-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Fri, 16 Oct 2026 12:41:06 +0200
Source: xen
Architecture: source
Version: 4.20.4+39-gf1e1321c87-1
Distribution: unstable
Urgency: medium
Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org>
Changed-By: Hans van Kranenburg <hans@knorrie.org>
Changes:
xen (4.20.4+39-gf1e1321c87-1) unstable; urgency=medium
.
* Update to new upstream version 4.20.4+39-gf1e1321c87, which also contains
security fixes for the following issues:
- x86: DMs may cause mem leak by IRQ binding
XSA-509 CVE-2026-62437
- x86: improper handling of HVM emulation return codes
XSA-510 CVE-2026-79602
- Unconditionally do TLB flushing ahead of page scrubbing
XSA-511 CVE-2026-79603
- oxenstored: Unbounded accumulation of watches
XSA-512 CVE-2026-79604
- x86/AMD: ineffectual Zenbleed workaround
XSA-515 CVE-2026-79608
- x86: XPTI may break on huge-memory systems
XSA-516 CVE-2026-79609
- grant-table: double version change race
XSA-517 CVE-2026-79610
- VMX: VMentry failure with branch tracing and blocked states
XSA-518 CVE-2026-79611
- Arm: multiple issues with GNTTABOP_cache_flush
XSA-519 CVE-2026-102699 CVE-2026-102702
- gnttab: cache-flush handling may cause page reference leak
XSA-520 CVE-2026-102700
* Note that the following XSA are not listed, because...
- XSA-513 applies to blktap which is not included in Debian
- XSA-514 only applies to Xen 4.22
- XSA-521 applies to blktap which is not included in Debian
- XSA-522 has patches for the Linux kernel
Checksums-Sha1:
d3caa6a5e5189b739225d91144319310b1a05f8d 4146 xen_4.20.4+39-gf1e1321c87-1.dsc
0f2c5f7af9266bb793e58d382b9dc5a3d827b002 4963496 xen_4.20.4+39-gf1e1321c87.orig.tar.xz
90bc0e9e3b123874500553cb37c52e28d44f7f6e 139788 xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz
Checksums-Sha256:
f5ed5903f8c88208fbbbbe283a62a622bc462ecb9224db0d7f29bb2e74bd8f02 4146 xen_4.20.4+39-gf1e1321c87-1.dsc
1f5ff12b9dc664ac519ca52e0b5f746cfb1149f74e932e23ed584b092a46bc46 4963496 xen_4.20.4+39-gf1e1321c87.orig.tar.xz
47f513239b9f14c66c71f93d42fae4c90e67e82f7c808d708728aae2c5a7fc2e 139788 xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz
Files:
c4c441443e4166449e4e9bfd9f637f2c 4146 admin optional xen_4.20.4+39-gf1e1321c87-1.dsc
1a7697e2104c9150968cd903a112ce18 4963496 admin optional xen_4.20.4+39-gf1e1321c87.orig.tar.xz
821eb77a253a6c9a8556c5c3e906d7c7 139788 admin optional xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz
-----BEGIN PGP SIGNATURE-----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=KD9w
-----END PGP SIGNATURE-----
