[DSA 6424-1] xen security update

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512

- -------------------------------------------------------------------------
Debian Security Advisory DSA-6424-1                   [email protected]
https://www.debian.org/security/                       Moritz Muehlenhoff
August 09, 2026                       https://www.debian.org/security/faq
- -------------------------------------------------------------------------

Package        : xen
CVE ID         : CVE-2025-10263 CVE-2025-54505 CVE-2025-54518 CVE-2026-23554 
                 CVE-2026-23555 CVE-2026-23556 CVE-2026-23557 CVE-2026-23558 
                 CVE-2026-42487 CVE-2026-42488 CVE-2026-42489 CVE-2026-42490 
                 CVE-2026-42493 CVE-2026-42494 CVE-2026-42495 CVE-2026-62423 
                 CVE-2026-62424 CVE-2026-62425 CVE-2026-62426 CVE-2026-62427 
                 CVE-2026-62428 CVE-2026-62429 CVE-2026-62430 CVE-2026-62431 
                 CVE-2026-62432 CVE-2026-62433 CVE-2026-62434 CVE-2026-62435 
                 CVE-2026-62436

Multiple vulnerabilities have been discovered in the Xen hypervisor,
which could result in privilege escalation, information disclosure or
denial of service.

For the stable distribution (trixie), these problems have been fixed in
version 4.20.3+127-gc42374a105-0+deb13u1.

We recommend that you upgrade your xen packages.

For the detailed security status of xen please refer to
its security tracker page at:
https://security-tracker.debian.org/tracker/xen

Further information about Debian Security Advisories, how to apply
these updates to your system and frequently asked questions can be
found at: https://www.debian.org/security/

Mailing list: [email protected]
-----BEGIN PGP SIGNATURE-----
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=KPX0
-----END PGP SIGNATURE-----