-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Thu, 07 Sep 2017 19:17:58 +0100 Source: xen Binary: libxen-4.8 libxenstore3.0 libxen-dev xenstore-utils xen-utils-common xen-utils-4.8 xen-hypervisor-4.8-amd64 xen-system-amd64 xen-hypervisor-4.8-arm64 xen-system-arm64 xen-hypervisor-4.8-armhf xen-system-armhf Architecture: all amd64 source Version: 4.8.1-1+deb9u3 Distribution: stretch-security Urgency: high Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org> Changed-By: Ian Jackson <ian.jackson@eu.citrix.com> Description: libxen-4.8 - Public libs for Xen libxen-dev - Public headers and libs for Xen libxenstore3.0 - Xenstore communications library for Xen xen-hypervisor-4.8-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.8-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.8-armhf - Xen Hypervisor on ARMHF xen-system-amd64 - Xen System on AMD64 (meta-package) xen-system-arm64 - Xen System on ARM64 (meta-package) xen-system-armhf - Xen System on ARMHF (meta-package) xen-utils-4.8 - XEN administrative tools xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.8.1-1+deb9u3) stretch-security; urgency=high . * Security fixes for XSA-226 CVE-2017-12135 XSA-227 CVE-2017-12137 XSA-228 CVE-2017-12136 XSA-230 CVE-2017-12855 XSA-235 (no CVE yet) * Adjust changelog entry for 4.8.1-1+deb9u2 to record that XSA-225 fix was indeed included. * Security fix for XSA-229 not included as that bug is in Linux, not Xen. * Security fixes for XSA-231..234 inc. not inclued as still embargoed. Checksums-Sha1: ff364489cb6f5445f51a675c1e89385a963e4537 2676 xen_4.8.1-1+deb9u3.dsc cdb83b17ab33510fb94aed087b9c3afecdb1ad92 76636 xen_4.8.1-1+deb9u3.debian.tar.xz a5aefcbbe529e4d8f5a5b4877366fbae4aae95f7 1609874 libxen-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb c4c91667dc0b2e9e6d607443f4da79542131f3b1 409764 libxen-4.8_4.8.1-1+deb9u3_amd64.deb 775b8e9995c0a0964925032b654634918771180e 649330 libxen-dev_4.8.1-1+deb9u3_amd64.deb 438077ffad587056251c60a6d1c900bf1375a016 25232 libxenstore3.0-dbgsym_4.8.1-1+deb9u3_amd64.deb dc7313394352488ed86d3d2960883736cc2bff6c 32848 libxenstore3.0_4.8.1-1+deb9u3_amd64.deb af59d2b570963fc10f7c1a2b5857003d3df9f3cf 1832576 xen-hypervisor-4.8-amd64_4.8.1-1+deb9u3_amd64.deb 5ef1d8ec605a962d97cc16fb8020175d7c0cdf0d 21824 xen-system-amd64_4.8.1-1+deb9u3_amd64.deb 7998bcc00bf95c45ae4cbc65715bdd779fcbc17f 848832 xen-utils-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb d16f1cd270d7409468f2957196b79c154d5a0721 420756 xen-utils-4.8_4.8.1-1+deb9u3_amd64.deb b019d6e280cd426ac3a84516b5739ba1f54a0cc7 279278 xen-utils-common_4.8.1-1+deb9u3_all.deb 1dba173035aada7aca9cd9911de26702a0f6376b 10860 xen_4.8.1-1+deb9u3_amd64.buildinfo 3790472f443c3379b348c6110e7f12a908e158c8 13350 xenstore-utils-dbgsym_4.8.1-1+deb9u3_amd64.deb 190ccaf145b1652f5ce65b8755b71238a3e7d390 28556 xenstore-utils_4.8.1-1+deb9u3_amd64.deb Checksums-Sha256: 4cfd4a2b73857c41fe6af038d71e022529461366631e310e50541d4fa240c10a 2676 xen_4.8.1-1+deb9u3.dsc 36653095276a95f4377dbfe8c79c58d9a8c7ee503a3ac8a3b93cec3affdd865f 76636 xen_4.8.1-1+deb9u3.debian.tar.xz 98936283e35e70de66bd48004370ed6d2c7f9e9ed9849dc5f64c80ae1d1cbf9b 1609874 libxen-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb 796a287f016c157412fc49e0faa908a8bb6fe32730aa19d73daeaff63b60e767 409764 libxen-4.8_4.8.1-1+deb9u3_amd64.deb dec8a74cc72f667b7a6230b4a872c3e2b034f45d7813d4241012ed481333d926 649330 libxen-dev_4.8.1-1+deb9u3_amd64.deb 52ae761d7c01572eed1e161007e12e2074538ec12c09b5b726767c7aae24450a 25232 libxenstore3.0-dbgsym_4.8.1-1+deb9u3_amd64.deb 8a5c4cf4c082a6b7317e478311c684bf592fce18064392ba4144b77209c49678 32848 libxenstore3.0_4.8.1-1+deb9u3_amd64.deb 1043b7c8322034dd092ec22fdb0249f6c4703ea8a23eae44b2db46f84332c480 1832576 xen-hypervisor-4.8-amd64_4.8.1-1+deb9u3_amd64.deb 8f9ce7226b876927c3cf145dec23ef47c3483433d47707d8b64dcee140824bbb 21824 xen-system-amd64_4.8.1-1+deb9u3_amd64.deb 6c563755f51ab9ccd74fd0c7ea61c8ebcdd276d378c407b62834223ff9b77546 848832 xen-utils-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb 487625152ec5ad088c81a56466e9d79fc37ce6b22d67962248c9ee10baab239b 420756 xen-utils-4.8_4.8.1-1+deb9u3_amd64.deb b61d638d41665ab6266c0a08fa909d7b90504e1f48dd0667dbeb8fdfc90cbfab 279278 xen-utils-common_4.8.1-1+deb9u3_all.deb ff135de228dfe524de55b61058b9895520cb1d7e451ec6817372c952a13f5031 10860 xen_4.8.1-1+deb9u3_amd64.buildinfo 527a5ecddcd18a1995fed86d381abf2f12c16a36f2d85479b74c71c4cd956470 13350 xenstore-utils-dbgsym_4.8.1-1+deb9u3_amd64.deb c88a57ae4bb83ef9eaae87472ee9b2a976029265fed6c4c0a491ed31a74abc34 28556 xenstore-utils_4.8.1-1+deb9u3_amd64.deb Files: 530de771cf132102960e8d9486313f1e 2676 kernel optional xen_4.8.1-1+deb9u3.dsc b3ae73eb901f92b4f275423b9e3f3f05 76636 kernel optional xen_4.8.1-1+deb9u3.debian.tar.xz 13d8cbf7a1ad4bf1c5c9cce8ddaa8674 1609874 debug extra libxen-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb bc1e0c83587f70820e82428d798ec1a7 409764 libs optional libxen-4.8_4.8.1-1+deb9u3_amd64.deb 8df436213d395c3c73a2c9f521655dff 649330 libdevel optional libxen-dev_4.8.1-1+deb9u3_amd64.deb 83c94254e0379ee96d7dc5e83ebb8c91 25232 debug extra libxenstore3.0-dbgsym_4.8.1-1+deb9u3_amd64.deb 0e9be1d358f710d2c9379a1ad2324b31 32848 libs optional libxenstore3.0_4.8.1-1+deb9u3_amd64.deb ca23ed0e62c5591544f6154edf02e098 1832576 kernel optional xen-hypervisor-4.8-amd64_4.8.1-1+deb9u3_amd64.deb 1fd946527d4785306ad7045224e3d135 21824 kernel optional xen-system-amd64_4.8.1-1+deb9u3_amd64.deb 13038d0bc491826e4e670ca9464bd00f 848832 debug extra xen-utils-4.8-dbgsym_4.8.1-1+deb9u3_amd64.deb f7a987ebe7e1af77c83752ca0509a48a 420756 kernel optional xen-utils-4.8_4.8.1-1+deb9u3_amd64.deb 0a76301e0e2ef845dc9ce679f02ae80b 279278 kernel optional xen-utils-common_4.8.1-1+deb9u3_all.deb ccf93c2ebd4c7e45571e0d3bde5fd210 10860 kernel optional xen_4.8.1-1+deb9u3_amd64.buildinfo d27d46a638d91788b311417a299db55e 13350 debug extra xenstore-utils-dbgsym_4.8.1-1+deb9u3_amd64.deb d2bd70596eec461a966f5a3406f439de 28556 admin optional xenstore-utils_4.8.1-1+deb9u3_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAlmxj7oACgkQ4+M5I0i1 DTnKxAf8CpsP9r1Nf4FoVKYvp4aAghpVGt/3m/GZviJzx12z+AHKkvnrBvqQS9xh g9ZL6IN55ILtTnT94+pNpiRpV/pCT+o2SwX8sNczHCa73kc4RIffRDIO8NcXPAuv R6ifQvYF+rOn8B+XCG2mdnaaTYxcIJgpyF3gJcSuXqhDovOtt8n+lNI3J1c63z6W 9KoZgsp0YgYy4EkoveYMAJ/rJwu6T6URCwvdF4h1hyiBAHOWr+2tMOXaFwQPYk2E 7t3zITdk6xgDmxSmei6P0oi7+6NfhXiexVtvFoOfihxEGvvMqg9qANE/kLmRrNHr ipYzmOMvrjANRueWkEi0Kpy7BNEpNA== =d6tH -----END PGP SIGNATURE-----