-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Format: 3.0 (quilt) Source: xen Binary: libxen-4.4, libxenstore3.0, libxen-dev, xenstore-utils, xen-utils-common, xen-utils-4.4, xen-hypervisor-4.4-amd64, xen-system-amd64, xen-hypervisor-4.4-arm64, xen-system-arm64, xen-hypervisor-4.4-armhf, xen-system-armhf Architecture: amd64 arm64 armhf i386 all Version: 4.4.1-5 Maintainer: Debian Xen Team <[email protected]> Uploaders: Guido Trotter <[email protected]>, Bastian Blank <[email protected]> Standards-Version: 3.9.4 Build-Depends: autotools-dev, debhelper (>> 9), dpkg-dev (>= 1.16.0~), lsb-release, python-dev, bcc [i386 amd64], gcc-multilib [i386 amd64], e2fslibs-dev, iasl [i386 amd64], seabios (>= 1.7.4-2~) [i386 amd64], libaio-dev, libfdt-dev [armhf arm64], libglib2.0-dev, liblzma-dev, libncurses5-dev, libyajl-dev, libssl-dev, pkg-config, uuid-dev, zlib1g-dev Package-List: libxen-4.4 deb libs optional arch=amd64,arm64,armhf,i386 libxen-dev deb libdevel optional arch=amd64,arm64,armhf,i386 libxenstore3.0 deb libs optional arch=amd64,arm64,armhf,i386 xen-hypervisor-4.4-amd64 deb kernel optional arch=amd64,i386 xen-hypervisor-4.4-arm64 deb kernel optional arch=arm64 xen-hypervisor-4.4-armhf deb kernel optional arch=armhf xen-system-amd64 deb kernel optional arch=amd64,i386 xen-system-arm64 deb kernel optional arch=arm64 xen-system-armhf deb kernel optional arch=armhf xen-utils-4.4 deb kernel optional arch=amd64,arm64,armhf,i386 xen-utils-common deb kernel optional arch=all xenstore-utils deb admin optional arch=amd64,arm64,armhf,i386 Checksums-Sha1: 900ed093d14caf511fa1a22f48bbf0499bb2ee11 3778516 xen_4.4.1.orig.tar.xz 5cb42d61c090e17c8e1d07abb4eec370402e7abf 64792 xen_4.4.1-5.debian.tar.xz Checksums-Sha256: c51b9f10047779d76b9f9900e2f626008d07ffe9a35f6221d703a542e599a8cb 3778516 xen_4.4.1.orig.tar.xz 5f2d2137fa68ff63545a5e8a2e45d836fea481cb0f7a854bcff5f882cbeb881f 64792 xen_4.4.1-5.debian.tar.xz Files: eb8b9505a28561d4d0a8409f1b43fb0a 3778516 xen_4.4.1.orig.tar.xz 34f0a6c8c8d8cff1903789ce68f30f51 64792 xen_4.4.1-5.debian.tar.xz Python-Version: current -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJUe3GFAAoJEG2TiIWKaf5R7xoH/1Dxka7QQN2K9KzD4uDTogcc oo/uOPy+1XtgjhiojJ7YHStrPMmLEdKS4rEpd3M4VgrQfXLLWcWasQ3XHiRQZK8s 7wTy4bXvmv6BPTp4nbqcMccPFHsUAJ0jkukQTJa+g9UZHOnTeuFkLl7wztyZrl/C EJUPtLH3VSVhytG2HnxGg95yluOUOou8Obog3wqK7l+65dS5qvRRFp/uCVsrLWyl +glUaUj4ABAzCPugKmxslQVP68UzBMdBN13X45V+5lHtB5uJonfGMhUlGq+9CqkQ KmcwltXSEy1NuZKzbVuZneNVfDtVudJAjJYvXFiNQZOWhmHRw2X96/s5x/LywHA= =MgY1 -----END PGP SIGNATURE----- Changes: xen (4.4.1-5) unstable; urgency=medium * Fix excessive checks of hypercall arguments. CVE-2014-8866 * Fix boundary checks of emulated MMIO access. CVE-2014-8867 * Fix additional memory leaks in xl. (closes: #767295) -- Bastian Blank <[email protected]> Sun, 30 Nov 2014 20:13:32 +0100