↵ Return to the main page of xen-doc
View build
Search for updates
Package Info
🠗 Changelog
🠗 Dependencies
🠗 Provides
🠗 Files
| Date | Author | Change |
|---|---|---|
| 2026-11-05 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.4-5 | - arbitrary read/write via grant copy [XSA-523, CVE-2026-102703, CVE-2026-102704] |
| 2026-10-30 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.4-4 | - wrong version of xsa518 patch in last build |
| 2026-10-19 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.4-3 | - x86/AMD: ineffectual Zenbleed workaround [XSA-515, CVE-2026-79608] x86: XPTI may break on huge-memory systems [XSA-516, CVE-2026-79609] grant-table: double version change race [XSA-517, CVE-2026-79610] VMX: VMentry failure with branch tracing and blocked states [XSA-518, CVE-2026-79611] Arm: multiple issues with GNTTABOP_cache_flush [XSA-519, CVE-2026-102699, CVE-2026-102702] gnttab: cache-flush handling may cause page reference leak [XSA-520, CVE-2026-102700] |
| 2026-09-17 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.4-2 | - x86: DMs may cause mem leak by IRQ binding [XSA-509, CVE-2026-62437] x86: improper handling of HVM emulation return codes [XSA-510, CVE-2026-79602] Unconditionally do TLB flushing ahead of page scrubbing [XSA-511, CVE-2026-79603] oxenstored: Unbounded accumulation of watches [XSA-512, CVE-2026-79604] |
| 2026-07-30 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.4-1 | - update to xen 4.20.4 - includes security fixes x86 shadow paging is deprecated [XSA-495, CVE-2026-42493] vIRQ event channel binding may break Xenstore [XSA-496, CVE-2026-42492] buffer overruns in libfsimage iso9660 handling [XSA-497, CVE-2026-42494, CVE-2026-42495, CVE-2026-62423, CVE-2026-62424, CVE-2026-62425] sysctl and platform-op locks open to abuse [XSA-499, CVE-2026-62426, CVE-2026-62427] grant-table: type confusion in grant-copy [XSA-500, CVE-2026-62428] grant-table: version change racing with other operations [XSA-501, CVE-2026-62435, CVE-2026-62436] vNUMA domain cleanup may race other operations [XSA-502, CVE-2026-62429] x86: Out-of-bounds read in vRTC emulation [XSA-503, CVE-2026-62430] Viridian STIMER division by zero [XSA-504, CVE-2026-62431] evtchn: Race between FIFO expand and reset [XSA-505, CVE-2026-62432] correct buffer checks for DM_OP hypercalls [XSA-506, CVE-2026-62433] PoD: Don't try to reclaim special pages [XSA-507, CVE-2026-62434] pygrub is only supported in de-privileged mode [XSA-508] |
| 2026-06-18 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.3-4 | [ never submitted as update ] - x86 HVM I/O port list traversal [XSA-491, CVE-2026-42487] - domctl lock open to abuse [XSA-492, CVE-2026-42489, CVE-2026-42490] - Arm: Completion of memory accesses not guaranteed by completion of a TLBI [XSA-493, CVE-2025-10263] - x86: mismatched mapcache metadata [XSA-494, CVE-2026-42488] |
| 2026-05-12 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.3-3 | - x86: CPU Opcode Cache corruption [XSA-490,CVE-2025-54518] |
| 2026-04-29 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.3-2 | - oxenstored keeps quota related use counts across domain destruction [XSA-483, CVE-2026-23556] - Xenstored DoS via XS_RESET_WATCHES command [XSA-484, CVE-2026-23557] - grant table v2 race in status page mapping [XSA-486, CVE-2026-23558] - x86: Floating Point Divider State Sampling [XSA-488, CVE-2025-54505] |
| 2026-03-27 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.3-1 | - update to xen 4.20.3 remove patches now included or superceded upstream |
| 2026-03-18 | Michael Young <m dot a dot young at durham dot ac dot uk> - 4.20.2-4 | - Use after free of paging structures in EPT [XSA-480, CVE-2026-23554] - Xenstored DoS by unprivileged domain [XSA-481, CVE-2026-23555] |