82 Commits

Author SHA1 Message Date
William Pitcock
39a5c0f4d0 main/xen: xen is no longer supported on x86-32, just x86-64 2013-09-08 14:20:22 +00:00
William Pitcock
b2cf433800 main/xen: qemu-coroutine-gthread.patch rebase 2013-09-08 14:04:20 +00:00
William Pitcock
63f0f5c06d main/xen: decruft old and unused patches 2013-09-08 14:03:02 +00:00
William Pitcock
ee374de8ff main/xen: use gthread coroutine backend on qemu-xen 2013-09-08 14:01:53 +00:00
William Pitcock
451040ef53 main/xen: docs build fix 2013-09-08 13:49:11 +00:00
William Pitcock
3c63a76305 main/xen: catch errors from individual build steps 2013-09-08 13:44:16 +00:00
William Pitcock
12e4869ec5 main/xen: fix up qemu-xen-websocket patch 2013-09-08 13:34:53 +00:00
William Pitcock
0648675594 main/xen: refactor build tasks and make them work independently as abuild steps 2013-09-08 13:34:53 +00:00
William Pitcock
a17a579a91 main/xen: initial rebase of patches, fixups needed 2013-09-08 13:34:53 +00:00
Natanael Copa
784f202ad7 main/xen: create /var/run/xen
ref #2031
2013-09-02 12:11:21 +00:00
Timo Teräs
5c90471732 [all autotools packages]: normalize ./configure 2013-07-30 08:54:53 +00:00
William Pitcock
d3212d901a main/xen: pkgrel bump 2013-07-02 09:49:10 -05:00
William Pitcock
4903dfe1e4 main/xen: enable qemu-xen to stream isos with curl 2013-07-02 00:37:26 -05:00
William Pitcock
383c136fdb main/xen: enable TLS over websockets (and require it) if X509 is enabled 2013-07-01 21:10:27 -05:00
William Pitcock
a1ecc814cd main/xen: fix plaintext websockets support 2013-07-01 20:13:48 -05:00
William Pitcock
e095f1bd0b main/xen: splice in websockets support on qemu-xen device-model 2013-07-01 14:38:20 -05:00
Natanael Copa
448e4822bb main/xen: fix xsa45 and xsa58 (CVE-2013-1918,CVE-2013-1432)
ref #2123
2013-07-01 14:38:45 +00:00
Natanael Copa
932f289cf1 main/xen: fix xsa57 (CVE-2013-2211)
ref #2117
fixes #2122
2013-06-26 09:48:01 +00:00
Natanael Copa
f78e9dea47 main/xen: security fix (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196)
fixes #2115
2013-06-21 13:32:40 +00:00
Natanael Copa
a122068ea1 main/xen: add spice support
It seems to be linked in
2013-06-10 07:10:14 +00:00
Natanael Copa
f6e99451d4 main/xen: security fixes (CVE-2013-2076,CVE-2013-2077,CVE-2013-2078)
ref #2044
ref #2049
ref #2054
2013-06-04 09:30:54 +00:00
William Pitcock
6267268090 main/xen: rebase pod2man patch properly 2013-06-01 17:45:29 -05:00
William Pitcock
6e8d8f7559 main/xen: more pod2man fixes 2013-06-01 17:44:10 -05:00
William Pitcock
36bfee190e main/xen: fix more pod2man breakage 2013-06-01 17:15:53 -05:00
William Pitcock
c664d6766c main/xen: fix pod2man choking 2013-06-01 16:28:03 -05:00
William Pitcock
5b97248f06 main/xen: unset LANG/LC_ALL 2013-06-01 16:19:29 -05:00
William Pitcock
d3978bf9dc main/xen: remove obsolete XSA patches. 2013-06-01 16:12:19 -05:00
William Pitcock
f43d4be65d main/xen: upgrade to 4.2.2 2013-06-01 16:11:13 -05:00
Natanael Copa
98f79460df main/xen: security fix (CVE-2013-2072)
ref #1900
2013-05-20 07:56:07 +00:00
Natanael Copa
0b857e9db3 main/xen: add perl as dep
Currently it will not start domU at all unless perl is there.

There are only few lines of perl that probably easily could be ported to
C or Lua or something, but until that happens we need perl :-(

fixes #1524
2013-05-17 13:45:09 +00:00
Natanael Copa
d432e270ea main/xen: misc fixes for xendomains init.d script
- we need create the parent dirs for SCREENDIR
- sync the need/after deps with gentoo
2013-05-17 13:03:16 +00:00
Natanael Copa
ef80eb1f04 main/xen: sleep a bit when starting up xen domains
fixes #1850
2013-05-16 14:54:57 +00:00
Roger Pau Monne
6665cdadf0 main/xen: security fixes (CVE-2013-1917,CVE-2013-1919,CVE-2013-1920,CVE-2013-1922)
CVE-2013-1917 / XSA-44
CVE-2013-1919 / XSA-46
CVE-2013-1920 / XSA-47
CVE-2013-1922 / XSA-48

Signed-off-by: Natanael Copa <ncopa@alpinelinux.org>
2013-04-19 06:15:12 +00:00
Roger Pau Monne
ab769fcca4 xen: XSA-36 and XSA-38 2013-02-06 11:37:38 +00:00
Roger Pau Monne
0c0b33191e xen: XSA-34 and XSA-35
Security fixes for nested virtualization. This only apply to Xen
4.2.x, only edge and 2.5.x Alpine Linux systems are affected.
2013-01-23 12:40:11 +00:00
Roger Pau Monne
72b0ec4675 xen: XSA-41 remaining patches
Some patches where not included in the original XSA, this are the
remaining ones (so far).

To be applied to edge and 2.5
2013-01-18 17:30:58 +00:00
Roger Pau Monne
7bad3c33e3 xen: XSA-41 2013-01-17 05:46:25 -06:00
Roger Pau Monne
583c334e3e xen: add XSA-33 patch 2013-01-14 07:34:56 +00:00
Carlo Landmeter
5b6075f273 main/xen: disable on eglibc 2013-01-05 15:37:46 +01:00
Natanael Copa
661d357b73 main/xen: add iproute2 to depends
ref #1529
2012-12-25 11:01:53 +00:00
Roger Pau Monne
1191859999 xen: update to 4.2.1
Excerpt from release notes:

This fixes the following critical vulnerabilities:
 * CVE-2012-4535 / XSA-20:
    Timer overflow DoS vulnerability
 * CVE-2012-4537 / XSA-22:
    Memory mapping failure DoS vulnerability
 * CVE-2012-4538 / XSA-23:
    Unhooking empty PAE entries DoS vulnerability
 * CVE-2012-4539 / XSA-24:
    Grant table hypercall infinite loop DoS vulnerability
 * CVE-2012-4544,CVE-2012-2625 / XSA-25:
    Xen domain builder Out-of-memory due to malicious kernel/ramdisk
 * CVE-2012-5510 / XSA-26:
    Grant table version switch list corruption vulnerability
 * CVE-2012-5511 / XSA-27:
    several HVM operations do not validate the range of their inputs
 * CVE-2012-5513 / XSA-29:
    XENMEM_exchange may overwrite hypervisor memory
 * CVE-2012-5514 / XSA-30:
    Broken error handling in guest_physmap_mark_populate_on_demand()
 * CVE-2012-5515 / XSA-31:
    Several memory hypercall operations allow invalid extent order
values
 * CVE-2012-5525 / XSA-32:
    several hypercalls do not validate input GFNs

We recommend all users of the 4.2.0 code base to update to this
point release.

Among many bug fixes and improvements (around 100 since Xen 4.2.0):
 * A fix for a long standing time management issue
 * Bug fixes for S3 (suspend to RAM) handling
 * Bug fixes for other low level system state handling
 * Bug fixes and improvements to the libxl tool stack
 * Bug fixes to nested virtualization
2012-12-18 12:11:44 +00:00
Roger Pau Monne
02c9cf16cb xen: security fixes
This covers:

XSA-26 (CVE-2012-5510)
XSA-27 (CVE-2012-5511)
XSA-29 (CVE-2012-5513)
XSA-30 (CVE-2012-5514)
XSA-31 (CVE-2012-5515)
XSA-32 (CVE-2012-5525)
2012-12-04 06:54:47 +00:00
Roger Pau Monne
9dcb820d80 xen: add screen as a run time dependency
screen is needed by xendomains init script. Also bump pkgrel.
2012-12-04 06:54:26 +00:00
Roger Pau Monne
a5cfc78fea xen: fix xendomains init script 2012-12-04 06:54:12 +00:00
Roger Pau Monne
2e34c29e43 xen: prevent xenstore from being restared
xenstore should not be restarted. If it is restarted watches are lost,
and several key components like kernel backend drivers will cease to
work.
2012-11-21 08:56:55 +00:00
Roger Pau Monne
df4538c727 xen: bump pkgrel 2012-11-19 12:16:13 +00:00
Roger Pau Monne
9b20bafcd4 xen: fix misuse of einfo in xenstore.initd
Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
2012-11-19 12:16:07 +00:00
Roger Pau Monne
22809ecb41 xen: add a bunch of security fixes
This covers:
XSA-20
XSA-22
XSA-23
XSA-24

Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
2012-11-19 12:15:52 +00:00
Roger Pau Monne
1bba205542 xen: prevent qemu daemon from screwing the console
Qemu when launched with -nographic and -monitor screws the console
badly. Use nohup to prevent that.

Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
2012-11-19 12:15:20 +00:00
Roger Pau Monné
33d01fcd86 xen: fix init scripts
On 02/11/12 12:05, Leonardo Arena wrote:
> On Fri, 2012-11-02 at 11:49 +0100, Roger Pau Monne wrote:
>> Xen init scripts doesn't need to depend on 'net'
>> ---
>> Please update APK checksum
>> ---
>>  main/xen/xend.initd      |    2 +-
>>  main/xen/xenstored.initd |    1 -
>>  2 files changed, 1 insertions(+), 2 deletions(-)
>>
>> diff --git a/main/xen/xend.initd b/main/xen/xend.initd
>> index 1c667e8..bd5550b 100644
>> --- a/main/xen/xend.initd
>> +++ b/main/xen/xend.initd
>> @@ -4,7 +4,7 @@
>>  # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xend.initd-r2,v 1.2 2011/09/10 17:22:46 alexxy Exp $
>>
>>  depend() {
>> -	need net xenconsoled xenstored
>> +	need xenconsoled xenstored
>>  	after firewall
>>  	before xendomains sshd
>>  }
>> diff --git a/main/xen/xenstored.initd b/main/xen/xenstored.initd
>> index f2c22cc..6187c02 100644
>> --- a/main/xen/xenstored.initd
>> +++ b/main/xen/xenstored.initd
>> @@ -4,7 +4,6 @@
>>  # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xenstored.initd,v 1.2 2011/04/05 21:25:03 alexxy Exp $
>>
>>  depend() {
>> -	need net
>>  	before xendomains xend sshd ntp-client ntpd nfs nfsmount rsyncd portmap dhcp
>>  }
>>
>
> Applied both patches.

On the rush I forgot to increase pkgrel, can you commit this please:

Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
2012-11-02 11:56:17 +00:00