xen (4.8.1-1+deb9u3) stretch-security; urgency=high
authorIan Jackson <ian.jackson@eu.citrix.com>
Thu, 7 Sep 2017 18:17:58 +0000 (19:17 +0100)
committerIan Jackson <ian.jackson@eu.citrix.com>
Thu, 7 Sep 2017 18:17:58 +0000 (19:17 +0100)
commit92a6d87756a314a5eb6d39b03885c551a6ae7de9
tree659a4226ed10705923b6c6fa4f1da427df20056f
parent764230e80d4d9db2f83e30cb9eb7115da0a9924d
parent7755ddf5ea12ffc2b68247bba962389487fcb678
xen (4.8.1-1+deb9u3) stretch-security; urgency=high

  * Security fixes for
      XSA-226 CVE-2017-12135
      XSA-227 CVE-2017-12137
      XSA-228 CVE-2017-12136
      XSA-230 CVE-2017-12855
      XSA-235 (no CVE yet)
  * Adjust changelog entry for 4.8.1-1+deb9u2 to record
    that XSA-225 fix was indeed included.
  * Security fix for XSA-229 not included as that bug is in Linux, not Xen.
  * Security fixes for XSA-231..234 inc. not inclued as still embargoed.

[dgit import unpatched xen 4.8.1-1+deb9u3]
130 files changed:
debian/.git-dpm
debian/.gitignore
debian/arch/amd64/defines
debian/arch/arm64/defines
debian/arch/armhf/defines
debian/arch/defines
debian/arch/i386/defines
debian/bin/check-patches.sh
debian/bin/gencontrol.py
debian/bin/genorig.py
debian/changelog
debian/compat
debian/control
debian/control.md5sum
debian/copyright
debian/lib/python/debian_xen/__init__.py
debian/lib/python/debian_xen/debian.py
debian/libxen-dev.install
debian/libxenstore3.0.install
debian/libxenstore3.0.symbols
debian/patches/arm-vgic-dont-update-the-lr-when-the-irq
debian/patches/armmm-release-grant-lock-on-xenmem_add_t
debian/patches/config-prefix.diff
debian/patches/evtchn-avoid-null-derefs
debian/patches/gnttab-__gnttab_unmap_common_complete-is
debian/patches/gnttab-avoid-potential-double-put-of-map
debian/patches/gnttab-correct-logic-to-get-page-referen
debian/patches/gnttab-correct-maptrack-table-accesses
debian/patches/gnttab-correct-pin-status-fixup-for-copy
debian/patches/gnttab-dont-use-possibly-unbounded-tail-
debian/patches/gnttab-fix-handling-of-dev_bus_addr-duri
debian/patches/gnttab-fix-transitive-grant-handling
debian/patches/gnttab-fix-unmap-pin-accounting-race
debian/patches/gnttab-never-create-host-mapping-unless-
debian/patches/gnttab-split-maptrack-lock-to-make-it-fu
debian/patches/guest_physmap_remove_page-needs-its-retu
debian/patches/multicall-deal-with-early-exit-condition
debian/patches/rerun-autogen.sh-stretch
debian/patches/series
debian/patches/tools-blktap2-prefix.diff
debian/patches/tools-console-prefix.diff
debian/patches/tools-include-install.diff
debian/patches/tools-libfsimage-abiname.diff
debian/patches/tools-libfsimage-prefix.diff
debian/patches/tools-libxc-abiname.diff
debian/patches/tools-libxl-abiname.diff
debian/patches/tools-libxl-prefix.diff
debian/patches/tools-misc-prefix.diff
debian/patches/tools-pygrub-prefix.diff
debian/patches/tools-pygrub-remove-static-solaris-support
debian/patches/tools-python-prefix.diff
debian/patches/tools-rpath.diff
debian/patches/tools-xcutils-rpath.diff
debian/patches/tools-xenmon-install.diff
debian/patches/tools-xenmon-prefix.diff
debian/patches/tools-xenpaging-prefix.diff
debian/patches/tools-xenpmd-prefix.diff
debian/patches/tools-xenstat-abiname.diff
debian/patches/tools-xenstat-prefix.diff
debian/patches/tools-xenstore-compatibility.diff
debian/patches/tools-xenstore-prefix.diff
debian/patches/tools-xentrace-prefix.diff
debian/patches/toolstestsx86_emulator-pass--no-pie--fno
debian/patches/ubuntu-tools-libs-abiname.diff
debian/patches/version.diff
debian/patches/x86-avoid-leaking-pkru-and-bnd-between-v
debian/patches/x86-discard-type-information-when-steali
debian/patches/x86grant-disallow-misaligned-ptes
debian/patches/x86mm-disallow-page-stealing-from-hvm-do
debian/patches/x86shadow-hold-references-for-the-durati
debian/patches/xenarm-vgic-sanitize-target-mask-used-to
debian/patches/xenmemory-fix-return-value-handing-of-gu
debian/pycompat
debian/rules
debian/rules.defs
debian/rules.gen
debian/rules.real
debian/scripts/Makefile
debian/scripts/qemu-ifup
debian/scripts/xen
debian/scripts/xen-dir
debian/scripts/xen-init-list
debian/scripts/xen-init-name
debian/scripts/xen-toolstack
debian/scripts/xen-toolstack-wrapper
debian/scripts/xen-utils-wrapper
debian/scripts/xen-version
debian/source/format
debian/templates/control.hypervisor.in
debian/templates/control.main.in
debian/templates/control.source.in
debian/templates/control.system.latest.in
debian/templates/control.utils.in
debian/templates/libxen.bug/control
debian/templates/xen-hypervisor.bug/control
debian/templates/xen-hypervisor.postinst.in
debian/templates/xen-hypervisor.postrm.in
debian/templates/xen-utils.bug/control
debian/templates/xen-utils.lintian-overrides.in
debian/templates/xen-utils.postinst.in
debian/templates/xen-utils.prerm.in
debian/tree/xen-utils-common/etc/xen/xend-config.sxp
debian/tree/xen-utils-common/etc/xen/xend-pci-permissive.sxp
debian/tree/xen-utils-common/etc/xen/xend-pci-quirks.sxp
debian/tree/xen-utils-common/usr/share/xen-utils-common/default.xen
debian/xen-hypervisor-4.8-amd64.postinst
debian/xen-hypervisor-4.8-amd64.postrm
debian/xen-hypervisor-4.8-arm64.postinst
debian/xen-hypervisor-4.8-arm64.postrm
debian/xen-hypervisor-4.8-armhf.postinst
debian/xen-hypervisor-4.8-armhf.postrm
debian/xen-hypervisor-4.8.xen.cfg
debian/xen-utils-4.8.lintian-overrides
debian/xen-utils-4.8.postinst
debian/xen-utils-4.8.prerm
debian/xen-utils-common.README.Debian
debian/xen-utils-common.dirs
debian/xen-utils-common.examples
debian/xen-utils-common.install
debian/xen-utils-common.postinst
debian/xen-utils-common.postrm
debian/xen-utils-common.preinst
debian/xen-utils-common.ucf
debian/xen-utils-common.xen.init
debian/xen-utils-common.xend.default
debian/xen-utils-common.xendomains.default
debian/xen-utils-common.xendomains.init
debian/xen-utils.NEWS
debian/xen-utils.README.Debian
debian/xenstore-utils.install