Accepted xen 4.8.5.final+shim4.10.4-1+deb9u12 (all amd64 source) into oldstable-proposed-updates->oldstable-new, oldstable-proposed-updates
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256
Format: 1.8
Date: Fri, 10 Jan 2020 17:09:30 +0000
Binary: libxen-4.8 libxen-dev libxenstore3.0 xen-hypervisor-4.8-amd64 xen-hypervisor-4.8-arm64 xen-hypervisor-4.8-armhf xen-system-amd64 xen-system-arm64 xen-system-armhf xen-utils-4.8 xen-utils-common xenstore-utils
Source: xen
Architecture: all amd64 source
Version: 4.8.5.final+shim4.10.4-1+deb9u12
Distribution: stretch-security
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org>
Changed-By: Ian Jackson <ijackson@chiark.greenend.org.uk>
Closes: 908453
Description:
libxen-4.8 - Public libs for Xen
libxen-dev - Public headers and libs for Xen
libxenstore3.0 - Xenstore communications library for Xen
xen-hypervisor-4.8-amd64 - Xen Hypervisor on AMD64
xen-hypervisor-4.8-arm64 - Xen Hypervisor on ARM64
xen-hypervisor-4.8-armhf - Xen Hypervisor on ARMHF
xen-system-amd64 - Xen System on AMD64 (meta-package)
xen-system-arm64 - Xen System on ARM64 (meta-package)
xen-system-armhf - Xen System on ARMHF (meta-package)
xen-utils-4.8 - XEN administrative tools
xen-utils-common - Xen administrative tools - common files
xenstore-utils - Xenstore command line utilities for Xen
Changes:
xen (4.8.5.final+shim4.10.4-1+deb9u12) stretch-security; urgency=medium
.
* *NOTE* this will probably be the *LAST UPDATE* for Xen in Debian 9.x
(stretch), since this is the last batch of security patches from
upstream, where Xen 4.8 is out of security support.
.
* Update to new upstream final tip of 4.8 stable branch, which I have
dubbed upstream/stable-4.8.5.final. And shim 4.10.4.
* This includes fixes to:
XSA-311 CVE-2019-19577
XSA-310 CVE-2019-19580
XSA-309 CVE-2019-19578
XSA-308 CVE-2019-19583
XSA-307 CVE-2019-19581 CVE-2019-19582
XSA-306 CVE-2019-19579
XSA-305 CVE-2019-11135
XSA-304 CVE-2018-12207
XSA-303 CVE-2019-18422
XSA-302 CVE-2019-18424
XSA-301 CVE-2019-18423
XSA-299 CVE-2019-18421
XSA-298 CVE-2019-18425
XSA-297 CVE-2018-12126 CVE-2018-12127 CVE-2018-12130 CVE-2019-11091
XSA-296 CVE-2019-18420
XSA-295 CVE-2019-17349 CVE-2019-17350
XSA-294 CVE-2019-17348
XSA-293 CVE-2019-17347
XSA-292 CVE-2019-17346
XSA-291 CVE-2019-17345
XSA-290 CVE-2019-17344
XSA-288 CVE-2019-17343
XSA-287 CVE-2019-17342
XSA-285 CVE-2019-17341
XSA-284 CVE-2019-17340
* For completeness, the following are not applicable:
XSA-300 CVE-2019-17351 Bug is in Linux
XSA-289 Spectre V1 + L1TF combo; no new fixes
XSA-283 Withdrawn XSA number
XSA-281 Withdrawn XSA number
* The following is *not* fixed at this time:
XSA-286 Still embargoed.
.
* README.comet: remove line about PVH support.
[Hans van Kranenburg] Closes:#908453.
Checksums-Sha1:
5b1b31e2ea7deaa1c4e0f4cfdcce1110fd6a7897 3142 xen_4.8.5.final+shim4.10.4-1+deb9u12.dsc
f26af673bc03d6a54750eaf43e975eab4a4c0a4f 4200720 xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz
7d65e50c786aff9eebecc6e30f3d30d7583468b8 3940796 xen_4.8.5.final+shim4.10.4.orig.tar.xz
27c2409dfad63e096427f2f322f99c9c288f2adc 59500 xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz
e256dff0cb6959c691cccd4f0f94aff0ad0a70c5 1610722 libxen-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
52605aca393641b078d0e867c159c29606850fab 413476 libxen-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
34f842744344404b19a2cfcd7ac8c30194558b81 653432 libxen-dev_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
82292d72ba80f4ab7458da98c7e3550e21b2fd9d 25248 libxenstore3.0-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
2f031abf0e433cd9df81b48419488cf8584cfe34 35608 libxenstore3.0_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
817177fdfff5adf4ede40412494b9fc6d998df3e 2337428 xen-hypervisor-4.8-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
7c6c6e5a902ce108df0e945ab2e8cdda8148edc2 24624 xen-system-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
0a6b4becbaa38ef14b4a7a70bc5bc3ee2e693b96 854886 xen-utils-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
a25f45dca8843cd41be71bd384caae38cb607efd 424814 xen-utils-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
2439727a38d26ef085b5c901a18d2476c98b1b71 288750 xen-utils-common_4.8.5.final+shim4.10.4-1+deb9u12_all.deb
095d382c9569147cf6f9aee9222dbf5914237f73 12171 xen_4.8.5.final+shim4.10.4-1+deb9u12_amd64.buildinfo
ddd8aa5d90cf3c7d34e2006db374b9a7cfe4253c 13370 xenstore-utils-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
8720f5875de6a9734cdcf8dd235a1b041cda1a4f 31384 xenstore-utils_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
Checksums-Sha256:
3ad4fb79437429842a2c9b46029f0565f1d53e7231da79dcf59b569975f607d1 3142 xen_4.8.5.final+shim4.10.4-1+deb9u12.dsc
a25ea110c6676c370426f7f87957999a1e32121e446ec7a26cc779b67c2b9a91 4200720 xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz
8c9b781c9343e2c4963d4ba46415104e7cbb6714d8d06a6f6bd28d7060392d87 3940796 xen_4.8.5.final+shim4.10.4.orig.tar.xz
b19abbaf6961b5bf33bae5a6cb6b77c2793491447910f5c8d9475f1252f5fb0e 59500 xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz
964f5965320f806adadb416d998fdccb0f51debcedf60db8aa6fa8281eb2bd77 1610722 libxen-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
d424985604d793c7f9ec1c52baabe7df1ab4f0552aa9b98ef53add3d24d930a6 413476 libxen-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
218c5925df8d2f35f197eee7038e89d21a395c08a32d12c61f6a96d30389f70f 653432 libxen-dev_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
82deb5bc7671d4bf2c614788dcf578c93da03bc839f91ad93c07928367348b8e 25248 libxenstore3.0-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
fc69118fe5601c812fc905d23489021b75c1e6d4c69f6fc649dd5dfa3949ac86 35608 libxenstore3.0_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
59b6593b52c4904ac1c196f77dbbf78dd129242cf2276c3a9ce2fc440038d86c 2337428 xen-hypervisor-4.8-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
10b5dc4292dcb0b03384203974d1ca3e7753acba0e24dd5e36f9eeb4c5f6eee5 24624 xen-system-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
39023d74e418be3157dc18be5c376cd73c911397d805e4d3b0288e28e34a9413 854886 xen-utils-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
0f793947d87bc3cc81ddddeed5a2443a3402cab59b4b9594fd2a0dbd5fcaed48 424814 xen-utils-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
884946690bdcd5a4cc1c8497e2b2a65b84d94ce56ac14d51940c657104d097b0 288750 xen-utils-common_4.8.5.final+shim4.10.4-1+deb9u12_all.deb
00fbcbfff0720cbbac7da4c0c267531d4dbb10ed2eb2582105aa25653944b94f 12171 xen_4.8.5.final+shim4.10.4-1+deb9u12_amd64.buildinfo
ddf6cedaf2629e792133d362737e8b69d9182143c3795fda8be9387ccde515a0 13370 xenstore-utils-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
530ebe2cbff0a10671461f382466972a97991d8d833256bcac5e87f2125d17f0 31384 xenstore-utils_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
Files:
9c7941741511198360522571ce5ca3d9 3142 kernel optional xen_4.8.5.final+shim4.10.4-1+deb9u12.dsc
98607d3568409938e6006aee3e88de43 4200720 kernel optional xen_4.8.5.final+shim4.10.4.orig-shim.tar.xz
33e48954b3a4caba204747f2e875461b 3940796 kernel optional xen_4.8.5.final+shim4.10.4.orig.tar.xz
b8ce90253ce6e175b832dff4df890020 59500 kernel optional xen_4.8.5.final+shim4.10.4-1+deb9u12.debian.tar.xz
58650886760999c5f1d170ee8a46f1ce 1610722 debug extra libxen-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
3c22f09a473578d80ad60bd3ead2d35a 413476 libs optional libxen-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
c8cde1f4ce7ecf1d624c128bba011358 653432 libdevel optional libxen-dev_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
8848907287446a6b9797b6123d656c04 25248 debug extra libxenstore3.0-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
a7f6463e508c70984a46f3e4cb8c7efa 35608 libs optional libxenstore3.0_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
0863a3a719bb9834c3c4d89fd153f04f 2337428 kernel optional xen-hypervisor-4.8-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
d82f70963bb718bdb9662ad9b4efa024 24624 kernel optional xen-system-amd64_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
adcfc5039e61cbef0a9e69955c6b9f47 854886 debug extra xen-utils-4.8-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
ca2308b0c71362e71f2a95799cf4a4c9 424814 kernel optional xen-utils-4.8_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
11fcfe38b688cb6a5084938a3896e126 288750 kernel optional xen-utils-common_4.8.5.final+shim4.10.4-1+deb9u12_all.deb
61cf6c1c5c0333289cddedce1551f134 12171 kernel optional xen_4.8.5.final+shim4.10.4-1+deb9u12_amd64.buildinfo
6c6b4e600ddbe2a7b6d43190ae28ac15 13370 debug extra xenstore-utils-dbgsym_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
659158a7592c5cc356673318a7b31015 31384 admin optional xenstore-utils_4.8.5.final+shim4.10.4-1+deb9u12_amd64.deb
-----BEGIN PGP SIGNATURE-----
iQFUBAEBCAA+FiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAl4YtIYgHGlqYWNrc29u
QGNoaWFyay5ncmVlbmVuZC5vcmcudWsACgkQ4+M5I0i1DTkmaAgAkB0NoZK0di2p
BiI8mTED+ura16gX1LDyUVET78vRNtAtgcHgDlK5yz1WlGtCTeVFaz1vg9yid0Tt
QyyT33N7eggYxFutQxHxMltKq61CC8T1OzZwSvqAWSicYXVWJqQh0fTKzwzhw7hx
aKWTrs5A8p/EqBpuIk1S6DG9RVMjUbd3FivfaAuQY/izRBpB5esWIl48Ogc8kJPs
KgLYEgK2N7qQ8FBc/SygDtEp9MpfbMEAUM6INNGBEqx0BXpAvz7ocPGf/pNjKdXR
mN1b5jQeFtxtzVJpMf4bxTIPmS/mLPtxLgjsmPHLMH/o3fl7gN/R8tTOCFcsJCxi
2ROjn9R/8w==
=ad9g
-----END PGP SIGNATURE-----