update to 4.1.6.1 This release fixes the following critical vulnerabilities: CVE-2013-1918 / XSA-45: Several long latency operations are not preemptible CVE-2013-1952 / XSA-49: VT-d interrupt remapping source validation flaw for bridges CVE-2013-2076 / XSA-52: Information leak on XSAVE/XRSTOR capable AMD CPUs CVE-2013-2077 / XSA-53: Hypervisor crash due to missing exception recovery on XRSTOR CVE-2013-2078 / XSA-54: Hypervisor crash due to missing exception recovery on XSETBV CVE-2013-2194, CVE-2013-2195, CVE-2013-2196 / XSA-55: Multiple vulnerabilities in libelf PV kernel handling CVE-2013-2072 / XSA-56: Buffer overflow in xencontrol Python bindings affecting xend CVE-2013-2211 / XSA-57: libxl allows guest write access to sensitive console related xenstore keys CVE-2013-1432 / XSA-58: Page reference counting error due to XSA-45/CVE-2013-1918 fixes XSA-61: libxl partially sets up HVM passthrough even with disabled iommu This release contains many bug fixes and improvements. The highlights are: addressing a regression from the fix for XSA-21 addressing a regression from the fix for XSA-46 bug fixes to low level system state handling, including certain hardware errata workarounds (CVE-2013-1918 and CVE-2013-1952 were patched in pkgsrc before)diff -r1.23 -r1.24 pkgsrc/sysutils/xenkernel41/Makefile
(drochner)
@@ -1,20 +1,19 @@ | @@ -1,20 +1,19 @@ | |||
1 | # $NetBSD: Makefile,v 1.23 2013/06/19 14:03:41 gdt Exp $ | 1 | # $NetBSD: Makefile,v 1.24 2013/09/11 18:00:33 drochner Exp $ | |
2 | # | 2 | # | |
3 | 3 | |||
4 | VERSION= 4.1.5 | 4 | VERSION= 4.1.6.1 | |
5 | DISTNAME= xen-${VERSION} | 5 | DISTNAME= xen-${VERSION} | |
6 | PKGNAME= xenkernel41-${VERSION} | 6 | PKGNAME= xenkernel41-${VERSION} | |
7 | PKGREVISION= 1 | |||
8 | CATEGORIES= sysutils | 7 | CATEGORIES= sysutils | |
9 | MASTER_SITES= http://bits.xensource.com/oss-xen/release/${VERSION}/ | 8 | MASTER_SITES= http://bits.xensource.com/oss-xen/release/${VERSION}/ | |
10 | 9 | |||
11 | MAINTAINER= cegger@NetBSD.org | 10 | MAINTAINER= cegger@NetBSD.org | |
12 | HOMEPAGE= http://xen.org/ | 11 | HOMEPAGE= http://xen.org/ | |
13 | COMMENT= Xen 4.1.x Kernel | 12 | COMMENT= Xen 4.1.x Kernel | |
14 | 13 | |||
15 | LICENSE= gnu-gpl-v2 | 14 | LICENSE= gnu-gpl-v2 | |
16 | 15 | |||
17 | ONLY_FOR_PLATFORM= Linux-2.6*-i386 Linux-2.6*-x86_64 | 16 | ONLY_FOR_PLATFORM= Linux-2.6*-i386 Linux-2.6*-x86_64 | |
18 | ONLY_FOR_PLATFORM+= NetBSD-[5-9].*-x86_64 NetBSD-[5-9].*-i386 | 17 | ONLY_FOR_PLATFORM+= NetBSD-[5-9].*-x86_64 NetBSD-[5-9].*-i386 | |
19 | 18 | |||
20 | NO_CONFIGURE= yes | 19 | NO_CONFIGURE= yes |
@@ -1,27 +1,12 @@ | @@ -1,27 +1,12 @@ | |||
1 | $NetBSD: distinfo,v 1.18 2013/07/13 19:43:21 joerg Exp $ | 1 | $NetBSD: distinfo,v 1.19 2013/09/11 18:00:33 drochner Exp $ | |
2 | 2 | |||
3 | SHA1 (xen-4.1.5.tar.gz) = 38f098cdbcf4612a6e059e6ad332e68bbfc8bf4d | 3 | SHA1 (xen-4.1.6.1.tar.gz) = e5f15feb0821578817a65ede16110c6eac01abd0 | |
4 | RMD160 (xen-4.1.5.tar.gz) = 265d6a9faee6cf9314f4ed647604f7b43c327f52 | 4 | RMD160 (xen-4.1.6.1.tar.gz) = bff11421fc44a26f2cc3156713267abcb36d7a19 | |
5 | Size (xen-4.1.5.tar.gz) = 10421420 bytes | 5 | Size (xen-4.1.6.1.tar.gz) = 10428485 bytes | |
6 | SHA1 (patch-CVE-2013-1918_1) = 7403c3cc0b6481edf581591885843ee24154da06 | |||
7 | SHA1 (patch-CVE-2013-1918_10) = 3aa6a519013fa3275ad389533e9ebcf0f29e24b7 | |||
8 | SHA1 (patch-CVE-2013-1918_11) = 57ddcc8afcab390a1ac027a6a063677c89310662 | |||
9 | SHA1 (patch-CVE-2013-1918_12) = 3d768316139ea189219de4dff13fc1190fbe27a2 | |||
10 | SHA1 (patch-CVE-2013-1918_13) = bccb34626942b17ed0097977d5a16adcf7acd746 | |||
11 | SHA1 (patch-CVE-2013-1918_2) = b5a5ddf9549ba4064f587fa6769730158a165bd6 | |||
12 | SHA1 (patch-CVE-2013-1918_3) = bd6b95c3c359638f1cb95bb9b4119836cb421fea | |||
13 | SHA1 (patch-CVE-2013-1918_4) = e6e6648cdf81e543f5c410b1083b97bdd9a08ea6 | |||
14 | SHA1 (patch-CVE-2013-1918_5) = 0bc2755b024d14d53e83b47621f6a550538b5347 | |||
15 | SHA1 (patch-CVE-2013-1918_6) = 027711424053ebae1093ff7d4be2353113612b5c | |||
16 | SHA1 (patch-CVE-2013-1918_7) = 77414ec5283278433a15a96e91ed5842326370b9 | |||
17 | SHA1 (patch-CVE-2013-1918_8) = 1abd13678a24365ab651483fb3e3feeb2c0248ce | |||
18 | SHA1 (patch-CVE-2013-1918_9) = 28a34dda25693501c78043f550009dba53fa9e62 | |||
19 | SHA1 (patch-CVE-2013-1952) = b8976b41cc0520993f3c424030f7c9aa8a9be1f3 | |||
20 | SHA1 (patch-Config.mk) = a43ed1b3304d6383dc093acd128a7f373d0ca266 | 6 | SHA1 (patch-Config.mk) = a43ed1b3304d6383dc093acd128a7f373d0ca266 | |
21 | SHA1 (patch-xen_Makefile) = d1c7e4860221f93d90818f45a77748882486f92b | 7 | SHA1 (patch-xen_Makefile) = d1c7e4860221f93d90818f45a77748882486f92b | |
22 | SHA1 (patch-xen_arch_x86_Rules.mk) = 6b9b4bfa28924f7d3f6c793a389f1a7ac9d228e2 | 8 | SHA1 (patch-xen_arch_x86_Rules.mk) = 6b9b4bfa28924f7d3f6c793a389f1a7ac9d228e2 | |
23 | SHA1 (patch-xen_arch_x86_cpu_mcheck_vmce.c) = 5afd01780a13654f1d21bf1562f6431c8370be0b | 9 | SHA1 (patch-xen_arch_x86_cpu_mcheck_vmce.c) = 5afd01780a13654f1d21bf1562f6431c8370be0b | |
24 | SHA1 (patch-xen_arch_x86_time.c) = 2dedd8ea1d372ecffea70aad448756dd3688cfba | 10 | SHA1 (patch-xen_arch_x86_time.c) = 1611959c08ad79e3f042ac70c8d9d57b60225289 | |
25 | SHA1 (patch-xen_common_libelf_libelf-private.h) = c364d8f247342c62d0d32fe9f4714f83f977719a | |||
26 | SHA1 (patch-xen_drivers_char_console_c) = 0fe186369602ccffaeec6f4bfbee8bb4298d3ff0 | 11 | SHA1 (patch-xen_drivers_char_console_c) = 0fe186369602ccffaeec6f4bfbee8bb4298d3ff0 | |
27 | SHA1 (patch-xen_include_xen_stdarg.h) = e9df974a9b783ed442ab17497198432cb9844b70 | 12 | SHA1 (patch-xen_include_xen_stdarg.h) = e9df974a9b783ed442ab17497198432cb9844b70 |
@@ -1,35 +1,24 @@ | @@ -1,35 +1,24 @@ | |||
1 | $NetBSD: patch-xen_arch_x86_time.c,v 1.1 2013/04/11 19:57:52 joerg Exp $ | 1 | --- xen/arch/x86/time.c.orig 2013-09-10 06:42:18.000000000 +0000 | |
2 | 2 | +++ xen/arch/x86/time.c 2013-09-11 14:30:13.000000000 +0000 | ||
3 | --- xen/arch/x86/time.c.orig 2013-03-25 14:01:22.000000000 +0000 | 3 | @@ -105,7 +105,7 @@ | |
4 | +++ xen/arch/x86/time.c | |||
5 | @@ -105,7 +105,7 @@ static inline u32 mul_frac(u32 multiplic | |||
6 | { | 4 | { | |
7 | u32 product_int, product_frac; | 5 | u32 product_int, product_frac; | |
8 | asm ( | 6 | asm ( | |
9 | - "mul %3" | 7 | - "mul %3" | |
10 | + "mull %3" | 8 | + "mull %3" | |
11 | : "=a" (product_frac), "=d" (product_int) | 9 | : "=a" (product_frac), "=d" (product_int) | |
12 | : "0" (multiplicand), "r" (multiplier) ); | 10 | : "0" (multiplicand), "r" (multiplier) ); | |
13 | return product_int; | 11 | return product_int; | |
14 | @@ -129,10 +129,10 @@ static inline u64 scale_delta(u64 delta, | 12 | @@ -129,10 +129,10 @@ | |
15 | 13 | |||
16 | #ifdef CONFIG_X86_32 | 14 | #ifdef CONFIG_X86_32 | |
17 | asm ( | 15 | asm ( | |
18 | - "mul %5 ; " | 16 | - "mul %5 ; " | |
19 | + "mull %5 ; " | 17 | + "mull %5 ; " | |
20 | "mov %4,%%eax ; " | 18 | "mov %4,%%eax ; " | |
21 | "mov %%edx,%4 ; " | 19 | "mov %%edx,%4 ; " | |
22 | - "mul %5 ; " | 20 | - "mul %5 ; " | |
23 | + "mull %5 ; " | 21 | + "mull %5 ; " | |
24 | "xor %5,%5 ; " | 22 | "xor %5,%5 ; " | |
25 | "add %4,%%eax ; " | 23 | "add %4,%%eax ; " | |
26 | "adc %5,%%edx ; " | 24 | "adc %5,%%edx ; " | |
27 | @@ -140,7 +140,7 @@ static inline u64 scale_delta(u64 delta, | |||
28 | : "a" ((u32)delta), "1" ((u32)(delta >> 32)), "2" (scale->mul_frac) ); | |||
29 | #else | |||
30 | asm ( | |||
31 | - "mul %2 ; shrd $32,%1,%0" | |||
32 | + "mulq %2 ; shrd $32,%1,%0" | |||
33 | : "=a" (product), "=d" (delta) | |||
34 | : "rm" (delta), "0" ((u64)scale->mul_frac) ); | |||
35 | #endif |
@@ -1,21 +1,20 @@ | @@ -1,21 +1,20 @@ | |||
1 | # $NetBSD: Makefile,v 1.35 2013/06/04 07:38:49 wiz Exp $ | 1 | # $NetBSD: Makefile,v 1.36 2013/09/11 18:00:33 drochner Exp $ | |
2 | # | 2 | # | |
3 | # VERSION is set in version.mk as it is shared with other packages | 3 | # VERSION is set in version.mk as it is shared with other packages | |
4 | .include "version.mk" | 4 | .include "version.mk" | |
5 | 5 | |||
6 | DISTNAME= xen-${VERSION} | 6 | DISTNAME= xen-${VERSION} | |
7 | PKGNAME= xentools41-${VERSION} | 7 | PKGNAME= xentools41-${VERSION} | |
8 | PKGREVISION= 1 | |||
9 | CATEGORIES= sysutils | 8 | CATEGORIES= sysutils | |
10 | MASTER_SITES= http://bits.xensource.com/oss-xen/release/${VERSION}/ | 9 | MASTER_SITES= http://bits.xensource.com/oss-xen/release/${VERSION}/ | |
11 | 10 | |||
12 | DISTFILES= ${DISTNAME}.tar.gz | 11 | DISTFILES= ${DISTNAME}.tar.gz | |
13 | DISTFILES+= ipxe-git-v${VERSION_IPXE}.tar.gz | 12 | DISTFILES+= ipxe-git-v${VERSION_IPXE}.tar.gz | |
14 | SITES.ipxe-git-v${VERSION_IPXE}.tar.gz += http://xenbits.xensource.com/xen-extfiles/ | 13 | SITES.ipxe-git-v${VERSION_IPXE}.tar.gz += http://xenbits.xensource.com/xen-extfiles/ | |
15 | 14 | |||
16 | MAINTAINER= cegger@NetBSD.org | 15 | MAINTAINER= cegger@NetBSD.org | |
17 | HOMEPAGE= http://xen.org/ | 16 | HOMEPAGE= http://xen.org/ | |
18 | COMMENT= Userland Tools for Xen 4.1.x | 17 | COMMENT= Userland Tools for Xen 4.1.x | |
19 | 18 | |||
20 | LICENSE= gnu-gpl-v2 | 19 | LICENSE= gnu-gpl-v2 | |
21 | 20 |
@@ -1,26 +1,25 @@ | @@ -1,26 +1,25 @@ | |||
1 | $NetBSD: distinfo,v 1.32 2013/07/16 22:28:26 joerg Exp $ | 1 | $NetBSD: distinfo,v 1.33 2013/09/11 18:00:33 drochner Exp $ | |
2 | 2 | |||
3 | SHA1 (ipxe-git-v1.0.0.tar.gz) = da052c8de5f3485fe0253c19cf52ed6d72528485 | 3 | SHA1 (ipxe-git-v1.0.0.tar.gz) = da052c8de5f3485fe0253c19cf52ed6d72528485 | |
4 | RMD160 (ipxe-git-v1.0.0.tar.gz) = dcd9b6eaafa1ce05c1ebf2a15f2f73ad7a8c5547 | 4 | RMD160 (ipxe-git-v1.0.0.tar.gz) = dcd9b6eaafa1ce05c1ebf2a15f2f73ad7a8c5547 | |
5 | Size (ipxe-git-v1.0.0.tar.gz) = 1996881 bytes | 5 | Size (ipxe-git-v1.0.0.tar.gz) = 1996881 bytes | |
6 | SHA1 (xen-4.1.5.tar.gz) = 38f098cdbcf4612a6e059e6ad332e68bbfc8bf4d | 6 | SHA1 (xen-4.1.6.1.tar.gz) = e5f15feb0821578817a65ede16110c6eac01abd0 | |
7 | RMD160 (xen-4.1.5.tar.gz) = 265d6a9faee6cf9314f4ed647604f7b43c327f52 | 7 | RMD160 (xen-4.1.6.1.tar.gz) = bff11421fc44a26f2cc3156713267abcb36d7a19 | |
8 | Size (xen-4.1.5.tar.gz) = 10421420 bytes | 8 | Size (xen-4.1.6.1.tar.gz) = 10428485 bytes | |
9 | SHA1 (patch-.._.._ipxe_src_arch_i386_include_librm.h) = 4549ac641b112321b4731a918d85219c3fce6808 | 9 | SHA1 (patch-.._.._ipxe_src_arch_i386_include_librm.h) = 4549ac641b112321b4731a918d85219c3fce6808 | |
10 | SHA1 (patch-.._.._ipxe_src_core_settings.c) = 240ff973757403b983f12b2cbed826584c4a8aba | 10 | SHA1 (patch-.._.._ipxe_src_core_settings.c) = 240ff973757403b983f12b2cbed826584c4a8aba | |
11 | SHA1 (patch-.._.._ipxe_src_net_tls.c) = c0cfbc2ab2b92c659c146601c4f80d58c951ca62 | 11 | SHA1 (patch-.._.._ipxe_src_net_tls.c) = c0cfbc2ab2b92c659c146601c4f80d58c951ca62 | |
12 | SHA1 (patch-.._Config.mk) = 9b971a41f67bb3974d3a4459bb9d96fbbd636c96 | 12 | SHA1 (patch-.._Config.mk) = 9b971a41f67bb3974d3a4459bb9d96fbbd636c96 | |
13 | SHA1 (patch-.._xen_patch-common_libelf_libelf-private.h) = b115b0118f932b15c653c131c0c9c9885e2480ff | |||
14 | SHA1 (patch-aa) = 9b53ba4a809dad7a1de34c8fa0dbe493d7256ada | 13 | SHA1 (patch-aa) = 9b53ba4a809dad7a1de34c8fa0dbe493d7256ada | |
15 | SHA1 (patch-ab) = 0906a5ec3a7450fc987b01289e2560e60966d00d | 14 | SHA1 (patch-ab) = 0906a5ec3a7450fc987b01289e2560e60966d00d | |
16 | SHA1 (patch-ac) = c3cc5335a1d6b066307c5f03fe72f513a9eb2bdb | 15 | SHA1 (patch-ac) = c3cc5335a1d6b066307c5f03fe72f513a9eb2bdb | |
17 | SHA1 (patch-ad) = 5eb15470bff85d30b6d26d8fe094f59fc8e34175 | 16 | SHA1 (patch-ad) = 5eb15470bff85d30b6d26d8fe094f59fc8e34175 | |
18 | SHA1 (patch-ae) = 400bd6cac23af1e75f45c3e4e88e3130a3517129 | 17 | SHA1 (patch-ae) = 400bd6cac23af1e75f45c3e4e88e3130a3517129 | |
19 | SHA1 (patch-af) = e866e7d96766b735a53432350275810803eeb510 | 18 | SHA1 (patch-af) = e866e7d96766b735a53432350275810803eeb510 | |
20 | SHA1 (patch-ag) = 90893326dcce4e3e2ef273f22ec5ddf5af0f7cd8 | 19 | SHA1 (patch-ag) = 90893326dcce4e3e2ef273f22ec5ddf5af0f7cd8 | |
21 | SHA1 (patch-ah) = ab91c41ef6bbdd7f7f3d992b9f81e43056a765e2 | 20 | SHA1 (patch-ah) = ab91c41ef6bbdd7f7f3d992b9f81e43056a765e2 | |
22 | SHA1 (patch-ai) = 8da6bba38bd7677ea829ca35058f7d2d1d7acad4 | 21 | SHA1 (patch-ai) = 8da6bba38bd7677ea829ca35058f7d2d1d7acad4 | |
23 | SHA1 (patch-aj) = d0999d8dcbc1eef4de7037db0e54dcd8d2f706eb | 22 | SHA1 (patch-aj) = d0999d8dcbc1eef4de7037db0e54dcd8d2f706eb | |
24 | SHA1 (patch-ak) = 722a6b0541b036d84c703037134e25bc47f3eb65 | 23 | SHA1 (patch-ak) = 722a6b0541b036d84c703037134e25bc47f3eb65 | |
25 | SHA1 (patch-al) = d9a310c16db708dd86170a13946f87e4cd21eb7a | 24 | SHA1 (patch-al) = d9a310c16db708dd86170a13946f87e4cd21eb7a | |
26 | SHA1 (patch-ba) = 2c65e4b4b85e91e92dfb3aa402ebc44694bdff06 | 25 | SHA1 (patch-ba) = 2c65e4b4b85e91e92dfb3aa402ebc44694bdff06 |
@@ -1,6 +1,6 @@ | @@ -1,6 +1,6 @@ | |||
1 | # $NetBSD: version.mk,v 1.6 2013/05/03 16:48:38 drochner Exp $ | 1 | # $NetBSD: version.mk,v 1.7 2013/09/11 18:00:33 drochner Exp $ | |
2 | 2 | |||
3 | # Version number is used by xentools41 and xenstoretools | 3 | # Version number is used by xentools41 and xenstoretools | |
4 | 4 | |||
5 | VERSION= 4.1.5 | 5 | VERSION= 4.1.6.1 | |
6 | VERSION_IPXE= 1.0.0 | 6 | VERSION_IPXE= 1.0.0 |