Format: 1.8 Date: Thu, 15 Oct 2026 10:22:08 -0700 Source: xen Binary: libxen-dev libxenfsutl4.20 libxenmisc4.20 libxenstore4.0 libxentoolcore1 qemut qemuu xen-hypervisor-4.20-amd64 xen-perf-hypervisor-4.20-amd64 xen-system-amd64 xen-utils-4.20 xen-utils-common xenstore-utils Built-For-Profiles: noudeb Architecture: source amd64 all Version: 4.20.4-1+ub24u04.1 Distribution: noble Urgency: medium Maintainer: Debian Xen Team Changed-By: Mark Pryor Description: libxen-dev - Public headers and libs for Xen libxenfsutl4.20 - xen-utils-4.20 companion libs libxenmisc4.20 - Public libs for Xen libxenstore4.0 - Xenstore communications library for Xen libxentoolcore1 - helper for qemu & libxenstore qemut - qemu-dm (0.10.2/xen-4.20) with 9pfs support qemuu - qemu-system-i386 (9.1.0/xen-4.20) with 9pfs support xen-hypervisor-4.20-amd64 - Xen Hypervisor on AMD64 xen-perf-hypervisor-4.20-amd64 - Xen Perf-Hypervisor on AMD64 xen-system-amd64 - Xen System on AMD64 (meta-package) xen-utils-4.20 - XEN administrative tools xen-utils-common - Xen administrative tools - common files xenstore-utils - Xenstore command line utilities for Xen Changes: xen (4.20.4-1+ub24u04.1) noble; urgency=medium . * HEAD @ f1e1321c87acc70f21 gnttab: properly drop page ref on a GNTTAB_cache_flush error path-Tue 13 Oct 2026 06:02 - initial build of v4.20.4 - XSA-515 0033-x86-amd-Fix-inverted-condition-in-zenbleed_use_chicke.diff:This is XSA-515 / CVE-2026-79608. - XSA-516 0034-x86-pv-map-each-vCPU-s-root-page-table-in-its-per-dom.diff:This is XSA-516 / CVE-2026-79609. - XSA-517 0035-gnttab-address-fallout-from-XSA-501.diff:This is XSA-517 / CVE-2026-79610. - XSA-518 0036-x86-vmx-Rework-DB-intercept-logic-to-fix-VMEntry-fail.diff:This is XSA-518 / CVE-2026-79611. - XSA-519 0037-xen-arm-page-fix-size-underflow-in-invalidate_dcache_.diff:This is CVE-2026-102699, part of XSA-519. 0038-xen-gnttab-Prevent-GNTTABOP_cache_flush-from-corrupti.diff:This is CVE-2026-102702, part of XSA-519. - XSA-520 0039-gnttab-properly-drop-page-ref-on-a-GNTTAB_cache_flush.diff:This is XSA-520 / CVE-2026-102700. - XSA-509 0008-x86-pass-through-disallow-pt_irq_create_bind-on-dying.diff:This is XSA-509 / CVE-2026-62437. - XSA-510 0009-x86-emul-cope-with-internal-handlers-returning-X86EMU.diff:This is XSA-510 / CVE-2026-79602. - XSA-511 0010-xen-page_alloc-ensure-TLB-flush-is-done-ahead-of-page.diff:This is XSA-511 / CVE-2026-79603. - XSA-512 0011-oxenstored-Factor-out-Process.do_reconnect.diff:This is part of XSA-512 / CVE-2026-79604. 0012-oxenstored-Reset-the-watches-trie-on-domain-reconnect.diff:This is part of XSA-512 / CVE-2026-79604. - XSA-495 0110-x86-SHADOW_PAGING-is-deprecated.diff:This is CVE-2026-42493 / XSA-495. - XSA-497 0111-libfsimage-iso9660-harden-Rock-Ridge-SUSP-parsing-aga.diff:This is XSA-497. - XSA-499 0112-platform-op-XSM-move-resource-un-plug-core-checks.diff:This is CVE-2026-62427 / part of XSA-499. 0113-sysctl-XSM-pass-full-struct-xen_sysctl-to-xsm_sysctl.diff:This is part of CVE-2026-62426 / XSA-499. 0114-sysctl-XSM-drop-.scheduler_op-hook.diff:This is part of CVE-2026-62426 / XSA-499. 0115-sysctl-Flask-add-preliminary-check-for-XEN_SYSCTL_get.diff:This is part of CVE-2026-62426 / XSA-499. 0116-sysctl-XSM-drop-.readconsole-hook.diff:This is part of CVE-2026-62426 / XSA-499. 0117-sysctl-XSM-drop-.resource_-un-plug_core-hooks.diff:This is part of CVE-2026-62426 / XSA-499. 0118-sysctl-XSM-drop-.page_offline-hook.diff:This is part of CVE-2026-62426 / XSA-499. - XSA-500 0119-gnttab-check-values-against-active-entry-when-copying.diff:This is CVE-2026-62428 / XSA-500. - XSA-501 0120-gnttab-cope-with-version-changes-racing-other-operati.diff:Everything together is XSA-501. - XSA-502 0121-vNUMA-close-race-window-in-domain-cleanup.diff:This is CVE-2026-62429 / XSA-502. - XSA-503 0122-x86-vrtc-fix-race-in-CMOS-index-checking.diff:This is XSA-503 / CVE-2026-62430. - XSA-504 0123-x86-viridian-ensure-count-is-always-set-when-starting.diff:This is XSA-504 / CVE-2026-62431. - XSA-505 0124-xen-evtchn-fix-race-between-FIFO-expand-and-reset-ope.diff:This is XSA-505 / CVE-2026-62432. - XSA-506 0125-xen-dmop-check-number-of-input-buffers.diff:This is XSA-506 / CVE-2026-62433. - XSA-507 0126-x86-pod-do-not-reclaim-special-pages-for-PoD-cache.diff:This is XSA-507 / CVE-2026-62434. - XSA-508 0127-pygrub-security-supported-only-when-run-de-privileged.diff:This is XSA-508. * XSA-491 0046-x86-HVM-add-locking-to-I-O-port-translation-list-trav.diff:This is XSA-491 / CVE-2026-42487. * XSA-492 0047-sched-use-sequence-counter-to-enlighten-vcpu_runstate.diff:This is part of XSA-492. 0048-domctl-handle-XEN_DOMCTL_getdomaininfo-without-acquir.diff:This is part of XSA-492. 0049-domain-locking-for-iomem_caps-accesses.diff:This is part of XSA-492. 0050-x86-domain-locking-for-ioport_caps-accesses.diff:This is part of XSA-492. 0051-domain-locking-for-irq_caps-accesses.diff:This is part of XSA-492. 0052-XSM-Flask-split-the-.iomem_mapping-hook.diff:This is part of XSA-492. 0053-domctl-handle-XEN_DOMCTL_memory_mapping-without-acqui.diff:This is part of XSA-492. 0054-domctl-handle-XEN_DOMCTL_ioport_mapping-without-acqui.diff:This is part of XSA-492. 0055-domctl-handle-XEN_DOMCTL_-un-bind_pt_irq-without-acqu.diff:This is part of XSA-492. 0056-domctl-handle-XEN_DOMCTL_io-mem-port-_permission-with.diff:This is part of XSA-492. 0057-domctl-handle-XEN_DOMCTL_-irq-gsi-_permission-without.diff:This is part of XSA-492. 0058-domctl-XSM-drop-vm_event_control-hook.diff:This is part of XSA-492. 0059-domctl-XSM-pass-full-struct-xen_domctl-to-xsm_domctl.diff:This is part of XSA-492. 0060-domctl-XSM-drop-scheduler_op-hook.diff:This is part of XSA-492. 0061-domctl-XSM-drop-shadow_control_op-hook.diff:This is part of XSA-492. 0062-domctl-handle-XEN_DOMCTL_get_device_group-without-acq.diff:This is part of XSA-492. 0063-domctl-XSM-drop-de-assign_-dt-device-hooks.diff:This is part of XSA-492. 0064-domctl-handle-XEN_DOMCTL_set_target-without-acquiring.diff:This is part of XSA-492. * XSA-493 0069-xen-arm-Mitigate-TLBI-errata-on-various-Arm-CPUs.diff:This is XSA-493 / CVE-2025-10263. * XSA-494 0070-x86-mm-accurately-track-which-vCPU-page-tables-are-lo.diff:This is CVE-2026-42488 / XSA-494. - XSA-490 0029-x86-amd-Mitigate-AMD-SN-7052.diff:This is XSA-490 / CVE-2025-54518 Checksums-Sha1: 45cfa21da3dd17a4de9abe12ac59cef23cc313d8 4110 xen_4.20.4-1+ub24u04.1.dsc 7e44b31bb2e9255e6ec3a690968cb189cd6af244 39977612 xen_4.20.4.orig.tar.xz 71435fa156c75a96bc12c44f9acc95eb3d157d8d 97616 xen_4.20.4-1+ub24u04.1.debian.tar.xz 45da289b80a497f7fae46821ba97eec15d6e80f8 871402 libxen-dev_4.20.4-1+ub24u04.1_amd64.deb e7fb48c32eac85ad5b8fa93929dbd9e7c05533e0 45264 libxenfsutl4.20_4.20.4-1+ub24u04.1_amd64.deb 99c998e5bd209458ce9c168f6e3d76f6d21bbc46 546374 libxenmisc4.20_4.20.4-1+ub24u04.1_amd64.deb 938149554c42e553b0d717a876ffa3ec217f56e0 23592 libxenstore4.0_4.20.4-1+ub24u04.1_amd64.deb 199426c9c2fb856c14fb6e36a7e67c736f3b93d8 13964 libxentoolcore1_4.20.4-1+ub24u04.1_amd64.deb 585a1551b9c2e82c09289842c7c5d8141f8a3ff7 935370 qemut_0.10.2+k4-1+ub24u04.1_amd64.deb f20e3460b178db802b66f2143750bf3d5869c038 25489486 qemuu_8.2.0+k4-1+ub24u04.1_amd64.deb 52f7537735a23bf0a4ddece065dcdb0daaed7a99 3969320 xen-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb 0388048bd4ea57d1acb713a9a668460fd98fcef5 2447224 xen-perf-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb 00f32919e7ea9c39a3221ea243cfcc8cb10fb47a 11498 xen-system-amd64_4.20.4-1+ub24u04.1_amd64.deb 07bd5cf9ec91260b71196e6fc0ef5420b51b1720 1653308 xen-utils-4.20_4.20.4-1+ub24u04.1_amd64.deb 3b1f63f3a0959b6733d89b619c55532524283b40 208384 xen-utils-common_4.20.4-1+ub24u04.1_all.deb 66fd759c068ba54acf4c8914c8e03c33297615fb 27430 xen_4.20.4-1+ub24u04.1_amd64.buildinfo f6af1744e0b858a806e060a2fb4cd17fb03d6ff9 23232 xenstore-utils_4.20.4-1+ub24u04.1_amd64.deb Checksums-Sha256: b9886f808b9a67cad50c822b94e4e6f6e0e59887f0dd7daf93f1bbf263bc2e25 4110 xen_4.20.4-1+ub24u04.1.dsc 2ee438677ca03f91e2d2e3cc9f94022b8cedc6a54987200439971ed707c49504 39977612 xen_4.20.4.orig.tar.xz cf07d8837e8f26425927b334d73de23d187c89890a6878587a603a396d3e0600 97616 xen_4.20.4-1+ub24u04.1.debian.tar.xz 6be74c3ea45eb2015ac5198071ed405b5070f8deba5abc175888b49997957737 871402 libxen-dev_4.20.4-1+ub24u04.1_amd64.deb be07a7f0bb3df25c6630a02fd0291355d696e75657b1f4ee6e5e1ee9303cc037 45264 libxenfsutl4.20_4.20.4-1+ub24u04.1_amd64.deb d5488e8dbde2bc40ab760f6d3e2b6118262c265a8b6711a979099688f69feb41 546374 libxenmisc4.20_4.20.4-1+ub24u04.1_amd64.deb c888d62688e6bade375f5c32be666e69d9e9278af85658b0b87159a8a56c2a7f 23592 libxenstore4.0_4.20.4-1+ub24u04.1_amd64.deb 333a515c64159059489ac86b2c1a0b7008447388e499e064f651003157d74786 13964 libxentoolcore1_4.20.4-1+ub24u04.1_amd64.deb 82ec7ea59d0de7ecfe2e077e11202e289409eee425d1b77ead2bb1cf460b29aa 935370 qemut_0.10.2+k4-1+ub24u04.1_amd64.deb 50997441da9950b57fde11a9ea4c6ce2d62600249f52124e3aa32d3ea194e1d6 25489486 qemuu_8.2.0+k4-1+ub24u04.1_amd64.deb e3fcdc6348fd6b814f0512c5cc76114dc6fc8c829c8ba2ca60fe1d098dbaf1ca 3969320 xen-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb 002b619cadee7d979fa23313eceae4c18c12653829708010ca4dc5d5ecda60fd 2447224 xen-perf-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb ef817fdcf89988fdf579604802f84fbccb3a71b37180216ead4c0dcabd1cb30d 11498 xen-system-amd64_4.20.4-1+ub24u04.1_amd64.deb 8b96667d12306c940c32c2e0d343710d2a00fec0cb4020e5cf64d7476b6f5784 1653308 xen-utils-4.20_4.20.4-1+ub24u04.1_amd64.deb 1a35717ed441a62e61c35c387720281784ec2a9988ffa3656df26865d66c9783 208384 xen-utils-common_4.20.4-1+ub24u04.1_all.deb 32ef56207781272cd807fe50407827aef5183c80abe2ccd7be8861db42675823 27430 xen_4.20.4-1+ub24u04.1_amd64.buildinfo 8d5d0066b9216d539d9ffd41f1227edfa77c9f5ba8e188ff570313a7fc561633 23232 xenstore-utils_4.20.4-1+ub24u04.1_amd64.deb Files: 0a76f9becda7db4c093f51e15643a754 4110 kernel optional xen_4.20.4-1+ub24u04.1.dsc 8dd148405b32cce3dc273cd122116892 39977612 kernel optional xen_4.20.4.orig.tar.xz d3793639cb64b7219095d0a3deded1a1 97616 kernel optional xen_4.20.4-1+ub24u04.1.debian.tar.xz 2c0afa51112851c5d3c0fb8cfb4671e2 871402 libdevel optional libxen-dev_4.20.4-1+ub24u04.1_amd64.deb 2722c02081ba8a1632644b4932b3e67c 45264 libs optional libxenfsutl4.20_4.20.4-1+ub24u04.1_amd64.deb dcf4d9c6058c2f87ce5bd30a2d3a8568 546374 libs optional libxenmisc4.20_4.20.4-1+ub24u04.1_amd64.deb 8dc2b4a413042d4928237ab4ac53ea72 23592 libs optional libxenstore4.0_4.20.4-1+ub24u04.1_amd64.deb dda35835dc7785cf090a8133f0a2b422 13964 libs optional libxentoolcore1_4.20.4-1+ub24u04.1_amd64.deb 39352c301581dcee1edcc8acaf3958b7 935370 admin optional qemut_0.10.2+k4-1+ub24u04.1_amd64.deb 4e4ca908792ca62d96025949d6bdcf34 25489486 admin optional qemuu_8.2.0+k4-1+ub24u04.1_amd64.deb 3f898d89d2ff30fd63b9a4cbc70053f1 3969320 kernel optional xen-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb 32a32408c9abc7dc90715c0246545981 2447224 kernel optional xen-perf-hypervisor-4.20-amd64_4.20.4-1+ub24u04.1_amd64.deb c779d80c2769643529466216540f6b51 11498 kernel optional xen-system-amd64_4.20.4-1+ub24u04.1_amd64.deb 4a4be3d47a1a0f4d4d5a3c4464282c38 1653308 kernel optional xen-utils-4.20_4.20.4-1+ub24u04.1_amd64.deb 6892b2cd84e404daae10e5597e633ffb 208384 kernel optional xen-utils-common_4.20.4-1+ub24u04.1_all.deb 912c11c3c4b8677a288d0672d4cf25a3 27430 kernel optional xen_4.20.4-1+ub24u04.1_amd64.buildinfo c87080b04fc4011f043e3ee2f9659404 23232 admin optional xenstore-utils_4.20.4-1+ub24u04.1_amd64.deb