Format: 1.8 Date: Mon, 18 Jun 2018 16:10:38 +0100 Source: xen Binary: libxen-4.8 libxenstore3.0 libxen-dev xenstore-utils xen-utils-common xen-utils-4.8 xen-hypervisor-4.8-amd64 xen-system-amd64 xen-hypervisor-4.8-arm64 xen-system-arm64 xen-hypervisor-4.8-armhf xen-system-armhf Architecture: amd64 source Version: 4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~ Distribution: UNRELEASED Urgency: medium Maintainer: Debian Xen Team Changed-By: Ian Jackson Description: libxen-4.8 - Public libs for Xen libxen-dev - Public headers and libs for Xen libxenstore3.0 - Xenstore communications library for Xen xen-hypervisor-4.8-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.8-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.8-armhf - Xen Hypervisor on ARMHF xen-system-amd64 - Xen System on AMD64 (meta-package) xen-system-arm64 - Xen System on ARM64 (meta-package) xen-system-armhf - Xen System on ARMHF (meta-package) xen-utils-4.8 - XEN administrative tools xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~) UNRELEASED; urgency=medium . * Update to new upstream version 4.8.3+xsa267+shim4.10.1+xsa267. XSA-267 CVE-2018-3665 . I have actually taken upstream's staging-4.8 CI input branch, which is identical to the CI-tested stable-4.8 except that it also has the XSA-267 patches. There are additional patches in upstream's stable-4.8 branch, beyond what was in the previous Debian stretch security update, which are prerequisites for the XSA-267 patches. . For the shim, I have updated to upstream's staging-4.10, which is identical to the CI-tested stable-4.10q except, again, for XSA-267-related patches. The 4.10.0-comet branch lacks speculation control entirely and has been superseded upstream. Checksums-Sha1: 4788110d005d837e588054f02efbf45ede3d000f 2639 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.dsc 5199ed5cf238e2a966daa267e60216a2bd95c3a4 4180172 xen_4.8.3+xsa267+shim4.10.1+xsa267.orig-shim.tar.xz 292d6ede36b6f0ad9a38a85422c80f5996ecdeb8 3918924 xen_4.8.3+xsa267+shim4.10.1+xsa267.orig.tar.xz 2a79c2e0259c3ce8279428d1c4e0bb20d569bd9f 57952 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.debian.tar.xz 5e1a8ec5f8f060f47f3d9488ea60d1f68329946b 1609464 libxen-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 84b150b3701588418fedcbe09da2071c4613009d 412798 libxen-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 3a6114069c78a99193f6dd674a55230c68b34ed2 651294 libxen-dev_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb b1346b90b9d13f3eed5c25588ff6a5f1cd33f9fe 25256 libxenstore3.0-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 868783a2a318720df3bc45944a00684a5b8ee5c4 34734 libxenstore3.0_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb dd0e4cab6dfa9a5def1c0c02bcc0dc7f6db4a84c 2304032 xen-hypervisor-4.8-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 218e92ff140a3ca86a73df562f9664178012abf0 23722 xen-system-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb a40bd53ee09a95d4588bddf5c0bc286917882215 852564 xen-utils-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb b64bad40385ea430ffaa59e30bd060b37206159c 423252 xen-utils-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 81e51df576f89ba26110ca69e7c51f8742a7fee0 11424 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.buildinfo 7700960dbdb55b406d6501859ba306a8d3e6b0fa 13382 xenstore-utils-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 8959cbaae3e4c99dee9547cd9a9fee3fb74222e8 30452 xenstore-utils_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb Checksums-Sha256: 977b9c164398809b655f96bd43d2034bfa440afd3b0127cd7ba224629de5bcd0 2639 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.dsc 3e4cb8aab7e66cd18a382e1339d844e2f478f848013df5b25894de31d633c554 4180172 xen_4.8.3+xsa267+shim4.10.1+xsa267.orig-shim.tar.xz 761430bbf4ca7bd94535c7570b2be8bb7b3dca7a2470234bde855ce0c401e255 3918924 xen_4.8.3+xsa267+shim4.10.1+xsa267.orig.tar.xz 563d193ab376a6a0dfad97199f387de6d1479f115f57b7dcbfa8fbe707672fd0 57952 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.debian.tar.xz 874e37724d8b5d9d353bba3b41a0a6c9ec56e902cd512935c13acebfddd81e1e 1609464 libxen-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 7d849976d4ddee55ce29cd1782ed2c8540fbe8e47c6136c1eb00b03935ae1f73 412798 libxen-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 0452d7dc5c911225c507a9d0a71abf5508f27e3f9cb65d81f8044da44f7dac5d 651294 libxen-dev_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 5ab67a90eeb5590d728337ba01913cb623bb93405c9e8c173ad793e0eb84b3d3 25256 libxenstore3.0-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 20244dfe0b0716311617ddc3426332d4cc86eb1cce08c14dd50b5cefa80632f2 34734 libxenstore3.0_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 552757d4132b663c7d4fc0fb31cd47a730d186e0c5bf7c4713f5b007d58a2199 2304032 xen-hypervisor-4.8-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb bbd1ce8d2cb9b7798f21191a5228fff8c29157b7618c1b3dfd94c18fe94760f2 23722 xen-system-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 7e1f79e40ddea4f9b2b7aadcd234eb71f5a95732f396ea2f108e08a8ff184223 852564 xen-utils-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb a203744571a6969934d26cfaef27603ca65690dc9c839c922aaf078afa0a5505 423252 xen-utils-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 6cc9dbabbfd6e95ccb92396614019ee3bacaff1b9790feec3ec11a2b6225e1a7 11424 xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.buildinfo a3da5ff448a2c374f0e6ed0bc72e2d1bdf1454093febe7c2e9bd6f5457d5cdbd 13382 xenstore-utils-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 025979d337b9f027269af4f6c44b95a4fba1a33144b167c4443ae6c623464d4c 30452 xenstore-utils_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb Files: 28af849de4de17ff4305d362579abb32 2639 kernel optional xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.dsc 6459f765a1a83772a70beaa4546b5d68 4180172 kernel optional xen_4.8.3+xsa267+shim4.10.1+xsa267.orig-shim.tar.xz a7573dd28b0baa3e24424325a67733bb 3918924 kernel optional xen_4.8.3+xsa267+shim4.10.1+xsa267.orig.tar.xz 1565c45382b66a7c26c1f325beaf0697 57952 kernel optional xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~.debian.tar.xz fd701e2e0ff6c19cd6c11f6d868d6528 1609464 debug extra libxen-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 2ce8e4d995fff37fda7ee41404840146 412798 libs optional libxen-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 479c8cda99f8d4b0d40ea718d9fed767 651294 libdevel optional libxen-dev_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 76cd122dcdbecb63816dd7ab5cac9075 25256 debug extra libxenstore3.0-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 8dc4e0ac83ed9a84f30dada509e55b7a 34734 libs optional libxenstore3.0_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 593a728e1fb4bde9c53df08543b3da0d 2304032 kernel optional xen-hypervisor-4.8-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb e2ff23af3bcec2451003fd7966d70048 23722 kernel optional xen-system-amd64_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb d9bd125c19de99c3ddbe5ff3a5878918 852564 debug extra xen-utils-4.8-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb a921ad63bd4ba77059b1a4546f99535f 423252 kernel optional xen-utils-4.8_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb 2590a7c3faae9f13bea17ced816f5891 11424 kernel optional xen_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.buildinfo 4980aa633335d99240f7b5ce35eade13 13382 debug extra xenstore-utils-dbgsym_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb fe154a3b13611e191a6027fe2c958328 30452 admin optional xenstore-utils_4.8.3+xsa267+shim4.10.1+xsa267-1+deb9u8~_amd64.deb