 31416 libxenevtchn1_4.17.5+23-ga4e5191dc0-1_arm64.deb 52afaf3430f29539f21efc3959133f7ff627847a 14440 libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 44290dd34ffe4138488fe529ab5c9fa41f2c3591 32924 libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_arm64.deb ca3fb2377b8f3c1dc0dba5eac73be0c9efdded88 17744 libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 5814107a380da99cb6cd10fd5b91ee72b2911906 33512 libxengnttab1_4.17.5+23-ga4e5191dc0-1_arm64.deb 6c1dfc62b2b2253ed399526b80162f1ffec8cffb 11960 libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb ec3d702fc4fe00fe8d0bf34d79f1707659a3dfef 33032 libxenhypfs1_4.17.5+23-ga4e5191dc0-1_arm64.deb 9e9aa5cab8901ecde28a72e55ca0f50558d04aa3 1534920 libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 5770b506e98516ce1393b9b6d70fdfc65f8a64b4 418148 libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb be356a7b48553de69b16dace638473bab200dbc6 33712 libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 8a5531a557ac98f920c6abdce44783cc46abf524 39144 libxenstore4_4.17.5+23-ga4e5191dc0-1_arm64.deb 84963b16102ad642f868f9e8398556f581fb47b5 5612 libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb eb66dde5c1ae4ddfb102e07140c8f5945f8eb1cd 30748 libxentoolcore1_4.17.5+23-ga4e5191dc0-1_arm64.deb 8908107200cececf66783347f11a66cf07bc7758 10212 libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 53721f101a879fc90c64dae56ecb7cbbe2c91e87 32560 libxentoollog1_4.17.5+23-ga4e5191dc0-1_arm64.deb 0ceb2edfb2e8230f25cfb90ba0176b50198e944c 535424 xen-doc_4.17.5+23-ga4e5191dc0-1_arm64.deb 0550b4ec913439b3b25ceab2e961f30fe70fb83d 375120 xen-hypervisor-4.17-arm64-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb 22284530562968624abfa1fde17de6704e0910ec 323068 xen-hypervisor-4.17-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb d27218184e61f7a28164757303ba95a15baa3e7e 31776 xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_arm64.deb f5a8776d090fe517dd88932ec69c281487322384 28532 xen-system-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb aa5ac95044636b5415b66e42386d25a99b7d58b9 948064 xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb 131e298ea4af7f2cbd8163f5f4e74465adb0fd2a 720220 xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb 1d1fa31a499fa6c9812d62f5c9ff4d5f2573a4cf 205092 xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 1c9c64fdecffad97e16397f76b4bcdf039b51125 258560 xen-utils-common_4.17.5+23-ga4e5191dc0-1_arm64.deb cfdd593334b54a4682ad7c1db0b08fc2a0284cf9 18754 xen_4.17.5+23-ga4e5191dc0-1_arm64-buildd.buildinfo cc7512b44c41fea050cce5b1d26895ce237c0027 21580 xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 1a0c25fc80198d0d79e6a32e0a5f61c3fe8b0b7d 48108 xenstore-utils_4.17.5+23-ga4e5191dc0-1_arm64.deb Checksums-Sha256: d100f21c1cca75eafc6fa25498b505b32ffc08647ac048e66f21fc52146719d3 737504 libxen-dev_4.17.5+23-ga4e5191dc0-1_arm64.deb de7cb1446ceebd8875d992c60727192121bb3cc26e5aa5648a755a499d2f51ff 12584 libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb fa780054bf692fc9c9b3e657d1e6b5a3d7ea862c62d442a9539fa3b6b0bd6cdd 32708 libxencall1_4.17.5+23-ga4e5191dc0-1_arm64.deb 4a18afc3a3f88aa2d0e783670f26fb1464c0952a479138636f3b3ab3f2003c4a 18052 libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 72c4ce891244f8b2e0a106999f6a9772694d49ee61f985159baaf19f25dc9eae 33692 libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_arm64.deb 44fb68c48bd871b9a39e1c35e2182b7bd5ae26681726fbcc0a3b3ab856c5a008 8252 libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 0afa20ac63e41046bf78b2f749e490877075cfe19cb55dd093284f164e7864e2 31416 libxenevtchn1_4.17.5+23-ga4e5191dc0-1_arm64.deb ae614f003b10e59c7f741922ddc20b5d908c50382c12e805473be92f36dda5a6 14440 libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 3bd9dde62f066db79ff1151ded3521c0b19090aef1d12da9e6022475d8beab11 32924 libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_arm64.deb 4694028698e6c01e4d50de05569ee528c8ac1ede50da4d95a2e905dfe38593cb 17744 libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 799e7e9101c3ac0dc12ec85d2d518dea1f89a1c90d0442e1a3d9a44237c4f937 33512 libxengnttab1_4.17.5+23-ga4e5191dc0-1_arm64.deb de2088079ac4ed7bb2246a66fba8e8eec739d6e97f74a8537d7b2fd397f8aba6 11960 libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 11e8efd887cb3a99f4f424d528e09c84a19ed62d5071b80f8ecf3940f3be0342 33032 libxenhypfs1_4.17.5+23-ga4e5191dc0-1_arm64.deb b0805c236a2930f3c8fd056c570aeea98722bfbd5a999e4de580c725bbc8e03a 1534920 libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 265af8511fb8802c90dd8e8c4994bb7121cd6664b3d679ee92ec6256daf4008d 418148 libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb 2b8f32019f4cb21dd87c83089c81539fa6f8f8b92f9c0c6b1973cd76acaabf3a 33712 libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb abc787cc2a67ced15ff57872b9274956be066620cdfe38402fbb0cc8e5e69a4c 39144 libxenstore4_4.17.5+23-ga4e5191dc0-1_arm64.deb cd84f71aa05c76635a135ebb1a38480f4212fbafb30fbf67f26684e8495ac605 5612 libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 78678d9588730817d2e7aa8fd6a48891730192a230de455d9609090b7e9c3a6c 30748 libxentoolcore1_4.17.5+23-ga4e5191dc0-1_arm64.deb d9e67f0d6a11b187f52c40bbf00b184323dec23ad17d34c5897a03e303b4282d 10212 libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 2cb011a07cb713da7bcc5295a97fda1ec0f812c88f353313a24f52e617a34a0d 32560 libxentoollog1_4.17.5+23-ga4e5191dc0-1_arm64.deb b011a4114a2fe373f4fd43e577603bb29d4b990211cec77be321756179d49bbd 535424 xen-doc_4.17.5+23-ga4e5191dc0-1_arm64.deb bd3a7ccb6a7d0cfc6738fb87197b219f53e8296ee65c3a1726939dd830caccbe 375120 xen-hypervisor-4.17-arm64-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb 9cabb5816aaaf586a95df8eb1c50cb0e30214b9a4a4fe91c57310ef2df616153 323068 xen-hypervisor-4.17-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb 40584c16d24410343645fcd852b20bd4c1ecc8dcec20cf647969dcc16f097ad1 31776 xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_arm64.deb d3388e8f1adefd6e5e6d9320ba348daeacf632bd200d38832beb33900a24631f 28532 xen-system-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb 42c4bcd9bf79e481d3d228b42a0bb8f43b02c8660ec171f3435a075fb304f581 948064 xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb 0a3ebd76d05fad1be38968f98e63e6fd951453871ce5c3a7ccc10e4980ffdcf7 720220 xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb 505ac0fd533f84ab307c21f5022c28178b304d322ae94ae3d2a99b28a3d63d13 205092 xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 81b76856ab305ed619b770d8c78a673ded39bf0c172a41fbdaf473e44ed7d0b1 258560 xen-utils-common_4.17.5+23-ga4e5191dc0-1_arm64.deb 182794dce0f1c90cb1dba1b1768aaf40ecdc9b5d1419fd38631f7d04f2a9d16b 18754 xen_4.17.5+23-ga4e5191dc0-1_arm64-buildd.buildinfo d2142e3a6abff0499550004141530530509e061337f8a26eb830d3ecd0dfbf9d 21580 xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 6698ea96e916a4d484ea860774dfba9293c2ecbc1710b20d81e004959f240018 48108 xenstore-utils_4.17.5+23-ga4e5191dc0-1_arm64.deb Files: 8d1bfa2dd1edc26a60f8aa3d4a44b338 737504 libdevel optional libxen-dev_4.17.5+23-ga4e5191dc0-1_arm64.deb a55af3474a248befd75834d0415cc44a 12584 debug optional libxencall1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 811d1b18267b5bfd332046a9dc18a814 32708 libs optional libxencall1_4.17.5+23-ga4e5191dc0-1_arm64.deb f7a396339e15a50fbc6bbffd477ec1be 18052 debug optional libxendevicemodel1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 94b62420449617293e7d0daa745c4c5f 33692 libs optional libxendevicemodel1_4.17.5+23-ga4e5191dc0-1_arm64.deb f703258d66d0cd14e409c53810cf5097 8252 debug optional libxenevtchn1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb b5d5cd0d60f678cf9868de575c965e7c 31416 libs optional libxenevtchn1_4.17.5+23-ga4e5191dc0-1_arm64.deb af673197035be4cab5e1cde9057a5a89 14440 debug optional libxenforeignmemory1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb bb405e7536f3b722e1100fed8402f227 32924 libs optional libxenforeignmemory1_4.17.5+23-ga4e5191dc0-1_arm64.deb 1a7edd40c3388fbb343374f5d151a05f 17744 debug optional libxengnttab1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 761f34938e31971ad961d22efe0e92d4 33512 libs optional libxengnttab1_4.17.5+23-ga4e5191dc0-1_arm64.deb c5141b8b4ff807684d745dc63c51cb30 11960 debug optional libxenhypfs1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 4c079fb0192ae1d807045b53eef36e2c 33032 libs optional libxenhypfs1_4.17.5+23-ga4e5191dc0-1_arm64.deb 2dfa1c3b4e626a2a3e8bde9650f4ceda 1534920 debug optional libxenmisc4.17-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 6c5f5c4e95e50ee83363a3bf85cacba0 418148 libs optional libxenmisc4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb cccf1dcbfc87b0d6aa263b148d53c490 33712 debug optional libxenstore4-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 62ce6a31d3891efee8578f0402027211 39144 libs optional libxenstore4_4.17.5+23-ga4e5191dc0-1_arm64.deb c46a06327ff5f2d95464ed77c94651aa 5612 debug optional libxentoolcore1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 824118464d1f00844053981c4e2aba02 30748 libs optional libxentoolcore1_4.17.5+23-ga4e5191dc0-1_arm64.deb 06b7cc65836fb30b4e2478d504e23aa1 10212 debug optional libxentoollog1-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb eb91cce8f298e3006222e077b174c5a0 32560 libs optional libxentoollog1_4.17.5+23-ga4e5191dc0-1_arm64.deb ab427743cdd17490b61a9456602efa05 535424 doc optional xen-doc_4.17.5+23-ga4e5191dc0-1_arm64.deb 044e1f50e8ec56708a959ebe9576701c 375120 debug optional xen-hypervisor-4.17-arm64-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb c2692cb8b43b5864743ad9f6c44fb1e4 323068 kernel optional xen-hypervisor-4.17-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb f7ac02929f85d0d8dedfeb331cf55232 31776 kernel optional xen-hypervisor-common_4.17.5+23-ga4e5191dc0-1_arm64.deb 7752388a8dff292ee773aefbe2072c0b 28532 admin optional xen-system-arm64_4.17.5+23-ga4e5191dc0-1_arm64.deb c7efb686cc5d5654031205f56cad48e3 948064 debug optional xen-utils-4.17-dbg_4.17.5+23-ga4e5191dc0-1_arm64.deb 9e80b5960dfeb85b29e338428a509d6c 720220 admin optional xen-utils-4.17_4.17.5+23-ga4e5191dc0-1_arm64.deb 01fc487d6475d0257a0710ac25a21c73 205092 debug optional xen-utils-common-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb 7ca8bf6075d7e9161607378494632664 258560 admin optional xen-utils-common_4.17.5+23-ga4e5191dc0-1_arm64.deb c77dee4a6d8e7772c514f79e7bd7bbe3 18754 admin optional xen_4.17.5+23-ga4e5191dc0-1_arm64-buildd.buildinfo 9faf3318e4917eecf4274a2fed7e2a15 21580 debug optional xenstore-utils-dbgsym_4.17.5+23-ga4e5191dc0-1_arm64.deb a74ba2f8cd432dc4138ce1dae0a5580b 48108 admin optional xenstore-utils_4.17.5+23-ga4e5191dc0-1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE0+FegZ3qs8CHnZkx+XaKpT5fkBIFAmdpcrIACgkQ+XaKpT5f kBJIUg//Xpi/MomWV7O93KdyzJpAXlKEG9OAYUFcVB95HPtEJmIy13b+SSGT2XPp yljfmwJs/4kxULRGh/awaKkYwAi65mbX2p1fSBF6IEZBVzBlWfaA0ooln9osL/I2 uaD/27Gx97nyXN+McERVQbfHrQJvNKniIDmzHYOs8O/gWqPpv9fjRZ1xJFkALuyp pl8Een8EKZ7GtkGs0lyrxvH2z1x53Bolpc/irFNG8Q3OteDAhLc3+WL8+210QsMM cD1uuyEi1+/9X++/LvWoHXZ5j2qOXLY8G/TTx07T1soOnlmBzJqNkWMhofWZtsua cw3/imLVRBPLFDqRfGJxeNZoQv0CjEBqww7mcTotcObb2jW8rSAewAwNXlnnb79s y9fQyKjMA656ecUjYXuHU/PpYQxKLa1rMODeBdRuWTKVqwwVFJutZkGXVWgw6/4/ LDo1TTUbG9MlVqfEDlTqbzxAJBA745u1QUOGFX+h1YI8Q6T7X9YJW2JLtaVvTqYv IVm/jMHcg9b3b38jQqOjABHVL8n6XLkquPCnlDrw4xRDZJpbbKOsuy10v2D5zpnV TjnGVp9Oe0+nm61ByLl2ZdCoEfUp7Zb11dWAgBcP0ZcfmEqBS/Rfec9pIxYFgKfU BZW+RzVQYOAKrQlGty6uTE/t4ISboC1AaQ8h2GgZ4e2092Xp8m0= =3IiU -----END PGP SIGNATURE-----