xen 4.16.2+90-g0d39a6d1ae-1 source package in Ubuntu

Changelog

xen (4.16.2+90-g0d39a6d1ae-1) unstable; urgency=medium

  * Update to new upstream version 4.16.2+90-g0d39a6d1ae, which also contains
    security fixes for the following issues:
     - Xenstore: guests can let run xenstored out of memory
       XSA-326 CVE-2022-42311 CVE-2022-42312 CVE-2022-42313 CVE-2022-42314
       CVE-2022-42315 CVE-2022-42316 CVE-2022-42317 CVE-2022-42318
     - Arm: unbounded memory consumption for 2nd-level page tables
       XSA-409 CVE-2022-33747
     - P2M pool freeing may take excessively long
       XSA-410 CVE-2022-33746
     - lock order inversion in transitive grant copy handling
       XSA-411 CVE-2022-33748
     - x86: unintended memory sharing between guests
       XSA-412 CVE-2022-42327
     - Xenstore: Guests can crash xenstored
       XSA-414 CVE-2022-42309
     - Xenstore: Guests can create orphaned Xenstore nodes
       XSA-415 CVE-2022-42310
     - Xenstore: Guests can cause Xenstore to not free temporary memory
       XSA-416 CVE-2022-42319
     - Xenstore: Guests can get access to Xenstore nodes of deleted domains
       XSA-417 CVE-2022-42320
     - Xenstore: Guests can crash xenstored via exhausting the stack
       XSA-418 CVE-2022-42321
     - Xenstore: Cooperating guests can create arbitrary numbers of nodes
       XSA-419 CVE-2022-42322 CVE-2022-42323
     - Oxenstored 32->31 bit integer truncation issues
       XSA-420 CVE-2022-42324
     - Xenstore: Guests can create arbitrary number of nodes via transactions
       XSA-421 CVE-2022-42325 CVE-2022-42326
     - x86: Multiple speculative security issues
       XSA-422 CVE-2022-23824
   * Note that the following XSA are not listed, because...
     - XSA-413 applies to XAPI which is not included in Debian
   * Drop the "x86/CPUID: surface suitable value in EBX of XSTATE subleaf 1"
     patch again because it's included in upstream changes now.

 -- Hans van Kranenburg <email address hidden>  Wed, 16 Nov 2022 12:50:33 +0100

Upload details

Uploaded by:
Debian Xen Team
Uploaded to:
Sid
Original maintainer:
Debian Xen Team
Architectures:
amd64 arm64 armhf
Section:
kernel
Urgency:
Medium Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
xen_4.16.2+90-g0d39a6d1ae-1.dsc 4.1 KiB 584de011263c53fb724bd57b7a468a38d210569a91a8a0ce6fcba614c436516c
xen_4.16.2+90-g0d39a6d1ae.orig.tar.xz 4.4 MiB 86ee16efa5745145b5a9712b38fb84f80d1d811a7f034342749eddd2a396a91d
xen_4.16.2+90-g0d39a6d1ae-1.debian.tar.xz 128.5 KiB 3a901188068a0059a81f7e2c2f680b07267774b2860f90125a9e623e12bc6bbf

No changes file available.

Binary packages built by this source

libxen-dev: Public headers and libs for Xen

 This package contains the public headers and static libraries for Xen.
 .
 The libxenlight library is intended as a common base for all Xen toolstack
 developers. The libxlutil library contains additional helpers which may
 be useful to toolstack developers.
 .
 The libxenstore library allows userspace processes to interact with
 the XenStore database. Command line tools for accessing xenstore are
 provided is via the xenstore-utils package.
 .
 Most of the other included libraries are internal, and intended for
 use by the Xen toolstack, rather than directly.

libxencall1: Xen runtime library - libxencall

 Shared library for Xen utilities.

libxencall1-dbgsym: debug symbols for libxencall1
libxendevicemodel1: Xen runtime libraries - libxendevicemodel

 Shared library for Xen utilities.

libxendevicemodel1-dbgsym: debug symbols for libxendevicemodel1
libxenevtchn1: Xen runtime libraries - libxenevtchn

 Shared library for Xen utilities.

libxenevtchn1-dbgsym: debug symbols for libxenevtchn1
libxenforeignmemory1: Xen runtime libraries - libxenforeignmemory

 Shared library for Xen utilities.

libxenforeignmemory1-dbgsym: debug symbols for libxenforeignmemory1
libxengnttab1: Xen runtime libraries - libxengnttab

 Shared library for Xen utilities.

libxengnttab1-dbgsym: debug symbols for libxengnttab1
libxenhypfs1: Xen runtime library - libxenhypfs

 Shared library for Xen utilities.

libxenhypfs1-dbgsym: debug symbols for libxenhypfs1
libxenmisc4.16: No summary available for libxenmisc4.16 in ubuntu lunar.

No description available for libxenmisc4.16 in ubuntu lunar.

libxenmisc4.16-dbgsym: No summary available for libxenmisc4.16-dbgsym in ubuntu lunar.

No description available for libxenmisc4.16-dbgsym in ubuntu lunar.

libxenstore4: Xen runtime libraries - libxenstore

 Shared library for Xen utilities.

libxenstore4-dbgsym: debug symbols for libxenstore4
libxentoolcore1: Xen runtime libraries - libxentoolcore

 Shared library for Xen utilities.

libxentoolcore1-dbgsym: debug symbols for libxentoolcore1
libxentoollog1: Xen runtime libraries - libxentoollog

 Shared library for Xen utilities.

libxentoollog1-dbgsym: debug symbols for libxentoollog1
xen-doc: Xen documentation

 Documentation for the Xen hypervisor and surrounding software,
 including descriptions of the hypercall interfaces and of some
 of the library APIs.
 .
 You do not need this package for the primary manpages for the
 Xen control utilities, as those are in the xen-utils-common package.

xen-hypervisor-4.16-amd64: No summary available for xen-hypervisor-4.16-amd64 in ubuntu lunar.

No description available for xen-hypervisor-4.16-amd64 in ubuntu lunar.

xen-hypervisor-4.16-arm64: No summary available for xen-hypervisor-4.16-arm64 in ubuntu lunar.

No description available for xen-hypervisor-4.16-arm64 in ubuntu lunar.

xen-hypervisor-4.16-armhf: No summary available for xen-hypervisor-4.16-armhf in ubuntu lunar.

No description available for xen-hypervisor-4.16-armhf in ubuntu lunar.

xen-hypervisor-common: Xen Hypervisor - common files

 The configuration which arranges for an installed hypervisor to be booted
 as default, with the right command line arguments passed to both
 hypervisor and host (Domain 0) kernel.
 .
 This package is only required on the host system (Domain 0) and not on the
 virtual guest systems (Domain U).

xen-system-amd64: Xen System on AMD64 (metapackage)

 This package depends on the latest Xen hypervisor for use on AMD64 and the
 Xen utils.

xen-system-arm64: Xen System on ARM64 (metapackage)

 This package depends on the latest Xen hypervisor for use on ARM64 and the
 Xen utils.

xen-system-armhf: Xen System on ARMHF (metapackage)

 This package depends on the latest Xen hypervisor for use on ARMHF and the
 Xen utils.

xen-utils-4.16: No summary available for xen-utils-4.16 in ubuntu lunar.

No description available for xen-utils-4.16 in ubuntu lunar.

xen-utils-4.16-dbgsym: No summary available for xen-utils-4.16-dbgsym in ubuntu lunar.

No description available for xen-utils-4.16-dbgsym in ubuntu lunar.

xen-utils-common: Xen administrative tools - common files

 The userspace tools to manage a system virtualized through the Xen virtual
 machine monitor.
 .
 This package is only required on the host system (Domain 0) and not on the
 virtual guest systems (Domain U).

xen-utils-common-dbgsym: debug symbols for xen-utils-common
xenstore-utils: Xenstore command line utilities for Xen

 This package contains command line utilities for interacting with
 XenStore.
 .
 XenStore is a shared database used for interdomain communication of
 configuration and status information. It is accessible to all domains
 running on the same Xen host. See https://wiki.xen.org/wiki/XenStore for
 more information.
 .
 In the common case these tools are used by the Xen toolstack running in
 domain0 (or a driver domain) however they may also be used in a guest
 domain to support local scripting which wants to communicate via XenStore.

xenstore-utils-dbgsym: debug symbols for xenstore-utils