-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 Nov 2025 14:52:25 +0100 Source: xen Binary: libxen-dev libxencall1 libxencall1-dbgsym libxendevicemodel1 libxendevicemodel1-dbgsym libxenevtchn1 libxenevtchn1-dbgsym libxenforeignmemory1 libxenforeignmemory1-dbgsym libxengnttab1 libxengnttab1-dbgsym libxenhypfs1 libxenhypfs1-dbgsym libxenmisc4.17 libxenmisc4.17-dbgsym libxenstore4 libxenstore4-dbgsym libxentoolcore1 libxentoolcore1-dbgsym libxentoollog1 libxentoollog1-dbgsym xen-doc xen-hypervisor-4.17-arm64 xen-hypervisor-4.17-arm64-dbg xen-hypervisor-common xen-system-arm64 xen-utils-4.17 xen-utils-4.17-dbg xen-utils-common xen-utils-common-dbgsym xenstore-utils xenstore-utils-dbgsym Architecture: arm64 Version: 4.17.5+72-g01140da4e8-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-ubc-04) Changed-By: Hans van Kranenburg Description: libxen-dev - Public headers and libs for Xen libxencall1 - Xen runtime library - libxencall libxendevicemodel1 - Xen runtime libraries - libxendevicemodel libxenevtchn1 - Xen runtime libraries - libxenevtchn libxenforeignmemory1 - Xen runtime libraries - libxenforeignmemory libxengnttab1 - Xen runtime libraries - libxengnttab libxenhypfs1 - Xen runtime library - libxenhypfs libxenmisc4.17 - Xen runtime libraries - miscellaneous, versioned ABI libxenstore4 - Xen runtime libraries - libxenstore libxentoolcore1 - Xen runtime libraries - libxentoolcore libxentoollog1 - Xen runtime libraries - libxentoollog xen-doc - Xen documentation xen-hypervisor-4.17-arm64 - Xen Hypervisor on ARM64 xen-hypervisor-4.17-arm64-dbg - debug symbols for Xen Hypervisor on ARM64 xen-hypervisor-common - Xen Hypervisor - common files xen-system-arm64 - Xen System on ARM64 (metapackage) xen-utils-4.17 - Xen administrative tools xen-utils-4.17-dbg - debug symbols for xen-utils-4.17 xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Closes: 1105193 1105222 1120075 Changes: xen (4.17.5+72-g01140da4e8-1) bookworm-security; urgency=medium . Significant changes: * Update to new upstream version 4.17.5+72-g01140da4e8, which also contains security fixes for the following issues: (Closes: #1105193) (Closes: #1120075) - deadlock potential with VT-d and legacy PCI device pass-through XSA-467 CVE-2025-1713 - x86: Indirect Target Selection XSA-469 CVE-2024-28956 - x86: Incorrect stubs exception handling for flags recovery XSA-470 CVE-2025-27465 - x86: Transitive Scheduler Attacks XSA-471 CVE-2024-36350 CVE-2024-36357 - Multiple vulnerabilities in the Viridian interface XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 - Arm issues with page refcounting XSA-473 CVE-2025-58144 CVE-2025-58145 - x86: Incorrect input sanitisation in Viridian hypercalls XSA-475 CVE-2025-58147 CVE-2025-58148 - Incorrect removal of permissions on PCI device unplug XSA-476 CVE-2025-58149 * Note that the following XSA are not listed, because... - XSA-468 applies to Windows PV drivers - XSA-474 applies to XAPI which is not included in Debian . Packaging minor fixes and improvements: * debian/salsa-ci.yml: adjust for new salsa-ci pipeline . Additional changes for 4.17 that were not backported upstream: * Cherry-pick dd05d265b8 ("x86/intel: Fix PERF_GLOBAL fixup when virtualised") to fix a boot loop when using Xen under nested virtualization (Closes: #1105222) Checksums-Sha1: d55622f29a81f652b3fdcf4f84abf98f74cfbf96 736224 libxen-dev_4.17.5+72-g01140da4e8-1_arm64.deb 8b5cbcfa3b0108880216265595f6bed874fe4e0a 12596 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb da55d7d7889d68c7bca9e00eefe4a1c178e9b574 33280 libxencall1_4.17.5+72-g01140da4e8-1_arm64.deb a085517122463e2efb7b363ed29845c08b22b837 18092 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 43c31c360a95b4662853bbd5df26d1174f0cddcc 34288 libxendevicemodel1_4.17.5+72-g01140da4e8-1_arm64.deb 6fde144d54a3b2e5a4f07bfc27bcf7848103d4b4 8268 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb d8759db478caea26e7e42b2dde25fce1e0f64cf8 31976 libxenevtchn1_4.17.5+72-g01140da4e8-1_arm64.deb 912f2259ea3336daaeca84c3e0b8c490003c40ca 14496 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 1a0ad294f7fe33a9bd1f29b9750dda5bd15b93e7 33520 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_arm64.deb 09e777d75ca0c892b611a81a8bdaa499346ccab8 17828 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 708365ded9f4c59dead53f4350be4fbf361105bc 34140 libxengnttab1_4.17.5+72-g01140da4e8-1_arm64.deb c1b96451d4998feb1cf660363fe1cb5fbb11f382 11972 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 76ce5cc5b8dd5a1c3c2d4c07bf2197d8dfb04110 33576 libxenhypfs1_4.17.5+72-g01140da4e8-1_arm64.deb c321a9c74c593a6ac60269ec598d93383e2dcc4a 1536216 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 6f46262a0d8cf6b5745f499f19fc9d970dd3d7e1 417736 libxenmisc4.17_4.17.5+72-g01140da4e8-1_arm64.deb 79186bf843776c9a32ecf318341e717de27834bf 33760 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb b1c42b215cc6a0374accc7ff5850a189002a1858 39804 libxenstore4_4.17.5+72-g01140da4e8-1_arm64.deb e1c6581fdd2c32ee4ca25d077a4d8766b2be323a 5624 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb fb3fbee60ae7917231cea581a4464626930eb424 31296 libxentoolcore1_4.17.5+72-g01140da4e8-1_arm64.deb 3bf98847b7edd9503f8f1f5886e7d43482197174 10216 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb b1764207dff95b15377f49602e8d6c3b6919ea54 33100 libxentoollog1_4.17.5+72-g01140da4e8-1_arm64.deb c3791bd84e373e70b48c2a2dfef5a28b9365221e 536204 xen-doc_4.17.5+72-g01140da4e8-1_arm64.deb 004ea01036fac3021fc00efec276aa635423b31e 375964 xen-hypervisor-4.17-arm64-dbg_4.17.5+72-g01140da4e8-1_arm64.deb d562fd6d1a771c8a39945c93009fc6ca4dc7281d 323760 xen-hypervisor-4.17-arm64_4.17.5+72-g01140da4e8-1_arm64.deb f8aeb0d0bf70c072f5c81b3a29f8e15f0ed73483 32320 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_arm64.deb fb659a21e3fb3bed9ff58bcd65e1e77e28ab172f 29080 xen-system-arm64_4.17.5+72-g01140da4e8-1_arm64.deb 958bb9b99fdab27594f612cf017c8db573a0b277 951132 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_arm64.deb 987170517d5ed3f447b75824aae2e9fb273d7b22 723016 xen-utils-4.17_4.17.5+72-g01140da4e8-1_arm64.deb 9a169e6814e3303d97452dabbd367d1f08ed9b08 204980 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb d97f4e3461e8073095f84423e7750e6457d0bd0f 259144 xen-utils-common_4.17.5+72-g01140da4e8-1_arm64.deb 08c70519013280642405027a1d70db3a252da640 18930 xen_4.17.5+72-g01140da4e8-1_arm64-buildd.buildinfo fc6ef33e7d53b24224c4dbb46015707ce11a7bdc 21612 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 6bc703d6c5cd4b9c0885aa5fe0bb91efb44a9adb 48712 xenstore-utils_4.17.5+72-g01140da4e8-1_arm64.deb Checksums-Sha256: abdd4b2346b3f9078dd6b013a72dbef908f71c974f7221cc5aff9190cdc2ac7a 736224 libxen-dev_4.17.5+72-g01140da4e8-1_arm64.deb 7486eea7df96a8032ed6638b596c5754ec547806a511843e2ecc1cb9b72a6f45 12596 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb c4d56c953e4a5ae4973b793dbafea6fa178e2fd05b75c97f3bcef79f888fe883 33280 libxencall1_4.17.5+72-g01140da4e8-1_arm64.deb 6d155f26b0a9be600114039e75057ab5d5ce0f593e53a86cce90fab0839a4c26 18092 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 00b7cc933d0f304cdf7175c135509351a69fa6392b44b2772abf4c075f9a457c 34288 libxendevicemodel1_4.17.5+72-g01140da4e8-1_arm64.deb 309e893b437f9802c5026f0183d564073a2165a07dc587bc5119b13a7ccbb7cc 8268 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 7078f32dd76704a8b54a0f06af293f8355c9b046e1c2829843e956cdf1df9e37 31976 libxenevtchn1_4.17.5+72-g01140da4e8-1_arm64.deb f2e1caa17cb5a9610ddae465db6b0b565e883c76f1fc7e1252eed3d4035fa840 14496 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 918966c022a573e844b4728bec80087fbe95e17fab1d53c315f1818d506e5a7d 33520 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_arm64.deb 513f307858040bb9269ac0ecce508009b340802c38f3199bf383bfb6a7f296fe 17828 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb c5b65787a54fed3e453b626e28a4b080bba34eff1df6e529fe44c3b4171ee35a 34140 libxengnttab1_4.17.5+72-g01140da4e8-1_arm64.deb 3080144aad2bec04ec868da160e10c2a70d2f229ffe365342acd9437fbcde03f 11972 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 0a058bde0d4a7f2e6d4f22257215df6db71dbccd2188b2073d478c651d5e563d 33576 libxenhypfs1_4.17.5+72-g01140da4e8-1_arm64.deb bba21828e38de51e83f46f9e8ffddf5a39b18a79e2909c1d003f61bcba0dcaca 1536216 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 013b5555ff6af883711f1e1983654fd802216bc0f63c361b41a3c1aff1dcfa07 417736 libxenmisc4.17_4.17.5+72-g01140da4e8-1_arm64.deb 0304c579dcaacf837649357f2deba550256594975d30ca1683d5ab90a94feecd 33760 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 0a8f5b033cb38aeacf551d2ed93ae3530b754dceeb2bfb2dc98fb9e9a0875299 39804 libxenstore4_4.17.5+72-g01140da4e8-1_arm64.deb 86ed8b546a2c6ee03bbc4580257a76dbed05c13c1c7a636f5bee3e0ce3a78229 5624 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb c0f4ff4d2d00586a6d658f62df564e541d3d4cb3891e60379309694542643cc2 31296 libxentoolcore1_4.17.5+72-g01140da4e8-1_arm64.deb 3ec8ee4773ce7be68fc81420fb3534021e39616619ce993f367534189139ce00 10216 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 8edac660666646d1010e44154a8297ea870e3a96f1d0d66bfe8eef61b81ba4fb 33100 libxentoollog1_4.17.5+72-g01140da4e8-1_arm64.deb b9bb220999654e3c825f611d3cd8553f6d427528ce20a1c04cd5a194c1a3925e 536204 xen-doc_4.17.5+72-g01140da4e8-1_arm64.deb 49ff011acc1b6f8e1bf4bd65a6b25cc552df926031a9ccbb81ca7f2a1f34636e 375964 xen-hypervisor-4.17-arm64-dbg_4.17.5+72-g01140da4e8-1_arm64.deb ae97d9bb37f765ae1a37628894ad5156d0957ca7e39e7df86221ecb46502a1a8 323760 xen-hypervisor-4.17-arm64_4.17.5+72-g01140da4e8-1_arm64.deb 48ff8f8d3a08c885ec74888c00a9365fd4cc9b21dc40e25cb96df9fa9713ea65 32320 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_arm64.deb cdb59a98dd028efdebb71d91cb9c029a94c71ac6db74d417db92dd8ccffd9bd7 29080 xen-system-arm64_4.17.5+72-g01140da4e8-1_arm64.deb 354bf70b85670a3290072273a301b3fdf73c785c62d23e736f1b609d8278b8fe 951132 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_arm64.deb 80c291b5d1883ed8ca25efd28701c7c9c1765623a09c0c1d39559d51cae14359 723016 xen-utils-4.17_4.17.5+72-g01140da4e8-1_arm64.deb 090920c8375170a29138006fa5d69f416e64a1f5a7aef3890ae799839dd07a23 204980 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 68ffae02018bdce62f9715e6198cbe44861c9522433b54a2ee233a80a08949ac 259144 xen-utils-common_4.17.5+72-g01140da4e8-1_arm64.deb 1b13cbca55acc1c92f4d157177274034fa7424e977ffc419d571aaf05fe8ceaf 18930 xen_4.17.5+72-g01140da4e8-1_arm64-buildd.buildinfo 84d518f848a034309c9d686b85ff611bb34c3ae50e1b05f561a30e1b17c4d2d7 21612 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb b593c74d16aa4170664669a00cafb87131d5830ce5c0fedc624ec545190ecae8 48712 xenstore-utils_4.17.5+72-g01140da4e8-1_arm64.deb Files: b3b93f16b97ce4b0c9838b2bbec39f75 736224 libdevel optional libxen-dev_4.17.5+72-g01140da4e8-1_arm64.deb 9c7d1e268bcd267c56be3306912740ca 12596 debug optional libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 5459e490fbe65809e2dc942173e4c012 33280 libs optional libxencall1_4.17.5+72-g01140da4e8-1_arm64.deb 79533d93e81fc1dbd7e374d449e6a4cf 18092 debug optional libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 4b66b545ae2e97560695427daf62feca 34288 libs optional libxendevicemodel1_4.17.5+72-g01140da4e8-1_arm64.deb fc108fef66bcc6379ea0d739b3f4bb2b 8268 debug optional libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 202aa174c327f3a803e76c1d779118b8 31976 libs optional libxenevtchn1_4.17.5+72-g01140da4e8-1_arm64.deb 14eb5157c70661fec2c387dfc8dd25d9 14496 debug optional libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb d5e6fc7107cbc451f2b220efe70e839f 33520 libs optional libxenforeignmemory1_4.17.5+72-g01140da4e8-1_arm64.deb 8eb041ad48f308521b23fceb8df72c0f 17828 debug optional libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 9987449f8d76a59fb00639eaf657c27b 34140 libs optional libxengnttab1_4.17.5+72-g01140da4e8-1_arm64.deb 130f1516946c2d4400540c22b1663d99 11972 debug optional libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 0a808bfb92a4163fc131b6fe2bac77fb 33576 libs optional libxenhypfs1_4.17.5+72-g01140da4e8-1_arm64.deb 837d1c8a9c51145497016a049d806f0a 1536216 debug optional libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb a4d8f6d72fb39f3086ab7f2680f61506 417736 libs optional libxenmisc4.17_4.17.5+72-g01140da4e8-1_arm64.deb f150fa0a9e419cd27d908845baccf43d 33760 debug optional libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb e6b123714baf72849118ff4a1b9bc929 39804 libs optional libxenstore4_4.17.5+72-g01140da4e8-1_arm64.deb b6ebbdf752ac7ff46f5b52368adb59ca 5624 debug optional libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 515e932d6bf539b65e5e90a5cff7707a 31296 libs optional libxentoolcore1_4.17.5+72-g01140da4e8-1_arm64.deb 985001662fa04bfae05ac71b082b7fbd 10216 debug optional libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb c94963495c34e8af23673179d1712b0d 33100 libs optional libxentoollog1_4.17.5+72-g01140da4e8-1_arm64.deb e566df393bc609aab5c3f0081cfb2d92 536204 doc optional xen-doc_4.17.5+72-g01140da4e8-1_arm64.deb 5484deeaa03bdf91fd16d4ba68f70d74 375964 debug optional xen-hypervisor-4.17-arm64-dbg_4.17.5+72-g01140da4e8-1_arm64.deb e4d12df975fb64df9714c6c53a916f2e 323760 kernel optional xen-hypervisor-4.17-arm64_4.17.5+72-g01140da4e8-1_arm64.deb a2726585cb7421a63608f0d2309d5e26 32320 kernel optional xen-hypervisor-common_4.17.5+72-g01140da4e8-1_arm64.deb fbe7e4c591e3f06147fa02a6f7c7c068 29080 admin optional xen-system-arm64_4.17.5+72-g01140da4e8-1_arm64.deb 61e89b5206e53cfc0159c1926c3729d9 951132 debug optional xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_arm64.deb c54dabc2b79753d9c5185ad4842739bf 723016 admin optional xen-utils-4.17_4.17.5+72-g01140da4e8-1_arm64.deb 092c401405458e43e6ee6778046f631a 204980 debug optional xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 8b464c650e1ad56b703f5796d7f88478 259144 admin optional xen-utils-common_4.17.5+72-g01140da4e8-1_arm64.deb 02d60974d2a6c742b47b4f2a497de5e7 18930 admin optional xen_4.17.5+72-g01140da4e8-1_arm64-buildd.buildinfo 39b70ff9a8f754ec329a36c998b0e676 21612 debug optional xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_arm64.deb 20f3f033f2554da8f5947b4deea0aad2 48712 admin optional xenstore-utils_4.17.5+72-g01140da4e8-1_arm64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEUPFH3FhY8nQZGtLwVLd4YzMSDKEFAmku3TIACgkQVLd4YzMS DKHNdw//dXxO71QQ6GlEWt05T2AUBDl/Y4Sb12Y/hru9TcbyyMMQlmmcd9DYqP1C r/uXzVBxt1Tkqx8cB93E+mJvlsxef77ZrV971JjIy0oJlj8cPUBF3m6wUnHbrx6B An9e2WxVvkk1peUlHQIZqD7QbNKl5XE+awrUCVGGvvSFQO/whEh/EllQO0D7YGZa 8suPzT7whbKksSj6TRi+qknDPrV5Q0elrvUZk1SPzPS9OBpaZp/FLNohlgUxJ+tX LGQwAbjNvMJJo//DYpmM+srfsoMWt1JVgOSi8u/JzU9CmqrkrOO4UQdbDw4WDjZy rBuaKo5M+0XJ1BRXUxNwoZ8df3k7l8+xowHaLOnn/Z4DqcShkwUYSz1jAr/Y7yX1 1YaXXvyrX0nGDbd71AUeBUyv0+m8UmwSWANhWSgp7igJ5LG7PdAuOAb7ThbKMN2k y0/vrOEpbkfLjD1WKOZ5of2dJWss7xXV29/o9F+1oOySiCgKXCw6PbZuWgejEWeh 9c/WpLaCuTkuB8LFRyyjUfBupqNwjZp4/fMTZctM9T16aBEUZBJ1yLOjDLU3wgjI d5daplkHrFnhmR4XUXgg+ziSB809kE5AGryy3q6B4pEPcQJlSQZ7D2jQPLBmCP9C TWiwxhAb0vAF/91D3dTVyyovNkxUzsAiuhZtZoTXvfA6v454MEw= =xpVD -----END PGP SIGNATURE-----