William Pitcock
39a5c0f4d0
main/xen: xen is no longer supported on x86-32, just x86-64
2013-09-08 14:20:22 +00:00
William Pitcock
b2cf433800
main/xen: qemu-coroutine-gthread.patch rebase
2013-09-08 14:04:20 +00:00
William Pitcock
63f0f5c06d
main/xen: decruft old and unused patches
2013-09-08 14:03:02 +00:00
William Pitcock
ee374de8ff
main/xen: use gthread coroutine backend on qemu-xen
2013-09-08 14:01:53 +00:00
William Pitcock
451040ef53
main/xen: docs build fix
2013-09-08 13:49:11 +00:00
William Pitcock
3c63a76305
main/xen: catch errors from individual build steps
2013-09-08 13:44:16 +00:00
William Pitcock
12e4869ec5
main/xen: fix up qemu-xen-websocket patch
2013-09-08 13:34:53 +00:00
William Pitcock
0648675594
main/xen: refactor build tasks and make them work independently as abuild steps
2013-09-08 13:34:53 +00:00
William Pitcock
a17a579a91
main/xen: initial rebase of patches, fixups needed
2013-09-08 13:34:53 +00:00
Natanael Copa
784f202ad7
main/xen: create /var/run/xen
...
ref #2031
2013-09-02 12:11:21 +00:00
Timo Teräs
5c90471732
[all autotools packages]: normalize ./configure
2013-07-30 08:54:53 +00:00
William Pitcock
d3212d901a
main/xen: pkgrel bump
2013-07-02 09:49:10 -05:00
William Pitcock
4903dfe1e4
main/xen: enable qemu-xen to stream isos with curl
2013-07-02 00:37:26 -05:00
William Pitcock
383c136fdb
main/xen: enable TLS over websockets (and require it) if X509 is enabled
2013-07-01 21:10:27 -05:00
William Pitcock
a1ecc814cd
main/xen: fix plaintext websockets support
2013-07-01 20:13:48 -05:00
William Pitcock
e095f1bd0b
main/xen: splice in websockets support on qemu-xen device-model
2013-07-01 14:38:20 -05:00
Natanael Copa
448e4822bb
main/xen: fix xsa45 and xsa58 (CVE-2013-1918,CVE-2013-1432)
...
ref #2123
2013-07-01 14:38:45 +00:00
Natanael Copa
932f289cf1
main/xen: fix xsa57 (CVE-2013-2211)
...
ref #2117
fixes #2122
2013-06-26 09:48:01 +00:00
Natanael Copa
f78e9dea47
main/xen: security fix (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196)
...
fixes #2115
2013-06-21 13:32:40 +00:00
Natanael Copa
a122068ea1
main/xen: add spice support
...
It seems to be linked in
2013-06-10 07:10:14 +00:00
Natanael Copa
f6e99451d4
main/xen: security fixes (CVE-2013-2076,CVE-2013-2077,CVE-2013-2078)
...
ref #2044
ref #2049
ref #2054
2013-06-04 09:30:54 +00:00
William Pitcock
6267268090
main/xen: rebase pod2man patch properly
2013-06-01 17:45:29 -05:00
William Pitcock
6e8d8f7559
main/xen: more pod2man fixes
2013-06-01 17:44:10 -05:00
William Pitcock
36bfee190e
main/xen: fix more pod2man breakage
2013-06-01 17:15:53 -05:00
William Pitcock
c664d6766c
main/xen: fix pod2man choking
2013-06-01 16:28:03 -05:00
William Pitcock
5b97248f06
main/xen: unset LANG/LC_ALL
2013-06-01 16:19:29 -05:00
William Pitcock
d3978bf9dc
main/xen: remove obsolete XSA patches.
2013-06-01 16:12:19 -05:00
William Pitcock
f43d4be65d
main/xen: upgrade to 4.2.2
2013-06-01 16:11:13 -05:00
Natanael Copa
98f79460df
main/xen: security fix (CVE-2013-2072)
...
ref #1900
2013-05-20 07:56:07 +00:00
Natanael Copa
0b857e9db3
main/xen: add perl as dep
...
Currently it will not start domU at all unless perl is there.
There are only few lines of perl that probably easily could be ported to
C or Lua or something, but until that happens we need perl :-(
fixes #1524
2013-05-17 13:45:09 +00:00
Natanael Copa
d432e270ea
main/xen: misc fixes for xendomains init.d script
...
- we need create the parent dirs for SCREENDIR
- sync the need/after deps with gentoo
2013-05-17 13:03:16 +00:00
Natanael Copa
ef80eb1f04
main/xen: sleep a bit when starting up xen domains
...
fixes #1850
2013-05-16 14:54:57 +00:00
Roger Pau Monne
6665cdadf0
main/xen: security fixes (CVE-2013-1917,CVE-2013-1919,CVE-2013-1920,CVE-2013-1922)
...
CVE-2013-1917 / XSA-44
CVE-2013-1919 / XSA-46
CVE-2013-1920 / XSA-47
CVE-2013-1922 / XSA-48
Signed-off-by: Natanael Copa <ncopa@alpinelinux.org>
2013-04-19 06:15:12 +00:00
Roger Pau Monne
ab769fcca4
xen: XSA-36 and XSA-38
2013-02-06 11:37:38 +00:00
Roger Pau Monne
0c0b33191e
xen: XSA-34 and XSA-35
...
Security fixes for nested virtualization. This only apply to Xen
4.2.x, only edge and 2.5.x Alpine Linux systems are affected.
2013-01-23 12:40:11 +00:00
Roger Pau Monne
72b0ec4675
xen: XSA-41 remaining patches
...
Some patches where not included in the original XSA, this are the
remaining ones (so far).
To be applied to edge and 2.5
2013-01-18 17:30:58 +00:00
Roger Pau Monne
7bad3c33e3
xen: XSA-41
2013-01-17 05:46:25 -06:00
Roger Pau Monne
583c334e3e
xen: add XSA-33 patch
2013-01-14 07:34:56 +00:00
Carlo Landmeter
5b6075f273
main/xen: disable on eglibc
2013-01-05 15:37:46 +01:00
Natanael Copa
661d357b73
main/xen: add iproute2 to depends
...
ref #1529
2012-12-25 11:01:53 +00:00
Roger Pau Monne
1191859999
xen: update to 4.2.1
...
Excerpt from release notes:
This fixes the following critical vulnerabilities:
* CVE-2012-4535 / XSA-20:
Timer overflow DoS vulnerability
* CVE-2012-4537 / XSA-22:
Memory mapping failure DoS vulnerability
* CVE-2012-4538 / XSA-23:
Unhooking empty PAE entries DoS vulnerability
* CVE-2012-4539 / XSA-24:
Grant table hypercall infinite loop DoS vulnerability
* CVE-2012-4544,CVE-2012-2625 / XSA-25:
Xen domain builder Out-of-memory due to malicious kernel/ramdisk
* CVE-2012-5510 / XSA-26:
Grant table version switch list corruption vulnerability
* CVE-2012-5511 / XSA-27:
several HVM operations do not validate the range of their inputs
* CVE-2012-5513 / XSA-29:
XENMEM_exchange may overwrite hypervisor memory
* CVE-2012-5514 / XSA-30:
Broken error handling in guest_physmap_mark_populate_on_demand()
* CVE-2012-5515 / XSA-31:
Several memory hypercall operations allow invalid extent order
values
* CVE-2012-5525 / XSA-32:
several hypercalls do not validate input GFNs
We recommend all users of the 4.2.0 code base to update to this
point release.
Among many bug fixes and improvements (around 100 since Xen 4.2.0):
* A fix for a long standing time management issue
* Bug fixes for S3 (suspend to RAM) handling
* Bug fixes for other low level system state handling
* Bug fixes and improvements to the libxl tool stack
* Bug fixes to nested virtualization
2012-12-18 12:11:44 +00:00
Roger Pau Monne
02c9cf16cb
xen: security fixes
...
This covers:
XSA-26 (CVE-2012-5510)
XSA-27 (CVE-2012-5511)
XSA-29 (CVE-2012-5513)
XSA-30 (CVE-2012-5514)
XSA-31 (CVE-2012-5515)
XSA-32 (CVE-2012-5525)
2012-12-04 06:54:47 +00:00
Roger Pau Monne
9dcb820d80
xen: add screen as a run time dependency
...
screen is needed by xendomains init script. Also bump pkgrel.
2012-12-04 06:54:26 +00:00
Roger Pau Monne
a5cfc78fea
xen: fix xendomains init script
2012-12-04 06:54:12 +00:00
Roger Pau Monne
2e34c29e43
xen: prevent xenstore from being restared
...
xenstore should not be restarted. If it is restarted watches are lost,
and several key components like kernel backend drivers will cease to
work.
2012-11-21 08:56:55 +00:00
Roger Pau Monne
df4538c727
xen: bump pkgrel
2012-11-19 12:16:13 +00:00
Roger Pau Monne
9b20bafcd4
xen: fix misuse of einfo in xenstore.initd
...
Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
2012-11-19 12:16:07 +00:00
Roger Pau Monne
22809ecb41
xen: add a bunch of security fixes
...
This covers:
XSA-20
XSA-22
XSA-23
XSA-24
Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
2012-11-19 12:15:52 +00:00
Roger Pau Monne
1bba205542
xen: prevent qemu daemon from screwing the console
...
Qemu when launched with -nographic and -monitor screws the console
badly. Use nohup to prevent that.
Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
2012-11-19 12:15:20 +00:00
Roger Pau Monné
33d01fcd86
xen: fix init scripts
...
On 02/11/12 12:05, Leonardo Arena wrote:
> On Fri, 2012-11-02 at 11:49 +0100, Roger Pau Monne wrote:
>> Xen init scripts doesn't need to depend on 'net'
>> ---
>> Please update APK checksum
>> ---
>> main/xen/xend.initd | 2 +-
>> main/xen/xenstored.initd | 1 -
>> 2 files changed, 1 insertions(+), 2 deletions(-)
>>
>> diff --git a/main/xen/xend.initd b/main/xen/xend.initd
>> index 1c667e8..bd5550b 100644
>> --- a/main/xen/xend.initd
>> +++ b/main/xen/xend.initd
>> @@ -4,7 +4,7 @@
>> # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xend.initd-r2,v 1.2 2011/09/10 17:22:46 alexxy Exp $
>>
>> depend() {
>> - need net xenconsoled xenstored
>> + need xenconsoled xenstored
>> after firewall
>> before xendomains sshd
>> }
>> diff --git a/main/xen/xenstored.initd b/main/xen/xenstored.initd
>> index f2c22cc..6187c02 100644
>> --- a/main/xen/xenstored.initd
>> +++ b/main/xen/xenstored.initd
>> @@ -4,7 +4,6 @@
>> # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xenstored.initd,v 1.2 2011/04/05 21:25:03 alexxy Exp $
>>
>> depend() {
>> - need net
>> before xendomains xend sshd ntp-client ntpd nfs nfsmount rsyncd portmap dhcp
>> }
>>
>
> Applied both patches.
On the rush I forgot to increase pkgrel, can you commit this please:
Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
2012-11-02 11:56:17 +00:00