-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Sat, 29 Nov 2025 14:52:25 +0100 Source: xen Binary: libxen-dev libxencall1 libxencall1-dbgsym libxendevicemodel1 libxendevicemodel1-dbgsym libxenevtchn1 libxenevtchn1-dbgsym libxenforeignmemory1 libxenforeignmemory1-dbgsym libxengnttab1 libxengnttab1-dbgsym libxenhypfs1 libxenhypfs1-dbgsym libxenmisc4.17 libxenmisc4.17-dbgsym libxenstore4 libxenstore4-dbgsym libxentoolcore1 libxentoolcore1-dbgsym libxentoollog1 libxentoollog1-dbgsym xen-doc xen-hypervisor-4.17-amd64 xen-hypervisor-4.17-amd64-dbg xen-hypervisor-common xen-system-amd64 xen-utils-4.17 xen-utils-4.17-dbg xen-utils-common xen-utils-common-dbgsym xenstore-utils xenstore-utils-dbgsym Architecture: amd64 Version: 4.17.5+72-g01140da4e8-1 Distribution: bookworm-security Urgency: medium Maintainer: all / amd64 / i386 Build Daemon (x86-grnet-03) Changed-By: Hans van Kranenburg Description: libxen-dev - Public headers and libs for Xen libxencall1 - Xen runtime library - libxencall libxendevicemodel1 - Xen runtime libraries - libxendevicemodel libxenevtchn1 - Xen runtime libraries - libxenevtchn libxenforeignmemory1 - Xen runtime libraries - libxenforeignmemory libxengnttab1 - Xen runtime libraries - libxengnttab libxenhypfs1 - Xen runtime library - libxenhypfs libxenmisc4.17 - Xen runtime libraries - miscellaneous, versioned ABI libxenstore4 - Xen runtime libraries - libxenstore libxentoolcore1 - Xen runtime libraries - libxentoolcore libxentoollog1 - Xen runtime libraries - libxentoollog xen-doc - Xen documentation xen-hypervisor-4.17-amd64 - Xen Hypervisor on AMD64 xen-hypervisor-4.17-amd64-dbg - debug symbols for Xen Hypervisor on AMD64 xen-hypervisor-common - Xen Hypervisor - common files xen-system-amd64 - Xen System on AMD64 (metapackage) xen-utils-4.17 - Xen administrative tools xen-utils-4.17-dbg - debug symbols for xen-utils-4.17 xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Closes: 1105193 1105222 1120075 Changes: xen (4.17.5+72-g01140da4e8-1) bookworm-security; urgency=medium . Significant changes: * Update to new upstream version 4.17.5+72-g01140da4e8, which also contains security fixes for the following issues: (Closes: #1105193) (Closes: #1120075) - deadlock potential with VT-d and legacy PCI device pass-through XSA-467 CVE-2025-1713 - x86: Indirect Target Selection XSA-469 CVE-2024-28956 - x86: Incorrect stubs exception handling for flags recovery XSA-470 CVE-2025-27465 - x86: Transitive Scheduler Attacks XSA-471 CVE-2024-36350 CVE-2024-36357 - Multiple vulnerabilities in the Viridian interface XSA-472 CVE-2025-27466 CVE-2025-58142 CVE-2025-58143 - Arm issues with page refcounting XSA-473 CVE-2025-58144 CVE-2025-58145 - x86: Incorrect input sanitisation in Viridian hypercalls XSA-475 CVE-2025-58147 CVE-2025-58148 - Incorrect removal of permissions on PCI device unplug XSA-476 CVE-2025-58149 * Note that the following XSA are not listed, because... - XSA-468 applies to Windows PV drivers - XSA-474 applies to XAPI which is not included in Debian . Packaging minor fixes and improvements: * debian/salsa-ci.yml: adjust for new salsa-ci pipeline . Additional changes for 4.17 that were not backported upstream: * Cherry-pick dd05d265b8 ("x86/intel: Fix PERF_GLOBAL fixup when virtualised") to fix a boot loop when using Xen under nested virtualization (Closes: #1105222) Checksums-Sha1: bd69816bc7e6419fcf68d4dd21e626ec76f2aee5 816020 libxen-dev_4.17.5+72-g01140da4e8-1_amd64.deb 35a7347f1c633c53cd75e669763270b488baf33a 12544 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 52d5bc8d4f03ab550997800a46df25526121b613 33512 libxencall1_4.17.5+72-g01140da4e8-1_amd64.deb 598d63ef20c367888b97e9edd693ed312109b810 17384 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 2cfdd71dc790db44572b7cbaa669dc47892e9415 34284 libxendevicemodel1_4.17.5+72-g01140da4e8-1_amd64.deb 2da87c14b6b0e454c0ab0c81077252e92be58a4c 8252 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 789b6225c1dffc7e1fe75f1ad5b13f310af34248 31932 libxenevtchn1_4.17.5+72-g01140da4e8-1_amd64.deb 01d8e10cecb2dddd5074c8342889c9b2c40c8471 14524 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb b3a232c4d2a648a26559aad08d77013ba1495b6e 33700 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_amd64.deb 45b86ea994e8dd583c4b8c505fdeb6866ce85acd 17736 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb eaf32f00e6c0f86f3efb0debe0c70898f1fcb874 34168 libxengnttab1_4.17.5+72-g01140da4e8-1_amd64.deb 7358d440a7d2710d426117e29c724f5ae00a074c 12024 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb a30ac35dcaa4d39d116a4f29efbfc56c28599c38 33732 libxenhypfs1_4.17.5+72-g01140da4e8-1_amd64.deb 712c011e643dc9bcf2e00a7963065337519275fd 1732864 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb f71545712ff7d932db0e76064fdc7a564fc689b6 517720 libxenmisc4.17_4.17.5+72-g01140da4e8-1_amd64.deb 942eb296b69d1c960cd694d8627e91159414c6f7 34204 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 2715023c9c0e1d52405e3f311fbb65c10eb5e74f 40348 libxenstore4_4.17.5+72-g01140da4e8-1_amd64.deb 3daa7c48da1ebd8310ca83287103a8a5c9e9e2b4 5512 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb c5fbdd11d36f35cf8cf335016b73aea50dff7ce9 31216 libxentoolcore1_4.17.5+72-g01140da4e8-1_amd64.deb f4080e6ebf57a522d9ab27c7ccbb6efbb90a2425 10456 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 7b9b4d956454413b7fc1d8877617d09c5eda36db 33040 libxentoollog1_4.17.5+72-g01140da4e8-1_amd64.deb 4ecd787f92015083a8e261f6aff2626c321e2f41 536192 xen-doc_4.17.5+72-g01140da4e8-1_amd64.deb fc344791a7a83eb1cd50d364b52250405f3b5d57 1200764 xen-hypervisor-4.17-amd64-dbg_4.17.5+72-g01140da4e8-1_amd64.deb 8db301dc85ab7ec7812cb4beb7e8ea84e57a48f4 2380652 xen-hypervisor-4.17-amd64_4.17.5+72-g01140da4e8-1_amd64.deb fecb9d364d581f8d210a6182a39b144d28cbaeff 32316 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_amd64.deb cbeb1256dd754b96f4c17eb44aa5f14ed00980da 29064 xen-system-amd64_4.17.5+72-g01140da4e8-1_amd64.deb 415d18743fd4709c8990b7e8cb215610646f0bb9 4128440 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_amd64.deb e5d1abd6a856fc998126218f5de5559333b7ecd0 1371184 xen-utils-4.17_4.17.5+72-g01140da4e8-1_amd64.deb 23ecbf37c48a615812a21d5332c151492f801283 254560 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 705bda050687e21486f7fdec51e8181ac4a6b4b2 276360 xen-utils-common_4.17.5+72-g01140da4e8-1_amd64.deb fb99f62c72dae60f6374231785a8ef4799e0fa82 19834 xen_4.17.5+72-g01140da4e8-1_amd64-buildd.buildinfo b6d95bec36f87ea521e58ff66b0a1645d38c5ca7 21600 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 13cafa878f4f62b6be6473ca3a3aec083e23a15c 49112 xenstore-utils_4.17.5+72-g01140da4e8-1_amd64.deb Checksums-Sha256: 40a0e3e5a928a220eeba3c4d4fa574045b9d1ababd022a5b5166ecc57673fdee 816020 libxen-dev_4.17.5+72-g01140da4e8-1_amd64.deb 5be25cf1f4e906065e91a2f749a4773d3ab6c4b2843d4ffd40de8fe0a2ab4578 12544 libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb ebc1eee0055e48f3087010d146ced41a86d541964f9cfd307602c9636468b223 33512 libxencall1_4.17.5+72-g01140da4e8-1_amd64.deb a5cc5df1aa67d1da0f9702110cd2991f6fc359a4608adc44b65dbb4926cf7040 17384 libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb f16055e3a12c38abd5a10530a0895d274e69d26fb73aa373efd5f5477785712b 34284 libxendevicemodel1_4.17.5+72-g01140da4e8-1_amd64.deb 1765e315cd4e6c07661660a6bfeebfbde4576db2971fac33c17991c402dc155e 8252 libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 8a72c80afd46771baa611e1a31de8c5becb06779dead336ad345e625ebb80859 31932 libxenevtchn1_4.17.5+72-g01140da4e8-1_amd64.deb 02e0cfe4a808b493a4591b9401431ed18845ba22c3730c3aea3e0518b1701062 14524 libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 403cdb05a64851e4eea4c87b1ab50845a8371ac5fc361bcf2daacbe63b79a6ae 33700 libxenforeignmemory1_4.17.5+72-g01140da4e8-1_amd64.deb 652b96213a3f5876882796bec683e1d7ffd91e6256a7c6cb3d08cdfa0d00795d 17736 libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 31180a1f5076fc1c59f5035d9326d4c7cfc0ae1c5978485153b161d3b6a253bb 34168 libxengnttab1_4.17.5+72-g01140da4e8-1_amd64.deb b3c2fd4a4fc76268f0ea74b05057f48275631b6825dd83aacc94760df79ff951 12024 libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 60f0b99631a3b312b8c206f2caee5c59a0bfab738b90a88db4c322e7613e635f 33732 libxenhypfs1_4.17.5+72-g01140da4e8-1_amd64.deb d57b4768a8d69a8496c38f91fef943efd488e2a5b4dae9e0a39706f04594ceb1 1732864 libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb a4fa17c1b2ebcba786fb836668544adb3f3fb3fe364855d2185d8ffa62c53f9a 517720 libxenmisc4.17_4.17.5+72-g01140da4e8-1_amd64.deb a7cb10d90ca943ca3711bb2a2d65691b033004569f0cf9652c2ea8c7da5fd458 34204 libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 56d2c3577047398810ce6e318ecbcb88944f3cacdadcbf5a5ed1f1b74784111f 40348 libxenstore4_4.17.5+72-g01140da4e8-1_amd64.deb 89ab985ee73ff8bb17304f72d665182f24d910df11f80a069c6b63221dee4e2a 5512 libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 18326e8ce11a42c7e2646a6954cfd22b1ac1cc889c4508d4ed94c913e2658541 31216 libxentoolcore1_4.17.5+72-g01140da4e8-1_amd64.deb 4152ce5e008e0b12ac78b5eea8bfc4f6723c3cb0333d3a04bee90a87e0500768 10456 libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 063973644ce91c34dea31acc1d806c6cd26e7f7d6d152d06dd70fc817ad0a3e9 33040 libxentoollog1_4.17.5+72-g01140da4e8-1_amd64.deb 0ced3482c99104431b6f3cc0965dc0654d0faa41934fd0269feae4dbbac6b136 536192 xen-doc_4.17.5+72-g01140da4e8-1_amd64.deb 237556dac8419388e90807c6489ef500a11b32d8cdd9f1b926558846e787db68 1200764 xen-hypervisor-4.17-amd64-dbg_4.17.5+72-g01140da4e8-1_amd64.deb b602bb2aa83042bd1e3390ff66201b62da806d2ff6f2c86a2759997aa968222b 2380652 xen-hypervisor-4.17-amd64_4.17.5+72-g01140da4e8-1_amd64.deb 9ca449de1fafbfb2c5ad9fe33409979e681b24b4ef9a25290ca7aee8b8142905 32316 xen-hypervisor-common_4.17.5+72-g01140da4e8-1_amd64.deb c0b0f9a76e9215499dca79926bff350154542084b2ce1c2908763f6a5d996abb 29064 xen-system-amd64_4.17.5+72-g01140da4e8-1_amd64.deb 9767aa7bfe9ff8ed3a99c7d15120d88514552b9de051ab1be2378d4a77bfd33e 4128440 xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_amd64.deb 2e0dc8bf6f08bd655b58ed1150ff97790637b641c79f9c8331ee242d651ae935 1371184 xen-utils-4.17_4.17.5+72-g01140da4e8-1_amd64.deb a27f94e0f3d8b20e800dbbde111e1106d8a25e85d56cd8389436fb2f3f40b830 254560 xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 6919ccbf26703ea7ed0368db7ef96b00c47fc6da37d3a9a0de57e2ff4c7bd281 276360 xen-utils-common_4.17.5+72-g01140da4e8-1_amd64.deb 580cd1f5c19f5fa71435f2f4249fb499f6e2179420d83814abf001ea50dbead9 19834 xen_4.17.5+72-g01140da4e8-1_amd64-buildd.buildinfo 2375c50157beda80130f45fdeaace59326559b58d8d5a0164194605aac003d87 21600 xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 252f50267fd7734d6ca035b5ab1e30d4b688ccddcded6c0c908f27ffa0ff1e64 49112 xenstore-utils_4.17.5+72-g01140da4e8-1_amd64.deb Files: 1e2404892e951e5bc9a75e05d7c32077 816020 libdevel optional libxen-dev_4.17.5+72-g01140da4e8-1_amd64.deb f4924ecc18070fe087c53c063f89428b 12544 debug optional libxencall1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb f9bd6c135f9b4eb1ade71ba4ca2f891e 33512 libs optional libxencall1_4.17.5+72-g01140da4e8-1_amd64.deb 38fab4203eec22ec0571257b6f3d0aa2 17384 debug optional libxendevicemodel1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 852f386aeb673792700f866eb550984c 34284 libs optional libxendevicemodel1_4.17.5+72-g01140da4e8-1_amd64.deb 476662177bcf8c0ed41e1213354ba646 8252 debug optional libxenevtchn1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb fb969430fcc7eb48e410eccb67aeb51f 31932 libs optional libxenevtchn1_4.17.5+72-g01140da4e8-1_amd64.deb c15ae97e5d280f0c5778b19379e538f2 14524 debug optional libxenforeignmemory1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb d4ed866d6e124b0ef8e50d8689f46f61 33700 libs optional libxenforeignmemory1_4.17.5+72-g01140da4e8-1_amd64.deb e82113f087414329da9b2472b4366418 17736 debug optional libxengnttab1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 420f96a6b629ca7ba760bf21ecf86fdc 34168 libs optional libxengnttab1_4.17.5+72-g01140da4e8-1_amd64.deb 7c67719457bf6171ca438287b2fe5bdf 12024 debug optional libxenhypfs1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 432e556439c65e8b1f10686165fbcafc 33732 libs optional libxenhypfs1_4.17.5+72-g01140da4e8-1_amd64.deb f4853ab17afcd80c587d363f18e06c77 1732864 debug optional libxenmisc4.17-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 324ec08a9532ec7a7a4644895c2d667b 517720 libs optional libxenmisc4.17_4.17.5+72-g01140da4e8-1_amd64.deb 875fdff91a75dbabaef216a22b71ed95 34204 debug optional libxenstore4-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb a9aa60b133880824fd6aeacc6eb0fe21 40348 libs optional libxenstore4_4.17.5+72-g01140da4e8-1_amd64.deb 7e340df8345725a7d4f136c1af86f7e2 5512 debug optional libxentoolcore1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb c26430abf9470050540214b83a08a34b 31216 libs optional libxentoolcore1_4.17.5+72-g01140da4e8-1_amd64.deb 625dd0c5645c1c1ecf36a60fe6d71096 10456 debug optional libxentoollog1-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 7486ffc10f65aa387525ba365a053c5a 33040 libs optional libxentoollog1_4.17.5+72-g01140da4e8-1_amd64.deb 6c028e7e8d0ef63f7c3774ac8c18063f 536192 doc optional xen-doc_4.17.5+72-g01140da4e8-1_amd64.deb 58ec49694e26f416b6a22cacc369921a 1200764 debug optional xen-hypervisor-4.17-amd64-dbg_4.17.5+72-g01140da4e8-1_amd64.deb 10a45757e1c0ccc01b1b4cc45e6f59c5 2380652 kernel optional xen-hypervisor-4.17-amd64_4.17.5+72-g01140da4e8-1_amd64.deb 46afd59aa3ebad88d89f02b6f6ef4fbd 32316 kernel optional xen-hypervisor-common_4.17.5+72-g01140da4e8-1_amd64.deb 770ef782d2443dee7ac569ecb063ede2 29064 admin optional xen-system-amd64_4.17.5+72-g01140da4e8-1_amd64.deb a9d3d0d402f740dab71df3bee2bf9736 4128440 debug optional xen-utils-4.17-dbg_4.17.5+72-g01140da4e8-1_amd64.deb 05ec7df14d097f6c3e6a4186d8b6dc35 1371184 admin optional xen-utils-4.17_4.17.5+72-g01140da4e8-1_amd64.deb 5259e3d4685072927fbe5bcc158eaf66 254560 debug optional xen-utils-common-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb 976996e138b21c8b54df3642a83d7fdc 276360 admin optional xen-utils-common_4.17.5+72-g01140da4e8-1_amd64.deb 13c9f93f43fb56b33ad310fed9d8eff2 19834 admin optional xen_4.17.5+72-g01140da4e8-1_amd64-buildd.buildinfo 67722a052d5db01674c5a3d5af9f954f 21600 debug optional xenstore-utils-dbgsym_4.17.5+72-g01140da4e8-1_amd64.deb e0fa3de771a8189bcaeea8e648064a22 49112 admin optional xenstore-utils_4.17.5+72-g01140da4e8-1_amd64.deb -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEEHqtYLkdKRyCY94K8fUw6/tXbAmMFAmku3nAACgkQfUw6/tXb AmPU0RAAoR0H0h0Gk51NMFdBsWQ9dnxu5qKDSybght/ZeKACGf/8C/b/hmuL+0t4 0IRDoQs03LO9KUwNoc23IhAFDO44JekOOfnbfhYRLmsYGYAHa8jtLokqT86C0rsg Ivi37a8cgcKMSRbbGOh6mvUxv/f1rKyltgz/7aMlidlTGz6Xvb7QHRzQ1OrLxF3B KVTr7hhwXvZRLTIM2d3rZ3Jn2g+6GKdOiRqPPcRjHAqFDkr+cy7jgNK5MbGvyVcJ GsBAt2+b76fCG0SaFCXP98As5FhJyZsobDRrTaPcjiJMla3erELQg2ewssdG6Po4 bK0jgyAFV/nu+wrjpMxYBesfZ/Sz9z4AqirDaqDcguB4XZY0epSxiemDd+sU+QLR 9nwIcv2KkNW0iOCXxFe2RwmrGuu3m8eTfsqDiuGdLr5URekzZdnV6vHbgNvqKvxu 6a3KWIUmViPfRdx/GiqfZXZN5Sc6Hyr79qv7GgqNjrBNfEqV8vXjmo5zTvw/O53D bvFE1WJ3guXwthyixdvxwbG3yfdJCdHBsWoJcHcX2v852yx4pc5okzIKtyUyXixV CXVdhBGR9biJgpdqw4JFbO/nHhO6P24Pfu/EkZB68Gz3I+2XgK97QIgKTGnC2Gbt Y0X3o9zYxoE9aTVJSAFTvXCUNVpJGTrPU8o4S2Hm9oaNakRUX4Y= =eAdM -----END PGP SIGNATURE-----