Accepted xen 4.14.1+11-gb0b734a8b3-1 (source) into unstable
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Sun, 28 Feb 2021 19:49:45 +0100
Source: xen
Architecture: source
Version: 4.14.1+11-gb0b734a8b3-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org>
Changed-By: Hans van Kranenburg <hans@knorrie.org>
Closes: 981052
Changes:
xen (4.14.1+11-gb0b734a8b3-1) unstable; urgency=medium
.
* Update to new upstream version 4.14.1+11-gb0b734a8b3, which also contains
security fixes for the following issues:
- IRQ vector leak on x86
XSA-360 CVE-2021-3308 (Closes: #981052)
- arm: The cache may not be cleaned for newly allocated scrubbed pages
XSA-364 CVE-2021-26933
* Drop separate patches for XSAs up to 359 that are now included in the
upstream stable branch.
.
Packaging bugfixes and improvements [Elliott Mitchell]:
* debian/rules: Set CC/LD to enable cross-building
* d/shuffle-binaries: Fix binary shuffling script for cross-building
* Rework "debian/rules: Do not try to move EFI binaries on armhf"
* debian/scripts: Optimize runtime scripts
* debian/xen-utils-common.examples: Remove xm examples
* d/shuffle-boot-files: make it POSIX compliant [Hans van Kranenburg, based
on a patch by Elliott Mitchell]
* d/shuffle-binaries: Switch loop from for to while
* d/shuffle-binaries: Switch to POSIX shell, instead of Bash
* d/shuffle-boot-files: Switch to POSIX shell, instead of Bash
* debian/xendomains.init: Pipe xen-init-list instead of tmp file
.
Make the package build reproducibly [Maximilian Engelhardt]:
* debian/salsa-ci.yml: enable salsa-ci
* debian/salsa-ci.yml: enable diffoscope in reprotest
* debian/rules: use SOURCE_DATE_EPOCH for xen build dates
* debian/rules: don't include build path in binaries
* debian/rules: reproducibly build oxenstored
* Pick the following upstream commits:
- 5816d327e4 ("xen: don't have timestamp inserted in config.gz")
- ee41b5c450 ("x86/EFI: don't insert timestamp when SOURCE_DATE_EPOCH is
defined")
- e18dadc5b7 ("docs: use predictable ordering in generated documentation")
* Include upstream patch that is not committed yet, but needed:
- docs: set date to SOURCE_DATE_EPOCH if available
* debian/salsa-ci.yml: don't allow reprotest to fail
.
Packaging bugfixes and improvements:
* d/shuffle-boot-files: Document more inner workings
Checksums-Sha1:
da4ea00fa29d4bcf137d3a5ecb85fe94a3dbe180 4249 xen_4.14.1+11-gb0b734a8b3-1.dsc
5c95dd53bcd786bd54b6a91ad3f2eab1a27d8647 4359020 xen_4.14.1+11-gb0b734a8b3.orig.tar.xz
ea72610b7443b9a008d09452e8d4256827d6ef83 138900 xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz
Checksums-Sha256:
ac953c84fc10557e1b9b26a5a46ae0a26c7344fd2705aef366fe8057cb94ec00 4249 xen_4.14.1+11-gb0b734a8b3-1.dsc
beb49c6d4d436dc74a694ff43cc016b25cad95d9e4f2e4b75683dbb330799dc1 4359020 xen_4.14.1+11-gb0b734a8b3.orig.tar.xz
a75209ac42bcbea9a1acf3a6e471cbd4069cce7a312ea43470ca6a72af7c8aa1 138900 xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz
Files:
1a514064f3001814c8acd422cbfb7505 4249 admin optional xen_4.14.1+11-gb0b734a8b3-1.dsc
c783a4d92b7fae91f3c6a4cdd93ac5d9 4359020 admin optional xen_4.14.1+11-gb0b734a8b3.orig.tar.xz
a7ae32874e584094d425c400e88124e8 138900 admin optional xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----
iQIzBAEBCgAdFiEESWyddwNaG9637koYssHfcmNhX2wFAmA78xgACgkQssHfcmNh
X2ytuxAAr6rfnne6JaB7pDs4Ln0l4xcdCSzQN9jyH3e8wqb+6HxIa+nCpvPb71dF
nGBNcv+l1zED0ErYu/a1OVazCNT8wa6SS8khp9M6hNJsSDdkQ2V9O+3ECjTar/9+
R3ZUqPSHeqzwRZKoRk/4GKBES5gqnT8w9438bSYcDK6vxbnNuwdkTZFajYtv0O9P
LVYDu83w5xJwEbaJxOXpCjTItgoc29Of06E1fJ1i7jxmarzGvFgZll8R14Fg0Mpq
E7q4cfH2G8lw5bH6KjK2nxvD/AY9mAOLNlhueZD1CF8To//yt2jxYX2MvvKXtsQA
HMm/fn2/tVE7rXVyPMAwH1K2UFZXTMLrlcse3M3tWz0hH2YvsvQNU/qzGJ/BMpTT
0e7VN3qEWnfa7vFs8u+lYxbTZdR1OS3vs16YwKlGL13+2h3BO6bywIUynmHXcVxp
9LGkQiYhNemIih5jFBUoQeyXPMWn26tlioD5A4qJQr7TrZQAfynDj525giFfv4Is
LKZ9mIDZnm2JR+nV2cgG56v1GVnVOUyHJkVAkmNPOFAvAS+4VWmiyK27Fy34p+0P
r0yJoQM3RHEeluKQ0TcfN+hsbLlBxfMuZT6BFTW9AGp4RdLH+MzjZpmZ8JDh2TXP
QQNhYxvfD6jA3StQ6Ld4+va+jibbWtb9iudRHc5Dd9qc9oFrlR4=
=Oc2F
-----END PGP SIGNATURE-----