-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sun, 04 Feb 2024 16:31:59 +0100 Source: xen Architecture: source Version: 4.17.3+10-g091466ba55-1~deb12u1 Distribution: bookworm Urgency: medium Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org> Changed-By: Hans van Kranenburg <hans@knorrie.org> Closes: 1062048 Changes: xen (4.17.3+10-g091466ba55-1~deb12u1) bookworm; urgency=medium . * Rebuild 4.17.3+10-g091466ba55-1 for Bookworm to address the security issues since last Debian stable update. . xen (4.17.3+10-g091466ba55-1) unstable; urgency=medium . * Update to new upstream version 4.17.3+10-g091466ba55, which also contains security fixes for the following issues: - arm32: The cache may not be properly cleaned/invalidated (take two) XSA-447 CVE-2023-46837 - pci: phantom functions assigned to incorrect contexts XSA-449 CVE-2023-46839 - VT-d: Failure to quarantine devices in !HVM builds XSA-450 CVE-2023-46840 * Note that the following XSA are not listed, because... - XSA-448 has patches for the Linux kernel. * Compilation with Python 3.12 has been fixed in upstream commit 4000522008 ("Only compile the hypervisor with -Wdeclaration-after-statement") (Closes: #1062048) Checksums-Sha1: 6ad8ae4285eed88b886f7dae66810720d0480582 4522 xen_4.17.3+10-g091466ba55-1~deb12u1.dsc 84fd4e57d869a05346de71b0e704737179a23f60 137044 xen_4.17.3+10-g091466ba55-1~deb12u1.debian.tar.xz Checksums-Sha256: 6c3dcea8ae88ebff52df32c8b7f6a4f0f2c833ea1de6351160d2efb823fd37f2 4522 xen_4.17.3+10-g091466ba55-1~deb12u1.dsc 742806c0e47f064f1eb15c720c6f34ec2ed6f72dff56416e697f5ca822844299 137044 xen_4.17.3+10-g091466ba55-1~deb12u1.debian.tar.xz Files: 45e2d45eeb5bfa15448b61cfcdf69d6d 4522 admin optional xen_4.17.3+10-g091466ba55-1~deb12u1.dsc e68c801b71e5864b50e4f285b2a81598 137044 admin optional xen_4.17.3+10-g091466ba55-1~deb12u1.debian.tar.xz -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEESWyddwNaG9637koYssHfcmNhX2wFAmW/uYUACgkQssHfcmNh X2ynsw//bepR55htgcVqAyTahuG1YNK54HcOk41VXJd+kwMwRY95+JcXPAmRMtih mnyxAESJfeekeln1CQKyk5ktLsicIh16DbbiTJOnC3HOvb0N59PmEBo6U0QJAw/n duGc+vcZmbNX0KKtPvCYMh7tZwNn7CqXmSGIJPASd/zIlLli7YvKnm/zyfrCxNa+ x0hSzOCLizn1Ka2316KXx8enLrXbeAIg5vZMJMOv+Y0qk47EKCUxnCRrgKcbyD7D lvvpibxxHPm0fU3eHMfiFz8NyzKZ3Vkop8Vaqu7KZPYX9KbHzaBmKRCpR5SMPEqU 4yGFKmeqJLRRYWPi+VlDmB8Zbecqkvg8piIOeeuMIXbrzAdSY+mbROF29C5lDS1n nQMufZTnbLtvwxgYTk52dIzEs1b7hW0Ii9d+QUxr1SkV8kD2HKlhJ9X7VawWAR5m Pn9hyCPkW4WZLyG+DWVMuYrJCVkvnBrBKKKKj/t5fIkB9YPmZqSRBbQ4tjN8BzRW b7witZFEt3tVvjmeUxJ++pQio9VS8PIAYPmENiQGUlZUhUvi7IkNIvEW8PE3Wkis gGQ40pge2kQzo8MsJdBfog8O6UnLs9bWnZi4kXb7yGzz4Jv+nacbiEytTZDwAVm8 XVUA3qEzadvgsXmYz9CO4zjc5Efu3y2HkYj7jy9BHfPb+R0g1PY= =krNd -----END PGP SIGNATURE-----
