-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 Format: 1.8 Date: Fri, 16 Oct 2026 12:41:06 +0200 Source: xen Architecture: source Version: 4.20.4+39-gf1e1321c87-1 Distribution: unstable Urgency: medium Maintainer: Debian Xen Team <[email protected]> Changed-By: Hans van Kranenburg <[email protected]> Changes: xen (4.20.4+39-gf1e1321c87-1) unstable; urgency=medium . * Update to new upstream version 4.20.4+39-gf1e1321c87, which also contains security fixes for the following issues: - x86: DMs may cause mem leak by IRQ binding XSA-509 CVE-2026-62437 - x86: improper handling of HVM emulation return codes XSA-510 CVE-2026-79602 - Unconditionally do TLB flushing ahead of page scrubbing XSA-511 CVE-2026-79603 - oxenstored: Unbounded accumulation of watches XSA-512 CVE-2026-79604 - x86/AMD: ineffectual Zenbleed workaround XSA-515 CVE-2026-79608 - x86: XPTI may break on huge-memory systems XSA-516 CVE-2026-79609 - grant-table: double version change race XSA-517 CVE-2026-79610 - VMX: VMentry failure with branch tracing and blocked states XSA-518 CVE-2026-79611 - Arm: multiple issues with GNTTABOP_cache_flush XSA-519 CVE-2026-102699 CVE-2026-102702 - gnttab: cache-flush handling may cause page reference leak XSA-520 CVE-2026-102700 * Note that the following XSA are not listed, because... - XSA-513 applies to blktap which is not included in Debian - XSA-514 only applies to Xen 4.22 - XSA-521 applies to blktap which is not included in Debian - XSA-522 has patches for the Linux kernel Checksums-Sha1: d3caa6a5e5189b739225d91144319310b1a05f8d 4146 xen_4.20.4+39-gf1e1321c87-1.dsc 0f2c5f7af9266bb793e58d382b9dc5a3d827b002 4963496 xen_4.20.4+39-gf1e1321c87.orig.tar.xz 90bc0e9e3b123874500553cb37c52e28d44f7f6e 139788 xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz Checksums-Sha256: f5ed5903f8c88208fbbbbe283a62a622bc462ecb9224db0d7f29bb2e74bd8f02 4146 xen_4.20.4+39-gf1e1321c87-1.dsc 1f5ff12b9dc664ac519ca52e0b5f746cfb1149f74e932e23ed584b092a46bc46 4963496 xen_4.20.4+39-gf1e1321c87.orig.tar.xz 47f513239b9f14c66c71f93d42fae4c90e67e82f7c808d708728aae2c5a7fc2e 139788 xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz Files: c4c441443e4166449e4e9bfd9f637f2c 4146 admin optional xen_4.20.4+39-gf1e1321c87-1.dsc 1a7697e2104c9150968cd903a112ce18 4963496 admin optional xen_4.20.4+39-gf1e1321c87.orig.tar.xz 821eb77a253a6c9a8556c5c3e906d7c7 139788 admin optional xen_4.20.4+39-gf1e1321c87-1.debian.tar.xz
-----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEESWyddwNaG9637koYssHfcmNhX2wFAmrSEKEACgkQssHfcmNh X2wYlhAAyudVLTvu/uPBhWKBIjK+FpZD0+1mS2yuBxVyDlAGuTkBF9e/LdoSRhtd ZpRAi1O1eQ7OTPsJafOEaspTMHrGyAt/Yq/iUI0sSi8/nEhGGg3WSizK3LXqhPQj UBExcz0klnA6vCo34an0KWGdoxFrPqxpYuNiZzlj1vVKDTyV5r/o5nQDO+13vrim GyLJ5JGyzNRP7whpc970Vo478Cxt+U+hTqf3ZztknQphEHiFZy5fUciHnbOnq+08 VeJlRrYtY753ox6XohOzxDdJRQEns1E7R0L94KrAN2FU9KlhS8eSTFaw8PpAWvjX UDGRDUhbhRLZAMeqTr9dDtVhiE74lzaI3wqnDx14Qxp9rIH+yukQVpBEdJY5oklA dshJ33RsKE4eCwAJQ7Gdieom4etj6ZDP7J3lAozGLXAqAO8lvF9+aTYUboiv7ZK9 0v3Bcagvx6XCBgq2yMWCSX/boIP6cCyIvQOaAWDlghy0cUS8qNjVyOyYsh6pyYwo g1ry2Yz1RTR3UMNNZ8lOYx3MpGrOmZmZZZCkE7HZKvCJ07jHbF86/GKdoW0jZIi6 cyHmPeZiTqq0DWd3x1dnSyU/osVfX3llFXyhCpL8vX6BBeSCggc4YZRgkrNMy8tI kMMUKS9gcHThBnZEk+TLVyQF/qw66D3d2PV+FmG4TsA0JjbU5yg= =KD9w -----END PGP SIGNATURE-----
pgpsUcm1tnf4Q.pgp
Description: PGP signature
