From: Sylvain Beucler <[email protected]> To: [email protected] Subject: [SECURITY] [DLA 4881-1] xen security update
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA512 - ------------------------------------------------------------------------- Debian LTS Advisory DLA-4881-1 [email protected] https://www.debian.org/lts/security/ Hans van Kranenburg October 04, 2026 https://wiki.debian.org/LTS - ------------------------------------------------------------------------- This was meant to be DLA-4881-1, apologizes for the confusion. On Wed, Nov 04, 2026 at 10:39:04PM +0100, Sylvain Beucler wrote: > Package : xen > Version : 4.17.7+13-g2445b30a44-0+deb12u1 > CVE ID : CVE-2026-62437 CVE-2026-79602 CVE-2026-79603 CVE-2026-79604 > CVE-2026-79609 CVE-2026-79610 CVE-2026-79611 CVE-2026-102699 > CVE-2026-102700 CVE-2026-102702 CVE-2026-102703 > CVE-2026-102704 > > Multiple vulnerabilities have been discovered in the Xen hypervisor, > which could result in guest-to-host privilege escalation or > information disclosure. > > For Debian 12 bookworm, these problems have been fixed in version > 4.17.7+13-g2445b30a44-0+deb12u1. > > We recommend that you upgrade your xen packages. > > For the detailed security status of xen please refer to > its security tracker page at: > https://security-tracker.debian.org/tracker/xen > > Further information about Debian LTS security advisories, how to apply > these updates to your system and frequently asked questions can be > found at: https://wiki.debian.org/LTS -----BEGIN PGP SIGNATURE----- iQIzBAEBCgAdFiEE1vEOfV7HXWKqBieIDTl9HeUlXjAFAmrrry8ACgkQDTl9HeUl XjCvPg/+N7rqcxikXZSmqyFO5viE3NVqFyEmueqTVZOI9ZtdYqcThKxSU4IpqAD4 wHRcUT/PNwxnAbEFmduTimhghRnThLQX2PQfcAFSLxNmWOLGzYky1YW5luTCpcju l14R+B9gFikoluwDYAg80exD4w86Zw/+h3H2LPm9kuI2E/N15s7k5UsCLjnXlzst /708yxaXMkvt+BZXTsyk7XrEeD7UNywpgPNFzdHEc2JN9sQlGR51PtJG/OKxO/qf EZjpVJkwYEa7Vn/bCXWw796TVXL5zhp0MSpEFI50w0caYo4Fx5g2oZOkDiT1Lk6G bFWpV/CqkeLeSPbQZAXp/k6iPthGjANa5eFZ4t7Po67Ga0drWh4WnhtO4VjTz8FJ CdR/HVCOkZCgg4mkYMOdSyYnSTeI4txdWatyzRmZaGjQo0kEZIif1DJfzgIpYQY/ Vv4+FoH7++mdFA3R/+JkhWS8sF7jppaR4M3pyNxcgVL4t6K2XT9vgR4Eq1m/T+nN 21hvb+tpaFTkubL2EELhP8xH9o6F5VtEH5Ko4/MmeH/oU1MB2Pr6aM4rD4AiN/n/ TfpjsnjLT1FCiE1zuBYxyU8z9z+1qJxwaXZEYFEM2Im1mH3WhmgVwL4buN1X/xZY LS0zHQ+5nnh3pISEHTCpJQOjW0bWvqD7uOEj+2OByzlA1tndF7E= =R83D -----END PGP SIGNATURE-----
