|
|
 |
|
|
Changelog for xen-ocaml-4.10.4.26.gfde09cb80c-1.el6.x86_64.rpm :
Wed Nov 13 13:00:00 2019 Anthony PERARD - 4.10.4.26.gfde09cb80c-1
- Update to include XSAs 304 and 305
Fri Nov 1 13:00:00 2019 Anthony PERARD - 4.10.4-2
- Update with XSAs 296,298,299,301,302,303
Thu Jul 4 14:00:00 2019 Anthony PERARD - 4.10.4-1
- Xen 4.10.4 released
Wed May 15 14:00:00 2019 Anthony PERARD - 4.10.3.38.g48bd9061a2-1
- Update to include XSA 297
Thu Mar 7 13:00:00 2019 Anthony PERARD - 4.10.3.12.g7842419a6b-1
- Update to include XSAs 284,285,287,288,290-294
Mon Feb 25 13:00:00 2019 Anthony PERARD - 4.10.3-1
- New stable release Xen 4.10.3
Tue Nov 27 13:00:00 2018 Anthony PERARD - 4.10.2.33.gb6e203bc80-1
- Update to include XSAs 275,279,280
Thu Nov 15 13:00:00 2018 Anthony PERARD - 4.10.2.27.ge907460fd6-1
- Update to include XSA-282
Thu Oct 25 14:00:00 2018 Anthony PERARD - 4.10.2.13.g73788eb585-1
- Update to include XSA-278
Tue Sep 25 14:00:00 2018 Anthony PERARD - 4.10.2-1
- Xen 4.10.2
Tue Aug 21 14:00:00 2018 Anthony PERARD - 4.10.1.106.g13e85a6dbc-2
- Fix xen version string, in e.g. xl info, so it match the RPM version.
- Also remove the information a xen_changeset, as this information is an
artefact of the package build.
Mon Aug 20 14:00:00 2018 Anthony PERARD - 4.10.1.106.g13e85a6dbc-1
- Use a snapshot of the xen git tree instead of a release tarball.
- Have fixes for XSA 268, 269, 272 and 273.
Mon Jul 30 14:00:00 2018 Anthony PERARD - 4.10.1-2
- Apply XSAs 260-267
In order to apply 263, also backport patches:
- x86: correct ordering of operations during S3 resume
- x86: suppress BTI mitigations around S3 suspend/resume
- x86/spec_ctrl: Updates to retpoline-safety decision making
Wed May 2 14:00:00 2018 Anthony PERARD - 4.10.1-1.el7.centos
- Xen 4.10.1
Tue Jan 30 13:00:00 2018 Anthony PERARD - 4.10.0-3.el7.centos
- Add missing perl dependency for xen-runtime package
Mon Jan 29 13:00:00 2018 Anthony PERARD - 4.10.0-2.el7.centos
- Fix xenstored startup issue due to old SElinux policy
Thu Jan 11 13:00:00 2018 Anthony PERARD - 4.10.0-1.el7.centos
- Xen 4.10.0
Fri Dec 8 13:00:00 2017 Anthony PERARD - 4.10.0-0.1.rc8.el7.centos
- Xen 4.10.0-rc8
Wed Dec 6 13:00:00 2017 Anthony PERARD - 4.8.2-6.el7.centos
- Apply XSAs 246 and 247
Fri Nov 24 13:00:00 2017 Anthony PERARD - 4.8.2-5.el7.centos
- Add OVMF, the guest EFI firmware (available via xen-ovmf package)
Tue Nov 21 13:00:00 2017 Anthony PERARD - 4.8.2-4.el7.centos
- Import from upstream the updated optional patch from XSA-240, it is necessary
to apply the update of XSA-240.
- Import update of XSA-240 (v5)
- Apply the new final patch from XSA-243 (v5)
Tue Oct 24 14:00:00 2017 Anthony PERARD - 4.8.2-3.el7.centos
- Apply XSA 236
Fri Oct 13 14:00:00 2017 Anthony PERARD - 4.8.2-2.el7.centos
- Import XSAs 237-244
Wed Sep 13 14:00:00 2017 Anthony PERARD - 4.8.2-1.el7.centos
- Update to Xen 4.8.2
- Import XSAs 231-234
Thu Jun 15 14:00:00 2017 Sarah Newman 4.8.1-3.el6.centos
- Import XSAs 216-225
- Update XSAs 218,224 to v3
Fri Jun 9 14:00:00 2017 Sarah Newman 4.8.1-2.el6.centos
- Import XSAs 213-214 (XSA 215 does not apply)
- Enable live patching by default
Thu Apr 27 14:00:00 2017 Anthony Perard 4.8.1-1.el6.centos
- Update to Xen 4.8.1
Wed Mar 15 13:00:00 2017 Johnny Hughes 4.6.3-9.el6.centos
- Import XSA 211
Tue Feb 28 13:00:00 2017 Johnny Hughes 4.6.3-8.el6.centos
- Import XSA 209
Wed Feb 15 13:00:00 2017 Johnny Hughes 4.6.3-7.el6.centos
- Import XSA 207
Mon Feb 13 13:00:00 2017 Johnny Hughes 4.6.3-6.el6.centos
- Import XSA 208
Fri Dec 23 13:00:00 2016 Johnny Hughes 4.6.3-5.el6.centos
- Import XSAs 199, 200, 201, 202, 204, 204
Tue Nov 22 13:00:00 2016 George Dunlap 4.6.3-4.el6.centos
- Import XSAs 191-193, 195-198. (Not affected by XSA 194.)
Mon Oct 3 14:00:00 2016 George Dunlap 4.6.3-3.el6.centos
- Import XSA 190
Wed Sep 7 14:00:00 2016 George Dunlap 4.6.3-2.el6.centos
- Import XSAs 185-187
- NB Xen 4.6 isn\\\'t vulnerable to XSA-188
Thu Jul 28 14:00:00 2016 George Dunlap 4.6.3-1.el6.centos
- Rebase to 4.6.3
- Import XSA-184
Mon Jul 18 14:00:00 2016 George Dunlap 4.6.1-13.el6.centos
- Import XSA-175 and XSA-178
Wed Jul 13 14:00:00 2016 Johnny Hughes 4.6.1-12.el6.centos
- Import XSA-182 and XSA-183
Thu May 19 14:00:00 2016 George Dunlap 4.6.1-11.el6.centos
- Gratuitous release bump due to CBS build failure
Thu May 19 14:00:00 2016 George Dunlap 4.6.1-10.el6.centos
- Import XSA-180
Thu May 19 14:00:00 2016 George Dunlap 4.6.1-9.el6.centos
- Backport xendomains fixes
Thu May 12 14:00:00 2016 George Dunlap 4.6.1-8.el6.centos
- import XSA-176
Mon May 9 14:00:00 2016 George Dunlap 4.6.1-7.el6.centos
- import XSA-179
Mon Apr 18 14:00:00 2016 Johnny Hughes 4.6.1-6.el6.centos
- import XSA-173
Tue Mar 29 14:00:00 2016 George Dunlap - 4.6.1-5.el6.centos
- Import XSA-172
Mon Feb 22 13:00:00 2016 George Dunlap - 4.6.1-4.el6.centos
- Add links for stubdom images from /usr/lib into /usr/lib64 for backwards compatibility
Mon Feb 15 13:00:00 2016 George Dunlap - 4.6.1-2.el6.centos
- Add XSAs 154, 170
Thu Feb 11 13:00:00 2016 George Dunlap - 4.6.1-1.el6.centos
- Update to 4.6.1
- Retain two xsa-155 related patches to xen missing from the release
- Retain an xsa-162 related patch to qemu-upstream missing from the release
Thu Jan 14 13:00:00 2016 George Dunlap - 4.6.0-9.el6.centos
- Add XSAs 167-169
Mon Dec 14 13:00:00 2015 George Dunlap - 4.6.0-8.el6.centos
- Add XSAs 155, 164-166
Wed Nov 25 13:00:00 2015 George Dunlap - 4.6.0-7.el6.centos
- Remove XSA-161 (withdrawn)
Wed Nov 25 13:00:00 2015 George Dunlap - 4.6.0-6.el6.centos
- Import XSAs 159-163
Wed Nov 11 13:00:00 2015 George Dunlap - 4.6.0-5.el6.centos
- Import XSA 156
Thu Nov 5 13:00:00 2015 George Dunlap - 4.6.0-4.el6.centos
- Import XSAs 145-153 (including ARM XSAs)
Thu Nov 5 13:00:00 2015 George Dunlap - 4.6.0-3.el6.centos
- Rework specfile to make download and contribution easier
Tue Nov 3 13:00:00 2015 George Dunlap - 4.6.0-2.el6.centos
- Allow same srpm to build on all platforms (no ifs in Source or Patch sections)
Mon Oct 19 14:00:00 2015 George Dunlap - 4.6.0-1.el6.centos
- Update to 4.6.0 release
Mon Oct 19 14:00:00 2015 George Dunlap - 4.6rc4-3.el6.centos
- Add guest efi bootloader support. To use set kernel=/usr/lib64/xen/boot/XEN_EFI.fd
Tue Oct 6 14:00:00 2015 George Dunlap - 4.6rc4-2.el6.centos
- Enable spice
Tue Sep 29 14:00:00 2015 George Dunlap - 4.6rc4-1.el6.centos
- Rebase to rc4
Mon Sep 21 14:00:00 2015 George Dunlap - 4.6rc3-4.el6.centos
- Gratuitous bump to re-build with new version of dev86 (0.16.21-5)
Wed Sep 16 14:00:00 2015 George Dunlap - 4.6rc3-2.el6.centos
- Include xen-kernel
Wed Sep 9 14:00:00 2015 George Dunlap - 4.6rc3-1.el6.centos
- Update to 4.6.0-rc3
- Upstreamable systemd / selinux fixes
Wed Sep 9 14:00:00 2015 George Dunlap - 4.6.0rc2x-4.el6.centos
- Add aarch64
Tue Sep 8 14:00:00 2015 George Dunlap - 4.6.0rc2x-3.el6.centos
- Switch to systemd for CentOS 7
Mon Sep 7 14:00:00 2015 George Dunlap - 4.6.0rc2x-2.el6.centos
- More 4.6-rc2 fixes
Tue Sep 1 14:00:00 2015 George Dunlap - 4.6.0rc2x-1.el6.centos
- Update to 4.6.0-rc2 (+change)
Mon Aug 3 14:00:00 2015 George Dunlap - 4.4.2-8.el6.centos
- Run grub-bootxen.sh on hypervisor post (un)install
Thu Jul 30 14:00:00 2015 George Dunlap - 4.4.2-7.el6.centos
- Import XSA-139
- Import XSA-140
Tue Jul 28 14:00:00 2015 George Dunlap - 4.4.2-6.el6.centos
- Gratuitous revision bump to pull \\in new version of seabios
Tue Jun 30 14:00:00 2015 George Dunlap - 4.4.2-5.el6.centos
- Import XSA-137
- Import XSA-138
Mon Jun 1 14:00:00 2015 George Dunlap - 4.4.2-4.el6.centos
- Import XSA-134,135,136
Mon Jun 1 14:00:00 2015 George Dunlap - 4.4.2-3.el6.centos
- Import XSA-128,129.130,131
Wed May 13 14:00:00 2015 George Dunlap - 4.4.2-2.el6.centos
- Import XSA-133
Thu Apr 23 14:00:00 2015 George Dunlap - 4.4.2-1.el6.centos
- Update to 4.4.2
- Import XSA-132
Thu Mar 19 13:00:00 2015 George Dunlap - 4.4.1-10.el6.centos
- Import XSA-125
- Import XSA-126
- Import XSA-127
Fri Mar 13 13:00:00 2015 George Dunlap - 4.4.1-9.el6.centos
- Fix issue with blktap that left \'zombie\' tapdisk processes around
- Pass readwrite flag to blktap to make it possible to mount disk images
from read-only files.
Thu Mar 12 13:00:00 2015 George Dunlap - 4.4.1-8.el6.centos
- Import xsa-119
Thu Mar 5 13:00:00 2015 George Dunlap - 4.4.1-7.el6.centos
- Import xsa-123
Thu Mar 5 13:00:00 2015 George Dunlap - 4.4.1-6.el6.centos
- Import xsa-121, xsa-122
Wed Jan 7 13:00:00 2015 George Dunlap - 4.4.1-5.el6.centos
- Import xsa-116
Mon Dec 15 13:00:00 2014 George Dunlap - 4.4.1-4.el6.centos
- Disabled xend by default
- Revert \'choose qdisk first\' change
Thu Dec 11 13:00:00 2014 George Dunlap - 4.4.1-3.el6.centos
- Backported qdisk persistent grant fix
- Backported fixes to use tapdisk with HVM guests
- Backported XSAs 107,109-114
- Backported fixes to migration, cpupools
- Remove blktapctl initscripts as it\\\'s no longer available in 4.4
- Removed custom xenconsoled and xenstored initscripts in favor of xencommons
Wed Oct 22 14:00:00 2014 George Dunlap - 4.4.1-2.el6.centos
- Updated to blktap 2.5 v0.9.2
Mon Oct 20 14:00:00 2014 Johnny Hughes - 4.2.5-37.el6.centos
- shifted /etc/sysconfig/xen-kernel to centos-xen-release instead of xen
Wed Oct 15 14:00:00 2014 George Dunlap - 4.4.1-1.el6.centos
- Removed patches which were reflected upstream
- Took advantage of --with-system-seabios config option to remove seabios patch
- Included polarssl (now required for pvgrub)
Wed Oct 15 14:00:00 2014 George Dunlap - 4.2.5-36.el6.centos
- Port system over to git patchqueue.
Thu Oct 9 14:00:00 2014 Johnny Hughes - 4.2.5-36.el6.centos
- added /etc/sysconfig/xen-kernel for auto grub install options
Wed Oct 8 14:00:00 2014 George Dunlap - 4.2.5-35.el6.centos
- Remove i386 i486 i586 i686 pentium3 pentium4 athlon geode and ia64 build targets to build with the community build system
Wed Oct 1 14:00:00 2014 Johnny Hughes - 4.2.5-34.el6.centos
- Roll in Patch209 (XSA-108, CVE-2014-7188)
Fri Sep 26 14:00:00 2014 Johnny HUghes - 4.2.5-33.el6.centos
- upgrade to upstream Xen version 4.2.5
- removed patches that are already part of 4.2.5
- Added Patch205 (XSA-97, CVE-2014-5146,CVE-2014-5149)
- Added Patch206 (XSA-104, CVE-2014-7154)
- Added Patch207 (XSA-105, CVE-2014-7155)
- Added Patch208 (XSA-106, CVE-2014-7156)
Mon Jun 16 14:00:00 2014 Johnny Hughes - 4.2.4-33.el6.centos
- actually apply patch203 :)
Mon Jun 16 14:00:00 2014 Johnny Hughes - 4.2.4-32.el6.centos
- Patch203 (XSA-96, CVE-2014-3967 and CVE-2014-3968) added
Mon May 5 14:00:00 2014 Johnny Hughes - 4.2.4-31.el6.centos
- Roll in Patch202, XSA-92 (CVE-2014-3124)
- Created Patch201 to allow RHEL7 Beta and RC to boot
Wed Mar 26 13:00:00 2014 Johnny Hughes - 4.2.4-30.el6.centos
- roll in Patch200, XSA-89 (CVE-2014-2599)
Sun Feb 23 13:00:00 2014 Johnny Hughes - 4.2.4-29.el6.centos
- cleaned up older patches, removed qemu-xen upstream git (Source 100)
tarball as it is part of the xen-4.2.4.tar.gz tarball now
Sat Feb 22 13:00:00 2014 Johnny Hughes - 4.2.4-28.el6.centos
- upgrade to upstream version 4.2.4
Tue Feb 11 13:00:00 2014 Johnny Hughes - 4.2.3-28.el6.centos
- Roll in Patches 153, 154, and 155
XSA-84 (CVE-2014-1891, CVE-2014-1892, CVE-2014-1893, CVE-2014-1894)
XSA-85 (CVE-2014-1894), XSA-86 (CVE-2014-1896)
Fri Jan 24 13:00:00 2014 Johnny Hughes - 4.2.3-27.el6.centos
- Roll in patches 151 and 152 for the following XSAs:
XSA-83 (CVE-2104-1642) and XSA-87 (CVE-2014-1666)
Tue Dec 10 13:00:00 2013 Johnny Hughes - 4.2.3-26.el6.centos
- Roll in Patches 147, 148, 149, 150 for the following XSAs:
- XSA-74 (CVE-2013-4553), XSA-76 (CVE-2013-4554), XSA-80 (CVE-2013-6400)
- XSA-81 (CVE-2013-6885)
Sat Nov 23 13:00:00 2013 Johnny Hughes - 4.2.3-25.el6.centos
- Roll in patch 145 and 146 for XSA-75 (CVE-2013-4551), XSA-78 (CVE-2013-6375)
Mon Nov 4 13:00:00 2013 Johnny Hughes - 4.2.3-24.el6.centos
- Roll in patches 134 to 141, 143 to 144 for the following XSAs:
- XSA-62 (CVE-2013-1442), XSA-63 (CVE-2013-4355), XSA-72 (CVE-2013-4416)
- XSA-64 (CVE-2013-4356), XSA-66 (CVE-2013-4361), XSA-67 (CVE-2013-4368)
- XSA-68 (CVE-2013-4369), XSA-69 (CVE-2013-4370), XSA-70 (CVE-2013-4371)
- XSA-73 (CVE-2013-4494)
Wed Sep 11 14:00:00 2013 Johnny Hughes - 4.2.3-23.el6.centos
- upgraded to upstream 4.2.3
- removed patches 66-75, 92-94, 108-132 as they are now rolled into xen-4.2.3
Thu Jul 18 14:00:00 2013 Johnny Hughes - 4.2.2-23.el6.centos
- added Patch131 for XSA-57 (CVE-2013-2211)
- added Patch132 for XSA-58 (CVE-2013-1432)
Fri Jun 14 14:00:00 2013 Johnny Hughes - 4.2.2-22.el6.centos
- rolled in patches 108 through 130 for XSA-55
Wed Jun 5 14:00:00 2013 Johnny Hughes - 4.2.2-21.el6.centos
- remarked out XSA-55 patches while they are being better tested upstream
- cleaned up XEN_VENDORVERSION to remove .centos.alt
Wed Jun 5 14:00:00 2013 Johnny Hughes - 4.2.2-20.el6.centos
- added XEN_VENDORVERSION to the make install section of the spec
- added XEN_DOMAIN=centos.org make and make install sections of the spec
Tue Jun 4 14:00:00 2013 Johnny Hughes - 4.2.2-19.el6.centos
- tried to work around an empty XEN_VENDORVERSION in the spec file
Mon Jun 3 14:00:00 2013 Johnny Hughes - 4.2.2-18.el6.centos
- added patches 76 to 91 for XSA-55 (No CVE Assigned)
- added patch 92 for XSA-52 (CVE-2013-2076)
- added patch 93 for XSA-53 (CVE-2013-2077)
- added patch 94 for XSA-54 (CVE-2013-2078)
Mon May 27 14:00:00 2013 Johnny Hughes - 4.2.2-16.el6.centos
- add patch 75 to fix xsa46 regression
Tue May 21 14:00:00 2013 Johnny Hughes - 4.2.2-15.el6.centos
- ln sf some files from lib64/xen/bin to lib/xen/bin
Mon May 20 14:00:00 2013 Johnny Hughes - 4.2.2-14.el6.centos
- Rolled in patch 74 for XSA-56 (CVE-2013-2072)
Thu May 2 14:00:00 2013 Johnny Hughes 4.2.2-12.el6.centos
- Rolled in patches 66 through 73 for XSA-45 (CVE-2013-1918) and XSA-49 (CVE-2013-1952)
Tue Apr 30 14:00:00 2013 Johnny Hughes 4.2.2-11.el6.centos
- upgraded to upstream version 4.2.2 for xen
- removed patches 48,57,58,59,61,63,101,102,103,104,108,1002,1004 as
they are already part of xen-4.2.2
- added patches 64 and 65
- upgraded Source100 to upstream qemu-xen-4.2.2
Tue Apr 23 14:00:00 2013 Johnny Hughes 4.2.1-10.1.el6.centos.9
- Roll in security fix for XSA-48,CVE-2013-1922 (Patch105)
- Roll in patch to add auto option for autoballon(Patch106) and
set the autoballon option to auto (Patch107)
- Roll in security fix for XSA-44,CVE-2013-1917 (Patch108)
Fri Apr 5 14:00:00 2013 Johnny Hughes 4.2.1-10.1.el6.centos.8
- added patches 103 and 104. Patch104 is Security fix for XSA-47,CVE-2013-1920
Wed Mar 27 13:00:00 2013 Johnny Hughes 4.2.1-6.1.el6.centos.8
- build with_ocaml
- roll in xen-centos-blktap25-ctl-ipc-restart.patch
Tue Mar 12 13:00:00 2013 Johnny Hughes 4.2.1-6.1.el6.centos.7
- updated patches for XSA-36 (CVE-2013-0153, Patch101) and XSA-38 (CVE-2013-0215, Patch102).
- rolled in Patch1004 in an effort to fix xl.tapdisk orphaning
Tue Feb 5 13:00:00 2013 Johnny Hughes 4.2.1-6.1.el6.centos.6
- Rolled in patch 101 and 102 to fix CVEs 2013-0153, 2013-0215
Fri Jan 25 13:00:00 2013 Johnny Hughes 4.2.1-5.1.el6.centos.6
- added a create for /var/run/xenstored
Thu Jan 24 13:00:00 2013 Johnny Hughes 4.2.1-5.1.el6.centos.5
- Rolled in patches 57, 58, 59, 61, and 62 to incorporate XSA-33, XSA-34, XSA-35, XSA-37, and XSA-41
to fix CVE\'s 2012-5634, 2012-6075, 2013-0151, 2013-0152, CVE-2013-0154
- restore status option to xend which is used by libvirt
Wed Jan 23 13:00:00 2013 Karanbir Singh - Pull in libxl patch to work with blktap25 (from Stefano )
- move blktap25 code into tools/blktap and turn off -Werror (from Stefano )
- Make kernel 3.4.26+ a hard Requires for the xen-hypervisor
Tue Jan 22 13:00:00 2013 Karanbir Singh - 4.2.1-1.1.el6.centos.4
- add xencommons to chkconfig and set it to start
- xend needs pciutils
- import blktap2.5
Thu Jan 17 13:00:00 2013 Karanbir Singh - 4.2.1-1.1.el6.centos.3
- build with seabious and gpxe
- gpxe does not work, fall back to ipxe
- build with included qemu-xen
- drop in upstream qemu-xen-4.2.1
- upgrade to qemu-upstream-4.2.1
Fri Jan 4 13:00:00 2013 Johnny Hughes - 4.2.1-1.1
- set build_efi 0, with_sysv 1, with_systemd 0
- remove the BuildRequires that are specific to .f18 dist
Tue Dec 18 13:00:00 2012 Michael Young - 4.2.1-1
- update to xen-4.2.1
- remove patches that are included in 4.2.1
- rebase xen.fedora.efi.build.patch
Thu Dec 13 13:00:00 2012 Richard W.M. Jones - 4.2.0-7
- Rebuild for OCaml fix (RHBZ#877128).
Mon Dec 3 13:00:00 2012 Michael Young - 4.2.0-6
- 6 security fixes
A guest can cause xen to crash [XSA-26, CVE-2012-5510] (#883082)
An HVM guest can cause xen to run slowly or crash [XSA-27, CVE-2012-5511]
(#883084)
A PV guest can cause xen to crash and might be able escalate privileges
[XSA-29, CVE-2012-5513] (#883088)
An HVM guest can cause xen to hang [XSA-30, CVE-2012-5514] (#883091)
A guest can cause xen to hang [XSA-31, CVE-2012-5515] (#883092)
A PV guest can cause xen to crash and might be able escalate privileges
[XSA-32, CVE-2012-5525] (#883094)
Sat Nov 17 13:00:00 2012 Michael Young - 4.2.0-5
- two build fixes for Fedora 19
- add texlive-ntgclass package to fix build
Tue Nov 13 13:00:00 2012 Michael Young - 4.2.0-4
- 4 security fixes
A guest can block a cpu by setting a bad VCPU deadline [XSA 20,
CVE-2012-4535] (#876198)
HVM guest can exhaust p2m table crashing xen [XSA 22, CVE-2012-4537] (#876203)
PAE HVM guest can crash hypervisor [XSA-23, CVE-2012-4538] (#876205)
32-bit PV guest on 64-bit hypervisor can cause an hypervisor infinite
loop [XSA-24, CVE-2012-4539] (#876207)
- texlive-2012 is now in Fedora 18
Sun Oct 28 13:00:00 2012 Michael Young - 4.2.0-3
- texlive-2012 isn\'t in Fedora 18 yet
Fri Oct 26 14:00:00 2012 Michael Young - 4.2.0-2
- limit the size of guest kernels and ramdisks to avoid running out
of memeory on dom0 during guest boot [XSA-25, CVE-2012-4544] (#870414)
Thu Oct 25 14:00:00 2012 Michael Young - 4.2.0-1
- update to xen-4.2.0
- rebase xen-net-disable-iptables-on-bridge.patch pygrubfix.patch
- remove patches that are now upstream or with alternatives upstream
- use ipxe and seabios from seabios-bin and ipxe-roms-qemu packages
- xen tools now need ./configure to be run (x86_64 needs libdir set)
- don\'t build upstream qemu version
- amend list of files in package - relocate xenpaging
add /etc/xen/xlexample
* oxenstored.conf /usr/include/xenstore-compat/
*
xenstore-stubdom.gz xen-lowmemd xen-ringwatch xl.1.gz xl.cfg.5.gz
xl.conf.5.gz xlcpupool.cfg.5.gz
- use a tmpfiles.d file to create /run/xen on boot
- add BuildRequires for yajl-devel and graphviz
- build an efi boot image where it is supported
- adjust texlive changes so spec file still works on Fedora 17
Thu Oct 18 14:00:00 2012 Michael Young - 4.1.3-6
- add font packages to build requires due to 2012 version of texlive in F19
- use build requires of texlive-latex instead of tetex-latex which it
obsoletes
Wed Oct 17 14:00:00 2012 Michael Young - 4.1.3-5
- rebuild for ocaml update
Thu Sep 6 14:00:00 2012 Michael Young - 4.1.3-4
- disable qemu monitor by default [XSA-19, CVE-2012-4411] (#855141)
Wed Sep 5 14:00:00 2012 Michael Young - 4.1.3-3
- 5 security fixes
a malicious 64-bit PV guest can crash the dom0 [XSA-12, CVE-2012-3494]
(#854585)
a malicious crash might be able to crash the dom0 or escalate privileges
[XSA-13, CVE-2012-3495] (#854589)
a malicious PV guest can crash the dom0 [XSA-14, CVE-2012-3496] (#854590)
a malicious HVM guest can crash the dom0 and might be able to read
hypervisor or guest memory [XSA-16, CVE-2012-3498] (#854593)
an HVM guest could use VT100 escape sequences to escalate privileges to
that of the qemu process [XSA-17, CVE-2012-3515] (#854599)
Fri Aug 10 14:00:00 2012 Michael Young - 4.1.3-1 4.1.3-2
- update to 4.1.3
includes fix for untrusted HVM guest can cause the dom0 to hang or
crash [XSA-11, CVE-2012-3433] (#843582)
- remove patches that are now upstream
- remove some unnecessary compile fixes
- adjust upstream-23936:cdb34816a40a-rework for backported fix for
upstream-23940:187d59e32a58
- replace pygrub.size.limits.patch with upstreamed version
- fix for (#845444) broke xend under systemd
Tue Aug 7 14:00:00 2012 Michael Young - 4.1.2-25
- remove some unnecessary cache flushing that slow things down
- change python options on xend to reduce selinux problems (#845444)
Thu Jul 26 14:00:00 2012 Michael Young - 4.1.2-24
- in rare circumstances an unprivileged user can crash an HVM guest
[XSA-10,CVE-2012-3432] (#843766)
Tue Jul 24 14:00:00 2012 Michael Young - 4.1.2-23
- add a patch to remove a dependency on PyXML and Require python-lxml
instead of PyXML (#842843)
Sun Jul 22 14:00:00 2012 Michael Young - 4.1.2-22
- adjust systemd service files not to report failures when running without
a hypervisor or when xendomains.service doesn\'t find anything to start
Sun Jul 22 14:00:00 2012 Fedora Release Engineering - 4.1.2-21
- Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild
Tue Jun 12 14:00:00 2012 Michael Young - 4.1.2-20
- Apply three security patches
64-bit PV guest privilege escalation vulnerability [CVE-2012-0217]
guest denial of service on syscall/sysenter exception generation
[CVE-2012-0218]
PV guest host Denial of Service [CVE-2012-2934]
Sat Jun 9 14:00:00 2012 Michael Young - 4.1.2-19
- adjust xend.service systemd file to avoid selinux problems
Fri Jun 8 14:00:00 2012 Michael Young - 4.1.2-18
- Enable xenconsoled by default under systemd (#829732)
Thu May 17 14:00:00 2012 Michael Young - 4.1.2-16 4.1.2-17
- make pygrub cope better with big files from guest (#818412 CVE-2012-2625)
- add patch from 4.1.3-rc2-pre to build on F17/8
Sun Apr 15 14:00:00 2012 Michael Young - 4.1.2-15
- Make the udev tap rule more specific as it breaks openvpn (#812421)
- don\'t try setuid in xend if we don\'t need to so selinux is happier
Sat Mar 31 14:00:00 2012 Michael Young - 4.1.2-14
- /var/lib/xenstored mount has wrong selinux permissions in latest Fedora
- load xen-acpi-processor module (kernel 3.4 onwards) if present
Thu Mar 8 13:00:00 2012 Michael Young - 4.1.2-13
- fix a packaging error
Thu Mar 8 13:00:00 2012 Michael Young - 4.1.2-12
- fix an error in an rpm script from the sysv configuration removal
- migrate xendomains script to systemd
Wed Feb 29 13:00:00 2012 Michael Young - 4.1.2-11
- put the systemd files back in the right place
Wed Feb 29 13:00:00 2012 Michael Young - 4.1.2-10
- clean up systemd and sysv configuration including removal of migrated
sysv files for fc17+
Sat Feb 18 13:00:00 2012 Michael Young - 4.1.2-9
- move xen-watchdog to systemd
Wed Feb 8 13:00:00 2012 Michael Young - 4.1.2-8
- relocate systemd files for fc17+
Tue Feb 7 13:00:00 2012 Michael Young - 4.1.2-7
- move xend and xenconsoled to systemd
Thu Feb 2 13:00:00 2012 Michael Young - 4.1.2-6
- Fix buffer overflow in e1000 emulation for HVM guests [CVE-2012-0029]
Sat Jan 28 13:00:00 2012 Michael Young - 4.1.2-5
- Start building xen\'s ocaml libraries if appropriate unless --without ocaml
was specified
- add some backported patches from xen unstable (via Debian) for some
ocaml tidying and fixes
Sun Jan 15 13:00:00 2012 Michael Young - 4.1.2-4
- actually apply the xend-pci-loop.patch
- compile fixes for gcc-4.7
Wed Jan 11 13:00:00 2012 Michael Young - 4.1.2-3
- Add xend-pci-loop.patch to stop xend crashing with weird PCI cards (#767742)
- avoid a backtrace if xend can\'t log to the standard file or a
temporary directory (part of #741042)
Mon Nov 21 13:00:00 2011 Michael Young - 4.1.2-2
- Fix lost interrupts on emulated devices
- stop xend crashing if its state files are empty at start up
- avoid a python backtrace if xend is run on bare metal
- update grub2 configuration after the old hypervisor has gone
- move blktapctrl to systemd
- Drop obsolete dom0-kernel.repo file
Fri Oct 21 14:00:00 2011 Michael Young - 4.1.2-1
- update to 4.1.2
remove upstream patches xen-4.1-testing.23104 and xen-4.1-testing.23112
Fri Oct 14 14:00:00 2011 Michael Young - 4.1.1-8
- more pygrub improvements for grub2 on guest
Thu Oct 13 14:00:00 2011 Michael Young - 4.1.1-7
- make pygrub work better with GPT partitions and grub2 on guest
Thu Sep 29 14:00:00 2011 Michael Young - 4.1.1-5 4.1.1-6
- improve systemd functionality
Wed Sep 28 14:00:00 2011 Michael Young - 4.1.1-4
- lsb header fixes - xenconsoled shutdown needs xenstored to be running
- partial migration to systemd to fix shutdown delays
- update grub2 configuration after hypervisor updates
Sun Aug 14 14:00:00 2011 Michael Young - 4.1.1-3
- untrusted guest controlling PCI[E] device can lock up host CPU [CVE-2011-3131]
Wed Jul 20 14:00:00 2011 Michael Young - 4.1.1-2
- clean up patch to solve a problem with hvmloader compiled with gcc 4.6
Wed Jun 15 14:00:00 2011 Michael Young - 4.1.1-1
- update to 4.1.1
includes various bugfixes and fix for [CVE-2011-1898] guest with pci
passthrough can gain privileged access to base domain
- remove upstream cve-2011-1583-4.1.patch
Mon May 9 14:00:00 2011 Michael Young - 4.1.0-2
- Overflows in kernel decompression can allow root on xen PV guest to gain
privileged access to base domain, or access to xen configuration info.
Lack of error checking could allow DoS attack from guest [CVE-2011-1583]
- Don\'t require /usr/bin/qemu-nbd as it isn\'t used at present.
Fri Mar 25 13:00:00 2011 Michael Young - 4.1.0-1
- update to 4.1.0 final
Tue Mar 22 13:00:00 2011 Michael Young - 4.1.0-0.1.rc8
- update to 4.1.0-rc8 release candidate
- create xen-4.1.0-rc8.tar.xz file from git/hg repositories
- rebase xen-initscript.patch xen-dumpdir.patch
xen-net-disable-iptables-on-bridge.patch localgcc45fix.patch
sysconfig.xenstored init.xenstored
- remove unnecessary or conflicting xen-xenstore-cli.patch localpy27fixes.patch
xen.irq.fixes.patch xen.xsave.disable.patch xen.8259afix.patch
localcleanups.patch libpermfixes.patch
- add patch to allow pygrub to work with single partitions with boot sectors
- create ipxe-git-v1.0.0.tar.gz from http://git.ipxe.org/ipxe.git
to avoid downloading at build time
- no need to move udev rules or init scripts as now created in the right place
- amend list of files shipped - remove fs-backend
add init.d scripts xen-watchdog xencommons
add config files xencommons xl.conf cpupool
add programs kdd tap-ctl xen-hptool xen-hvmcrash xenwatchdogd
Mon Feb 7 13:00:00 2011 Fedora Release Engineering - 4.0.1-10
- Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild
Mon Jan 31 13:00:00 2011 Michael Young - 4.0.1-9
- Make libraries executable so that rpm gets dependencies right
Sat Jan 29 13:00:00 2011 Michael Young - 4.0.1-8
- Temporarily turn off some compile options so it will build on rawhide
Fri Jan 28 13:00:00 2011 Michael Young - 4.0.1-7
- ghost directories in /var/run (#656724)
- minor fixes to /usr/share/doc/xen-doc-4.?.?/misc/network_setup.txt (#653159)
/etc/xen/scripts/network-route, /etc/xen/scripts/vif-common.sh (#669747)
and /etc/sysconfig/modules/xen.modules (#656536)
Tue Oct 12 14:00:00 2010 Michael Young - 4.0.1-6
- add upstream xen patch xen.8259afix.patch to fix boot panic
\"IO-APIC + timer doesn\'t work!\" (#642108)
Thu Oct 7 14:00:00 2010 Michael Young - 4.0.1-5
- add ext4 support for pvgrub (grub-ext4-support.patch from grub-0.97-66.fc14)
Wed Sep 29 14:00:00 2010 jkeating - 4.0.1-4
- Rebuilt for gcc bug 634757
Fri Sep 24 14:00:00 2010 Michael Young - 4.0.1-3
- create symlink for qemu-dm on x86_64 for compatibility with 3.4
- apply some patches destined for 4.0.2
add some irq fixes
disable xsave which causes problems for HVM
Sun Aug 29 14:00:00 2010 Michael Young - 4.0.1-2
- fix compile problems on Fedora 15, I suspect due to gcc 4.5.1
Wed Aug 25 14:00:00 2010 Michael Young - 4.0.1-1
- update to 4.0.1 release - many bug fixes
- xen-dev-create-cleanup.patch no longer needed
- remove part of localgcc45fix.patch no longer needed
- package new files /etc/bash_completion.d/xl.sh
and /usr/sbin/gdbsx
- add patch to get xm and xend working with python 2.7
Mon Aug 2 14:00:00 2010 Michael Young - 4.0.0-5
- add newer module names and xen-gntdev to xen.modules
- Update dom0-kernel.repo file to use repos.fedorapeople.org location
Mon Jul 26 14:00:00 2010 Michael Young
- create a xen-licenses package to satisfy revised the Fedora
Licensing Guidelines
Sun Jul 25 14:00:00 2010 Michael Young - 4.0.0-4
- fix gcc 4.5 compile problems
Thu Jul 22 14:00:00 2010 David Malcolm - 4.0.0-3
- Rebuilt for https://fedoraproject.org/wiki/Features/Python_2.7/MassRebuild
Sun Jun 20 14:00:00 2010 Michael Young - 4.0.0-2
- add patch to remove some old device creation code that doesn\'t
work with the latest pvops kernels
Mon Jun 7 14:00:00 2010 Michael Young - 4.0.0-1
- update to 4.0.0 release
- rebase xen-initscript.patch and xen-dumpdir.patch patches
- adjust spec file for files added to or removed from the packages
- add new build dependencies libuuid-devel and iasl
Tue Jun 1 14:00:00 2010 Michael Young - 3.4.3-1
- update to 3.4.3 release including
support for latest pv_ops kernels (possibly incomplete)
should fix build problems (#565063) and crashes (#545307)
- replace Prereq: with Requires: in spec file
- drop static libraries (#556101)
Thu Dec 10 13:00:00 2009 Gerd Hoffmann - 3.4.2-2
- adapt module load script to evtchn.ko -> xen-evtchn.ko rename.
Thu Dec 10 13:00:00 2009 Gerd Hoffmann - 3.4.2-1
- update to 3.4.2 release.
- drop backport patches.
Thu Oct 8 14:00:00 2009 Justin M. Forbes - 3.4.1-5
- add PyXML to dependencies. (#496135)
- Take ownership of {_libdir}/fs (#521806)
Mon Sep 14 14:00:00 2009 Gerd Hoffmann - 3.4.1-4
- add e2fsprogs-devel to build dependencies.
Wed Sep 2 14:00:00 2009 Gerd Hoffmann - 3.4.1-3
- swap bzip2+xz linux kernel compression support patches.
- backport one more bugfix (videoram option).
Tue Sep 1 14:00:00 2009 Gerd Hoffmann - 3.4.1-2
- backport bzip2+xz linux kernel compression support.
- backport a few bugfixes.
Fri Aug 7 14:00:00 2009 Gerd Hoffmann - 3.4.1-1
- update to 3.4.1 release.
Wed Aug 5 14:00:00 2009 Gerd Hoffmann - 3.4.0-4
- Kill info files. No xen docs, just standard gnu stuff.
- kill -Werror in tools/libxc to fix build.
Mon Jul 27 14:00:00 2009 Fedora Release Engineering - 3.4.0-3
- Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild
Thu May 28 14:00:00 2009 Gerd Hoffmann - 3.4.0-2
- rename info files to fix conflict with binutils.
- add install-info calls for the doc subpackage.
- un-parallelize doc build.
Wed May 27 14:00:00 2009 Gerd Hoffmann - 3.4.0-1
- update to version 3.4.0.
- cleanup specfile, add doc subpackage.
Tue Mar 10 13:00:00 2009 Gerd Hoffmann - 3.3.1-11
- fix python 2.6 warnings.
Fri Mar 6 13:00:00 2009 Gerd Hoffmann - 3.3.1-9
- fix xen.modules init script for pv_ops kernel.
- stick rpm release tag into XEN_VENDORVERSION.
- use i386 i486 i586 i686 pentium3 pentium4 athlon geode macro in ExclusiveArch.
- keep blktapctrl turned off by default.
Mon Mar 2 13:00:00 2009 Gerd Hoffmann - 3.3.1-7
- fix xenstored init script for pv_ops kernel.
Fri Feb 27 13:00:00 2009 Gerd Hoffmann - 3.3.1-6
- fix xenstored crash.
- backport qemu-unplug patch.
Tue Feb 24 13:00:00 2009 Gerd Hoffmann - 3.3.1-5
- fix gcc44 build (broken constrain in inline asm).
- fix ExclusiveArch
Tue Feb 3 13:00:00 2009 Gerd Hoffmann - 3.3.1-3
- backport bzImage support for dom0 builder.
Sun Jan 18 13:00:00 2009 Tomas Mraz - 3.3.1-2
- rebuild with new openssl
Thu Jan 8 13:00:00 2009 Gerd Hoffmann - 3.3.1-1
- update to xen 3.3.1 release.
Wed Dec 17 13:00:00 2008 Gerd Hoffmann - 3.3.0-2
- build and package stub domains (pvgrub, ioemu).
- backport unstable fixes for pv_ops dom0.
Sat Nov 29 13:00:00 2008 Ignacio Vazquez-Abrams - 3.3.0-1.1
- Rebuild for Python 2.6
Fri Aug 29 14:00:00 2008 Daniel P. Berrange - 3.3.0-1.fc10
- Update to xen 3.3.0 release
Wed Jul 23 14:00:00 2008 Mark McLoughlin - 3.2.0-17.fc10
- Enable xen-hypervisor build
- Backport support for booting DomU from bzImage
- Re-diff all patches for zero fuzz
Wed Jul 9 14:00:00 2008 Daniel P. Berrange - 3.2.0-16.fc10
- Remove bogus ia64 hypercall arg (rhbz #433921)
Fri Jun 27 14:00:00 2008 Markus Armbruster - 3.2.0-15.fc10
- Re-enable QEMU image format auto-detection, without the security
loopholes
Wed Jun 25 14:00:00 2008 Daniel P. Berrange - 3.2.0-14.fc10
- Rebuild for GNU TLS ABI change
Fri Jun 13 14:00:00 2008 Markus Armbruster - 3.2.0-13.fc10
- Correctly limit PVFB size (CVE-2008-1952)
Tue Jun 3 14:00:00 2008 Daniel P. Berrange - 3.2.0-12.fc10
- Move /var/run/xend into xen-runtime for pygrub (rhbz #442052)
Wed May 14 14:00:00 2008 Markus Armbruster - 3.2.0-11.fc10
- Disable QEMU image format auto-detection (CVE-2008-2004)
- Fix PVFB to validate frame buffer description (CVE-2008-1943)
Wed Feb 27 13:00:00 2008 Daniel P. Berrange - 3.2.0-10.fc9
- Fix block device checks for extendable disk formats
Wed Feb 27 13:00:00 2008 Daniel P. Berrange - 3.2.0-9.fc9
- Let XenD setup QEMU logfile (rhbz #435164)
- Fix PVFB use of event channel filehandle
Sat Feb 23 13:00:00 2008 Daniel P. Berrange - 3.2.0-8.fc9
- Fix block device extents check (rhbz #433560)
Mon Feb 18 13:00:00 2008 Mark McLoughlin - 3.2.0-7.fc9
- Restore some network-bridge patches lost during 3.2.0 rebase
Wed Feb 6 13:00:00 2008 Daniel P. Berrange - 3.2.0-6.fc9
- Fixed xenstore-ls to automatically use xenstored socket as needed
Sun Feb 3 13:00:00 2008 Daniel P. Berrange - 3.2.0-5.fc9
- Fix timer mode parameter handling for HVM
- Temporarily disable all Latex docs due to texlive problems (rhbz #431327)
Fri Feb 1 13:00:00 2008 Daniel P. Berrange - 3.2.0-4.fc9
- Add a xen-runtime subpackage to allow use of Xen without XenD
- Split init script out to one script per daemon
- Remove unused / broken / obsolete tools
Mon Jan 21 13:00:00 2008 Daniel P. Berrange - 3.2.0-3.fc9
- Remove legacy dependancy on python-virtinst
Mon Jan 21 13:00:00 2008 Daniel P. Berrange - 3.2.0-2.fc9
- Added XSM header files to -devel RPM
Fri Jan 18 13:00:00 2008 Daniel P. Berrange - 3.2.0-1.fc9
- Updated to 3.2.0 final release
Thu Jan 10 13:00:00 2008 Daniel P. Berrange - 3.2.0-0.fc9.rc5.dev16701.1
- Rebase to Xen 3.2 rc5 changeset 16701
Thu Dec 13 13:00:00 2007 Daniel P. Berrange - 3.1.2-3.fc9
- Re-factor to make it easier to test dev trees in RPMs
- Include hypervisor build if doing a dev RPM
Fri Dec 7 13:00:00 2007 Release Engineering - 3.1.2-2.fc9
- Rebuild for deps
Sat Dec 1 13:00:00 2007 Daniel P. Berrange - 3.1.2-1.fc9
- Upgrade to 3.1.2 bugfix release
Sat Nov 3 13:00:00 2007 Daniel P. Berrange - 3.1.0-14.fc9
- Disable network-bridge script since it conflicts with NetworkManager
which is now on by default
Fri Oct 26 14:00:00 2007 Daniel P. Berrange - 3.1.0-13.fc9
- Fixed xenbaked tmpfile flaw (CVE-2007-3919)
Wed Oct 10 14:00:00 2007 Daniel P. Berrange - 3.1.0-12.fc8
- Pull in QEMU BIOS boot menu patch from KVM package
- Fix QEMU patch for locating x509 certificates based on command line args
- Add XenD config options for TLS x509 certificate setup
Wed Sep 26 14:00:00 2007 Daniel P. Berrange - 3.1.0-11.fc8
- Fixed rtl8139 checksum calculation for Vista (rhbz #308201)
Wed Sep 26 14:00:00 2007 Chris Lalancette - 3.1.0-10.fc8
- QEmu NE2000 overflow check - CVE-2007-1321
- Pygrub guest escape - CVE-2007-4993
Mon Sep 24 14:00:00 2007 Daniel P. Berrange - 3.1.0-9.fc8
- Fix generation of manual pages (rhbz #250791)
- Really fix FC-6 32-on-64 guests
Mon Sep 24 14:00:00 2007 Daniel P. Berrange - 3.1.0-8.fc8
- Make 32-bit FC-6 guest PVFB work on x86_64 host
Mon Sep 24 14:00:00 2007 Daniel P. Berrange - 3.1.0-7.fc8
- Re-add support for back-compat FC6 PVFB support
- Fix handling of explicit port numbers (rhbz #279581)
Wed Sep 19 14:00:00 2007 Daniel P. Berrange - 3.1.0-6.fc8
- Don\'t clobber the VIF type attribute in FV guests (rhbz #296061)
Tue Aug 28 14:00:00 2007 Daniel P. Berrange - 3.1.0-5.fc8
- Added dep on openssl for blktap-qcow
Tue Aug 28 14:00:00 2007 Daniel P. Berrange - 3.1.0-4.fc8
- Switch PVFB over to use QEMU
- Backport QEMU VNC security patches for TLS/x509
Wed Aug 1 14:00:00 2007 Markus Armbruster - 3.1.0-3.fc8 | |
