-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Sat, 25 Nov 2017 11:26:37 +0000 Source: xen Binary: libxen-4.8 libxenstore3.0 libxen-dev xenstore-utils xen-utils-common xen-utils-4.8 xen-hypervisor-4.8-amd64 xen-system-amd64 xen-hypervisor-4.8-arm64 xen-system-arm64 xen-hypervisor-4.8-armhf xen-system-armhf Architecture: all amd64 source Version: 4.8.2+xsa245-0+deb9u1 Distribution: stretch-security Urgency: high Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org> Changed-By: Ian Jackson <ijackson@chiark.greenend.org.uk> Description: libxen-4.8 - Public libs for Xen libxen-dev - Public headers and libs for Xen libxenstore3.0 - Xenstore communications library for Xen xen-hypervisor-4.8-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.8-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.8-armhf - Xen Hypervisor on ARMHF xen-system-amd64 - Xen System on AMD64 (meta-package) xen-system-arm64 - Xen System on ARM64 (meta-package) xen-system-armhf - Xen System on ARMHF (meta-package) xen-utils-4.8 - XEN administrative tools xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.8.2+xsa245-0+deb9u1) stretch-security; urgency=high . * Update to upstream stable 4.8 branch, which is currently at Xen 4.8.2 plus a number of bugfixes and security fixes. Result is that we now include security fixes for: XSA-231 CVE-2017-14316 XSA-232 CVE-2017-14318 XSA-233 CVE-2017-14317 XSA-234 CVE-2017-14319 (235 already included in 4.8.1-1+deb9u3) XSA-236 CVE-2017-15597 XSA-237 CVE-2017-15590 XSA-238 (no CVE yet) XSA-239 CVE-2017-15589 XSA-240 CVE-2017-15595 XSA-241 CVE-2017-15588 XSA-242 CVE-2017-15593 XSA-243 CVE-2017-15592 XSA-244 CVE-2017-15594 XSA-245 (no CVE yet) and a number of upstream functionality fixes, which are not easily disentangled from the security fixes. * Apply two more security fixes: XSA-246 (no CVE yet) XSA-247 (no CVE yet) Checksums-Sha1: 374fee45eb94961544820422287e465a80058c5b 2725 xen_4.8.2+xsa245-0+deb9u1.dsc 720c5b027e72c5e4817b91dbfacd42c0fbdc04af 3893436 xen_4.8.2+xsa245.orig.tar.xz c3175d562e0f3b6c6011e89d0f4a49b1ad936d20 55304 xen_4.8.2+xsa245-0+deb9u1.debian.tar.xz 27d799f11ddce6d2ea88b7caabc5006136d8627e 1609542 libxen-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 41242e522efa3c5b0610b241745bfc8d18628fc1 410244 libxen-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb 16a6f151615fbea639c0c813f6494260e0873a17 649586 libxen-dev_4.8.2+xsa245-0+deb9u1_amd64.deb 1ead5aa8c77f33043d68d17b9db142100c843143 25246 libxenstore3.0-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 58f067c75ce08d14136ad43b42aa6cad16bd2d5c 33012 libxenstore3.0_4.8.2+xsa245-0+deb9u1_amd64.deb c591bdfa44b265b95bde2e54daa9035f7ad77023 1837832 xen-hypervisor-4.8-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb ac9807f3c91a3336fcf91b77090b183c5a451cdd 22056 xen-system-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb df47c8b215a53f20945c3b9f73093c589fca4e79 848878 xen-utils-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 5f2621f48d8a00b551fed7212bce61f881edef00 420498 xen-utils-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb 4dccdd183ae42281b08f451d411be3e6833139d2 279862 xen-utils-common_4.8.2+xsa245-0+deb9u1_all.deb aa2007861c641192a00b2d7f14685b19175668ed 11179 xen_4.8.2+xsa245-0+deb9u1_amd64.buildinfo cd9b111b74a09bcd2cebbb4097c3c0eb83a51e30 13350 xenstore-utils-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 33f2cd182aec4d40c4464fc6536c25359d54ac1d 28780 xenstore-utils_4.8.2+xsa245-0+deb9u1_amd64.deb Checksums-Sha256: 5984b592dec84557c9296d992dcbfa8fc0a31e15d1e7ff0dbf23eb346becbd25 2725 xen_4.8.2+xsa245-0+deb9u1.dsc e9d2dde8378506dce05bb74fec85f1fe5e2ca124d9297a9842ddf7049506e942 3893436 xen_4.8.2+xsa245.orig.tar.xz 78423e87caaf991991d6f2bbdae0d798796a1e4e1c79c74d4d24acd99278ff69 55304 xen_4.8.2+xsa245-0+deb9u1.debian.tar.xz d187ab7bce3281788ed98843dae67b4b5ef950f2103d582ee90713d4e00bd449 1609542 libxen-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb af2dda892e43bba1a395c3a451a9f2e4f993d310e524faa50decb734d019ca48 410244 libxen-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb e60ba43c9cb97b0f7ffbddf5aa6ea11cf155d2eea5adb2925042c8cce4fe2f2e 649586 libxen-dev_4.8.2+xsa245-0+deb9u1_amd64.deb a9e458e7907242e42020f1c0e0ac2e5194957afcd8d1439bfdec5d0af5b506e8 25246 libxenstore3.0-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 68b3cfb6876d4f05c57f01a647c1b28bb356c5f0f649fbf60e441b2abd382976 33012 libxenstore3.0_4.8.2+xsa245-0+deb9u1_amd64.deb 985386ba5b17d3e5573ea0e14629b0920523e01da643c4e8dfab0850967c4672 1837832 xen-hypervisor-4.8-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb b80e048b06e26d7f27ec601b39f42366b50c52f41293e2619bf26ad239c3de13 22056 xen-system-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb 74aeb82e497186fa5d2fdc88a386610f4b3865a7f9ede5ec0a6453c05840825a 848878 xen-utils-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 88eee8451fbbb0d5fd1a8d70dd047d1dfbc8a4ff7be2c7c1d79b8dd885bc3a8e 420498 xen-utils-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb fbeb14649ade4524cbbaeddbf0bf2f1139d49b01793ee42e023c06a0a759db03 279862 xen-utils-common_4.8.2+xsa245-0+deb9u1_all.deb 8dfd0f2f0a4959d5dc920a07d70299d54d72bbb762caf804d967bb1d117eafb9 11179 xen_4.8.2+xsa245-0+deb9u1_amd64.buildinfo e8b29c92bd2226422549b212cb7516db761df0e275e8f0ed80514a2c509be833 13350 xenstore-utils-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb ec60a937dd42dc0e91418f8e0c86243786978494a89de898c2aea6064f044f69 28780 xenstore-utils_4.8.2+xsa245-0+deb9u1_amd64.deb Files: 2257251c9de64f4e3bdab795a1780326 2725 kernel optional xen_4.8.2+xsa245-0+deb9u1.dsc cc33cac67453b4562be4fc0dc69fcb51 3893436 kernel optional xen_4.8.2+xsa245.orig.tar.xz fb98244d3da97cb5fe8a8fb81430e8b3 55304 kernel optional xen_4.8.2+xsa245-0+deb9u1.debian.tar.xz 020784954002d0eafeab73ca0de017ba 1609542 debug extra libxen-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 60aa96c330d33a5dfff1ad6dd6ac3c34 410244 libs optional libxen-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb d341ca0b7c21ccffd0145fb8f4fbec3a 649586 libdevel optional libxen-dev_4.8.2+xsa245-0+deb9u1_amd64.deb 4f0ad29a4e55fe22d0240d29b35ccb27 25246 debug extra libxenstore3.0-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb ca35b83f8bfc0ef70eecfababa3748f8 33012 libs optional libxenstore3.0_4.8.2+xsa245-0+deb9u1_amd64.deb 542552f4e079b5ed29b506a8e833a606 1837832 kernel optional xen-hypervisor-4.8-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb 5abca3d6fe2a1d6a5425fb487d876a33 22056 kernel optional xen-system-amd64_4.8.2+xsa245-0+deb9u1_amd64.deb a4305b16dc07bd2ec5852d1996afe5ea 848878 debug extra xen-utils-4.8-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 5426c6267e627cb2f1f3f0bb800bb067 420498 kernel optional xen-utils-4.8_4.8.2+xsa245-0+deb9u1_amd64.deb f5090fcc116659a3e1a4e65ea71776ec 279862 kernel optional xen-utils-common_4.8.2+xsa245-0+deb9u1_all.deb 1df7d062d942dc2ef8df407b839d8bac 11179 kernel optional xen_4.8.2+xsa245-0+deb9u1_amd64.buildinfo 35efaebda47fefa182340a875bbfdebf 13350 debug extra xenstore-utils-dbgsym_4.8.2+xsa245-0+deb9u1_amd64.deb 7ac4a4cd3e256eae5ea891a995cad626 28780 admin optional xenstore-utils_4.8.2+xsa245-0+deb9u1_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAloZV7oACgkQ4+M5I0i1 DTnfWQf9E1e8Bupi3e3r1qIw3K7QNUkOPriCTmOUiw+F1AZ8Wa1+DAU1fTgZRiWp kSDp8Q7nsc/ZugZ/ssnamb+j+4JHVdROMbD9zgTEIFFMW8uYLlbTxuYpDQMMgj63 i1VVvJ4e1iP2RFYCCBHF0qutN9CM/LGNf903vfcBX9Ouun6DfG42QgqMC/6Ij45C hI+Ln/+3ZizkfFrQraeHyB5gkNUJXtObzaURVXUgPzV4c8J3ib2EqE8nrlAqX7hC kP5ctwUFv9acNseqSInTtCBrKLI2t2NJD03wdxNbB4MgxeNQQkFGg1tKogMXO9K3 Lne/V8d6PrtX2iSZf+PzWnGgqKLUww== =NSnx -----END PGP SIGNATURE-----