News for package xen

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

Format: 3.0 (quilt)
Source: xen
Binary: libxen-4.4, libxenstore3.0, libxen-dev, xenstore-utils, xen-utils-common, xen-utils-4.4, xen-hypervisor-4.4-amd64, xen-system-amd64, xen-hypervisor-4.4-arm64, xen-system-arm64, xen-hypervisor-4.4-armhf, xen-system-armhf
Architecture: amd64 arm64 armhf i386 all
Version: 4.4.1-9+deb8u1
Maintainer: Debian Xen Team <[email protected]>
Uploaders: Guido Trotter <[email protected]>, Bastian Blank <[email protected]>
Standards-Version: 3.9.4
Build-Depends: autotools-dev, debhelper (>> 9), dpkg-dev (>= 1.16.0~), lsb-release, python-dev, bcc [i386 amd64], gcc-multilib [i386 amd64], e2fslibs-dev, iasl [i386 amd64], seabios (>= 1.7.4-2~) [i386 amd64], libaio-dev, libfdt-dev [armhf arm64], libglib2.0-dev, liblzma-dev, libncurses5-dev, libyajl-dev, libssl-dev, pkg-config, uuid-dev, zlib1g-dev
Package-List:
 libxen-4.4 deb libs optional arch=amd64,arm64,armhf,i386
 libxen-dev deb libdevel optional arch=amd64,arm64,armhf,i386
 libxenstore3.0 deb libs optional arch=amd64,arm64,armhf,i386
 xen-hypervisor-4.4-amd64 deb kernel optional arch=amd64,i386
 xen-hypervisor-4.4-arm64 deb kernel optional arch=arm64
 xen-hypervisor-4.4-armhf deb kernel optional arch=armhf
 xen-system-amd64 deb kernel optional arch=amd64,i386
 xen-system-arm64 deb kernel optional arch=arm64
 xen-system-armhf deb kernel optional arch=armhf
 xen-utils-4.4 deb kernel optional arch=amd64,arm64,armhf,i386
 xen-utils-common deb kernel optional arch=all
 xenstore-utils deb admin optional arch=amd64,arm64,armhf,i386
Checksums-Sha1:
 900ed093d14caf511fa1a22f48bbf0499bb2ee11 3778516 xen_4.4.1.orig.tar.xz
 27923525cbe74cf7cecef9cccbb70f0461dc3d7f 74780 xen_4.4.1-9+deb8u1.debian.tar.xz
Checksums-Sha256:
 c51b9f10047779d76b9f9900e2f626008d07ffe9a35f6221d703a542e599a8cb 3778516 xen_4.4.1.orig.tar.xz
 5455d657a4405e854bd21b96a838720672834733260edc9d4dc41d40f5d8c511 74780 xen_4.4.1-9+deb8u1.debian.tar.xz
Files:
 eb8b9505a28561d4d0a8409f1b43fb0a 3778516 xen_4.4.1.orig.tar.xz
 1e4e51bbe0b556f934ae0a3e8b7ee5e5 74780 xen_4.4.1-9+deb8u1.debian.tar.xz
Python-Version: current

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBCAAGBQJVebGUAAoJEEnDv4knVT0u7TgP/3kiAP4ZAv9uC6Z96uBnuwuO
ob5467lajF1rORR5FpVg/YqRu0aQVQ7ferIi2CsRUggDlTIZmEpbNgqEYotzr5vX
xuMwuQIHIBUScGS4+cEllg63/aE/CWcEsQG28/i40k8+QqnaUQduxFEezJKRb55y
zy5wugT5STdfM44f0RL4umbpLmrMkjyfIPVtioL2awzCaJowCvz5ELcPT2p9mNie
BxK0XaNORgjvq327R/YtoKB46aKJTTcV7FrO2RdIWXsAPrpnpo/8cShqt86I5ILO
KDO/KHwe3FHFSPDrkr5TiF4muBJpPYB1ZWm3OAO5O/gO5RadSh7tzNYlolHjl+Ox
ZJoH+M6ZhnR/sXHFvkZOiHakxUH64Iu1Q/3J7ggA0RSTwY/lS7kOk9t5Gm+rkBIp
C0pZoAMUN+VCy3TCnZy+4kSBX18rBGTEhPZzY+adm0ov/udJd41/uIgqvJMUukGr
80BQdTbdSregOJnmbdG2qtjikwEZy+ODi/EQVLgjDHhDDNxR4lOrWNuopkyx8y0a
yZaZ28e//2w3heq/gCq9tssknCx4AtMdmViPmIT7wfXExzn59eMFoW283jit1XXc
WhaLRB184qGlEbRneuP3LtXD3u1xynycXzzvk5KGBYLDg3YfSohVDN1ndVoFnpS7
YE07c+P441ndLquTWxlh
=9m/9
-----END PGP SIGNATURE-----

Changes:
xen (4.4.1-9+deb8u1) jessie-security; urgency=medium

  * Apply fix for CVE-2015-4163 (XSA 134)
    - gnttab: add missing version check to GNTTABOP_swap_grant_ref handling
      ... avoiding NULL derefs when the version to use wasn't set yet
  * Apply fix for CVE-2015-4164 (XSA 136)
    - x86/traps: loop in the correct direction in compat_iret()

 -- Guido Trotter <[email protected]>  Wed, 10 Jun 2015 18:16:26 +0000