-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

Format: 1.8
Date: Fri, 16 Oct 2026 16:28:47 +0200
Source: xen
Binary: xen-doc
Architecture: all
Version: 4.20.4+39-gf1e1321c87-0+deb13u1
Distribution: trixie-security
Urgency: medium
Maintainer: all Build Daemon (x86-grnet-02) <buildd_all-x86-grnet-02@buildd.debian.org>
Changed-By: Hans van Kranenburg <hans@knorrie.org>
Description:
 xen-doc    - Xen documentation
Changes:
 xen (4.20.4+39-gf1e1321c87-0+deb13u1) trixie-security; urgency=medium
 .
   * Update to new upstream version 4.20.4+39-gf1e1321c87, which also contains
     security fixes for the following issues:
     - x86: DMs may cause mem leak by IRQ binding
       XSA-509 CVE-2026-62437
     - x86: improper handling of HVM emulation return codes
       XSA-510 CVE-2026-79602
     - Unconditionally do TLB flushing ahead of page scrubbing
       XSA-511 CVE-2026-79603
     - oxenstored: Unbounded accumulation of watches
       XSA-512 CVE-2026-79604
     - x86/AMD: ineffectual Zenbleed workaround
       XSA-515 CVE-2026-79608
     - x86: XPTI may break on huge-memory systems
       XSA-516 CVE-2026-79609
     - grant-table: double version change race
       XSA-517 CVE-2026-79610
     - VMX: VMentry failure with branch tracing and blocked states
       XSA-518 CVE-2026-79611
     - Arm: multiple issues with GNTTABOP_cache_flush
       XSA-519 CVE-2026-102699 CVE-2026-102702
     - gnttab: cache-flush handling may cause page reference leak
       XSA-520 CVE-2026-102700
   * Note that the following XSA are not listed, because...
     - XSA-513 applies to blktap which is not included in Debian
     - XSA-514 only applies to Xen 4.22
     - XSA-521 applies to blktap which is not included in Debian
     - XSA-522 has patches for the Linux kernel
Checksums-Sha1:
 d6a8daf8ed8cf63f313296eab14578cffed9387d 587852 xen-doc_4.20.4+39-gf1e1321c87-0+deb13u1_all.deb
 646bcc5abbe8498ea84ed36e84b6ba089a5a36e2 9694 xen_4.20.4+39-gf1e1321c87-0+deb13u1_all-buildd.buildinfo
Checksums-Sha256:
 4ea99940cfc0d1d7c9d54d00cbe1834ddab8b5fad615da3a4c14d6d4821f5525 587852 xen-doc_4.20.4+39-gf1e1321c87-0+deb13u1_all.deb
 b8dd3d2cfc75c87678c1a672a505b86058259143098a8b031a9d498dbc3e2c2c 9694 xen_4.20.4+39-gf1e1321c87-0+deb13u1_all-buildd.buildinfo
Files:
 20c6432c09e667d9af46858c8a781cd2 587852 doc optional xen-doc_4.20.4+39-gf1e1321c87-0+deb13u1_all.deb
 a8b155ee6fc8b70f515a62b49d0af5fd 9694 admin optional xen_4.20.4+39-gf1e1321c87-0+deb13u1_all-buildd.buildinfo

-----BEGIN PGP SIGNATURE-----
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=XtFW
-----END PGP SIGNATURE-----