Hi,
I assume this targets
CVE-2026-62437,CVE-2026-79602,CVE-2026-79603,CVE-2026-79604
https://security-tracker.debian.org/tracker/source-package/xen
In which case we'd request that they be fixed first in unstable, then
proposed to trixie, and last pushed to bookworm-lts.
Or, if the above means too much delay, you could publish the current
bookworm version as-is and propose another update when everything else
is ready, as you wish :)
Do you have a draft for the DLA e-mail?
Cheers!
Sylvain
On 18/09/2026 23:00, Hans van Kranenburg wrote:
Hi Sylvain!
Thanks for responding.
If we are going to do this now, it makes sense that I provide an updated
package which includes the current security fixes up to XSA-513:
https://xenbits.xen.org/xsa/
I expect to be able to prepare this during current weekend.
Is that OK?
Groet,
Hans
On 9/18/26 5:06 PM, Sylvain Beucler wrote:
Hi,
Sorry for the late reply, I'm doing a LTS Front-Desk shift this week,
and this apparently was left unanswered during summer.
I added a note in our work queue to review your work and help you upload
this to bookworm-lts.
https://salsa.debian.org/security-tracker-team/security-tracker/-/commit/870fcb5
Cheers!
Sylvain Beucler
Debian LTS Team
On 12/08/2026 23:50, Hans van Kranenburg wrote:
Hi LTS team!
The Debian Xen team (Maximilian and I) have prepared a Xen security
update for you.
xen (4.17.7-0+deb12u1) bookworm-security
https://oz.knorrie.org/tmp/xen/xen_4.17.7-0%2Bdeb12u1_source/
Note that I'm DM, so what I can do is provide signed stuff, and I
request assistance with the rest of the process.
