-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Format: 1.8 Date: Fri, 09 Feb 2018 14:42:57 +0000 Source: xen Binary: libxen-4.8 libxenstore3.0 libxen-dev xenstore-utils xen-utils-common xen-utils-4.8 xen-hypervisor-4.8-amd64 xen-system-amd64 xen-hypervisor-4.8-arm64 xen-system-arm64 xen-hypervisor-4.8-armhf xen-system-armhf Architecture: all amd64 source Version: 4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1 Distribution: stretch-security Urgency: high Maintainer: Debian Xen Team <pkg-xen-devel@lists.alioth.debian.org> Changed-By: Ian Jackson <ijackson@chiark.greenend.org.uk> Description: libxen-4.8 - Public libs for Xen libxen-dev - Public headers and libs for Xen libxenstore3.0 - Xenstore communications library for Xen xen-hypervisor-4.8-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.8-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.8-armhf - Xen Hypervisor on ARMHF xen-system-amd64 - Xen System on AMD64 (meta-package) xen-system-arm64 - Xen System on ARM64 (meta-package) xen-system-armhf - Xen System on ARMHF (meta-package) xen-utils-4.8 - XEN administrative tools xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1) stretch-security; urgency=high . * Fix builds on other than amd64. . xen (4.8.3+comet2+shim4.10.0+comet3-1+deb9u4) stretch-security; urgency=high . * Update to new upstream version 4.8.3+comet2+shim4.10.0+comet3. Specifically, this is two upstreams: - Upstream Xen 4.8.3 "git merge"d with upstream Xen Security Team (XSA-254) 4.8.3pre-shim-comet-2, in `.' - Upstream Xen 4.10.0-shim-comet-3 in `shim'. The upstream tarballs are from `git archive' with the gitattributes for mangling .gitarchive-info disabled. Therefore, we include these security fixes: XSA-254 CVE-2017-5754 but SP3 "Meltdown" only XSA-253 CVE-2018-5244 XSA-251 CVE-2017-17565 XSA-250 CVE-2017-17564 XSA-249 CVE-2017-17563 XSA-248 CVE-2017-17566 * Ship README.pti and README.comet from the upstream XSA-254 advisory in /usr/share/doc/xen-utils/common/. Checksums-Sha1: 559d88898b59175987c7ac879a2e169b6d6f686c 3181 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.dsc 951260d01852fee0a8b79580a358f77f75425be3 55272 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.debian.tar.xz a8d496659e673e047c139275dc28306731e8656a 1616426 libxen-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb ce02d31c3134ef4d3c439b39386c141349a8e78f 412970 libxen-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 3367cf6b0c3d0a48d071a294ca10ac4b7c5fda0d 653468 libxen-dev_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb afa747857275937cbfac16f6e9a359902f72b107 25262 libxenstore3.0-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 976f68e3a67036a681808359938c41bc5849a65f 33400 libxenstore3.0_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 9a56f1895491980af50c4a725151b40f155b468c 2275408 xen-hypervisor-4.8-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 101115c219b568e7c610b47b9a90ec804af5a335 22428 xen-system-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 1e23e6072b932741fea1eac0d676e55061629d9c 849512 xen-utils-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb d813d3313fab2e185f3920eeee53ad1ec452869f 421510 xen-utils-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 1e5925b1abb134422767011991319cb3a4b692ac 282424 xen-utils-common_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_all.deb d6907a5b4f45a52f45cb679941cecd8c44ab1332 12014 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.buildinfo e9b6b9a90ef837d392a561deef02c33c64389fa3 13368 xenstore-utils-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 0d4130ac95e911cf2e5645746176f933dd3a92bc 29180 xenstore-utils_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb Checksums-Sha256: 32e92e5dec97d14fb66d71af281327cde9244bc7e08be91fe1d743dac8379b6d 3181 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.dsc a21beeb02f59ad586cb5bc0a984934a62f37816ba0aff91766fe496770695ead 55272 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.debian.tar.xz a97eaa6e815342687ae905a1661d6b5c7b1cebaf929782a2ca6034a6955ff087 1616426 libxen-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 8f56a1a260e1db0c810e848d138111488a4218560b02b65a0fadd363c2395588 412970 libxen-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 2480857f7518d68752aff06355bb5ae4ded124add769d53df2d2484fb7568e2d 653468 libxen-dev_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 6a1813191cffd7632a54ba7c1aa64ac1ac26efd4614f20700bf67015736e7a63 25262 libxenstore3.0-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb bce52c26172ee4b255ff527cf68ceaa9e8bdadcfe989b71e37539727d19e1c69 33400 libxenstore3.0_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb ca83a0505d8578954e3d388acedb8c271bc569ce0e30dc70198712fd96fa92a7 2275408 xen-hypervisor-4.8-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 403d7666d46e21cb93ea6f6fd9201c497a78a367dc52fc8df464ba08592041f8 22428 xen-system-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 3ca8350442fd7a9fdc30a33e485ebb15c7d8675a64dc631f8ae2cb232c3f600f 849512 xen-utils-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb ccdd98cac31d40b799e4fbf72565b791ab9bde74925dae2c8be7de02a69dd0a7 421510 xen-utils-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 955a2079ade3892b83c9be59a45dd95d552820f23a57e856cbf00ad8028c94e4 282424 xen-utils-common_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_all.deb 5cd5315d55966e9a4ca7f0e9c379ecf931775d638557007673222beed71fd5de 12014 xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.buildinfo 38cacd2c0369d5781df58cfa5b9301f351bcf51e05fd46455a3b79a379fcb6f1 13368 xenstore-utils-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 59de0a39459fa1c544f61929ea0f24014b10ccde66992a2a0c4732d20797c233 29180 xenstore-utils_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb Files: 9514565597ab975e738d26928a5da668 3181 kernel optional xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.dsc 3affae873cfb6df1c090d9ee7f498734 55272 kernel optional xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1.debian.tar.xz 927ca5cf11978dd5385dddd48079765d 1616426 debug extra libxen-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 28a8d72d4199642edbc32cefbb8d1801 412970 libs optional libxen-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 36d7c57dd95caacede238dedbe89e28b 653468 libdevel optional libxen-dev_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 8ea3bb1a994046cd846d9dd9c350752d 25262 debug extra libxenstore3.0-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 1c4575ed5d3d1eb8c56d9654051ea5d8 33400 libs optional libxenstore3.0_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb ae3f12c340c95e05c6d2b0e26df3a096 2275408 kernel optional xen-hypervisor-4.8-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 2c2396b8f8d27635a48e4a21714fd6f7 22428 kernel optional xen-system-amd64_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 7b81e9c511b1238b06f3e61fd2a3be1a 849512 debug extra xen-utils-4.8-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 366d18bda923b1bf2187f8c12c228415 421510 kernel optional xen-utils-4.8_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb e2df4f7e46404650b613f75010cf6aa9 282424 kernel optional xen-utils-common_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_all.deb 99fb0c2fee7e3b647e4352eeaf76d301 12014 kernel optional xen_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.buildinfo 00fa9550ad62c4cb5460a0bd0776bb17 13368 debug extra xenstore-utils-dbgsym_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb 0ca98f7a6937f1b458e43ffcc2055c74 29180 admin optional xenstore-utils_4.8.3+comet2+shim4.10.0+comet3-1+deb9u4.1_amd64.deb -----BEGIN PGP SIGNATURE----- iQEzBAEBCAAdFiEEVZrkbC1rbTJl58uh4+M5I0i1DTkFAlp9zmoACgkQ4+M5I0i1 DTmGbQgAoICR2B22yvoXTPR3TfJoPKwQgAWX7noJ085vfUXQkHoozU49gvXklXSZ 6yXIf8IWQz4UaWFxuztUlvLtHBEuU9NdgK1NJbUFWdBA8N6dOYd5d5dRtKsFwags 9qnFfGZjW8dPv53NvHe2srwTvsX+bgq0IP/7XTQ83x/PT48s7GCSZrmjmvotU39Q 50gxbjoWJ8Ow4hDv8iyHRoDUe116p8/Jv6f6PSFrQO1iFqD+o0nTscCbAotAklMa vRmt+9jbb2RALnJ6Mvjz8XwmIQc2/NdGByFHJ6CYxNXpVRsJHhpKio3LvEDFP/7d z8G/W4nGD/IIrq26g9cG2pUDTwuhbA== =82PP -----END PGP SIGNATURE-----