| Index | index by Group | index by Distribution | index by Vendor | index by creation date | index by Name | Mirrors | Help | Search |
| Name: xen-runtime | Distribution: Fedora Project |
| Version: 4.17.5 | Vendor: Fedora Project |
| Release: 1.fc39 | Build date: Sat Sep 14 14:32:33 2024 |
| Group: Unspecified | Build host: buildhw-a64-03.iad2.fedoraproject.org |
| Size: 8244940 | Source RPM: xen-4.17.5-1.fc39.src.rpm |
| Packager: Fedora Project | |
| Url: http://xen.org/ | |
| Summary: Core Xen runtime environment | |
This package contains the runtime programs and daemons which form the core Xen userspace environment.
GPLv2+ and LGPLv2+ and BSD
* Sat Sep 14 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.5-1
- update to xen-4.17.5
remove or adjust patches now included or superceded upstream
now need to enable systemd explicitly
* Thu Aug 15 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.4-3
- error handling in x86 IOMMU identity mapping [XSA-460, CVE-2024-31145]
- PCI device pass-through with shared resources [XSA-461, CVE-2024-31146]
* Tue Jul 16 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.4-2
- x86: Native Branch History Injection [XSA-456 version 3, CVE-2024-2201]
- double unlock in x86 guest IRQ handling [XSA-458, CVE-2024-31143]
(#2298690)
* Tue Apr 09 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.4-1
- x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
- update to xen 4.17.4, remove patches now included upstream
rebase xen.gcc12.fixes.patch
- x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
- x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]
* Thu Mar 14 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-8
- x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
- GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
- additional patches so above applies cleanly
* Tue Feb 27 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-7
- x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
CVE-2023-46841] (#2266326)
* Tue Jan 30 2024 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-6
- arm32: The cache may not be properly cleaned/invalidated (take two)
[XSA-447, CVE-2023-46837]
- pci: phantom functions assigned to incorrect contexts [XSA-449,
CVE-2023-46839]
- VT-d: Failure to quarantine devices in !HVM build [XSA-450,
CVE-2023-46840]
* Tue Nov 14 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-5
- x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
CVE-2023-46835]
- x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]
* Tue Oct 10 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-4
- xenstored: A transaction conflict can crash C Xenstored [XSA-440,
CVE-2023-34323]
- x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
- Multiple vulnerabilities in libfsimage disk handling [XSA-443,
CVE-2023-34325]
- x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
CVE-2023-34328]
* Sun Oct 08 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-3
- rebuild (f40) for OCaml 5.1
* Tue Sep 26 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-2
- arm32: The cache may not be properly cleaned/invalidated [XSA-437,
CVE-2023-34321]
- top-level shadow reference dropped too early for 64-bit PV guests
[XSA-438, CVE-2023-34322]
- x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]
* Thu Aug 10 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.2-1
- update to xen-4.17.2 which includes
x86/AMD: Speculative Return Stack Overflow [XSA-434, CVE-2023-20569]
x86/Intel: Gather Data Sampling [XSA-435, CVE-2022-40982]
- remove patches now included upstream
* Tue Aug 01 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-9
- arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320]
(#2228238)
* Mon Jul 31 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-8
- bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]
* Tue Jul 25 2023 Michael Young <m.a.young@durham.ac.uk>
- adjust OCaml patch condition so eln builds work
* Mon Jul 24 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-7
- x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]
- omit OCaml 5 patch on fc38
* Sat Jul 22 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.17.1-6
- Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild
* Mon Jul 10 2023 Jerry James <loganjerry@gmail.com> - 4.17.1-5
- Add patch for OCaml 5.0.0
* Tue Jun 27 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-4
- work around a build problem with python 3.12
* Tue Jun 13 2023 Python Maint <python-maint@redhat.com> - 4.17.1-3
- Rebuilt for Python 3.12
* Tue May 16 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-2
- Mishandling of guest SSBD selection on AMD hardware
[XSA-431, CVE-2022-42336]
* Tue May 02 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.1-1
- update to xen-4.17.1
remove patches now included upstream
switch from patchN to patch N format for applying patches
* Tue Apr 25 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-9
- x86 shadow paging arbitrary pointer dereference [XSA-430, CVE-2022-42335]
* Tue Mar 21 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-8
- 3 security issues (#2180425)
x86 shadow plus log-dirty mode use-after-free [XSA-427, CVE-2022-42332]
x86/HVM pinned cache attributes mis-handling [XSA-428, CVE-2022-42333,
CVE-2022-42334]
x86: speculative vulnerability in 32bit SYSCALL path [XSA-429,
CVE-2022-42331]
* Sat Feb 18 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-7
- use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file
built from edk2-ovmf package no longer supports xen (#2170930)
* Tue Feb 14 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-6
- x86: Cross-Thread Return Address Predictions [XSA-426, CVE-2022-27672]
* Wed Jan 25 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-5
- Guests can cause Xenstore crash via soft reset [XSA-425, CVE-2022-42330]
(#2164520)
* Tue Jan 24 2023 Michael Young <m.a.young@durham.ac.uk>
- now need BuildRequires for hostname
* Sat Jan 21 2023 Fedora Release Engineering <releng@fedoraproject.org> - 4.17.0-4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_38_Mass_Rebuild
* Tue Jan 17 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-3
- build fix for gcc13
* Sun Jan 08 2023 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-2
- fix clean up of init scripts if /etc/rc.d/init.d doesn't exist
* Tue Dec 20 2022 Michael Young <m.a.young@durham.ac.uk>
- python3-setuptools BuildRequires is needed for python 3.12
* Tue Dec 13 2022 Michael Young <m.a.young@durham.ac.uk> - 4.17.0-1
- update to xen-4.17.0
rebase xen.fedora.systemd.patch and xen.canonicalize.patch
remove or adjust patches now included or superceded upstream
/var/lib/xenstored has moved to /run/xenstored
* Tue Nov 08 2022 Michael Young <m.a.young@durham.ac.uk> - 4.16.2-4
- x86: Multiple speculative security issues [XSA-422, CVE-2022-23824]
* Tue Nov 01 2022 Michael Young <m.a.young@durham.ac.uk> - 4.16.2-3
- x86: unintended memory sharing between guests [XSA-412, CVE-2022-42327]
- Xenstore: Guests can crash xenstored [XSA-414, CVE-2022-42309]
- Xenstore: Guests can create orphaned Xenstore nodes [XSA-415,
CVE-2022-42310]
- Xenstore: guests can let run xenstored out of memory [XSA-326,
CVE-2022-42311, CVE-2022-42312, CVE-2022-42313, CVE-2022-42314,
CVE-2022-42315, CVE-2022-42316, CVE-2022-42317, CVE-2022-42318]
- Xenstore: Guests can cause Xenstore to not free temporary memory
[XSA-416, CVE-2022-42319]
- Xenstore: Guests can get access to Xenstore nodes of deleted domains
[XSA-417, CVE-2022-42320]
- Xenstore: Guests can crash xenstored via exhausting the stack
[XSA-418, CVE-2022-42321]
- Xenstore: Cooperating guests can create arbitrary numbers of nodes
[XSA-419, CVE-2022-42322, CVE-2022-42323]
- Oxenstored 32->31 bit integer truncation issues [XSA-420, CVE-2022-42324]
- Xenstore: Guests can create arbitrary number of nodes via transactions
[XSA-421, CVE-2022-42325, CVE-2022-42326]
* Fri Oct 14 2022 Michael Young <m.a.young@durham.ac.uk> - 4.16.2-2
- Arm: unbounded memory consumption for 2nd-level page tables [XSA-409,
CVE-2022-33747] (#2135268)
- P2M pool freeing may take excessively long [XSA-410, CVE-2022-33746]
(#2135641)
- lock order inversion in transitive grant copy handling [XSA-411,
CVE-2022-33748] (#2135263)
* Sat Sep 17 2022 Michael Young <m.a.young@durham.ac.uk> - 4.16.2-1
- update to xen-4.16.2
remove or adjust patches now included or superceded upstream
/etc/bash_completion.d/xl /etc/logrotate.d/xen /etc/sysconfig/xencommons /etc/xen /etc/xen/cpupool /etc/xen/scripts /etc/xen/scripts/block /etc/xen/scripts/block-common.sh /etc/xen/scripts/block-drbd-probe /etc/xen/scripts/block-dummy /etc/xen/scripts/block-enbd /etc/xen/scripts/block-iscsi /etc/xen/scripts/block-nbd /etc/xen/scripts/block-tap /etc/xen/scripts/colo-proxy-setup /etc/xen/scripts/external-device-migrate /etc/xen/scripts/hotplugpath.sh /etc/xen/scripts/launch-xenstore /etc/xen/scripts/locking.sh /etc/xen/scripts/logging.sh /etc/xen/scripts/remus-netbuf-setup /etc/xen/scripts/vif-bridge /etc/xen/scripts/vif-common.sh /etc/xen/scripts/vif-nat /etc/xen/scripts/vif-openvswitch /etc/xen/scripts/vif-route /etc/xen/scripts/vif-setup /etc/xen/scripts/vscsi /etc/xen/scripts/xen-hotplug-common.sh /etc/xen/scripts/xen-network-common.sh /etc/xen/scripts/xen-script-common.sh /etc/xen/xl.conf /etc/xen/xlexample.hvm /etc/xen/xlexample.pvhlinux /etc/xen/xlexample.pvlinux /usr/bin/pygrub /usr/bin/qemu-img-xen /usr/bin/qemu-nbd-xen /usr/bin/vchan-socket-proxy /usr/bin/xenalyze /usr/bin/xencov_split /usr/bin/xenstore /usr/bin/xenstore-chmod /usr/bin/xenstore-control /usr/bin/xenstore-exists /usr/bin/xenstore-list /usr/bin/xenstore-ls /usr/bin/xenstore-read /usr/bin/xenstore-rm /usr/bin/xenstore-watch /usr/bin/xenstore-write /usr/bin/xentrace_format /usr/lib/.build-id /usr/lib/.build-id/17 /usr/lib/.build-id/17/1d6a84a4e852989e5a66e796774c32bf1d51da /usr/lib/.build-id/19 /usr/lib/.build-id/19/aea4e58ce2952c2f1228dd0a31179a6169415a /usr/lib/.build-id/1a /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.1 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.2 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.3 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.4 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.5 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.6 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.7 /usr/lib/.build-id/1a/52f330f396ca70728646d77c7bfacfd43e9bf0.8 /usr/lib/.build-id/22 /usr/lib/.build-id/22/7ed3a194227855475cf2fff868a716106f96b7 /usr/lib/.build-id/26 /usr/lib/.build-id/26/8f3f814511aafd0062505c2b7bc123f5e71467 /usr/lib/.build-id/28 /usr/lib/.build-id/28/8b93638f43f1f8b0262af6919332e2adf54237 /usr/lib/.build-id/2b /usr/lib/.build-id/2b/f39f20dcf48e36f41b3026a43bd9594feab204 /usr/lib/.build-id/2f /usr/lib/.build-id/2f/c0eb0d5ad29bbeaa48769567906495ba58955b /usr/lib/.build-id/30 /usr/lib/.build-id/30/8e17ed0270c6889d822d60ac8354781387b6ad /usr/lib/.build-id/36 /usr/lib/.build-id/36/007b27ec43f5f85bd866afdc38d288ecf98db4 /usr/lib/.build-id/36/e2ea46ee4572840e5e89e717b4dbc49aee894a /usr/lib/.build-id/3d /usr/lib/.build-id/3d/f096f30950cbc32f952e374875b753d6d7654d /usr/lib/.build-id/40 /usr/lib/.build-id/40/1b6f8bc3faf61ecaf900100fc1edf9db7a61dd /usr/lib/.build-id/51 /usr/lib/.build-id/51/543a97129551be268e583cd6f5b9b7ed8d13cb /usr/lib/.build-id/6f /usr/lib/.build-id/6f/1d73f0a0c94759c0c315eda5ecfa9fd113ebbc /usr/lib/.build-id/70 /usr/lib/.build-id/70/7d718b61c9a92db93f6d199bac7fdd4245cc1d /usr/lib/.build-id/72 /usr/lib/.build-id/72/75563492febb2a2653391a204c82c4d8f0d95b /usr/lib/.build-id/76/dce074738bbdeee92c9e4e11972fac3373476b /usr/lib/.build-id/78 /usr/lib/.build-id/78/5b5cf58b9d6a6a9930be12362db206e5c9f858 /usr/lib/.build-id/78/e3d52ceebbededc105e112aabc71280dc6a80d /usr/lib/.build-id/86 /usr/lib/.build-id/86/83630fc9dd7a6d273e562660ebc53c534b236f /usr/lib/.build-id/88 /usr/lib/.build-id/88/5eecd4955cc66144091aafb0c30c2b4cafe4f8 /usr/lib/.build-id/88/776b91e2eb9e8c4f4b0eddd682972e8354b18a /usr/lib/.build-id/8f /usr/lib/.build-id/8f/5cc55967b16d45aa882a01ddbdc0c91fa3ee1e /usr/lib/.build-id/8f/8e4e7b3aabf5baceb4ef6d5256a1a7a8994815 /usr/lib/.build-id/98 /usr/lib/.build-id/98/257702ef1ecc7026135d413589013178f1f0fb /usr/lib/.build-id/9b /usr/lib/.build-id/9b/030c8fdbceed02f499de8b3fb895a265577431 /usr/lib/.build-id/9b/b74f5b25ff5432daa94f249d5c5e8b13d06821 /usr/lib/.build-id/9e /usr/lib/.build-id/9e/3edf934d0880fd21ea1ad187fa168d269e1668 /usr/lib/.build-id/cf /usr/lib/.build-id/cf/cf77b0d7b92956fc0416f89b8334405b6581b7 /usr/lib/.build-id/d7 /usr/lib/.build-id/d7/fe71079bfad9dcc68c6073ef44e4c24d6f3cd3 /usr/lib/.build-id/dc /usr/lib/.build-id/dc/616f465a94f82089f08434b38adb332a78a083 /usr/lib/.build-id/ed /usr/lib/.build-id/ed/f115b7df259c4fda14115cb6724fa5484af9fb /usr/lib/.build-id/ef /usr/lib/.build-id/ef/c3194a53ca494bab2d6eb1667ef15f5fbfc6f7 /usr/lib/.build-id/f3 /usr/lib/.build-id/f3/c3a5a9301a6b008dade568f0563ffac008ef40 /usr/lib/.build-id/fa /usr/lib/.build-id/fa/14342d890883b88ae7b999257dfb687e97883c /usr/lib/.build-id/fc /usr/lib/.build-id/fc/3ab432574ba6ca74d0d16f8341751b1d2ab707 /usr/lib/.build-id/fe /usr/lib/.build-id/fe/2bb1c178d561840d0b1fe3a86220163fbfe274 /usr/lib/modules-load.d/xen.conf /usr/lib/systemd/system/proc-xen.mount /usr/lib/systemd/system/xen-qemu-dom0-disk-backend.service /usr/lib/systemd/system/xen-watchdog.service /usr/lib/systemd/system/xenconsoled.service /usr/lib/systemd/system/xendriverdomain.service /usr/lib/systemd/system/xenstored.service /usr/lib/xen /usr/lib64/python3.12/site-packages/grub /usr/lib64/python3.12/site-packages/grub/ExtLinuxConf.py /usr/lib64/python3.12/site-packages/grub/GrubConf.py /usr/lib64/python3.12/site-packages/grub/LiloConf.py /usr/lib64/python3.12/site-packages/grub/__init__.py /usr/lib64/python3.12/site-packages/grub/__pycache__ /usr/lib64/python3.12/site-packages/grub/__pycache__/ExtLinuxConf.cpython-312.opt-1.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/ExtLinuxConf.cpython-312.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/GrubConf.cpython-312.opt-1.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/GrubConf.cpython-312.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/LiloConf.cpython-312.opt-1.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/LiloConf.cpython-312.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/__init__.cpython-312.opt-1.pyc /usr/lib64/python3.12/site-packages/grub/__pycache__/__init__.cpython-312.pyc /usr/lib64/python3.12/site-packages/pygrub-0.7-py3.12.egg-info /usr/lib64/python3.12/site-packages/pygrub-0.7-py3.12.egg-info/PKG-INFO /usr/lib64/python3.12/site-packages/pygrub-0.7-py3.12.egg-info/SOURCES.txt /usr/lib64/python3.12/site-packages/pygrub-0.7-py3.12.egg-info/dependency_links.txt /usr/lib64/python3.12/site-packages/pygrub-0.7-py3.12.egg-info/top_level.txt /usr/lib64/python3.12/site-packages/xenfsimage.cpython-312-aarch64-linux-gnu.so /usr/lib64/xen /usr/libexec/xen /usr/libexec/xen/bin /usr/libexec/xen/bin/convert-legacy-stream /usr/libexec/xen/bin/depriv-fd-checker /usr/libexec/xen/bin/init-dom0less /usr/libexec/xen/bin/libxl-save-helper /usr/libexec/xen/bin/pygrub /usr/libexec/xen/bin/qemu-system-i386 /usr/libexec/xen/bin/test-paging-mempool /usr/libexec/xen/bin/test-resource /usr/libexec/xen/bin/test-xenstore /usr/libexec/xen/bin/verify-stream-v2 /usr/libexec/xen/bin/xen-init-dom0 /usr/libexec/xen/bin/xenconsole /usr/libexec/xen/bin/xenctx /usr/libexec/xen/bin/xendomains /usr/libexec/xen/bin/xenpvnetboot /usr/sbin/flask-get-bool /usr/sbin/flask-getenforce /usr/sbin/flask-label-pci /usr/sbin/flask-loadpolicy /usr/sbin/flask-set-bool /usr/sbin/flask-setenforce /usr/sbin/xen-access /usr/sbin/xen-diag /usr/sbin/xen-livepatch /usr/sbin/xenbaked /usr/sbin/xenconsoled /usr/sbin/xencov /usr/sbin/xenhypfs /usr/sbin/xenlockprof /usr/sbin/xenmon /usr/sbin/xenperf /usr/sbin/xenpm /usr/sbin/xenpmd /usr/sbin/xenstored /usr/sbin/xentop /usr/sbin/xentrace /usr/sbin/xentrace_setmask /usr/sbin/xentrace_setsize /usr/sbin/xenwatchdogd /usr/sbin/xl /usr/share/man/man1/xenhypfs.1.gz /usr/share/man/man1/xenstore-chmod.1.gz /usr/share/man/man1/xenstore-ls.1.gz /usr/share/man/man1/xenstore-read.1.gz /usr/share/man/man1/xenstore-write.1.gz /usr/share/man/man1/xenstore.1.gz /usr/share/man/man1/xentop.1.gz /usr/share/man/man1/xentrace_format.1.gz /usr/share/man/man1/xl.1.gz /usr/share/man/man5/xl-disk-configuration.5.gz /usr/share/man/man5/xl-network-configuration.5.gz /usr/share/man/man5/xl-pci-configuration.5.gz /usr/share/man/man5/xl.cfg.5.gz /usr/share/man/man5/xl.conf.5.gz /usr/share/man/man5/xlcpupool.cfg.5.gz /usr/share/man/man7/xen-pci-device-reservations.7.gz /usr/share/man/man7/xen-pv-channel.7.gz /usr/share/man/man7/xen-tscmode.7.gz /usr/share/man/man7/xen-vbd-interface.7.gz /usr/share/man/man7/xen-vtpm.7.gz /usr/share/man/man7/xen-vtpmmgr.7.gz /usr/share/man/man7/xl-numa-placement.7.gz /usr/share/man/man8/xentrace.8.gz /var/lib/xen /var/lib/xen/dump /var/lib/xen/images /var/log/xen /var/log/xen/console /var/run/xenstored
Generated by rpm2html 1.8.1
Fabrice Bellet, Wed Sep 25 02:09:41 2024