-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 28 Feb 2021 19:49:45 +0100 Source: xen Architecture: source Version: 4.14.1+11-gb0b734a8b3-1 Distribution: unstable Urgency: medium Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org> Changed-By: Hans van Kranenburg <hans@knorrie.org> Closes: 981052 Changes: xen (4.14.1+11-gb0b734a8b3-1) unstable; urgency=medium . * Update to new upstream version 4.14.1+11-gb0b734a8b3, which also contains security fixes for the following issues: - IRQ vector leak on x86 XSA-360 CVE-2021-3308 (Closes: #981052) - arm: The cache may not be cleaned for newly allocated scrubbed pages XSA-364 CVE-2021-26933 * Drop separate patches for XSAs up to 359 that are now included in the upstream stable branch. . Packaging bugfixes and improvements [Elliott Mitchell]: * debian/rules: Set CC/LD to enable cross-building * d/shuffle-binaries: Fix binary shuffling script for cross-building * Rework "debian/rules: Do not try to move EFI binaries on armhf" * debian/scripts: Optimize runtime scripts * debian/xen-utils-common.examples: Remove xm examples * d/shuffle-boot-files: make it POSIX compliant [Hans van Kranenburg, based on a patch by Elliott Mitchell] * d/shuffle-binaries: Switch loop from for to while * d/shuffle-binaries: Switch to POSIX shell, instead of Bash * d/shuffle-boot-files: Switch to POSIX shell, instead of Bash * debian/xendomains.init: Pipe xen-init-list instead of tmp file . Make the package build reproducibly [Maximilian Engelhardt]: * debian/salsa-ci.yml: enable salsa-ci * debian/salsa-ci.yml: enable diffoscope in reprotest * debian/rules: use SOURCE_DATE_EPOCH for xen build dates * debian/rules: don't include build path in binaries * debian/rules: reproducibly build oxenstored * Pick the following upstream commits: - 5816d327e4 ("xen: don't have timestamp inserted in config.gz") - ee41b5c450 ("x86/EFI: don't insert timestamp when SOURCE_DATE_EPOCH is defined") - e18dadc5b7 ("docs: use predictable ordering in generated documentation") * Include upstream patch that is not committed yet, but needed: - docs: set date to SOURCE_DATE_EPOCH if available * debian/salsa-ci.yml: don't allow reprotest to fail . Packaging bugfixes and improvements: * d/shuffle-boot-files: Document more inner workings Checksums-Sha1: da4ea00fa29d4bcf137d3a5ecb85fe94a3dbe180 4249 xen_4.14.1+11-gb0b734a8b3-1.dsc 5c95dd53bcd786bd54b6a91ad3f2eab1a27d8647 4359020 xen_4.14.1+11-gb0b734a8b3.orig.tar.xz ea72610b7443b9a008d09452e8d4256827d6ef83 138900 xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz Checksums-Sha256: ac953c84fc10557e1b9b26a5a46ae0a26c7344fd2705aef366fe8057cb94ec00 4249 xen_4.14.1+11-gb0b734a8b3-1.dsc beb49c6d4d436dc74a694ff43cc016b25cad95d9e4f2e4b75683dbb330799dc1 4359020 xen_4.14.1+11-gb0b734a8b3.orig.tar.xz a75209ac42bcbea9a1acf3a6e471cbd4069cce7a312ea43470ca6a72af7c8aa1 138900 xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz Files: 1a514064f3001814c8acd422cbfb7505 4249 admin optional xen_4.14.1+11-gb0b734a8b3-1.dsc c783a4d92b7fae91f3c6a4cdd93ac5d9 4359020 admin optional xen_4.14.1+11-gb0b734a8b3.orig.tar.xz a7ae32874e584094d425c400e88124e8 138900 admin optional xen_4.14.1+11-gb0b734a8b3-1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEESWyddwNaG9637koYssHfcmNhX2wFAmA78xgACgkQssHfcmNh X2ytuxAAr6rfnne6JaB7pDs4Ln0l4xcdCSzQN9jyH3e8wqb+6HxIa+nCpvPb71dF nGBNcv+l1zED0ErYu/a1OVazCNT8wa6SS8khp9M6hNJsSDdkQ2V9O+3ECjTar/9+ R3ZUqPSHeqzwRZKoRk/4GKBES5gqnT8w9438bSYcDK6vxbnNuwdkTZFajYtv0O9P LVYDu83w5xJwEbaJxOXpCjTItgoc29Of06E1fJ1i7jxmarzGvFgZll8R14Fg0Mpq E7q4cfH2G8lw5bH6KjK2nxvD/AY9mAOLNlhueZD1CF8To//yt2jxYX2MvvKXtsQA HMm/fn2/tVE7rXVyPMAwH1K2UFZXTMLrlcse3M3tWz0hH2YvsvQNU/qzGJ/BMpTT 0e7VN3qEWnfa7vFs8u+lYxbTZdR1OS3vs16YwKlGL13+2h3BO6bywIUynmHXcVxp 9LGkQiYhNemIih5jFBUoQeyXPMWn26tlioD5A4qJQr7TrZQAfynDj525giFfv4Is LKZ9mIDZnm2JR+nV2cgG56v1GVnVOUyHJkVAkmNPOFAvAS+4VWmiyK27Fy34p+0P r0yJoQM3RHEeluKQ0TcfN+hsbLlBxfMuZT6BFTW9AGp4RdLH+MzjZpmZ8JDh2TXP QQNhYxvfD6jA3StQ6Ld4+va+jibbWtb9iudRHc5Dd9qc9oFrlR4= =Oc2F -----END PGP SIGNATURE-----
