[Pkg-xen-devel] Updated Xen packages for XSA 216..225

Ian Jackson ian.jackson at eu.citrix.com
Thu Sep 7 18:16:38 UTC 2017


(Switching to my personal address not because I'm not doing work for
Citrix, but because the corporate email is not working properly.
Sigh.)

Ian Jackson writes ("Re: Updated Xen packages for XSA 216..225"):
> Ian Jackson writes ("Re: Updated Xen packages for XSA 216..225"):
> > Hi.  I was away and am now back.  There are a lot of outstanding
> > advisories.  I will try to prepare packages for stretch and jessie
> > this week.
> 
> In fact sid's xen package has not yet advanced beyond stretch, so the
> stretch and sid updates are just different builds of the same source.

I have uploaded the un-embargoed updates to jessie-security.

> To retain version number sanity I will upload to sid first and then
> rebuild with a new changelog entry for stretch.

sid's xen.dsc doesn't built with sid's gcc.  I will file a bug about
this.  So I am doing to do an binaryful upload to stretch-security
now.

Also, I have access via my Xen Project Security Team hat to the
patches for the predisclosed advisories 231..234 and since Debian is
also on the Xen Project predisclosure list I think it is proper for me
with my Debian hat to start work on the packages for those.  The
release date is 2017-09-12 12:00.  See https://xenbits.xen.org/xsa/

Ian.



More information about the Pkg-xen-devel mailing list