[ubuntu/saucy-proposed] xen 4.2.2-1ubuntu1 (Accepted)
Stefan Bader
stefan.bader at canonical.com
Fri Jul 19 10:00:15 UTC 2013
xen (4.2.2-1ubuntu1) saucy; urgency=low
* Merge with Debian unstable. Dropping the following patches in favour
of Debian ones:
- xsa52-4.2-unstable.patch
- xsa53-4.2.patch
- xsa54.patch
- xsa56.patch
* Remaining changes:
- Use dpkg-buildflags and strip the gcc prefix for getting LDFLAGS.
This will again use the Ubuntu specific LDFLAGS (using some
hardening options). Older releases would always pass those options
in the environment but that changed.
- Ressurrect qemu-dm for now (upstream qemu would not support
migration, yet). Forward-port some patches from the old Debian
package which still included qemu-dm:
- qemu-prefix (modify LDFLAGS to point to lib dir for qemu-dm)
- qemu-disable-blktap (this is not present in upstream)
- ubuntu-qemu-disable-qemu-upstream (breaks build and also should
be provided by qemu/kvm package)
* Remaining additional patches:
- qemu-fix-librt-test.patch
Fix build regression caused by glibc not requiring to link against
librt for the clock_gettime function. Patch picked from xen-devel
mailing list.
- tools-gdbsx-fix-build-failure-with-glibc-2.17.patch
Add direct include to sys/types.h for xg_main.c which likely was
indirectly done before. Needed to get ulong type definition.
- tools-ocaml-fix-build: refresh and reenable (and fix the description
of) this patch. Without it the ocam native libraries (*.cmxa)
build in /build local paths rather than appropriatly versioned
library references.
- APIC Register Virtualization (backported from Xen 4.3)
- 0001-xen-enable-APIC-Register-Virtualization.patch
- 0002-xen-enable-Virtual-interrupt-delivery.patch
- 0003-xen-add-virtual-x2apic-support-for-apicv.patch
- TSC Adjust Support (backported from Xen 4.3)
- 0004-x86-Implement-TSC-adjust-feature-for-HVM-guest.patch
- 0005-x86-Save-restore-TSC-adjust-during-HVM-guest-migrati.patch
- 0006-x86-Expose-TSC-adjust-to-HVM-guest.patch
- Fix FTBS on i386
- 0007-x86-Fix-i386-virtual-apic.patch
- silence-gcc-warnings.patch: Silence gcc warnings.
xen (4.2.2-1) unstable; urgency=low
* New upstream release.
- Fix build with gcc 4.8. (closes: #712376)
* Build-depend on libssl-dev. (closes: #712366)
* Enable hardening as much as possible.
* Re-enable ocaml build fixes. (closes: #695176)
* Check for out-of-bound values in CPU affinity setup.
CVE-2013-2072
* Fix information leak on AMD CPUs.
CVE-2013-2076
* Recover from faults on XRSTOR.
CVE-2013-2077
* Properly check guest input to XSETBV.
CVE-2013-2078
Date: Wed, 17 Jul 2013 09:41:37 +0200
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Signed-By: Andy Whitcroft <apw at canonical.com>
https://launchpad.net/ubuntu/saucy/+source/xen/4.2.2-1ubuntu1
-------------- next part --------------
-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA512
Format: 1.8
Date: Wed, 17 Jul 2013 09:41:37 +0200
Source: xen
Binary: xen-docs-4.2 libxen-4.2 libxenstore3.0 libxen-dev xenstore-utils libxen-ocaml libxen-ocaml-dev xen-utils-common xen-utils-4.2 xen-hypervisor-4.2-amd64 xen-system-amd64 xen-hypervisor-4.2-i386 xen-system-i386
Architecture: source
Version: 4.2.2-1ubuntu1
Distribution: saucy
Urgency: low
Maintainer: Ubuntu Developers <ubuntu-devel-discuss at lists.ubuntu.com>
Changed-By: Stefan Bader <stefan.bader at canonical.com>
Description:
libxen-4.2 - Public libs for Xen
libxen-dev - Public headers and libs for Xen
libxen-ocaml - OCaml libraries for controlling Xen
libxen-ocaml-dev - OCaml libraries for controlling Xen (devel package)
libxenstore3.0 - Xenstore communications library for Xen
xen-docs-4.2 - Documentation for Xen
xen-hypervisor-4.2-amd64 - Xen Hypervisor on AMD64
xen-hypervisor-4.2-i386 - Xen Hypervisor on i386
xen-system-amd64 - Xen System on AMD64 (meta-package)
xen-system-i386 - Xen System on i386 (meta-package)
xen-utils-4.2 - XEN administrative tools
xen-utils-common - Xen administrative tools - common files
xenstore-utils - Xenstore utilities for Xen
Closes: 695176 712366 712376
Changes:
xen (4.2.2-1ubuntu1) saucy; urgency=low
.
* Merge with Debian unstable. Dropping the following patches in favour
of Debian ones:
- xsa52-4.2-unstable.patch
- xsa53-4.2.patch
- xsa54.patch
- xsa56.patch
* Remaining changes:
- Use dpkg-buildflags and strip the gcc prefix for getting LDFLAGS.
This will again use the Ubuntu specific LDFLAGS (using some
hardening options). Older releases would always pass those options
in the environment but that changed.
- Ressurrect qemu-dm for now (upstream qemu would not support
migration, yet). Forward-port some patches from the old Debian
package which still included qemu-dm:
- qemu-prefix (modify LDFLAGS to point to lib dir for qemu-dm)
- qemu-disable-blktap (this is not present in upstream)
- ubuntu-qemu-disable-qemu-upstream (breaks build and also should
be provided by qemu/kvm package)
* Remaining additional patches:
- qemu-fix-librt-test.patch
Fix build regression caused by glibc not requiring to link against
librt for the clock_gettime function. Patch picked from xen-devel
mailing list.
- tools-gdbsx-fix-build-failure-with-glibc-2.17.patch
Add direct include to sys/types.h for xg_main.c which likely was
indirectly done before. Needed to get ulong type definition.
- tools-ocaml-fix-build: refresh and reenable (and fix the description
of) this patch. Without it the ocam native libraries (*.cmxa)
build in /build local paths rather than appropriatly versioned
library references.
- APIC Register Virtualization (backported from Xen 4.3)
- 0001-xen-enable-APIC-Register-Virtualization.patch
- 0002-xen-enable-Virtual-interrupt-delivery.patch
- 0003-xen-add-virtual-x2apic-support-for-apicv.patch
- TSC Adjust Support (backported from Xen 4.3)
- 0004-x86-Implement-TSC-adjust-feature-for-HVM-guest.patch
- 0005-x86-Save-restore-TSC-adjust-during-HVM-guest-migrati.patch
- 0006-x86-Expose-TSC-adjust-to-HVM-guest.patch
- Fix FTBS on i386
- 0007-x86-Fix-i386-virtual-apic.patch
- silence-gcc-warnings.patch: Silence gcc warnings.
.
xen (4.2.2-1) unstable; urgency=low
.
* New upstream release.
- Fix build with gcc 4.8. (closes: #712376)
* Build-depend on libssl-dev. (closes: #712366)
* Enable hardening as much as possible.
* Re-enable ocaml build fixes. (closes: #695176)
* Check for out-of-bound values in CPU affinity setup.
CVE-2013-2072
* Fix information leak on AMD CPUs.
CVE-2013-2076
* Recover from faults on XRSTOR.
CVE-2013-2077
* Properly check guest input to XSETBV.
CVE-2013-2078
Checksums-Sha1:
6b2747a9a83bab1b31cd5ee9838192dcb87317b3 3186 xen_4.2.2-1ubuntu1.dsc
18c5ac03afb2ab65fa710ac3627e88a1355f3dc6 3806198 xen_4.2.2.orig-qemu.tar.gz
54e42252cd65f134479a5af3c773a16cebf52905 5860055 xen_4.2.2.orig.tar.gz
34496ada35f8e57a4d4928754607b6099145952f 154482 xen_4.2.2-1ubuntu1.debian.tar.gz
Checksums-Sha256:
e77ace2b645695503aee8afb7426fed6ed8786a394a31427df1c78e467b1d343 3186 xen_4.2.2-1ubuntu1.dsc
1f931a74208cdf742550ee0f83e2ec54edba825f5f39a71e161b827b23b77226 3806198 xen_4.2.2.orig-qemu.tar.gz
54b4b2cf934a717fbbc4be4b8317e2e9e3fe689bfa0fbbaa1291e3bdd848fbb4 5860055 xen_4.2.2.orig.tar.gz
7121129e591082914dfe1b1424a4a8b9b479c68c47435db6bd7da2c2927e2c68 154482 xen_4.2.2-1ubuntu1.debian.tar.gz
Files:
91a7811de9023d4cbadab9925ee2d56d 3186 kernel optional xen_4.2.2-1ubuntu1.dsc
c6bb132cd1eaaf68a6763494c4e76676 3806198 kernel optional xen_4.2.2.orig-qemu.tar.gz
a8a5147809df5e21a5d09c10a465021f 5860055 kernel optional xen_4.2.2.orig.tar.gz
2e331ea2f223feccc6c2722175814c5d 154482 kernel optional xen_4.2.2-1ubuntu1.debian.tar.gz
Original-Maintainer: Debian Xen Team <pkg-xen-devel at lists.alioth.debian.org>
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)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=7qws
-----END PGP SIGNATURE-----
More information about the Saucy-changes
mailing list