-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 13 Feb 2026 20:43:00 +0100 Source: xen Architecture: source Version: 4.20.2+37-g61ff35323e-1 Distribution: unstable Urgency: medium Maintainer: Debian Xen Team <[email protected]> Changed-By: Hans van Kranenburg <[email protected]> Changes: xen (4.20.2+37-g61ff35323e-1) unstable; urgency=medium . * Update to new upstream version 4.20.2+37-g61ff35323e, which also contains security fixes for the following issues: - x86: buffer overrun with shadow paging + tracing XSA-477 CVE-2025-58150 - x86: incomplete IBPB for vCPU isolation XSA-479 CVE-2026-23553 * Note that the following XSA are not listed, because... - XSA-478 applies to XAPI which is not included in Debian * Pick upstream commit 1ecb5946bd ("xen/arm: Set ThumbEE as not present in PFR0") which is an additional fix for the ThumbEE commit picked in previous upload. Checksums-Sha1: 75fe4cd13cbffd6b46b00c5eda9f8f1717abf0d1 4146 xen_4.20.2+37-g61ff35323e-1.dsc b2952ca5f5fd21ad54eb75f4a3768356108d4b93 4955496 xen_4.20.2+37-g61ff35323e.orig.tar.xz c9c1e1c43ed2440d5e275a9543ff98a84ee4ea61 140568 xen_4.20.2+37-g61ff35323e-1.debian.tar.xz Checksums-Sha256: 46e465c5c348eedbb7fa5e0504f6d089f700dc9aadad74b45e43392674459e0f 4146 xen_4.20.2+37-g61ff35323e-1.dsc b136290865839150d4ae38ce22f20da67169493f4408a27efee6fd6c867236cd 4955496 xen_4.20.2+37-g61ff35323e.orig.tar.xz 6c02e3aa6b3b320e76c45aa225c07224d58598b66776df7cdd2f6aad27dc18cd 140568 xen_4.20.2+37-g61ff35323e-1.debian.tar.xz Files: fa4022734ebb0f5188e532e4a9ba2655 4146 admin optional xen_4.20.2+37-g61ff35323e-1.dsc 80be3d44af942b4d2adecf761bbef73a 4955496 admin optional xen_4.20.2+37-g61ff35323e.orig.tar.xz 5a0976f0660591c49d6a16429874db01 140568 admin optional xen_4.20.2+37-g61ff35323e-1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEESWyddwNaG9637koYssHfcmNhX2wFAmmZoeMACgkQssHfcmNh X2wV/g//VxDnfVaNZbaajUUD3JwbGUgaF3MYGw4+HFypxnv1/QgD/19x3eYZG347 CtS09E1b4fAdCN9O+EEsqOzeWuNBGIANT60gJEqeOF27aSWp/5wZ8FQJ4qyVB60K h319tgFaW71eRPRV2kvGNDFSGMalhKuco8SWg+xdm+UngfxAugZ/FgyxMdRuPGFf BFVFEghGZ8x0RiNew7IhFWiXwzrEc4QzY3l7D6Nn1K1egOWDuHigf0bCyuoZvOLR 4qVrUBZLe0Dd02t5j+RzdOyq0WWxpJvWp+0jE5zRu/mbGnys7SyjQ+pvgGVmdzTx HIdzK/+COKrZL1oFPrIsc56UYiWEhgYlJzp6xYWPMKWDql4KMtE49BjvoJ9ZvK7E N7f/yIKA/85sZM9H8uIJ79qfsidh/CVVdSm3tGB/wmDMEovsPiIqU/UhVue3/7TP NECrLeB/mK4IyCxV3zgB7uMSsSNesSbgV6L6/PseHfrPI9ir8SwugV77R3ySAzCE 1u4LJGr+OLIhldLCvMAE97wJCFRJno5yQYLPht6KYiQnZN7WBJW8uXh6UTsZiG2k uEWIZs807quWozkswzMTzQ29vO8jsTBIspjDYz7NYAB0Sy5Xr04XIKnGMoRQksDp Z2Wp5AViLrgy3dU71SP7IzvaFfG4iO4TbwfrJWambKOlxiDZ5T4= =zS9b -----END PGP SIGNATURE-----
pgpGyy_37SNeX.pgp
Description: PGP signature
