-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 Nov 2025 14:52:25 +0100 Source: xen Binary: libxen-dev libxencall1 libxencall1-dbgsym libxendevicemodel1 libxendevicemodel1-dbgsym libxenevtchn1 libxenevtchn1-dbgsym libxenforeignmemory1 libxenforeignmemory1-dbgsym libxengnttab1 libxengnttab1-dbgsym libxenhypfs1 libxenhypfs1-dbgsym libxenmisc4.17 libxenmisc4.17-dbgsym libxenstore4 libxenstore4-dbgsym libxentoolcore1 libxentoolcore1-dbgsym libxentoollog1 libxentoollog1-dbgsym xen-doc xen-hypervisor-4.17-armhf xen-hypervisor-4.17-armhf-dbg xen-hypervisor-common xen-system-armhf xen-utils-4.17 xen-utils-4.17-dbg xen-utils-common xen-utils-common-dbgsym xenstore-utils xenstore-utils-dbgsym Architecture: armhf Version: 4.17.5+72-g01140da4e8-1 Distribution: bookworm-security Urgency: medium Maintainer: arm Build Daemon (arm-conova-01) Changed-By: Hans van Kranenburg Description: libxen-dev - Public headers and libs for Xen libxencall1 - Xen runtime library - libxencall libxendevicemodel1 - Xen runtime libraries - libxendevicemodel libxenevtchn1 - Xen runtime libraries - libxenevtchn libxenforeignmemory1 - Xen runtime libraries - libxenforeignmemory libxengnttab1 - Xen runtime libraries - libxengnttab libxenhypfs1 - Xen runtime library - libxenhypfs libxenmisc4.17 - Xen runtime libraries - miscellaneous, versioned ABI libxenstore4 - Xen runtime libraries - libxenstore libxentoolcore1 - Xen runtime libraries - libxentoolcore libxentoollog1 - Xen runtime libraries - libxentoollog xen-doc - Xen documentation xen-hypervisor-4.17-armhf - Xen Hypervisor on ARMHF xen-hypervisor-4.17-armhf-dbg - debug symbols for Xen Hypervisor on ARMHF xen-hypervisor-common - Xen Hypervisor - common files xen-system-armhf - Xen System on ARMHF (metapackage) xen-utils-4.17 - Xen administrative tools xen-utils-4.17-dbg - debug symbols for xen-utils-4.17 xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Closes: 1105193 1105222 1120075 Changes: xen (4.17.5+72-g01140da4e8-1) bookworm-security; urgency=medium . Significant changes: * Update to new upstream version 4.17.5+72-g01140da4e8, which also contains security fixes for the following issues: (Closes: #1105193) (Closes: #1120075) - deadlock potential with VT-d and legacy PCI device pass-through XSA-467 CVE-2025-1713 - x86: Indirect Target Selection XSA-469 CVE-2024-28956 - x86: Incorrect stubs exception handling for flags recovery XSA-470 CVE-2025-27465 - x86: Transitive Scheduler Attacks XSA-471 CVE-2024-36350 CVE-2024-36357 - Multiple vulnerabilities in the Viridian interface XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 - Arm issues with page refcounting XSA-473 CVE-2025-58144 CVE-2025-58145 - x86: Incorrect input sanitisation in Viridian hypercalls XSA-475 CVE-2025-58147 CVE-2025-58148 - Incorrect removal of permissions on PCI device unplug XSA-476 CVE-2025-58149 * Note that the following XSA are not listed, because... - XSA-468 applies to Windows PV drivers - XSA-474 applies to XAPI which is not included in Debian . Packaging minor fixes and improvements: * debian/salsa-ci.yml: adjust for new salsa-ci pipeline . Additional changes for 4.17 that were not backported upstream: * Cherry-pick dd05d265b8 ("x86/intel: Fix PERF_GLOBAL fixup when virtualised") to fix a boot loop when using Xen under nested virtualization (Closes: #1105222) Checksums-Sha1: 5ab0704e7e6695ecdea6d80ccca28781d916669d 699116 libxen-dev_4.17.5+72-g01140da4e8-1_armhf.deb b43a49d405eeedb1e09adfe7cc6aed0bc6c7e0f5 12660 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb bcbec3ad27afc7c5e483246ced79bc38861a3aec 32860 libxencall1_4.17.5+72-g01140da4e8-1_armhf.deb bef30d6a5802970ccb1fe1534df0a84270bc92ef 18196 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb de18251c67d58dd436cd2af08d6dff2e96f3d13a 33716 libxendevicemodel1_4.17.5+72-g01140da4e8-1_armhf.deb 1ad49f26fc371c06ea87745a561d27e49e43d6de 8400 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb e6d9e2c4c8f6eda7cf364d702ce33210b79fae8f 31616 libxenevtchn1_4.17.5+72-g01140da4e8-1_armhf.deb 239d75d52aa103caaaab92de2ea9bbc479869d33 14516 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 14c58163f6f35871afe56c7a5412599d242679b3 33064 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_armhf.deb 113ee8bed603fe0f5df84d84336ae49eb88efd10 17800 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 5961ab290d9b5f8035729dc78205201f975d324f 33336 libxengnttab1_4.17.5+72-g01140da4e8-1_armhf.deb ae8eef6bdd16518a88744a5e6137cc9564e1eec3 11988 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8d27f3914ae923e324d00025193cd61619f2e465 33056 libxenhypfs1_4.17.5+72-g01140da4e8-1_armhf.deb 6feafa77ed6acdc5721db24467cf91e4837c09da 1492016 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8e03e3e0647856b1b000e668482c7f1865c2d436 385700 libxenmisc4.17_4.17.5+72-g01140da4e8-1_armhf.deb 734297c828f9adacdecfbcfb55cd2dc0e5a6098d 33996 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb f15c6ebc83b4f5a18f9bab2afa8113410ac81762 38084 libxenstore4_4.17.5+72-g01140da4e8-1_armhf.deb 68aafb7c75d03d269015e0c5eeea7a395699b48b 5528 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 7b76cf2c36189020a250b53cc105be5053c56752 30952 libxentoolcore1_4.17.5+72-g01140da4e8-1_armhf.deb 1e884be774fd6765df7d20bc23bce9db4bed4d27 10328 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb df5b45680bcf7ad0e0cd0223f369ae51536863e4 32748 libxentoollog1_4.17.5+72-g01140da4e8-1_armhf.deb 65e77f8e3acfee2bde78996cee5f63b06ae58687 536204 xen-doc_4.17.5+72-g01140da4e8-1_armhf.deb 5afb6313b9c9ff724bb3eba73eed54250b14ebc5 339552 xen-hypervisor-4.17-armhf-dbg_4.17.5+72-g01140da4e8-1_armhf.deb 92a90a14f9c1586609ce45ec9032e9ac64b1c523 286296 xen-hypervisor-4.17-armhf_4.17.5+72-g01140da4e8-1_armhf.deb 668e686b831962efdcab9d7bfc2074af61ab9e07 32316 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_armhf.deb ea3f6fb66a32063b1949d02ea126bcfc546f2ccb 29072 xen-system-armhf_4.17.5+72-g01140da4e8-1_armhf.deb 3bfa436e5d38c30a82e11710b8464fb14c06517b 893660 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_armhf.deb 67cb5bb701feb0f434db539cbac9bd9e8d21d146 650332 xen-utils-4.17_4.17.5+72-g01140da4e8-1_armhf.deb 842825ff468b1f5c6a3368b62eb5fef5c1ed1e5b 206068 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb ccd7933d39b4cf883d9d4ae34749a86ad69661c3 262816 xen-utils-common_4.17.5+72-g01140da4e8-1_armhf.deb cac9a44c98253dad4abe5ba2cc4a5077b6d49381 18774 xen_4.17.5+72-g01140da4e8-1_armhf-buildd.buildinfo e07cc20602e49e24b7d914dcac8e8eccbf176b7c 20648 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb a0114e2040ce7879b68cc8fbc38a8d039a186845 47724 xenstore-utils_4.17.5+72-g01140da4e8-1_armhf.deb Checksums-Sha256: f8dcbef781ce30e191be6abc7207531855de65137ada5949b9c5a94643ee3065 699116 libxen-dev_4.17.5+72-g01140da4e8-1_armhf.deb 6aa1a46e6d38ecae8a34d28150bb564a3f6e08359fe01fc6018f2813b5635870 12660 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8a1883dff10fa24ffcc5af1cdebe06b4632779894aaf55c540103302280cb3f9 32860 libxencall1_4.17.5+72-g01140da4e8-1_armhf.deb a47a9610b629e1abd0058d301f2f21b39d1e8f082bc90967f64722d583fc6b29 18196 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 3267426938e7e477117bf18552940c1ad344bfcb8c7cf28f391278e5dff959c4 33716 libxendevicemodel1_4.17.5+72-g01140da4e8-1_armhf.deb 863e98ece0cce48fd7c4bd2e120caab09aad8819e70fc0958b68dfdbe1a23c16 8400 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 3611194f5d2a5435cbabb99c021519eec6fc35d009f7462ed4441858a02b0aff 31616 libxenevtchn1_4.17.5+72-g01140da4e8-1_armhf.deb 83afb1ccde954c274f9134fea511ff86563b87a9418ec96d47e073dfb53da6f5 14516 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8c45534eb5ac0f08a970f2092de746b8070e6135d35168b04927c15944427924 33064 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_armhf.deb 6700886c29ad923d58264f4d6f5efd294e44e382328741da971b3f991a7c7b2d 17800 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb b1e178390c9c373bc1765b2ac4d9870ea2a39874bc11ababd2ed428aa1074d08 33336 libxengnttab1_4.17.5+72-g01140da4e8-1_armhf.deb 6598b87199d5de2566b7186c7d132c9c030b35c75273f09fe536e09f3887af95 11988 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8d85681bc5fbb01b8c43af75ffc36f72d730cbc7fd46a64f623c8bdb5d6af284 33056 libxenhypfs1_4.17.5+72-g01140da4e8-1_armhf.deb 2e34f19209d3aa7e61dfc7d4ffa287ced9f2ef935a251417518c41ec7ace514a 1492016 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb ca1aec85d1f86c877b453acff4af57b2b840cec10e33f9474c364b31387c3b6b 385700 libxenmisc4.17_4.17.5+72-g01140da4e8-1_armhf.deb 244eff085c263b6a7471f1bb01a57f2a652a3e6583a7fe1a9eba6b75ae14340b 33996 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 20ad96fe2a1fad70085478b5c6a66267c6a0478a28d58aed42edb0d1e554b908 38084 libxenstore4_4.17.5+72-g01140da4e8-1_armhf.deb ada4b3413222d65e35ac9836c21c927ecd630ab74d01d3fff6ccb576ef04bc23 5528 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb e554cd0f35a477db0e0914176e83ebc082f7abdf86d7f22bd2c43d982c345eb9 30952 libxentoolcore1_4.17.5+72-g01140da4e8-1_armhf.deb 723590e0c1f5d586444266d7014ac387e0e2ca883223264ab31038c2405eb989 10328 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 77c7cd4bf61a0e86b572143e3a94a489305e1ff28890950af81961ef429f3a16 32748 libxentoollog1_4.17.5+72-g01140da4e8-1_armhf.deb c73505f7205f4bd080c0b8dcf885aa5cad071d726fe1664747a6111503caba5e 536204 xen-doc_4.17.5+72-g01140da4e8-1_armhf.deb 53a7ec915c4ada5b7c1aa9b403e22e52ef2390f7d9bff8bd12a8fd68a6b53cd1 339552 xen-hypervisor-4.17-armhf-dbg_4.17.5+72-g01140da4e8-1_armhf.deb 4868b3167957b178716fa3f7c65d54ce5e2664e1657ac866bfafdd5471f0c09a 286296 xen-hypervisor-4.17-armhf_4.17.5+72-g01140da4e8-1_armhf.deb e5b4b784ecb99d18f8f66e494e28ebe044748480ae30ec72121741f6dd3ae424 32316 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_armhf.deb cb0751f9b88a06ed71d743de56f83cd0f571d17eebb1b8910ebd0f152519c989 29072 xen-system-armhf_4.17.5+72-g01140da4e8-1_armhf.deb 8dc2426bd3b7fb84d9bf54cc211e606658c899f4ddca25ce47629efbab80ac94 893660 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_armhf.deb c8a3eec8f742c854290afb362e69e647e1b9b73ec97ea1702a74a21f2948ef0a 650332 xen-utils-4.17_4.17.5+72-g01140da4e8-1_armhf.deb 9a77619dfa21065b827ac3b5f4ebe2d318f3fcd251cf8543dbb21beb7b685731 206068 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 2c5e7085a0645a0207bbfce7fd6982e52ad584509fe604ad8cfa723af46fa6a5 262816 xen-utils-common_4.17.5+72-g01140da4e8-1_armhf.deb 7a07f604ca580ecb1def210b918d24aa9b53ae75c8fd5ab1a8cef474fb5d0e8f 18774 xen_4.17.5+72-g01140da4e8-1_armhf-buildd.buildinfo 0862577e33fea383b23c98c880ad9a5b7b7e86ff935823a7a93391e16fc58580 20648 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb c6d843004b1d6c7cfcd88e194f5289b867ad8ce8abcb84b246ceaa62f0daae47 47724 xenstore-utils_4.17.5+72-g01140da4e8-1_armhf.deb Files: 09c04f49e5e7c66ee8badab58d7f581c 699116 libdevel optional libxen-dev_4.17.5+72-g01140da4e8-1_armhf.deb d3b85f3140d217bc869dca1d7fa10c97 12660 debug optional libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb de1a22f2095f3c1ad812a67b34b206ab 32860 libs optional libxencall1_4.17.5+72-g01140da4e8-1_armhf.deb 758d5caa5be8c3b666ef7925dc6fb929 18196 debug optional libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 5da0e50b45d02e41ce73f676c5984f04 33716 libs optional libxendevicemodel1_4.17.5+72-g01140da4e8-1_armhf.deb 91f79eaea7657e5ade61b506ffb9b8f9 8400 debug optional libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 7e1f3549320ad71f42e327c86f15980a 31616 libs optional libxenevtchn1_4.17.5+72-g01140da4e8-1_armhf.deb bdbaf8cd06550a89771c80823f6a5e8f 14516 debug optional libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb f488aea6496d729986aec8fb82d2ac17 33064 libs optional libxenforeignmemory1_4.17.5+72-g01140da4e8-1_armhf.deb 340ab8e9f037e174075aaf68d1268459 17800 debug optional libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 637f5411690f91538d9c906dbf971561 33336 libs optional libxengnttab1_4.17.5+72-g01140da4e8-1_armhf.deb 4c380a1cc71b5d26015461cae77260e2 11988 debug optional libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb b690d53dbf944d5a241e502692f39edd 33056 libs optional libxenhypfs1_4.17.5+72-g01140da4e8-1_armhf.deb 039c89f0fcfb6faac9f4fca32cb42c1c 1492016 debug optional libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 436e53b5d79bcf20bac7eb8746ce67ea 385700 libs optional libxenmisc4.17_4.17.5+72-g01140da4e8-1_armhf.deb d73e75d0e4482608e6623331b6065e75 33996 debug optional libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 931400d4ab441e0ea05642a8e7691869 38084 libs optional libxenstore4_4.17.5+72-g01140da4e8-1_armhf.deb 16a5e9ecb2beef9c27eb71ea7386d178 5528 debug optional libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 5abed79024b1af94b3c7c26768a5cefe 30952 libs optional libxentoolcore1_4.17.5+72-g01140da4e8-1_armhf.deb 461af99577dcc557b44ea08a90189abd 10328 debug optional libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 0221b907a335f13ce3a99bfe0a761fee 32748 libs optional libxentoollog1_4.17.5+72-g01140da4e8-1_armhf.deb 4f6cc1130deac4983e5d15cd97ad9ffd 536204 doc optional xen-doc_4.17.5+72-g01140da4e8-1_armhf.deb 323e9c7a5f932f7b9d2ee2474b3ad804 339552 debug optional xen-hypervisor-4.17-armhf-dbg_4.17.5+72-g01140da4e8-1_armhf.deb 526552d6e466d9494d857a628d28929d 286296 kernel optional xen-hypervisor-4.17-armhf_4.17.5+72-g01140da4e8-1_armhf.deb b74999e895768b2f8ffd62f2e0e0ddbf 32316 kernel optional xen-hypervisor-common_4.17.5+72-g01140da4e8-1_armhf.deb a9b5263a54e3caa880c85ec98acc3c5b 29072 admin optional xen-system-armhf_4.17.5+72-g01140da4e8-1_armhf.deb 8391a7235e4f56e8e4939b96bb8aa096 893660 debug optional xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_armhf.deb 4a03165645fc499853dd250847351bae 650332 admin optional xen-utils-4.17_4.17.5+72-g01140da4e8-1_armhf.deb 90f3338f2005b6cd882dc05e7586d888 206068 debug optional xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb fd994365598ccf413cfc5d1a2bf2c430 262816 admin optional xen-utils-common_4.17.5+72-g01140da4e8-1_armhf.deb 315fde72aba5a045fbfb0ac0bf034dc4 18774 admin optional xen_4.17.5+72-g01140da4e8-1_armhf-buildd.buildinfo ffabb6347aef058e1004fff4b05e87f2 20648 debug optional xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_armhf.deb 8f79803b0508f4af2d4c301928e6d705 47724 admin optional xenstore-utils_4.17.5+72-g01140da4e8-1_armhf.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEO4qAQUSIo2p/kVRf8U6eOZMpj68FAmku3SgACgkQ8U6eOZMp j692LBAAmRM7rCDKg9brYZR1aoMG+lf5PBlL7UeJiqAQu8qmLxsWVILHoKB/Huv8 gUgqSxjEfxtT165f/3CCAauD3RtmZamy0wqfyIHSYv6ziS968vCbjglBIJ5+gnZo 2t630EAeRUkTYDOfFzJhyh3b6Z3d/vU6R0HnaT/Q9WANlJRvSV1VxK49GzzoOdD+ 88TGB3jZIGEf4V6bDb1nixZ1Yx6pmfkceerKJIASPfGj2LfgVIXmjilN8gvbvMYp nXSM3pvF5uJfuSfSAu8OZEaznS/zu65EDoqQkNIyazqMG7zutQTjYxafIJi1XLyN HunRiYwpjeykW+/X/IqN36qCwmoP0iCR+bxmqS//SJ1vFQRYBXsza02moPAaz8pH CaAWi9X5KflQbtlxehyIXXcR8xrTOnl+wyLaJvFuaLbHSkBAPHo++UiQ+fYG0x8r JZVBaPAiYJ1ze73Q4vM+3zwYsNWt+EGJyjgHB23NVTDsQ2nk6SfcSDhbd/LIe9JV NYfqP0bIhdlW1hwFSGzHsT2szGubCx7sYp120gwwMpp39NSZRkYiOUZNbcobs8p3 mtiUiXtXiy+JpGt/0Lf3r+ZuPjW54/d+qVWv6V7JiaZXzC3O4HtFTZc7CjZYTzmD KFEUdhY5uQl2OWJW0h1ecKZjD7kC+HyWyOyqgK22ZRNN0J3/Zac= =Uuvz -----END PGP SIGNATURE-----