GitLab

omni authored Dec 16, 2021 and Ariadne Conill committed Jan 23, 2022

- Xen looks for /usr/share/qemu-xen/qemu but xen-qemu installed to
  /usr/share/qemu, and would also collide the community/qemu aport
- use amove
- keep the default libexecdir
- install desktop entry as /usr/share/applications/qemu-xen.desktop
- build pv-grub stubdoms and qemu-traditional based device model,
  disabled by default since 4.16

Henrik Riomar authored Nov 22, 2020 and Natanael Copa committed Dec 15, 2021

The qemu files are optional and takes lots of space

seabios only needed in runtime by xen-qemu, but its also
a build dependency.

main: move remaining dependents of curl *and* openssl back to openssl 1.1 due to curl being moved back

This is	CVE-2021-28690

This is CVE-2021-0089

This is CVE-2021-28692

This is	CVE-2021-28693

configure.ac:199: warning: The macro `AC_HELP_STRING' is obsolete.
configure.ac:199: You should run autoupdate.
./lib/autoconf/general.m4:204: AC_HELP_STRING is expanded from...
configure.ac:199: the top level
configure.ac: error: required file 'install-sh' not found
configure.ac:   try running autoreconf --install

The -s flag used to force xenstore-* commands to only use a local socket is not
supported in XEN 4.15, use the pid file instead.

Corresponds to this commit in xen.git
 c74dd50bc0 tools: use pidfile for test if xenstored is running

From the release notices:
 The very old qemu-xen-traditional device model is deprecated, and no longer
 security supported, when used as a host process.

Drop musl-hvmloader-fix-stdint.patch as upstream contains multiple
fixes for building on Alpine. Dito with the stdint_local.h and
elf_local.h files (used by the dropped patch).

hotplug-vif-vtrill.patch rebased

gcc10-etherboot-enum.patch included in new upstream version of ipxe

update the checksums of init.d scripts that was modified in commit
63cfa653 (main/xen: use pidfiles on /run instead of /var/run).

Daniel Néri authored Feb 27, 2021 and Leo committed Feb 27, 2021

On ARM, the cache may not be cleaned for newly allocated scrubbed
pages.

Henrik Riomar authored Jan 20, 2021 and Leo committed Jan 20, 2021

CVEs now assigned.

Henrik Riomar authored Jan 08, 2021 and Leo committed Jan 16, 2021

Closes #12283

Daniel Néri authored Jan 22, 2021 and Leo committed Jan 23, 2021

Fixes IRQ vector leak on x86 systems running HVM guests with PCI pass
through devices.

Henrik Riomar authored Dec 18, 2020 and Natanael Copa committed Dec 22, 2020

 * CVE-2020-29480 XSA-115
 * CVE-2020-29481 XSA-322
 * CVE-2020-29482 XSA-323
 * CVE-2020-29484 XSA-324
 * CVE-2020-29483 XSA-325
 * CVE-2020-29485 XSA-330
 * CVE-2020-29566 XSA-348
 * CVE-2020-29486 XSA-352
 * CVE-2020-29479 XSA-353
 * CVE-2020-29567 XSA-356
 * CVE-2020-29570 XSA-358
 * CVE-2020-29571 XSA-359

musl-hvmloader-fix-stdint.patch Rebased

Drop patch included in 4.14.1:
	gcc10-arm64-force-inline-atomics.patch

Fix stack corruption introduced by fix for XSA-346.