From xen-announce-bounces@lists.xen.org Wed Jun 06 10:32:02 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 06 Jun 2012 10:32:02 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ScDTK-0007JU-K8; Wed, 06 Jun 2012 10:28:14 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ScDDw-00040H-An for xen-announce@lists.xen.org; Wed, 06 Jun 2012 10:12:21 +0000 Received: from [193.109.254.147:31760] by server-8.bemta-14.messagelabs.com id AB/A8-27132-30D2FCF4; Wed, 06 Jun 2012 10:12:19 +0000 X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-8.tower-27.messagelabs.com!1338977537!11173630!1 X-Originating-IP: [209.85.215.173] X-SpamReason: No, hits=3.1 required=7.0 tests=HTML_90_100,HTML_MESSAGE, RCVD_BY_IP,SUSPICIOUS_RECIPS X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 21885 invoked from network); 6 Jun 2012 10:12:18 -0000 Received: from mail-ey0-f173.google.com (HELO mail-ey0-f173.google.com) (209.85.215.173) by server-8.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 6 Jun 2012 10:12:18 -0000 Received: by eaak12 with SMTP id k12so2010881eaa.32 for ; Wed, 06 Jun 2012 03:12:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:reply-to:user-agent:mime-version:to :subject:content-type; bh=j1L6KX7djOOcneGy8ooWyiyXvSUfMTq3wiuC01nevjA=; b=GKbeiVIhjFIvtIOIEVEVvayLp42qoACskLE/WymZdrRalMrk7bG1IsytvdqMDtd8zA +sZIaTrz5tsje0MB+F7amWvHVsecG4RDaMVH3DKYk+/ReC4QOJ5UXSdTZMG8m1+S2m+0 mki7mPySi3N+/W/K4Ji4GhzhGB5qKJABkzjsNaPVPfo9mAjkJLSCJSp1p8jcyp/Bfr/U CIflsOQF6cxxRqY1KwGP5HA38FsdxsHjXi3uuuNOimuSKC39SHPMTCnD8T1VCCrGccGe +Ibcu5RAEKMiKEi2DfIp88iAE9TcTDIZDwnVK4cmSKEqMY4fhNDTxCGkJMOvKnikdjX1 Hz/w== Received: by 10.14.100.205 with SMTP id z53mr8992919eef.39.1338977537286; Wed, 06 Jun 2012 03:12:17 -0700 (PDT) Received: from [172.16.25.10] (b0fb96e9.bb.sky.com. [176.251.150.233]) by mx.google.com with ESMTPS id t3sm4605616eeb.15.2012.06.06.03.12.14 (version=SSLv3 cipher=OTHER); Wed, 06 Jun 2012 03:12:16 -0700 (PDT) Message-ID: <4FCF2CFD.7070606@xen.org> Date: Wed, 06 Jun 2012 11:12:13 +0100 From: Lars Kurth User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: xen-announce@lists.xen.org, "xen-api@lists.xen.org" , xen-users@lists.xen.org, xen-arm@lists.xen.org, xen-devel@lists.xen.org X-Mailman-Approved-At: Wed, 06 Jun 2012 10:28:13 +0000 Subject: [Xen-announce] Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th! X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list Reply-To: lars.kurth@xen.org List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1993121582119749252==" Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org This is a multi-part message in MIME format. --===============1993121582119749252== Content-Type: multipart/alternative; boundary="------------010405050404010608000400" This is a multi-part message in MIME format. --------------010405050404010608000400 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit XenSummit · August 27-28, 2012 · Sheraton San Diego · San Diego, CA, USA Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th! XenSummit North America August 27-28, 2012 -- San Diego, CA Xen.org invites developers, users, researchers, open source projects and businesses who are developing and/or using Xen to submit a proposal for XenSummit North America 2012. *Submit a speaking proposal for XenSummit North America 2012 * Suggested topics for XenSummit America include: * Latest developments and features in Xen and related projects * Developments in upstream projects that impact the Xen community * Proposals on how to evolve Xen and related projects in future * Research using Xen and related projects * Proof of concepts and other interesting technologies related to Xen * Other topics related to developing and using Xen * Technologies and technology trends that will impact Xen development in future * User experiences and case studies with Xen or XCP * Benchmarks, case studies, improvement suggestions and other lessons learned * Innovative ways of using Xen and related projects * Open source projects and products that interface or build on top of Xen or related projects * Usage of Xen in server virtualization, cloud computing, clientvirtualization, mobile spaces, etc. * Any other topics that you feel are relevant to developers, users, researchers and other members of the Xen community We will have 30, 45 and 60 minute talking slots (including questions). Please choose the type of session when you submit a proposal. About XenSummit XenSummit is the annual technical conference for Xen developers and users in North America. The conference provides a collaboration and education space for the Xen community and brings together a cross-section of the leading players in the Xen community, innovative and timely content and a wide variety of opportunities for attendee collaboration. This year, XenSummit is co-located with other industry events such as LinuxCon NA , Linux Plumbers Conference , Linux Kernel Summit , CloudOpen and others , which will maximise opportunities for cross-community collaboration. *Learn more about XenSummit* *Register for XenSummit* --------------010405050404010608000400 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit

XenSummit · August 27-28, 2012 · Sheraton San Diego · San Diego, CA, USA

Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th!

XenSummit North America
August 27-28, 2012 – San Diego, CA

Xen.org invites developers, users, researchers, open source projects and businesses who are developing and/or using Xen to submit a proposal for XenSummit North America 2012.

Submit a speaking proposal for XenSummit North America 2012

Suggested topics for XenSummit America include:

  • Latest developments and features in Xen and related projects
  • Developments in upstream projects that impact the Xen community
  • Proposals on how to evolve Xen and related projects in future
  • Research using Xen and related projects
  • Proof of concepts and other interesting technologies related to Xen
  • Other topics related to developing and using Xen
  • Technologies and technology trends that will impact Xen development in future
  • User experiences and case studies with Xen or XCP
  • Benchmarks, case studies, improvement suggestions and other lessons learned
  • Innovative ways of using Xen and related projects
  • Open source projects and products that interface or build on top of Xen or related projects
  • Usage of Xen in server virtualization, cloud computing, client virtualization, mobile spaces, etc.
  •  Any other topics that you feel are relevant to developers, users, researchers and other members of the Xen community


We will have 30, 45 and 60 minute talking slots (including questions). Please choose the type of session when you submit a proposal.

About XenSummit

XenSummit is the annual technical conference for Xen developers and users in North America. The conference provides a collaboration and education space for the Xen community and brings together a cross-section of the leading players in the Xen community, innovative and timely content and a wide variety of opportunities for attendee collaboration. This year, XenSummit is co-located with other industry events such as LinuxCon NA, Linux Plumbers Conference, Linux Kernel Summit, CloudOpen and others, which will maximise opportunities for cross-community collaboration.

Learn more about XenSummit
Register for XenSummit --------------010405050404010608000400-- --===============1993121582119749252== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --===============1993121582119749252==-- From xen-announce-bounces@lists.xen.org Wed Jun 06 10:32:02 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 06 Jun 2012 10:32:02 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ScDTK-0007JU-K8; Wed, 06 Jun 2012 10:28:14 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1ScDDw-00040H-An for xen-announce@lists.xen.org; Wed, 06 Jun 2012 10:12:21 +0000 Received: from [193.109.254.147:31760] by server-8.bemta-14.messagelabs.com id AB/A8-27132-30D2FCF4; Wed, 06 Jun 2012 10:12:19 +0000 X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-8.tower-27.messagelabs.com!1338977537!11173630!1 X-Originating-IP: [209.85.215.173] X-SpamReason: No, hits=3.1 required=7.0 tests=HTML_90_100,HTML_MESSAGE, RCVD_BY_IP,SUSPICIOUS_RECIPS X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 21885 invoked from network); 6 Jun 2012 10:12:18 -0000 Received: from mail-ey0-f173.google.com (HELO mail-ey0-f173.google.com) (209.85.215.173) by server-8.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 6 Jun 2012 10:12:18 -0000 Received: by eaak12 with SMTP id k12so2010881eaa.32 for ; Wed, 06 Jun 2012 03:12:17 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=sender:message-id:date:from:reply-to:user-agent:mime-version:to :subject:content-type; bh=j1L6KX7djOOcneGy8ooWyiyXvSUfMTq3wiuC01nevjA=; b=GKbeiVIhjFIvtIOIEVEVvayLp42qoACskLE/WymZdrRalMrk7bG1IsytvdqMDtd8zA +sZIaTrz5tsje0MB+F7amWvHVsecG4RDaMVH3DKYk+/ReC4QOJ5UXSdTZMG8m1+S2m+0 mki7mPySi3N+/W/K4Ji4GhzhGB5qKJABkzjsNaPVPfo9mAjkJLSCJSp1p8jcyp/Bfr/U CIflsOQF6cxxRqY1KwGP5HA38FsdxsHjXi3uuuNOimuSKC39SHPMTCnD8T1VCCrGccGe +Ibcu5RAEKMiKEi2DfIp88iAE9TcTDIZDwnVK4cmSKEqMY4fhNDTxCGkJMOvKnikdjX1 Hz/w== Received: by 10.14.100.205 with SMTP id z53mr8992919eef.39.1338977537286; Wed, 06 Jun 2012 03:12:17 -0700 (PDT) Received: from [172.16.25.10] (b0fb96e9.bb.sky.com. [176.251.150.233]) by mx.google.com with ESMTPS id t3sm4605616eeb.15.2012.06.06.03.12.14 (version=SSLv3 cipher=OTHER); Wed, 06 Jun 2012 03:12:16 -0700 (PDT) Message-ID: <4FCF2CFD.7070606@xen.org> Date: Wed, 06 Jun 2012 11:12:13 +0100 From: Lars Kurth User-Agent: Mozilla/5.0 (Windows NT 6.1; rv:12.0) Gecko/20120428 Thunderbird/12.0.1 MIME-Version: 1.0 To: xen-announce@lists.xen.org, "xen-api@lists.xen.org" , xen-users@lists.xen.org, xen-arm@lists.xen.org, xen-devel@lists.xen.org X-Mailman-Approved-At: Wed, 06 Jun 2012 10:28:13 +0000 Subject: [Xen-announce] Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th! X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list Reply-To: lars.kurth@xen.org List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: multipart/mixed; boundary="===============1993121582119749252==" Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org This is a multi-part message in MIME format. --===============1993121582119749252== Content-Type: multipart/alternative; boundary="------------010405050404010608000400" This is a multi-part message in MIME format. --------------010405050404010608000400 Content-Type: text/plain; charset=ISO-8859-1; format=flowed Content-Transfer-Encoding: 8bit XenSummit · August 27-28, 2012 · Sheraton San Diego · San Diego, CA, USA Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th! XenSummit North America August 27-28, 2012 -- San Diego, CA Xen.org invites developers, users, researchers, open source projects and businesses who are developing and/or using Xen to submit a proposal for XenSummit North America 2012. *Submit a speaking proposal for XenSummit North America 2012 * Suggested topics for XenSummit America include: * Latest developments and features in Xen and related projects * Developments in upstream projects that impact the Xen community * Proposals on how to evolve Xen and related projects in future * Research using Xen and related projects * Proof of concepts and other interesting technologies related to Xen * Other topics related to developing and using Xen * Technologies and technology trends that will impact Xen development in future * User experiences and case studies with Xen or XCP * Benchmarks, case studies, improvement suggestions and other lessons learned * Innovative ways of using Xen and related projects * Open source projects and products that interface or build on top of Xen or related projects * Usage of Xen in server virtualization, cloud computing, clientvirtualization, mobile spaces, etc. * Any other topics that you feel are relevant to developers, users, researchers and other members of the Xen community We will have 30, 45 and 60 minute talking slots (including questions). Please choose the type of session when you submit a proposal. About XenSummit XenSummit is the annual technical conference for Xen developers and users in North America. The conference provides a collaboration and education space for the Xen community and brings together a cross-section of the leading players in the Xen community, innovative and timely content and a wide variety of opportunities for attendee collaboration. This year, XenSummit is co-located with other industry events such as LinuxCon NA , Linux Plumbers Conference , Linux Kernel Summit , CloudOpen and others , which will maximise opportunities for cross-community collaboration. *Learn more about XenSummit* *Register for XenSummit* --------------010405050404010608000400 Content-Type: text/html; charset=ISO-8859-1 Content-Transfer-Encoding: 7bit

XenSummit · August 27-28, 2012 · Sheraton San Diego · San Diego, CA, USA

Submit a Proposal to Speak at XenSummit North America 2012 before the CFP Deadline, June 15th!

XenSummit North America
August 27-28, 2012 – San Diego, CA

Xen.org invites developers, users, researchers, open source projects and businesses who are developing and/or using Xen to submit a proposal for XenSummit North America 2012.

Submit a speaking proposal for XenSummit North America 2012

Suggested topics for XenSummit America include:

  • Latest developments and features in Xen and related projects
  • Developments in upstream projects that impact the Xen community
  • Proposals on how to evolve Xen and related projects in future
  • Research using Xen and related projects
  • Proof of concepts and other interesting technologies related to Xen
  • Other topics related to developing and using Xen
  • Technologies and technology trends that will impact Xen development in future
  • User experiences and case studies with Xen or XCP
  • Benchmarks, case studies, improvement suggestions and other lessons learned
  • Innovative ways of using Xen and related projects
  • Open source projects and products that interface or build on top of Xen or related projects
  • Usage of Xen in server virtualization, cloud computing, client virtualization, mobile spaces, etc.
  •  Any other topics that you feel are relevant to developers, users, researchers and other members of the Xen community


We will have 30, 45 and 60 minute talking slots (including questions). Please choose the type of session when you submit a proposal.

About XenSummit

XenSummit is the annual technical conference for Xen developers and users in North America. The conference provides a collaboration and education space for the Xen community and brings together a cross-section of the leading players in the Xen community, innovative and timely content and a wide variety of opportunities for attendee collaboration. This year, XenSummit is co-located with other industry events such as LinuxCon NA, Linux Plumbers Conference, Linux Kernel Summit, CloudOpen and others, which will maximise opportunities for cross-community collaboration.

Learn more about XenSummit
Register for XenSummit --------------010405050404010608000400-- --===============1993121582119749252== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --===============1993121582119749252==-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:34 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePrZ-0003V8-VM; Tue, 12 Jun 2012 12:06:21 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePoN-0002Xf-S1 for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:04 +0000 Received: from [85.158.139.83:53523] by server-12.bemta-5.messagelabs.com id A5/CC-18374-6FF27DF4; Tue, 12 Jun 2012 12:03:02 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-16.tower-182.messagelabs.com!1339502581!25849996!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12638 invoked from network); 12 Jun 2012 12:03:02 -0000 Received: from smtp.eu.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-16.tower-182.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:02 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966379" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:02:33 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:02:32 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePns-0006QG-Ea; Tue, 12 Jun 2012 12:02:32 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePns-0005Tn-CB; Tue, 12 Jun 2012 13:02:32 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="xk0dLwRkyW" Content-Transfer-Encoding: 7bit Message-ID: <20439.12248.291249.667993@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:02:32 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 7 (CVE-2012-0217) - PV privilege escalation X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --xk0dLwRkyW Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-0217 / XSA-7 version 9 64-bit PV guest privilege escalation vulnerability UPDATES IN VERSION 9 ==================== Public release. Previous versions were embargoed. ISSUE DESCRIPTION ================= Rafal Wojtczuk has discovered a vulnerability which can allow a 64-bit PV guest kernel running on a 64-bit hypervisor to escalate privileges to that of the host by arranging for a system call to return via sysret to a non-canonical RIP. Intel CPUs deliver the resulting exception in an undesirable processor state. IMPACT ====== Guest administrators can gain control of the host. Depending on the particular guest kernel it is also possible that non-privileged guest user processes can also elevate their privileges to that of the host. VULNERABLE SYSTEMS ================== All systems running 64 bit Xen hypervisor running 64 bit PV guests on Intel CPUs are vulnerable to this issue. Systems using AMD CPUs are not vulnerable to this privilege escalation. AMD have issued the following statement: AMD processors' SYSRET behavior is such that a non-canonical address in RCX does not generate a #GP while in CPL0. We have verified this with our architecture team, with our design team, and have performed tests that verified this on silicon. Therefore, this privilege escalation exposure is not applicable to any AMD processor. While investigating this, it was noted that some older AMD CPUs will lock up under similar circumstances, causing a denial of service. See XSA-9 for details. MITIGATION ========== This issue can be mitigated by running HVM (fully-virtualised) or 32 bit PV guests only. RESOLUTION ========== Applying the appropriate attached patch will resolve the issue. These patches also resolve the issue described in XSA-8 (CVE-2012-0128). These changes have been made to the staging Xen repositories: XSA-7: XSA-8: xen-unstable.hg 25480:76eaf5966c05 25200:80f4113be500+25204:569d6f05e1ef xen-4.1-testing.hg 23299:f08e61b9b33f 23300:0fec1afa4638 xen-4.0-testing.hg 21590:dd367837e089 21591:adb943a387c8 xen-3.4-testing.hg 19996:894aa06e4f79 19997:ddb7578abb89 PATCH INFORMATION ================= The attached patches resolve both this issue and that reported in XSA-8 (CVE-2012-0128). xen-unstable 25204:569d6f05e1ef or later xsa7-xsa8-unstable-recent.patch xen-unstable 25199:6092641e3644 or earlier xsa7-xsa8-unstable-apr16.patch Xen 4.1, 4.1.x xsa7-xsa8-xen-4.1.patch Xen 4.0, 4.0.x xsa7-xsa8-xen-4.0.patch Xen 3.4, 3.4.x xsa7-xsa8-xen-3.4.patch $ sha256sum xsa7-xsa8-*patch 00853d799d24af16b17c8bbbdb5bb5144a8a7fad31467c4be3d879244774f8d2 xsa7-xsa8-unstable-apr16.patch 71f9907a58c1a1cd601d8088faf8791923d78f77065b94dba8df2a61f512530d xsa7-xsa8-unstable-recent.patch 55fb925a7f4519ea31a0bc42d3ee83093bb7abd98b3a0e4f58591f1ae738840a xsa7-xsa8-xen-3.4.patch 6a7e39121ec1f134351fdf34f494d108500aaa4190a9f7965e81c4e96270924e xsa7-xsa8-xen-4.0.patch 52d8288718b4a833eb437fd18d92b7d412fbe01900dbd0b437744a1df4d459da xsa7-xsa8-xen-4.1.patch -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yqTAAoJEIP+FMlX6CvZntwH/jzuqabF9yGMIXQBckjZUv1E XeY9dbz1uGoMzy0mBFufwbJQqdBt89SNYDkr2BxKxSghSvBs608KHuh8giF1hzvm 8oP2K5T3Rk/jl0gdc3VlZz15Yi9kVEDUOSu2rPQLbhmiv6ht+Y2Of2cp63RioEvq G2QQouHDsipCUZV4Ow5xnPY/KBifh46uCCnLDjV5Q/6WScI8VOIreOADryOpn2+/ 8QmyCo2Sl2F+YxlbCl7k3qyqihaSONymeVg0pkJbH5LmRdTQnJX9fMJSQvfV6Bxs U4PD4ve0C9+/Usz4XFejlQLt/kv4ZNPD6QF2rXei3oElmYAVcHL2XdLVCNLbAeY= =S6KX -----END PGP SIGNATURE----- --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-recent.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-recent.patch" Content-Transfer-Encoding: base64 eDg2XzY0OiBEbyBub3QgZXhlY3V0ZSBzeXNyZXQgd2l0aCBhIG5vbi1jYW5vbmljYWwgcmV0dXJu IGFkZHJlc3MKCkNoZWNrIGZvciBub24tY2Fub25pY2FsIGd1ZXN0IFJJUCBiZWZvcmUgYXR0ZW1w dGluZyB0byBleGVjdXRlIHN5c3JldC4KSWYgc3lzcmV0IGlzIGV4ZWN1dGVkIHdpdGggYSBub24t Y2Fub25pY2FsIHZhbHVlIGluIFJDWCwgSW50ZWwgQ1BVcwp0YWtlIHRoZSBmYXVsdCBpbiByaW5n MCwgYnV0IHdlIHdpbGwgbmVjZXNzYXJpbHkgYWxyZWFkeSBoYXZlIHN3aXRjaGVkCnRvIHRoZSB0 aGUgdXNlcidzIHN0YWNrIHBvaW50ZXIuCgpUaGlzIGlzIGEgc2VjdXJpdHkgdnVsbmVyYWJpbGl0 eSwgWFNBLTcgLyBDVkUtMjAxMi0wMjE3LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPEpC ZXVsaWNoQHN1c2UuY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVs bEBjaXRyaXguY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4KVGVzdGVkLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVsbEBjaXRyaXgu Y29tPgpBY2tlZC1ieTogS2VpciBGcmFzZXIgPGtlaXIueGVuQGdtYWlsLmNvbT4KQ29tbWl0dGVk LWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KCmRpZmYgLXIgMzQw MDYyZmFmMjk4IC1yIGFkODc5MDNmZGNhMSB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9lbnRyeS5TCVdlZCBNYXkgMjMgMTE6MDY6NDkgMjAxMiAr MDEwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowMjoz NSAyMDEyICswMTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAg ICAgdGVzdHcgJFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90 b19ndWVzdAogCisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJu IGFkZHJlc3MgaXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4 CisgICAgICAgIHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21w bCAgJDEsJWVjeAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAk OCwlcnNwCiAgICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAg ICAgIHBvcHEgICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBA IHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAor Lkxmb3JjZV9pcmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAg ICAgIG1vdnEgIDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0 KCVyc3ApLCVyMTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVj aWFsIHJlZ2lzdGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0Ogo= --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-apr16.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-apr16.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgQXByIDE3IDE1OjA1OjA1 IDIwMTIgKzAyMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMTQ1LDYgKzE0NSw3IEBAIHZvaWQgX19kdW1t eV9fKHZvaWQpCiAKICAgICBPRkZTRVQoVFJBUElORk9fZWlwLCBzdHJ1Y3QgdHJhcF9pbmZvLCBh ZGRyZXNzKTsKICAgICBPRkZTRVQoVFJBUElORk9fY3MsIHN0cnVjdCB0cmFwX2luZm8sIGNzKTsK KyAgICBPRkZTRVQoVFJBUElORk9fZmxhZ3MsIHN0cnVjdCB0cmFwX2luZm8sIGZsYWdzKTsKICAg ICBERUZJTkUoVFJBUElORk9fc2l6ZW9mLCBzaXplb2Yoc3RydWN0IHRyYXBfaW5mbykpOwogICAg IEJMQU5LKCk7CiAKZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9jb21w YXQvZW50cnkuUwotLS0gYS94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBhdC9lbnRyeS5TCVR1ZSBB cHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBh dC9lbnRyeS5TCVRodSBNYXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMjEzLDYgKzIxMyw3 IEBAIDE6ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKIEVOVFJZKGNvbXBh dF9wb3N0X2hhbmRsZV9leGNlcHRpb24pCiAgICAgICAgIHRlc3RiICRUQkZfRVhDRVBUSU9OLFRS QVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50 cworLkxjb21wYXRfYm91bmNlX2V4Y2VwdGlvbjoKICAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0 ZV9ib3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCkBAIC0yMjUsMjAgKzIyNiwyMSBA QCBFTlRSWShjb21wYXRfc3lzY2FsbCkKICAgICAgICAgbGVhcSAgVkNQVV90cmFwX2JvdW5jZSgl cmJ4KSwlcmR4CiAgICAgICAgIHRlc3RsICR+MywlZXNpCiAgICAgICAgIGxlYWwgICgsJXJjeCxU QkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEgICVyYXgs VFJBUEJPVU5DRV9laXAoJXJkeCkKK1VOTElLRUxZX1NUQVJUKHosIGNvbXBhdF9zeXNjYWxsX2dw ZikKKyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJkaQorICAgICAgICBtb3Zs ICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VibCAg JDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29k ZSglcmR4KQorICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsg VFJBUElORk9fZWlwKCVyZGkpLCVlYXgKKyAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBU UkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcmRpKSwlZXNpCisgICAgICAgIHRlc3RiICQ0 LFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19mbGFncyglcmRpKQor ICAgICAgICBzZXRueiAlY2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREUoLCVyY3gsVEJGX0lOVEVSUlVQVCksJWVjeAorVU5MSUtFTFlfRU5EKGNvbXBh dF9zeXNjYWxsX2dwZikKKyAgICAgICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQog ICAgICAgICBtb3Z3ICAlc2ksVFJBUEJPVU5DRV9jcyglcmR4KQogICAgICAgICBtb3ZiICAlY2ws VFJBUEJPVU5DRV9mbGFncyglcmR4KQotICAgICAgICBjYWxsICBjb21wYXRfY3JlYXRlX2JvdW5j ZV9mcmFtZQotICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dnEgIFZDUFVfdHJhcF9jdHh0KCVyYngpLCVyc2kKLSAgICAgICAgbW92bCAgJFRSQVBfZ3BfZmF1 bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3ApCi0gICAgICAgIHN1YmwgICQyLFVSRUdTX3JpcCgl cnNwKQotICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsgVFJB UElORk9fZWlwKCVyc2kpLCVlYXgKLSAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBUUkFQ SU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcnNpKSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJG X0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAg ICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAx YgorICAgICAgICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBh dF9zeXNlbnRlcikKICAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJjeApkaWZm IC1yIDYwOTI2NDFlMzY0NCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2Fy Y2gveDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBBcHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysg Yi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowNToxOSAyMDEyICsw MTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcg JFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAog CisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3Mg aXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAg IHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVj eAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAg ICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEg ICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBAIHJlc3RvcmVf YWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9p cmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEg IDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVy MTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lz dGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjc3LDIwICsyODgs MjIgQEAgc3lzZW50ZXJfZWZsYWdzX3NhdmVkOgogICAgICAgICBsZWFxICBWQ1BVX3RyYXBfYm91 bmNlKCVyYngpLCVyZHgKICAgICAgICAgdGVzdHEgJXJheCwlcmF4CiAgICAgICAgIGxlYWwgICgs JXJjeCxUQkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEg IFZDUFVfZG9tYWluKCVyYngpLCVyZGkKK1VOTElLRUxZX1NUQVJUKHosIHN5c2VudGVyX2dwZikK KyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJzaQorICAgICAgICBtb3ZsICAk VFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VicSAgJDIs VVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2Rl KCVyZHgpCisgICAgICAgIG1vdnEgIFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBU UkFQSU5GT19laXAoJXJzaSksJXJheAorICAgICAgICB0ZXN0YiAkNCxUUkFQX2dwX2ZhdWx0ICog VFJBUElORk9fc2l6ZW9mICsgVFJBUElORk9fZmxhZ3MoJXJzaSkKKyAgICAgICAgc2V0bnogJWNs CisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4 LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChzeXNlbnRlcl9ncGYpCisgICAgICAg IG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAgICAgbW92cSAgJXJheCxUUkFQQk9V TkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYoJXJkaSkKICAgICAgICAgam56ICAg Y29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAg ICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1vdnEgIFZDUFVfdHJhcF9jdHh0KCVy YngpLCVyY3gKLSAgICAgICAgbW92bCAgJWVheCxUUkFQQk9VTkNFX2Vycm9yX2NvZGUoJXJkeCkK LSAgICAgICAgbW92cSAgVFJBUF9ncF9mYXVsdCAqIFRSQVBJTkZPX3NpemVvZiArIFRSQVBJTkZP X2VpcCglcmN4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRUUkFQX2dwX2Zh dWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgorICAgICAgICBq bXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3RyYXApCiAgICAg ICAgIHB1c2hxICQwCkBAIC00ODMsNiArNDk2LDcgQEAgMTogICAgICBtb3ZxICAlcnNwLCVyZGkK ICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAgICAgICB0ZXN0 YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIGp6ICAgIHRl c3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxsICBjcmVhdGVf Ym91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAg ICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.1.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.1.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciAzNTI0OGJlNjY5ZTcgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTI6MzMgMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjEyOjMzIDIwMTIgKzAxMDAKQEAgLTIxNCw2ICsyMTQsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjI2LDE5ICsyMjcsMjAgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAgICAgICAgIGxlYXEgIFZDUFVfdHJhcF9ib3VuY2UoJXJieCksJXJkeAogICAg ICAgICB0ZXN0bCAkfjMsJWVzaQogICAgICAgICBsZWFsICAoLCVyY3gsVEJGX0lOVEVSUlVQVCks JWVjeAotICAgICAgICBqeiAgICAyZgotMTogICAgICBtb3ZxICAlcmF4LFRSQVBCT1VOQ0VfZWlw KCVyZHgpCitVTkxJS0VMWV9TVEFSVCh6LCBjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJs ICAkMixVUkVHU19yaXAoJXJzcCkKKyAgICAgICAgbW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9j b2RlKCVyZHgpCisgICAgICAgIG1vdmwgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlZWF4Cisg ICAgICAgIG1vdnp3bCBWQ1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCisgICAgICAgIHRlc3Ri ICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAg IGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRF UlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAgICAgbW92dyAgJXNpLFRSQVBCT1VO Q0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKLSAg ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgY29t cGF0X3Rlc3RfYWxsX2V2ZW50cwotMjogICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19l bnRyeV92ZWN0b3IoJXJzcCkKLSAgICAgICAgc3VibCAgJDIsVVJFR1NfcmlwKCVyc3ApCi0gICAg ICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdnp3bCBW Q1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElP TnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwg ICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAxYgorICAgICAg ICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBhdF9zeXNlbnRl cikKICAgICAgICAgY21wbCAgJFRSQVBfZ3BfZmF1bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3Ap CmRpZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJTW9uIE1heSAxNCAxNjo1OToxMiAyMDEyICswMTAw CisrKyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwlUaHUgTWF5IDI0IDExOjEyOjMzIDIw MTIgKzAxMDAKQEAgLTQwLDYgKzQwLDEzIEBAIHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICB0 ZXN0dyAkVFJBUF9zeXNjYWxsLDQoJXJzcCkKICAgICAgICAganogICAgaXJldF9leGl0X3RvX2d1 ZXN0CiAKKyAgICAgICAgLyogRG9uJ3QgdXNlIFNZU1JFVCBwYXRoIGlmIHRoZSByZXR1cm4gYWRk cmVzcyBpcyBub3QgY2Fub25pY2FsLiAqLworICAgICAgICBtb3ZxICA4KCVyc3ApLCVyY3gKKyAg ICAgICAgc2FycSAgJDQ3LCVyY3gKKyAgICAgICAgaW5jbCAgJWVjeAorICAgICAgICBjbXBsICAk MSwlZWN4CisgICAgICAgIGphICAgIC5MZm9yY2VfaXJldAorCiAgICAgICAgIGFkZHEgICQ4LCVy c3AKICAgICAgICAgcG9wcSAgJXJjeCAgICAgICAgICAgICAgICAgICAgIyBSSVAKICAgICAgICAg cG9wcSAgJXIxMSAgICAgICAgICAgICAgICAgICAgIyBDUwpAQCAtNTAsNiArNTcsMTAgQEAgcmVz dG9yZV9hbGxfZ3Vlc3Q6CiAgICAgICAgIHN5c3JldHEKIDE6ICAgICAgc3lzcmV0bAogCisuTGZv cmNlX2lyZXQ6CisgICAgICAgIC8qIE1pbWljIFNZU1JFVCBiZWhhdmlvci4gKi8KKyAgICAgICAg bW92cSAgOCglcnNwKSwlcmN4ICAgICAgICAgICAgIyBSSVAKKyAgICAgICAgbW92cSAgMjQoJXJz cCksJXIxMSAgICAgICAgICAgIyBSRkxBR1MKICAgICAgICAgQUxJR04KIC8qIE5vIHNwZWNpYWwg cmVnaXN0ZXIgYXNzdW1wdGlvbnMuICovCiBpcmV0X2V4aXRfdG9fZ3Vlc3Q6CkBAIC0yNzgsMTkg KzI4OSwyMSBAQCBzeXNlbnRlcl9lZmxhZ3Nfc2F2ZWQ6CiAgICAgICAgIGxlYXEgIFZDUFVfdHJh cF9ib3VuY2UoJXJieCksJXJkeAogICAgICAgICB0ZXN0cSAlcmF4LCVyYXgKICAgICAgICAgbGVh bCAgKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKLSAgICAgICAganogICAgMmYKLTE6ICAgICAg bW92cSAgVkNQVV9kb21haW4oJXJieCksJXJkaQorVU5MSUtFTFlfU1RBUlQoeiwgc3lzZW50ZXJf Z3BmKQorICAgICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJz cCkKKyAgICAgICAgc3VicSAgJDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgs VFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRf YWRkciglcmJ4KSwlcmF4CisgICAgICAgIHRlc3RiICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJi eCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VY Q0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChz eXNlbnRlcl9ncGYpCisgICAgICAgIG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAg ICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJB UEJPVU5DRV9mbGFncyglcmR4KQogICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYo JXJkaSkKICAgICAgICAgam56ICAgY29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0 ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCi0gICAgICAgIG1vdnEgIFZDUFVf Z3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxU QkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRU UkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgor ICAgICAgICBqbXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3Ry YXApCiAgICAgICAgIHB1c2hxICQwCkBAIC00ODIsNiArNDk1LDcgQEAgMTogICAgICBtb3ZxICAl cnNwLCVyZGkKICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAg ICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAg IGp6ICAgIHRlc3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxs ICBjcmVhdGVfYm91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3Mo JXJkeCkKICAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.0.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.0.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciBkOGZkNDI1YjYwZDMgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTg6NDcgMjAxMiArMDEwMApAQCAtODksNiArODksOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgZDhmZDQyNWI2MGQzIHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjE4OjQ3IDIwMTIgKzAxMDAKQEAgLTIyNyw2ICsyMjcsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjQzLDE0ICsyNDQsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IGQ4ZmQ0MjViNjBkMyB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBNYXkgMDEgMTQ6MTg6NDYgMjAxMiArMDEwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMToxODo0NyAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk4LDEyICszMDksMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ5MCw2ICs1MDMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-3.4.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-3.4.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA1MWJkMWYxNzI3NTggeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTI6NDE6MDggMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgNTFiZDFmMTcyNzU4IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDEyOjQxOjA4IDIwMTIgKzAxMDAKQEAgLTIxNSw2ICsyMTUsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjMxLDE0ICsyMzIsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IDUxYmQxZjE3Mjc1OCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCUZyaSBTZXAgMzAgMTc6MzU6MjkgMjAxMSAtMDQwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMjo0MTowOCAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk2LDEyICszMDcsMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ4MCw2ICs0OTMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --xk0dLwRkyW Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --xk0dLwRkyW-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:34 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:34 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePrZ-0003V8-VM; Tue, 12 Jun 2012 12:06:21 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePoN-0002Xf-S1 for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:04 +0000 Received: from [85.158.139.83:53523] by server-12.bemta-5.messagelabs.com id A5/CC-18374-6FF27DF4; Tue, 12 Jun 2012 12:03:02 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-16.tower-182.messagelabs.com!1339502581!25849996!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 12638 invoked from network); 12 Jun 2012 12:03:02 -0000 Received: from smtp.eu.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-16.tower-182.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:02 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966379" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:02:33 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:02:32 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePns-0006QG-Ea; Tue, 12 Jun 2012 12:02:32 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePns-0005Tn-CB; Tue, 12 Jun 2012 13:02:32 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="xk0dLwRkyW" Content-Transfer-Encoding: 7bit Message-ID: <20439.12248.291249.667993@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:02:32 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 7 (CVE-2012-0217) - PV privilege escalation X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --xk0dLwRkyW Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-0217 / XSA-7 version 9 64-bit PV guest privilege escalation vulnerability UPDATES IN VERSION 9 ==================== Public release. Previous versions were embargoed. ISSUE DESCRIPTION ================= Rafal Wojtczuk has discovered a vulnerability which can allow a 64-bit PV guest kernel running on a 64-bit hypervisor to escalate privileges to that of the host by arranging for a system call to return via sysret to a non-canonical RIP. Intel CPUs deliver the resulting exception in an undesirable processor state. IMPACT ====== Guest administrators can gain control of the host. Depending on the particular guest kernel it is also possible that non-privileged guest user processes can also elevate their privileges to that of the host. VULNERABLE SYSTEMS ================== All systems running 64 bit Xen hypervisor running 64 bit PV guests on Intel CPUs are vulnerable to this issue. Systems using AMD CPUs are not vulnerable to this privilege escalation. AMD have issued the following statement: AMD processors' SYSRET behavior is such that a non-canonical address in RCX does not generate a #GP while in CPL0. We have verified this with our architecture team, with our design team, and have performed tests that verified this on silicon. Therefore, this privilege escalation exposure is not applicable to any AMD processor. While investigating this, it was noted that some older AMD CPUs will lock up under similar circumstances, causing a denial of service. See XSA-9 for details. MITIGATION ========== This issue can be mitigated by running HVM (fully-virtualised) or 32 bit PV guests only. RESOLUTION ========== Applying the appropriate attached patch will resolve the issue. These patches also resolve the issue described in XSA-8 (CVE-2012-0128). These changes have been made to the staging Xen repositories: XSA-7: XSA-8: xen-unstable.hg 25480:76eaf5966c05 25200:80f4113be500+25204:569d6f05e1ef xen-4.1-testing.hg 23299:f08e61b9b33f 23300:0fec1afa4638 xen-4.0-testing.hg 21590:dd367837e089 21591:adb943a387c8 xen-3.4-testing.hg 19996:894aa06e4f79 19997:ddb7578abb89 PATCH INFORMATION ================= The attached patches resolve both this issue and that reported in XSA-8 (CVE-2012-0128). xen-unstable 25204:569d6f05e1ef or later xsa7-xsa8-unstable-recent.patch xen-unstable 25199:6092641e3644 or earlier xsa7-xsa8-unstable-apr16.patch Xen 4.1, 4.1.x xsa7-xsa8-xen-4.1.patch Xen 4.0, 4.0.x xsa7-xsa8-xen-4.0.patch Xen 3.4, 3.4.x xsa7-xsa8-xen-3.4.patch $ sha256sum xsa7-xsa8-*patch 00853d799d24af16b17c8bbbdb5bb5144a8a7fad31467c4be3d879244774f8d2 xsa7-xsa8-unstable-apr16.patch 71f9907a58c1a1cd601d8088faf8791923d78f77065b94dba8df2a61f512530d xsa7-xsa8-unstable-recent.patch 55fb925a7f4519ea31a0bc42d3ee83093bb7abd98b3a0e4f58591f1ae738840a xsa7-xsa8-xen-3.4.patch 6a7e39121ec1f134351fdf34f494d108500aaa4190a9f7965e81c4e96270924e xsa7-xsa8-xen-4.0.patch 52d8288718b4a833eb437fd18d92b7d412fbe01900dbd0b437744a1df4d459da xsa7-xsa8-xen-4.1.patch -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yqTAAoJEIP+FMlX6CvZntwH/jzuqabF9yGMIXQBckjZUv1E XeY9dbz1uGoMzy0mBFufwbJQqdBt89SNYDkr2BxKxSghSvBs608KHuh8giF1hzvm 8oP2K5T3Rk/jl0gdc3VlZz15Yi9kVEDUOSu2rPQLbhmiv6ht+Y2Of2cp63RioEvq G2QQouHDsipCUZV4Ow5xnPY/KBifh46uCCnLDjV5Q/6WScI8VOIreOADryOpn2+/ 8QmyCo2Sl2F+YxlbCl7k3qyqihaSONymeVg0pkJbH5LmRdTQnJX9fMJSQvfV6Bxs U4PD4ve0C9+/Usz4XFejlQLt/kv4ZNPD6QF2rXei3oElmYAVcHL2XdLVCNLbAeY= =S6KX -----END PGP SIGNATURE----- --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-recent.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-recent.patch" Content-Transfer-Encoding: base64 eDg2XzY0OiBEbyBub3QgZXhlY3V0ZSBzeXNyZXQgd2l0aCBhIG5vbi1jYW5vbmljYWwgcmV0dXJu IGFkZHJlc3MKCkNoZWNrIGZvciBub24tY2Fub25pY2FsIGd1ZXN0IFJJUCBiZWZvcmUgYXR0ZW1w dGluZyB0byBleGVjdXRlIHN5c3JldC4KSWYgc3lzcmV0IGlzIGV4ZWN1dGVkIHdpdGggYSBub24t Y2Fub25pY2FsIHZhbHVlIGluIFJDWCwgSW50ZWwgQ1BVcwp0YWtlIHRoZSBmYXVsdCBpbiByaW5n MCwgYnV0IHdlIHdpbGwgbmVjZXNzYXJpbHkgYWxyZWFkeSBoYXZlIHN3aXRjaGVkCnRvIHRoZSB0 aGUgdXNlcidzIHN0YWNrIHBvaW50ZXIuCgpUaGlzIGlzIGEgc2VjdXJpdHkgdnVsbmVyYWJpbGl0 eSwgWFNBLTcgLyBDVkUtMjAxMi0wMjE3LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPEpC ZXVsaWNoQHN1c2UuY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVs bEBjaXRyaXguY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4KVGVzdGVkLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVsbEBjaXRyaXgu Y29tPgpBY2tlZC1ieTogS2VpciBGcmFzZXIgPGtlaXIueGVuQGdtYWlsLmNvbT4KQ29tbWl0dGVk LWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KCmRpZmYgLXIgMzQw MDYyZmFmMjk4IC1yIGFkODc5MDNmZGNhMSB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9lbnRyeS5TCVdlZCBNYXkgMjMgMTE6MDY6NDkgMjAxMiAr MDEwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowMjoz NSAyMDEyICswMTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAg ICAgdGVzdHcgJFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90 b19ndWVzdAogCisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJu IGFkZHJlc3MgaXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4 CisgICAgICAgIHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21w bCAgJDEsJWVjeAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAk OCwlcnNwCiAgICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAg ICAgIHBvcHEgICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBA IHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAor Lkxmb3JjZV9pcmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAg ICAgIG1vdnEgIDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0 KCVyc3ApLCVyMTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVj aWFsIHJlZ2lzdGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0Ogo= --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-apr16.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-apr16.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgQXByIDE3IDE1OjA1OjA1 IDIwMTIgKzAyMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMTQ1LDYgKzE0NSw3IEBAIHZvaWQgX19kdW1t eV9fKHZvaWQpCiAKICAgICBPRkZTRVQoVFJBUElORk9fZWlwLCBzdHJ1Y3QgdHJhcF9pbmZvLCBh ZGRyZXNzKTsKICAgICBPRkZTRVQoVFJBUElORk9fY3MsIHN0cnVjdCB0cmFwX2luZm8sIGNzKTsK KyAgICBPRkZTRVQoVFJBUElORk9fZmxhZ3MsIHN0cnVjdCB0cmFwX2luZm8sIGZsYWdzKTsKICAg ICBERUZJTkUoVFJBUElORk9fc2l6ZW9mLCBzaXplb2Yoc3RydWN0IHRyYXBfaW5mbykpOwogICAg IEJMQU5LKCk7CiAKZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9jb21w YXQvZW50cnkuUwotLS0gYS94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBhdC9lbnRyeS5TCVR1ZSBB cHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBh dC9lbnRyeS5TCVRodSBNYXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMjEzLDYgKzIxMyw3 IEBAIDE6ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKIEVOVFJZKGNvbXBh dF9wb3N0X2hhbmRsZV9leGNlcHRpb24pCiAgICAgICAgIHRlc3RiICRUQkZfRVhDRVBUSU9OLFRS QVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50 cworLkxjb21wYXRfYm91bmNlX2V4Y2VwdGlvbjoKICAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0 ZV9ib3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCkBAIC0yMjUsMjAgKzIyNiwyMSBA QCBFTlRSWShjb21wYXRfc3lzY2FsbCkKICAgICAgICAgbGVhcSAgVkNQVV90cmFwX2JvdW5jZSgl cmJ4KSwlcmR4CiAgICAgICAgIHRlc3RsICR+MywlZXNpCiAgICAgICAgIGxlYWwgICgsJXJjeCxU QkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEgICVyYXgs VFJBUEJPVU5DRV9laXAoJXJkeCkKK1VOTElLRUxZX1NUQVJUKHosIGNvbXBhdF9zeXNjYWxsX2dw ZikKKyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJkaQorICAgICAgICBtb3Zs ICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VibCAg JDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29k ZSglcmR4KQorICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsg VFJBUElORk9fZWlwKCVyZGkpLCVlYXgKKyAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBU UkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcmRpKSwlZXNpCisgICAgICAgIHRlc3RiICQ0 LFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19mbGFncyglcmRpKQor ICAgICAgICBzZXRueiAlY2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREUoLCVyY3gsVEJGX0lOVEVSUlVQVCksJWVjeAorVU5MSUtFTFlfRU5EKGNvbXBh dF9zeXNjYWxsX2dwZikKKyAgICAgICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQog ICAgICAgICBtb3Z3ICAlc2ksVFJBUEJPVU5DRV9jcyglcmR4KQogICAgICAgICBtb3ZiICAlY2ws VFJBUEJPVU5DRV9mbGFncyglcmR4KQotICAgICAgICBjYWxsICBjb21wYXRfY3JlYXRlX2JvdW5j ZV9mcmFtZQotICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dnEgIFZDUFVfdHJhcF9jdHh0KCVyYngpLCVyc2kKLSAgICAgICAgbW92bCAgJFRSQVBfZ3BfZmF1 bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3ApCi0gICAgICAgIHN1YmwgICQyLFVSRUdTX3JpcCgl cnNwKQotICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsgVFJB UElORk9fZWlwKCVyc2kpLCVlYXgKLSAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBUUkFQ SU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcnNpKSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJG X0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAg ICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAx YgorICAgICAgICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBh dF9zeXNlbnRlcikKICAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJjeApkaWZm IC1yIDYwOTI2NDFlMzY0NCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2Fy Y2gveDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBBcHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysg Yi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowNToxOSAyMDEyICsw MTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcg JFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAog CisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3Mg aXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAg IHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVj eAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAg ICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEg ICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBAIHJlc3RvcmVf YWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9p cmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEg IDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVy MTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lz dGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjc3LDIwICsyODgs MjIgQEAgc3lzZW50ZXJfZWZsYWdzX3NhdmVkOgogICAgICAgICBsZWFxICBWQ1BVX3RyYXBfYm91 bmNlKCVyYngpLCVyZHgKICAgICAgICAgdGVzdHEgJXJheCwlcmF4CiAgICAgICAgIGxlYWwgICgs JXJjeCxUQkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEg IFZDUFVfZG9tYWluKCVyYngpLCVyZGkKK1VOTElLRUxZX1NUQVJUKHosIHN5c2VudGVyX2dwZikK KyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJzaQorICAgICAgICBtb3ZsICAk VFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VicSAgJDIs VVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2Rl KCVyZHgpCisgICAgICAgIG1vdnEgIFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBU UkFQSU5GT19laXAoJXJzaSksJXJheAorICAgICAgICB0ZXN0YiAkNCxUUkFQX2dwX2ZhdWx0ICog VFJBUElORk9fc2l6ZW9mICsgVFJBUElORk9fZmxhZ3MoJXJzaSkKKyAgICAgICAgc2V0bnogJWNs CisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4 LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChzeXNlbnRlcl9ncGYpCisgICAgICAg IG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAgICAgbW92cSAgJXJheCxUUkFQQk9V TkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYoJXJkaSkKICAgICAgICAgam56ICAg Y29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAg ICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1vdnEgIFZDUFVfdHJhcF9jdHh0KCVy YngpLCVyY3gKLSAgICAgICAgbW92bCAgJWVheCxUUkFQQk9VTkNFX2Vycm9yX2NvZGUoJXJkeCkK LSAgICAgICAgbW92cSAgVFJBUF9ncF9mYXVsdCAqIFRSQVBJTkZPX3NpemVvZiArIFRSQVBJTkZP X2VpcCglcmN4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRUUkFQX2dwX2Zh dWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgorICAgICAgICBq bXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3RyYXApCiAgICAg ICAgIHB1c2hxICQwCkBAIC00ODMsNiArNDk2LDcgQEAgMTogICAgICBtb3ZxICAlcnNwLCVyZGkK ICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAgICAgICB0ZXN0 YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIGp6ICAgIHRl c3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxsICBjcmVhdGVf Ym91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAg ICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.1.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.1.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciAzNTI0OGJlNjY5ZTcgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTI6MzMgMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjEyOjMzIDIwMTIgKzAxMDAKQEAgLTIxNCw2ICsyMTQsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjI2LDE5ICsyMjcsMjAgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAgICAgICAgIGxlYXEgIFZDUFVfdHJhcF9ib3VuY2UoJXJieCksJXJkeAogICAg ICAgICB0ZXN0bCAkfjMsJWVzaQogICAgICAgICBsZWFsICAoLCVyY3gsVEJGX0lOVEVSUlVQVCks JWVjeAotICAgICAgICBqeiAgICAyZgotMTogICAgICBtb3ZxICAlcmF4LFRSQVBCT1VOQ0VfZWlw KCVyZHgpCitVTkxJS0VMWV9TVEFSVCh6LCBjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJs ICAkMixVUkVHU19yaXAoJXJzcCkKKyAgICAgICAgbW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9j b2RlKCVyZHgpCisgICAgICAgIG1vdmwgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlZWF4Cisg ICAgICAgIG1vdnp3bCBWQ1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCisgICAgICAgIHRlc3Ri ICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAg IGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRF UlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAgICAgbW92dyAgJXNpLFRSQVBCT1VO Q0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKLSAg ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgY29t cGF0X3Rlc3RfYWxsX2V2ZW50cwotMjogICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19l bnRyeV92ZWN0b3IoJXJzcCkKLSAgICAgICAgc3VibCAgJDIsVVJFR1NfcmlwKCVyc3ApCi0gICAg ICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdnp3bCBW Q1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElP TnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwg ICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAxYgorICAgICAg ICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBhdF9zeXNlbnRl cikKICAgICAgICAgY21wbCAgJFRSQVBfZ3BfZmF1bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3Ap CmRpZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJTW9uIE1heSAxNCAxNjo1OToxMiAyMDEyICswMTAw CisrKyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwlUaHUgTWF5IDI0IDExOjEyOjMzIDIw MTIgKzAxMDAKQEAgLTQwLDYgKzQwLDEzIEBAIHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICB0 ZXN0dyAkVFJBUF9zeXNjYWxsLDQoJXJzcCkKICAgICAgICAganogICAgaXJldF9leGl0X3RvX2d1 ZXN0CiAKKyAgICAgICAgLyogRG9uJ3QgdXNlIFNZU1JFVCBwYXRoIGlmIHRoZSByZXR1cm4gYWRk cmVzcyBpcyBub3QgY2Fub25pY2FsLiAqLworICAgICAgICBtb3ZxICA4KCVyc3ApLCVyY3gKKyAg ICAgICAgc2FycSAgJDQ3LCVyY3gKKyAgICAgICAgaW5jbCAgJWVjeAorICAgICAgICBjbXBsICAk MSwlZWN4CisgICAgICAgIGphICAgIC5MZm9yY2VfaXJldAorCiAgICAgICAgIGFkZHEgICQ4LCVy c3AKICAgICAgICAgcG9wcSAgJXJjeCAgICAgICAgICAgICAgICAgICAgIyBSSVAKICAgICAgICAg cG9wcSAgJXIxMSAgICAgICAgICAgICAgICAgICAgIyBDUwpAQCAtNTAsNiArNTcsMTAgQEAgcmVz dG9yZV9hbGxfZ3Vlc3Q6CiAgICAgICAgIHN5c3JldHEKIDE6ICAgICAgc3lzcmV0bAogCisuTGZv cmNlX2lyZXQ6CisgICAgICAgIC8qIE1pbWljIFNZU1JFVCBiZWhhdmlvci4gKi8KKyAgICAgICAg bW92cSAgOCglcnNwKSwlcmN4ICAgICAgICAgICAgIyBSSVAKKyAgICAgICAgbW92cSAgMjQoJXJz cCksJXIxMSAgICAgICAgICAgIyBSRkxBR1MKICAgICAgICAgQUxJR04KIC8qIE5vIHNwZWNpYWwg cmVnaXN0ZXIgYXNzdW1wdGlvbnMuICovCiBpcmV0X2V4aXRfdG9fZ3Vlc3Q6CkBAIC0yNzgsMTkg KzI4OSwyMSBAQCBzeXNlbnRlcl9lZmxhZ3Nfc2F2ZWQ6CiAgICAgICAgIGxlYXEgIFZDUFVfdHJh cF9ib3VuY2UoJXJieCksJXJkeAogICAgICAgICB0ZXN0cSAlcmF4LCVyYXgKICAgICAgICAgbGVh bCAgKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKLSAgICAgICAganogICAgMmYKLTE6ICAgICAg bW92cSAgVkNQVV9kb21haW4oJXJieCksJXJkaQorVU5MSUtFTFlfU1RBUlQoeiwgc3lzZW50ZXJf Z3BmKQorICAgICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJz cCkKKyAgICAgICAgc3VicSAgJDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgs VFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRf YWRkciglcmJ4KSwlcmF4CisgICAgICAgIHRlc3RiICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJi eCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VY Q0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChz eXNlbnRlcl9ncGYpCisgICAgICAgIG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAg ICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJB UEJPVU5DRV9mbGFncyglcmR4KQogICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYo JXJkaSkKICAgICAgICAgam56ICAgY29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0 ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCi0gICAgICAgIG1vdnEgIFZDUFVf Z3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxU QkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRU UkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgor ICAgICAgICBqbXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3Ry YXApCiAgICAgICAgIHB1c2hxICQwCkBAIC00ODIsNiArNDk1LDcgQEAgMTogICAgICBtb3ZxICAl cnNwLCVyZGkKICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAg ICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAg IGp6ICAgIHRlc3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxs ICBjcmVhdGVfYm91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3Mo JXJkeCkKICAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.0.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.0.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciBkOGZkNDI1YjYwZDMgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTg6NDcgMjAxMiArMDEwMApAQCAtODksNiArODksOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgZDhmZDQyNWI2MGQzIHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjE4OjQ3IDIwMTIgKzAxMDAKQEAgLTIyNyw2ICsyMjcsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjQzLDE0ICsyNDQsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IGQ4ZmQ0MjViNjBkMyB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBNYXkgMDEgMTQ6MTg6NDYgMjAxMiArMDEwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMToxODo0NyAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk4LDEyICszMDksMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ5MCw2ICs1MDMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --xk0dLwRkyW Content-Type: application/octet-stream; name="xsa7-xsa8-xen-3.4.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-3.4.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA1MWJkMWYxNzI3NTggeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTI6NDE6MDggMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgNTFiZDFmMTcyNzU4IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDEyOjQxOjA4IDIwMTIgKzAxMDAKQEAgLTIxNSw2ICsyMTUsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjMxLDE0ICsyMzIsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IDUxYmQxZjE3Mjc1OCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCUZyaSBTZXAgMzAgMTc6MzU6MjkgMjAxMSAtMDQwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMjo0MTowOCAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk2LDEyICszMDcsMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ4MCw2ICs0OTMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --xk0dLwRkyW Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --xk0dLwRkyW-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:35 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:35 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePrb-0003Vh-A6; Tue, 12 Jun 2012 12:06:23 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePp4-0002lL-5s for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:46 +0000 Received: from [85.158.139.83:61187] by server-8.bemta-5.messagelabs.com id 72/E2-02058-12037DF4; Tue, 12 Jun 2012 12:03:45 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-5.tower-182.messagelabs.com!1339502624!33231507!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1983 invoked from network); 12 Jun 2012 12:03:44 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-5.tower-182.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:44 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966434" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:03:43 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:03:44 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePp1-0006Qk-Kq; Tue, 12 Jun 2012 12:03:43 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePp1-0005UW-Ig; Tue, 12 Jun 2012 13:03:43 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="GkZFEJHiah" Content-Transfer-Encoding: 7bit Message-ID: <20439.12319.545744.59925@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:03:43 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 9 (CVE-2012-2934) - PV guest host DoS (AMD erratum #121) X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --GkZFEJHiah Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-2934 / XSA-9 version 3 PV guest host Denial of Service UPDATES IN VERSION 3 ==================== Public release. Previous versions were embargoed. Remove leftover statement that CVE number had not been assigned. The correct CVE for this issue is CVE-2012-2934. ISSUE DESCRIPTION ================= A Xen user has discovered that some older AMD CPUs can be made to lock up due to AMD processor erratum #121. This issue was discovered during testing of the fix for XSA-7 (CVE-2012-0217). Although the two issues are unrelated the situations which can trigger them may overlap. REFERENCES ========== AMD Erratum #121 is described in "Revision Guide for AMD Athlon 64 and AMD Opteron Processors": http://support.amd.com/us/Processor_TechDocs/25759.pdf IMPACT ====== A guest user or administrator of a 64 bit PV guest on a vulnerable system can cause the processor to lock up, leading to a Denial of Service attack against the host. Systems which run only 32 bit guest kernels are not vulnerable. VULNERABLE SYSTEMS ================== The following 130nm and 90nm (DDR1-only) AMD processors are subject to this erratum: * First-generation AMD-Opteron(tm) single and dual core processors in either 939 or 940 packages: * AMD Opteron(tm) 100-Series Processors * AMD Opteron(tm) 200-Series Processors * AMD Opteron(tm) 800-Series Processors * AMD Athlon(tm) processors in either 754, 939 or 940 packages * AMD Sempron(tm) processor in either 754 or 939 packages * AMD Turion(tm) Mobile Technology in 754 package None of the affected processors support AMD SVM. Therefore, any system which has any HVM Xen guests is not vulnerable. This issue does not affect Intel processors. MITIGATION ========== Running a 64 bit PV guest kernel (which must necessarily be host administrator controlled) which itself contains the fix for erratum #121 will prevent unprivileged users in guests from exploiting this issue. All Windows operating systems and current versions of the Linux and Solaris kernels, for example, are known to contain the fix for erratum #121. There is no mitigation when running untrusted 64 bit guest kernels or against untrusted administrators of 64 bit guests. Systems which run only 32 bit PV guest kernels are not vulnerable. Note that this may mean only booting known good kernels or vetting any user supplied kernels to ensure they are not 64 bit. RESOLUTION ========== There is no software fix for this issue. The workaround suggested by AMD in erratum #121 cannot be applied to Xen since the relevant address is under guest control. Applying the patch will cause Xen to detect vulnerable systems and refuse to boot. A command line override is provided to allow users who accept the risks or who are able to mitigate as above to continue to do so. To activate the override add "allow_unsafe" to your hypervisor command line. This change has been made to the staging Xen repositories: xen-unstable.hg 25481:bc2f3a848f9a xen-4.1-testing.hg 23301:a9c0a89c08f2 xen-4.0-testing.hg 21592:e35c8bb53255 PATCH INFORMATION ================= xen-unstable xsa9-unstable.patch Xen 4.1, 4.1.x xsa9-xen-4.1.patch Xen 4.0, 4.0.x xsa9-xen-4.0.patch $ sha256sum xsa9-*.patch b48a2f1d5a7eb52f8533dccfb8bf0d6d403609011c1dd5915bcfcea92a5e8873 xsa9-unstable.patch 8ec1fa01b8094750e908bd5992b451e5c2acbe97ea1061e20c9244909d960262 xsa9-xen-4.0.patch cb7686178ec8a2f021c01ae9706bfb3f1f44a098dba5723f1a645d959da5f2f3 xsa9-xen-4.1.patch NOTE REGARDING EMBARGO ====================== Due to the relationship between this issue and XSA-7 (CVE-2012-0217), we have concluded that this advisory should be under the same embargo as XSA-7. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yzzAAoJEIP+FMlX6CvZXvgH/1og/ULBFEj1E5i7eySDdbMl RtFfxCXbtTcsUvBQNZ6oKLKYyumhfQPhGUyhq5epuxZVhFmYEHdztH3Gf1fQLXuN AhGLomV3vA5ANzs2Dc+jvMhM25VWGekZbqQCfV+3FhZEyiqneUGbVUrvIJlpe3LH b5g4gWgvPpsFUewTtR7MgqJgBbVi1KbIc69r1Fh3Y+i6/KczxDwGUXtcVv1BZ3HJ Qkts3oT2bEFiqUgPtZKdRnKJegRJGQipOueqQMzYO5xtzElqGJVuD9C01VK2Qxzh Og7jsvajNM+9ulw5tTkbc2p84KBKaV2zrivfLfptir5IZOhI6RN6v880iyrNvpw= =X3We -----END PGP SIGNATURE----- --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-unstable.patch" Content-Disposition: attachment; filename="xsa9-unstable.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCisrKyBi L2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCkBAIC0xMjYsNiArMTI2LDE2IEBA IE92ZXJyaWRlIFhlbidzIGxvZ2ljIGZvciBjaG9vc2luZyB0aGUgQVAKIHRoZXJlIGFyZSBtb3Jl IHRoYW4gOCBDUFVzLCBYZW4gd2lsbCBzd2l0Y2ggdG8gYGJpZ3NtcGAgb3ZlcgogYGRlZmF1bHRg LgogCisjIyMgYWxsb3dcX3Vuc2FmZQorPiBgPSA8Ym9vbGVhbj5gCisKK0ZvcmNlIGJvb3Qgb24g cG90ZW50aWFsbHkgdW5zYWZlIHN5c3RlbXMuIEJ5IGRlZmF1bHQgWGVuIHdpbGwgcmVmdXNlIHRv IGJvb3Qgb24KK3N5c3RlbXMgd2l0aCB0aGUgZm9sbG93aW5nIGVycmF0YToKKworKiBBTUQgRXJy YXR1bSAxMjEuIFByb2Nlc3NvcnMgd2l0aCB0aGlzIGVycmF0dW0gYXJlIHN1YmplY3QgdG8gYSBn dWVzdAorICB0cmlnZ2VyYWJsZSBEZW5pYWwgb2YgU2VydmljZS4gT3ZlcnJpZGUgb25seSBpZiB5 b3UgdHJ1c3QgYWxsIG9mIHlvdXIgUFYKKyAgZ3Vlc3RzLgorCiAjIyMgYXBpY1xfdmVyYm9zaXR5 CiA+IGA9IHZlcmJvc2UgfCBkZWJ1Z2AKIAotLS0gYS94ZW4vYXJjaC94ODYvY3B1L2FtZC5jCisr KyBiL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKQEAgLTMyLDYgKzMyLDkgQEAKIHN0YXRpYyBjaGFy IG9wdF9mYW1yZXZbMTRdOwogc3RyaW5nX3BhcmFtKCJjcHVpZF9tYXNrX2NwdSIsIG9wdF9mYW1y ZXYpOwogCitzdGF0aWMgYm9vbF90IG9wdF9hbGxvd191bnNhZmU7Citib29sZWFuX3BhcmFtKCJh bGxvd191bnNhZmUiLCBvcHRfYWxsb3dfdW5zYWZlKTsKKwogc3RhdGljIGlubGluZSB2b2lkIHdy bXNyX2FtZCh1bnNpZ25lZCBpbnQgaW5kZXgsIHVuc2lnbmVkIGludCBsbywgCiAJCXVuc2lnbmVk IGludCBoaSkKIHsKQEAgLTQ3OCw2ICs0ODEsMTEgQEAgc3RhdGljIHZvaWQgX19kZXZpbml0IGlu aXRfYW1kKHN0cnVjdCBjcAogCQljbGVhcl9iaXQoWDg2X0ZFQVRVUkVfTVdBSVQsIGMtPng4Nl9j YXBhYmlsaXR5KTsKIAogI2lmZGVmIF9feDg2XzY0X18KKwlpZiAoY3B1X2hhc19hbWRfZXJyYXR1 bShjLCBBTURfRVJSQVRVTV8xMjEpICYmICFvcHRfYWxsb3dfdW5zYWZlKQorCQlwYW5pYygiWGVu IHdpbGwgbm90IGJvb3Qgb24gdGhpcyBDUFUgZm9yIHNlY3VyaXR5IHJlYXNvbnMuXG4iCisJCSAg ICAgICJQYXNzIFwiYWxsb3dfdW5zYWZlXCIgaWYgeW91J3JlIHRydXN0aW5nIGFsbCB5b3VyIgor CQkgICAgICAiIChQVikgZ3Vlc3Qga2VybmVscy5cbiIpOworCiAJLyogQU1EIENQVXMgZG8gbm90 IHN1cHBvcnQgU1lTRU5URVIgb3V0c2lkZSBvZiBsZWdhY3kgbW9kZS4gKi8KIAljbGVhcl9iaXQo WDg2X0ZFQVRVUkVfU0VQLCBjLT54ODZfY2FwYWJpbGl0eSk7CiAKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9hbWQuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCkBAIC0xMjcsNiAr MTI3LDkgQEAKICNkZWZpbmUgQU1EX01PREVMX1JBTkdFX1NUQVJUKHJhbmdlKSAgICAoKChyYW5n ZSkgPj4gMTIpICYgMHhmZmYpCiAjZGVmaW5lIEFNRF9NT0RFTF9SQU5HRV9FTkQocmFuZ2UpICAg ICAgKChyYW5nZSkgJiAweGZmZikKIAorI2RlZmluZSBBTURfRVJSQVRVTV8xMjEgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgIEFNRF9MRUdBQ1lf RVJSQVRVTShBTURfTU9ERUxfUkFOR0UoMHgwZiwgMHgwLCAweDAsIDB4M2YsIDB4ZikpCisKICNk ZWZpbmUgQU1EX0VSUkFUVU1fMTcwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKICAgICBBTURfTEVHQUNZX0VSUkFUVU0oQU1EX01PREVMX1JBTkdFKDB4 MGYsIDB4MCwgMHgwLCAweDY3LCAweGYpKQogCg== --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-xen-4.1.patch" Content-Disposition: attachment; filename="xsa9-xen-4.1.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKKysrIGIveGVuL2FyY2gveDg2 L2NwdS9hbWQuYwpAQCAtMzIsNiArMzIsOSBAQAogc3RhdGljIGNoYXIgb3B0X2ZhbXJldlsxNF07 CiBzdHJpbmdfcGFyYW0oImNwdWlkX21hc2tfY3B1Iiwgb3B0X2ZhbXJldik7CiAKK3N0YXRpYyBp bnQgb3B0X2FsbG93X3Vuc2FmZTsKK2Jvb2xlYW5fcGFyYW0oImFsbG93X3Vuc2FmZSIsIG9wdF9h bGxvd191bnNhZmUpOworCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jtc3JfYW1kKHVuc2lnbmVkIGlu dCBpbmRleCwgdW5zaWduZWQgaW50IGxvLCAKIAkJdW5zaWduZWQgaW50IGhpKQogewpAQCAtNjIw LDYgKzYyMywxMSBAQCBzdGF0aWMgdm9pZCBfX2RldmluaXQgaW5pdF9hbWQoc3RydWN0IGNwCiAJ CWNsZWFyX2JpdChYODZfRkVBVFVSRV9NQ0UsIGMtPng4Nl9jYXBhYmlsaXR5KTsKIAogI2lmZGVm IF9feDg2XzY0X18KKwlpZiAoY3B1X2hhc19hbWRfZXJyYXR1bShjLCBBTURfRVJSQVRVTV8xMjEp ICYmICFvcHRfYWxsb3dfdW5zYWZlKQorCQlwYW5pYygiWGVuIHdpbGwgbm90IGJvb3Qgb24gdGhp cyBDUFUgZm9yIHNlY3VyaXR5IHJlYXNvbnMuXG4iCisJCSAgICAgICJQYXNzIFwiYWxsb3dfdW5z YWZlXCIgaWYgeW91J3JlIHRydXN0aW5nIGFsbCB5b3VyIgorCQkgICAgICAiIChQVikgZ3Vlc3Qg a2VybmVscy5cbiIpOworCiAJLyogQU1EIENQVXMgZG8gbm90IHN1cHBvcnQgU1lTRU5URVIgb3V0 c2lkZSBvZiBsZWdhY3kgbW9kZS4gKi8KIAljbGVhcl9iaXQoWDg2X0ZFQVRVUkVfU0VQLCBjLT54 ODZfY2FwYWJpbGl0eSk7CiAKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9hbWQuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCkBAIC0xMjcsNiArMTI3LDkgQEAKICNkZWZpbmUgQU1E X01PREVMX1JBTkdFX1NUQVJUKHJhbmdlKSAgICAoKChyYW5nZSkgPj4gMTIpICYgMHhmZmYpCiAj ZGVmaW5lIEFNRF9NT0RFTF9SQU5HRV9FTkQocmFuZ2UpICAgICAgKChyYW5nZSkgJiAweGZmZikK IAorI2RlZmluZSBBTURfRVJSQVRVTV8xMjEgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAorICAgIEFNRF9MRUdBQ1lfRVJSQVRVTShBTURfTU9ERUxfUkFO R0UoMHgwZiwgMHgwLCAweDAsIDB4M2YsIDB4ZikpCisKICNkZWZpbmUgQU1EX0VSUkFUVU1fMTcw ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBB TURfTEVHQUNZX0VSUkFUVU0oQU1EX01PREVMX1JBTkdFKDB4MGYsIDB4MCwgMHgwLCAweDY3LCAw eGYpKQogCg== --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-xen-4.0.patch" Content-Disposition: attachment; filename="xsa9-xen-4.0.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKKysrIGIveGVuL2FyY2gveDg2 L2NwdS9hbWQuYwpAQCAtNDEsNiArNDEsOSBAQCB2b2lkIHN0YXJ0X3N2bShzdHJ1Y3QgY3B1aW5m b194ODYgKmMpOwogaW50ZWdlcl9wYXJhbSgiY3B1aWRfbWFza19leHRfZWN4Iiwgb3B0X2NwdWlk X21hc2tfZXh0X2VjeCk7CiBpbnRlZ2VyX3BhcmFtKCJjcHVpZF9tYXNrX2V4dF9lZHgiLCBvcHRf Y3B1aWRfbWFza19leHRfZWR4KTsKIAorc3RhdGljIGludCBvcHRfYWxsb3dfdW5zYWZlOworYm9v bGVhbl9wYXJhbSgiYWxsb3dfdW5zYWZlIiwgb3B0X2FsbG93X3Vuc2FmZSk7CisKIHN0YXRpYyBp bmxpbmUgdm9pZCB3cm1zcl9hbWQodW5zaWduZWQgaW50IGluZGV4LCB1bnNpZ25lZCBpbnQgbG8s IAogCQl1bnNpZ25lZCBpbnQgaGkpCiB7CkBAIC02NDAsNiArNjQzLDExIEBAIHN0YXRpYyB2b2lk IF9fZGV2aW5pdCBpbml0X2FtZChzdHJ1Y3QgY3AKIAkJY2xlYXJfYml0KFg4Nl9GRUFUVVJFX01D RSwgYy0+eDg2X2NhcGFiaWxpdHkpOwogCiAjaWZkZWYgX194ODZfNjRfXworCWlmIChjcHVfaGFz X2FtZF9lcnJhdHVtKGMsIEFNRF9FUlJBVFVNXzEyMSkgJiYgIW9wdF9hbGxvd191bnNhZmUpCisJ CXBhbmljKCJYZW4gd2lsbCBub3QgYm9vdCBvbiB0aGlzIENQVSBmb3Igc2VjdXJpdHkgcmVhc29u cy5cbiIKKwkJICAgICAgIlBhc3MgXCJhbGxvd191bnNhZmVcIiBpZiB5b3UncmUgdHJ1c3Rpbmcg YWxsIHlvdXIiCisJCSAgICAgICIgKFBWKSBndWVzdCBrZXJuZWxzLlxuIik7CisKIAkvKiBBTUQg Q1BVcyBkbyBub3Qgc3VwcG9ydCBTWVNFTlRFUiBvdXRzaWRlIG9mIGxlZ2FjeSBtb2RlLiAqLwog CWNsZWFyX2JpdChYODZfRkVBVFVSRV9TRVAsIGMtPng4Nl9jYXBhYmlsaXR5KTsKICNlbmRpZgot LS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv YW1kLmgKQEAgLTEyNyw2ICsxMjcsOSBAQAogI2RlZmluZSBBTURfTU9ERUxfUkFOR0VfU1RBUlQo cmFuZ2UpICAgICgoKHJhbmdlKSA+PiAxMikgJiAweGZmZikKICNkZWZpbmUgQU1EX01PREVMX1JB TkdFX0VORChyYW5nZSkgICAgICAoKHJhbmdlKSAmIDB4ZmZmKQogCisjZGVmaW5lIEFNRF9FUlJB VFVNXzEyMSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CisgICAgQU1EX0xFR0FDWV9FUlJBVFVNKEFNRF9NT0RFTF9SQU5HRSgweDBmLCAweDAsIDB4MCwg MHgzZiwgMHhmKSkKKwogI2RlZmluZSBBTURfRVJSQVRVTV8xNzAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIEFNRF9MRUdBQ1lfRVJSQVRVTShB TURfTU9ERUxfUkFOR0UoMHgwZiwgMHgwLCAweDAsIDB4NjcsIDB4ZikpCiAK --GkZFEJHiah Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --GkZFEJHiah-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:35 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:35 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePrb-0003Vh-A6; Tue, 12 Jun 2012 12:06:23 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePp4-0002lL-5s for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:46 +0000 Received: from [85.158.139.83:61187] by server-8.bemta-5.messagelabs.com id 72/E2-02058-12037DF4; Tue, 12 Jun 2012 12:03:45 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-5.tower-182.messagelabs.com!1339502624!33231507!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1983 invoked from network); 12 Jun 2012 12:03:44 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-5.tower-182.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:44 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966434" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:03:43 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:03:44 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePp1-0006Qk-Kq; Tue, 12 Jun 2012 12:03:43 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePp1-0005UW-Ig; Tue, 12 Jun 2012 13:03:43 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="GkZFEJHiah" Content-Transfer-Encoding: 7bit Message-ID: <20439.12319.545744.59925@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:03:43 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 9 (CVE-2012-2934) - PV guest host DoS (AMD erratum #121) X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --GkZFEJHiah Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-2934 / XSA-9 version 3 PV guest host Denial of Service UPDATES IN VERSION 3 ==================== Public release. Previous versions were embargoed. Remove leftover statement that CVE number had not been assigned. The correct CVE for this issue is CVE-2012-2934. ISSUE DESCRIPTION ================= A Xen user has discovered that some older AMD CPUs can be made to lock up due to AMD processor erratum #121. This issue was discovered during testing of the fix for XSA-7 (CVE-2012-0217). Although the two issues are unrelated the situations which can trigger them may overlap. REFERENCES ========== AMD Erratum #121 is described in "Revision Guide for AMD Athlon 64 and AMD Opteron Processors": http://support.amd.com/us/Processor_TechDocs/25759.pdf IMPACT ====== A guest user or administrator of a 64 bit PV guest on a vulnerable system can cause the processor to lock up, leading to a Denial of Service attack against the host. Systems which run only 32 bit guest kernels are not vulnerable. VULNERABLE SYSTEMS ================== The following 130nm and 90nm (DDR1-only) AMD processors are subject to this erratum: * First-generation AMD-Opteron(tm) single and dual core processors in either 939 or 940 packages: * AMD Opteron(tm) 100-Series Processors * AMD Opteron(tm) 200-Series Processors * AMD Opteron(tm) 800-Series Processors * AMD Athlon(tm) processors in either 754, 939 or 940 packages * AMD Sempron(tm) processor in either 754 or 939 packages * AMD Turion(tm) Mobile Technology in 754 package None of the affected processors support AMD SVM. Therefore, any system which has any HVM Xen guests is not vulnerable. This issue does not affect Intel processors. MITIGATION ========== Running a 64 bit PV guest kernel (which must necessarily be host administrator controlled) which itself contains the fix for erratum #121 will prevent unprivileged users in guests from exploiting this issue. All Windows operating systems and current versions of the Linux and Solaris kernels, for example, are known to contain the fix for erratum #121. There is no mitigation when running untrusted 64 bit guest kernels or against untrusted administrators of 64 bit guests. Systems which run only 32 bit PV guest kernels are not vulnerable. Note that this may mean only booting known good kernels or vetting any user supplied kernels to ensure they are not 64 bit. RESOLUTION ========== There is no software fix for this issue. The workaround suggested by AMD in erratum #121 cannot be applied to Xen since the relevant address is under guest control. Applying the patch will cause Xen to detect vulnerable systems and refuse to boot. A command line override is provided to allow users who accept the risks or who are able to mitigate as above to continue to do so. To activate the override add "allow_unsafe" to your hypervisor command line. This change has been made to the staging Xen repositories: xen-unstable.hg 25481:bc2f3a848f9a xen-4.1-testing.hg 23301:a9c0a89c08f2 xen-4.0-testing.hg 21592:e35c8bb53255 PATCH INFORMATION ================= xen-unstable xsa9-unstable.patch Xen 4.1, 4.1.x xsa9-xen-4.1.patch Xen 4.0, 4.0.x xsa9-xen-4.0.patch $ sha256sum xsa9-*.patch b48a2f1d5a7eb52f8533dccfb8bf0d6d403609011c1dd5915bcfcea92a5e8873 xsa9-unstable.patch 8ec1fa01b8094750e908bd5992b451e5c2acbe97ea1061e20c9244909d960262 xsa9-xen-4.0.patch cb7686178ec8a2f021c01ae9706bfb3f1f44a098dba5723f1a645d959da5f2f3 xsa9-xen-4.1.patch NOTE REGARDING EMBARGO ====================== Due to the relationship between this issue and XSA-7 (CVE-2012-0217), we have concluded that this advisory should be under the same embargo as XSA-7. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yzzAAoJEIP+FMlX6CvZXvgH/1og/ULBFEj1E5i7eySDdbMl RtFfxCXbtTcsUvBQNZ6oKLKYyumhfQPhGUyhq5epuxZVhFmYEHdztH3Gf1fQLXuN AhGLomV3vA5ANzs2Dc+jvMhM25VWGekZbqQCfV+3FhZEyiqneUGbVUrvIJlpe3LH b5g4gWgvPpsFUewTtR7MgqJgBbVi1KbIc69r1Fh3Y+i6/KczxDwGUXtcVv1BZ3HJ Qkts3oT2bEFiqUgPtZKdRnKJegRJGQipOueqQMzYO5xtzElqGJVuD9C01VK2Qxzh Og7jsvajNM+9ulw5tTkbc2p84KBKaV2zrivfLfptir5IZOhI6RN6v880iyrNvpw= =X3We -----END PGP SIGNATURE----- --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-unstable.patch" Content-Disposition: attachment; filename="xsa9-unstable.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCisrKyBi L2RvY3MvbWlzYy94ZW4tY29tbWFuZC1saW5lLm1hcmtkb3duCkBAIC0xMjYsNiArMTI2LDE2IEBA IE92ZXJyaWRlIFhlbidzIGxvZ2ljIGZvciBjaG9vc2luZyB0aGUgQVAKIHRoZXJlIGFyZSBtb3Jl IHRoYW4gOCBDUFVzLCBYZW4gd2lsbCBzd2l0Y2ggdG8gYGJpZ3NtcGAgb3ZlcgogYGRlZmF1bHRg LgogCisjIyMgYWxsb3dcX3Vuc2FmZQorPiBgPSA8Ym9vbGVhbj5gCisKK0ZvcmNlIGJvb3Qgb24g cG90ZW50aWFsbHkgdW5zYWZlIHN5c3RlbXMuIEJ5IGRlZmF1bHQgWGVuIHdpbGwgcmVmdXNlIHRv IGJvb3Qgb24KK3N5c3RlbXMgd2l0aCB0aGUgZm9sbG93aW5nIGVycmF0YToKKworKiBBTUQgRXJy YXR1bSAxMjEuIFByb2Nlc3NvcnMgd2l0aCB0aGlzIGVycmF0dW0gYXJlIHN1YmplY3QgdG8gYSBn dWVzdAorICB0cmlnZ2VyYWJsZSBEZW5pYWwgb2YgU2VydmljZS4gT3ZlcnJpZGUgb25seSBpZiB5 b3UgdHJ1c3QgYWxsIG9mIHlvdXIgUFYKKyAgZ3Vlc3RzLgorCiAjIyMgYXBpY1xfdmVyYm9zaXR5 CiA+IGA9IHZlcmJvc2UgfCBkZWJ1Z2AKIAotLS0gYS94ZW4vYXJjaC94ODYvY3B1L2FtZC5jCisr KyBiL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKQEAgLTMyLDYgKzMyLDkgQEAKIHN0YXRpYyBjaGFy IG9wdF9mYW1yZXZbMTRdOwogc3RyaW5nX3BhcmFtKCJjcHVpZF9tYXNrX2NwdSIsIG9wdF9mYW1y ZXYpOwogCitzdGF0aWMgYm9vbF90IG9wdF9hbGxvd191bnNhZmU7Citib29sZWFuX3BhcmFtKCJh bGxvd191bnNhZmUiLCBvcHRfYWxsb3dfdW5zYWZlKTsKKwogc3RhdGljIGlubGluZSB2b2lkIHdy bXNyX2FtZCh1bnNpZ25lZCBpbnQgaW5kZXgsIHVuc2lnbmVkIGludCBsbywgCiAJCXVuc2lnbmVk IGludCBoaSkKIHsKQEAgLTQ3OCw2ICs0ODEsMTEgQEAgc3RhdGljIHZvaWQgX19kZXZpbml0IGlu aXRfYW1kKHN0cnVjdCBjcAogCQljbGVhcl9iaXQoWDg2X0ZFQVRVUkVfTVdBSVQsIGMtPng4Nl9j YXBhYmlsaXR5KTsKIAogI2lmZGVmIF9feDg2XzY0X18KKwlpZiAoY3B1X2hhc19hbWRfZXJyYXR1 bShjLCBBTURfRVJSQVRVTV8xMjEpICYmICFvcHRfYWxsb3dfdW5zYWZlKQorCQlwYW5pYygiWGVu IHdpbGwgbm90IGJvb3Qgb24gdGhpcyBDUFUgZm9yIHNlY3VyaXR5IHJlYXNvbnMuXG4iCisJCSAg ICAgICJQYXNzIFwiYWxsb3dfdW5zYWZlXCIgaWYgeW91J3JlIHRydXN0aW5nIGFsbCB5b3VyIgor CQkgICAgICAiIChQVikgZ3Vlc3Qga2VybmVscy5cbiIpOworCiAJLyogQU1EIENQVXMgZG8gbm90 IHN1cHBvcnQgU1lTRU5URVIgb3V0c2lkZSBvZiBsZWdhY3kgbW9kZS4gKi8KIAljbGVhcl9iaXQo WDg2X0ZFQVRVUkVfU0VQLCBjLT54ODZfY2FwYWJpbGl0eSk7CiAKLS0tIGEveGVuL2luY2x1ZGUv YXNtLXg4Ni9hbWQuaAorKysgYi94ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCkBAIC0xMjcsNiAr MTI3LDkgQEAKICNkZWZpbmUgQU1EX01PREVMX1JBTkdFX1NUQVJUKHJhbmdlKSAgICAoKChyYW5n ZSkgPj4gMTIpICYgMHhmZmYpCiAjZGVmaW5lIEFNRF9NT0RFTF9SQU5HRV9FTkQocmFuZ2UpICAg ICAgKChyYW5nZSkgJiAweGZmZikKIAorI2RlZmluZSBBTURfRVJSQVRVTV8xMjEgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAorICAgIEFNRF9MRUdBQ1lf RVJSQVRVTShBTURfTU9ERUxfUkFOR0UoMHgwZiwgMHgwLCAweDAsIDB4M2YsIDB4ZikpCisKICNk ZWZpbmUgQU1EX0VSUkFUVU1fMTcwICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgIFwKICAgICBBTURfTEVHQUNZX0VSUkFUVU0oQU1EX01PREVMX1JBTkdFKDB4 MGYsIDB4MCwgMHgwLCAweDY3LCAweGYpKQogCg== --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-xen-4.1.patch" Content-Disposition: attachment; filename="xsa9-xen-4.1.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKKysrIGIveGVuL2FyY2gveDg2 L2NwdS9hbWQuYwpAQCAtMzIsNiArMzIsOSBAQAogc3RhdGljIGNoYXIgb3B0X2ZhbXJldlsxNF07 CiBzdHJpbmdfcGFyYW0oImNwdWlkX21hc2tfY3B1Iiwgb3B0X2ZhbXJldik7CiAKK3N0YXRpYyBp bnQgb3B0X2FsbG93X3Vuc2FmZTsKK2Jvb2xlYW5fcGFyYW0oImFsbG93X3Vuc2FmZSIsIG9wdF9h bGxvd191bnNhZmUpOworCiBzdGF0aWMgaW5saW5lIHZvaWQgd3Jtc3JfYW1kKHVuc2lnbmVkIGlu dCBpbmRleCwgdW5zaWduZWQgaW50IGxvLCAKIAkJdW5zaWduZWQgaW50IGhpKQogewpAQCAtNjIw LDYgKzYyMywxMSBAQCBzdGF0aWMgdm9pZCBfX2RldmluaXQgaW5pdF9hbWQoc3RydWN0IGNwCiAJ CWNsZWFyX2JpdChYODZfRkVBVFVSRV9NQ0UsIGMtPng4Nl9jYXBhYmlsaXR5KTsKIAogI2lmZGVm IF9feDg2XzY0X18KKwlpZiAoY3B1X2hhc19hbWRfZXJyYXR1bShjLCBBTURfRVJSQVRVTV8xMjEp ICYmICFvcHRfYWxsb3dfdW5zYWZlKQorCQlwYW5pYygiWGVuIHdpbGwgbm90IGJvb3Qgb24gdGhp cyBDUFUgZm9yIHNlY3VyaXR5IHJlYXNvbnMuXG4iCisJCSAgICAgICJQYXNzIFwiYWxsb3dfdW5z YWZlXCIgaWYgeW91J3JlIHRydXN0aW5nIGFsbCB5b3VyIgorCQkgICAgICAiIChQVikgZ3Vlc3Qg a2VybmVscy5cbiIpOworCiAJLyogQU1EIENQVXMgZG8gbm90IHN1cHBvcnQgU1lTRU5URVIgb3V0 c2lkZSBvZiBsZWdhY3kgbW9kZS4gKi8KIAljbGVhcl9iaXQoWDg2X0ZFQVRVUkVfU0VQLCBjLT54 ODZfY2FwYWJpbGl0eSk7CiAKLS0tIGEveGVuL2luY2x1ZGUvYXNtLXg4Ni9hbWQuaAorKysgYi94 ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCkBAIC0xMjcsNiArMTI3LDkgQEAKICNkZWZpbmUgQU1E X01PREVMX1JBTkdFX1NUQVJUKHJhbmdlKSAgICAoKChyYW5nZSkgPj4gMTIpICYgMHhmZmYpCiAj ZGVmaW5lIEFNRF9NT0RFTF9SQU5HRV9FTkQocmFuZ2UpICAgICAgKChyYW5nZSkgJiAweGZmZikK IAorI2RlZmluZSBBTURfRVJSQVRVTV8xMjEgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgXAorICAgIEFNRF9MRUdBQ1lfRVJSQVRVTShBTURfTU9ERUxfUkFO R0UoMHgwZiwgMHgwLCAweDAsIDB4M2YsIDB4ZikpCisKICNkZWZpbmUgQU1EX0VSUkFUVU1fMTcw ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIFwKICAgICBB TURfTEVHQUNZX0VSUkFUVU0oQU1EX01PREVMX1JBTkdFKDB4MGYsIDB4MCwgMHgwLCAweDY3LCAw eGYpKQogCg== --GkZFEJHiah Content-Type: application/octet-stream; name="xsa9-xen-4.0.patch" Content-Disposition: attachment; filename="xsa9-xen-4.0.patch" Content-Transfer-Encoding: base64 eDg2LTY0OiBkZXRlY3QgcHJvY2Vzc29ycyBzdWJqZWN0IHRvIEFNRCBlcnJhdHVtICMxMjEgYW5k IHJlZnVzZSB0byBib290CgpQcm9jZXNzb3JzIHdpdGggdGhpcyBlcnJhdHVtIGFyZSBzdWJqZWN0 IHRvIGEgRG9TIGF0dGFjayBieSB1bnByaXZpbGVnZWQKZ3Vlc3QgdXNlcnMuCgpUaGlzIGlzIFhT QS05IC8gQ1ZFLTIwMDYtMDc0NC4KClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxKQmV1bGlj aEBzdXNlLmNvbT4KU2lnbmVkLW9mZi1ieTogSWFuIENhbXBiZWxsIDxpYW4uY2FtcGJlbGxAY2l0 cml4LmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9jcHUvYW1kLmMKKysrIGIveGVuL2FyY2gveDg2 L2NwdS9hbWQuYwpAQCAtNDEsNiArNDEsOSBAQCB2b2lkIHN0YXJ0X3N2bShzdHJ1Y3QgY3B1aW5m b194ODYgKmMpOwogaW50ZWdlcl9wYXJhbSgiY3B1aWRfbWFza19leHRfZWN4Iiwgb3B0X2NwdWlk X21hc2tfZXh0X2VjeCk7CiBpbnRlZ2VyX3BhcmFtKCJjcHVpZF9tYXNrX2V4dF9lZHgiLCBvcHRf Y3B1aWRfbWFza19leHRfZWR4KTsKIAorc3RhdGljIGludCBvcHRfYWxsb3dfdW5zYWZlOworYm9v bGVhbl9wYXJhbSgiYWxsb3dfdW5zYWZlIiwgb3B0X2FsbG93X3Vuc2FmZSk7CisKIHN0YXRpYyBp bmxpbmUgdm9pZCB3cm1zcl9hbWQodW5zaWduZWQgaW50IGluZGV4LCB1bnNpZ25lZCBpbnQgbG8s IAogCQl1bnNpZ25lZCBpbnQgaGkpCiB7CkBAIC02NDAsNiArNjQzLDExIEBAIHN0YXRpYyB2b2lk IF9fZGV2aW5pdCBpbml0X2FtZChzdHJ1Y3QgY3AKIAkJY2xlYXJfYml0KFg4Nl9GRUFUVVJFX01D RSwgYy0+eDg2X2NhcGFiaWxpdHkpOwogCiAjaWZkZWYgX194ODZfNjRfXworCWlmIChjcHVfaGFz X2FtZF9lcnJhdHVtKGMsIEFNRF9FUlJBVFVNXzEyMSkgJiYgIW9wdF9hbGxvd191bnNhZmUpCisJ CXBhbmljKCJYZW4gd2lsbCBub3QgYm9vdCBvbiB0aGlzIENQVSBmb3Igc2VjdXJpdHkgcmVhc29u cy5cbiIKKwkJICAgICAgIlBhc3MgXCJhbGxvd191bnNhZmVcIiBpZiB5b3UncmUgdHJ1c3Rpbmcg YWxsIHlvdXIiCisJCSAgICAgICIgKFBWKSBndWVzdCBrZXJuZWxzLlxuIik7CisKIAkvKiBBTUQg Q1BVcyBkbyBub3Qgc3VwcG9ydCBTWVNFTlRFUiBvdXRzaWRlIG9mIGxlZ2FjeSBtb2RlLiAqLwog CWNsZWFyX2JpdChYODZfRkVBVFVSRV9TRVAsIGMtPng4Nl9jYXBhYmlsaXR5KTsKICNlbmRpZgot LS0gYS94ZW4vaW5jbHVkZS9hc20teDg2L2FtZC5oCisrKyBiL3hlbi9pbmNsdWRlL2FzbS14ODYv YW1kLmgKQEAgLTEyNyw2ICsxMjcsOSBAQAogI2RlZmluZSBBTURfTU9ERUxfUkFOR0VfU1RBUlQo cmFuZ2UpICAgICgoKHJhbmdlKSA+PiAxMikgJiAweGZmZikKICNkZWZpbmUgQU1EX01PREVMX1JB TkdFX0VORChyYW5nZSkgICAgICAoKHJhbmdlKSAmIDB4ZmZmKQogCisjZGVmaW5lIEFNRF9FUlJB VFVNXzEyMSAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBc CisgICAgQU1EX0xFR0FDWV9FUlJBVFVNKEFNRF9NT0RFTF9SQU5HRSgweDBmLCAweDAsIDB4MCwg MHgzZiwgMHhmKSkKKwogI2RlZmluZSBBTURfRVJSQVRVTV8xNzAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgXAogICAgIEFNRF9MRUdBQ1lfRVJSQVRVTShB TURfTU9ERUxfUkFOR0UoMHgwZiwgMHgwLCAweDAsIDB4NjcsIDB4ZikpCiAK --GkZFEJHiah Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --GkZFEJHiah-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:36 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePra-0003VM-Ka; Tue, 12 Jun 2012 12:06:22 +0000 Received: from mail6.bemta4.messagelabs.com ([85.158.143.247]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePoh-0002dk-EX for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:23 +0000 Received: from [85.158.143.99:64771] by server-1.bemta-4.messagelabs.com id 3E/91-24392-A0037DF4; Tue, 12 Jun 2012 12:03:22 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-9.tower-216.messagelabs.com!1339502601!30118335!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13741 invoked from network); 12 Jun 2012 12:03:22 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-9.tower-216.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:22 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966420" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:03:19 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:03:19 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePod-0006Qb-2T; Tue, 12 Jun 2012 12:03:19 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePod-0005U2-1b; Tue, 12 Jun 2012 13:03:19 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="dbC35hETsu" Content-Transfer-Encoding: 7bit Message-ID: <20439.12295.26429.618451@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:03:19 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 8 (CVE-2012-0218) - syscall/enter guest DoS X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --dbC35hETsu Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-0218 / XSA-8 version 7 guest denial of service on syscall/sysenter exception generation UPDATES IN VERSION 7 ==================== Public release. Previous versions were embargoed. ISSUE DESCRIPTION ================= When guest user code running inside a Xen guest operating system attempts to execute a syscall or sysenter instruction, but when the guest operating system has not registered a handler for that instruction, a General Protection Fault may need to be injected into the guest. It has been discovered that the code in Xen which does this fails to clear a flag requesting exception injection, with the result that a future exception taken by the guest and handled entirely inside Xen will also be injected into the guest despite Xen having handled it already, probably crashing the guest. IMPACT ====== User space processes on some guest operating systems may be able to crash the guest. VULNERABLE SYSTEMS ================== HVM guests are not vulnerable. 32- and 64-bit PV guests may be vulnerable, depending on the CPU hardware, the guest operating system, and its exact kernel version and configuration. MITIGATION ========== This issue can be mitigated by running HVM (fully-virtualised). In some cases this issue can be mitigated by upgrading the guest kernel to one which installs hooks for sysenter and/or syscall, as applicable. RESOLUTION ========== Applying the appropriate attached patch will resolve the issue. These patches also resolve the (more serious) issue described in XSA-7 (CVE-2012-0217). These changes have been made to the staging Xen repositories: XSA-7: XSA-8: xen-unstable.hg 25480:76eaf5966c05 25200:80f4113be500+25204:569d6f05e1ef xen-4.1-testing.hg 23299:f08e61b9b33f 23300:0fec1afa4638 xen-4.0-testing.hg 21590:dd367837e089 21591:adb943a387c8 xen-3.4-testing.hg 19996:894aa06e4f79 19997:ddb7578abb89 PATCH INFORMATION ================= The attached patches resolve both this issue and that reported in XSA-7 (CVE-2012-0217). xen-unstable 25204:569d6f05e1ef or later xsa7-xsa8-unstable-recent.patch xen-unstable 25199:6092641e3644 or earlier xsa7-xsa8-unstable-apr16.patch Xen 4.1, 4.1.x xsa7-xsa8-xen-4.1.patch Xen 4.0, 4.0.x xsa7-xsa8-xen-4.0.patch Xen 3.4, 3.4.x xsa7-xsa8-xen-3.4.patch $ sha256sum xsa7-xsa8-*patch 00853d799d24af16b17c8bbbdb5bb5144a8a7fad31467c4be3d879244774f8d2 xsa7-xsa8-unstable-apr16.patch 71f9907a58c1a1cd601d8088faf8791923d78f77065b94dba8df2a61f512530d xsa7-xsa8-unstable-recent.patch 55fb925a7f4519ea31a0bc42d3ee83093bb7abd98b3a0e4f58591f1ae738840a xsa7-xsa8-xen-3.4.patch 6a7e39121ec1f134351fdf34f494d108500aaa4190a9f7965e81c4e96270924e xsa7-xsa8-xen-4.0.patch 52d8288718b4a833eb437fd18d92b7d412fbe01900dbd0b437744a1df4d459da xsa7-xsa8-xen-4.1.patch NOTE REGARDING EMBARGO ====================== The fix for this issue has already been published as xen-unstable.hg changesets 25200:80f4113be500 and 25204:569d6f05e1ef. However, this has not been flagged as a security problem, and since the affected area of code is the same as that for XSA-7 (CVE-2012-0217), we have concluded that this advisory should be under the same embargo as XSA-7. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yqMAAoJEIP+FMlX6CvZQRoH/1Do71YkaMvKoPo/VCHqUuB1 5mJve/SiTK5Y5kggnLfnpZeuLjlntHCT5F//Do7N21WDVdwZXFBItlvjhKyNGA0Y ohqzqzAQ0c2l/mE3ToaLhhtuFb8U06q8Ud+pQ9QbMHHpJvGXPzDbNG12L/fZDwyf ZbMqB2j8+TVuRXPlbdZabNUAcZ+HOJHb1NloKCbX0qwMG4p5FJ3OdkDX7r5OjPKj sIJAaltBINGjRrqYMLB4UUQdrftu1ftfU/GFVYy8+t3uNj0fBgkCPUlGbbQs2SF2 +VtLUUG6rzVlRdHyhVMswz3sZtR7Tow6xwPk3Sr4yfrI15rH2pUJI7if8vZ1ZQ8= =elZi -----END PGP SIGNATURE----- --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-recent.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-recent.patch" Content-Transfer-Encoding: base64 eDg2XzY0OiBEbyBub3QgZXhlY3V0ZSBzeXNyZXQgd2l0aCBhIG5vbi1jYW5vbmljYWwgcmV0dXJu IGFkZHJlc3MKCkNoZWNrIGZvciBub24tY2Fub25pY2FsIGd1ZXN0IFJJUCBiZWZvcmUgYXR0ZW1w dGluZyB0byBleGVjdXRlIHN5c3JldC4KSWYgc3lzcmV0IGlzIGV4ZWN1dGVkIHdpdGggYSBub24t Y2Fub25pY2FsIHZhbHVlIGluIFJDWCwgSW50ZWwgQ1BVcwp0YWtlIHRoZSBmYXVsdCBpbiByaW5n MCwgYnV0IHdlIHdpbGwgbmVjZXNzYXJpbHkgYWxyZWFkeSBoYXZlIHN3aXRjaGVkCnRvIHRoZSB0 aGUgdXNlcidzIHN0YWNrIHBvaW50ZXIuCgpUaGlzIGlzIGEgc2VjdXJpdHkgdnVsbmVyYWJpbGl0 eSwgWFNBLTcgLyBDVkUtMjAxMi0wMjE3LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPEpC ZXVsaWNoQHN1c2UuY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVs bEBjaXRyaXguY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4KVGVzdGVkLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVsbEBjaXRyaXgu Y29tPgpBY2tlZC1ieTogS2VpciBGcmFzZXIgPGtlaXIueGVuQGdtYWlsLmNvbT4KQ29tbWl0dGVk LWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KCmRpZmYgLXIgMzQw MDYyZmFmMjk4IC1yIGFkODc5MDNmZGNhMSB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9lbnRyeS5TCVdlZCBNYXkgMjMgMTE6MDY6NDkgMjAxMiAr MDEwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowMjoz NSAyMDEyICswMTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAg ICAgdGVzdHcgJFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90 b19ndWVzdAogCisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJu IGFkZHJlc3MgaXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4 CisgICAgICAgIHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21w bCAgJDEsJWVjeAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAk OCwlcnNwCiAgICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAg ICAgIHBvcHEgICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBA IHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAor Lkxmb3JjZV9pcmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAg ICAgIG1vdnEgIDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0 KCVyc3ApLCVyMTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVj aWFsIHJlZ2lzdGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0Ogo= --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-apr16.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-apr16.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgQXByIDE3IDE1OjA1OjA1 IDIwMTIgKzAyMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMTQ1LDYgKzE0NSw3IEBAIHZvaWQgX19kdW1t eV9fKHZvaWQpCiAKICAgICBPRkZTRVQoVFJBUElORk9fZWlwLCBzdHJ1Y3QgdHJhcF9pbmZvLCBh ZGRyZXNzKTsKICAgICBPRkZTRVQoVFJBUElORk9fY3MsIHN0cnVjdCB0cmFwX2luZm8sIGNzKTsK KyAgICBPRkZTRVQoVFJBUElORk9fZmxhZ3MsIHN0cnVjdCB0cmFwX2luZm8sIGZsYWdzKTsKICAg ICBERUZJTkUoVFJBUElORk9fc2l6ZW9mLCBzaXplb2Yoc3RydWN0IHRyYXBfaW5mbykpOwogICAg IEJMQU5LKCk7CiAKZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9jb21w YXQvZW50cnkuUwotLS0gYS94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBhdC9lbnRyeS5TCVR1ZSBB cHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBh dC9lbnRyeS5TCVRodSBNYXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMjEzLDYgKzIxMyw3 IEBAIDE6ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKIEVOVFJZKGNvbXBh dF9wb3N0X2hhbmRsZV9leGNlcHRpb24pCiAgICAgICAgIHRlc3RiICRUQkZfRVhDRVBUSU9OLFRS QVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50 cworLkxjb21wYXRfYm91bmNlX2V4Y2VwdGlvbjoKICAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0 ZV9ib3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCkBAIC0yMjUsMjAgKzIyNiwyMSBA QCBFTlRSWShjb21wYXRfc3lzY2FsbCkKICAgICAgICAgbGVhcSAgVkNQVV90cmFwX2JvdW5jZSgl cmJ4KSwlcmR4CiAgICAgICAgIHRlc3RsICR+MywlZXNpCiAgICAgICAgIGxlYWwgICgsJXJjeCxU QkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEgICVyYXgs VFJBUEJPVU5DRV9laXAoJXJkeCkKK1VOTElLRUxZX1NUQVJUKHosIGNvbXBhdF9zeXNjYWxsX2dw ZikKKyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJkaQorICAgICAgICBtb3Zs ICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VibCAg JDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29k ZSglcmR4KQorICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsg VFJBUElORk9fZWlwKCVyZGkpLCVlYXgKKyAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBU UkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcmRpKSwlZXNpCisgICAgICAgIHRlc3RiICQ0 LFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19mbGFncyglcmRpKQor ICAgICAgICBzZXRueiAlY2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREUoLCVyY3gsVEJGX0lOVEVSUlVQVCksJWVjeAorVU5MSUtFTFlfRU5EKGNvbXBh dF9zeXNjYWxsX2dwZikKKyAgICAgICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQog ICAgICAgICBtb3Z3ICAlc2ksVFJBUEJPVU5DRV9jcyglcmR4KQogICAgICAgICBtb3ZiICAlY2ws VFJBUEJPVU5DRV9mbGFncyglcmR4KQotICAgICAgICBjYWxsICBjb21wYXRfY3JlYXRlX2JvdW5j ZV9mcmFtZQotICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dnEgIFZDUFVfdHJhcF9jdHh0KCVyYngpLCVyc2kKLSAgICAgICAgbW92bCAgJFRSQVBfZ3BfZmF1 bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3ApCi0gICAgICAgIHN1YmwgICQyLFVSRUdTX3JpcCgl cnNwKQotICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsgVFJB UElORk9fZWlwKCVyc2kpLCVlYXgKLSAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBUUkFQ SU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcnNpKSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJG X0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAg ICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAx YgorICAgICAgICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBh dF9zeXNlbnRlcikKICAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJjeApkaWZm IC1yIDYwOTI2NDFlMzY0NCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2Fy Y2gveDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBBcHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysg Yi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowNToxOSAyMDEyICsw MTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcg JFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAog CisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3Mg aXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAg IHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVj eAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAg ICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEg ICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBAIHJlc3RvcmVf YWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9p cmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEg IDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVy MTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lz dGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjc3LDIwICsyODgs MjIgQEAgc3lzZW50ZXJfZWZsYWdzX3NhdmVkOgogICAgICAgICBsZWFxICBWQ1BVX3RyYXBfYm91 bmNlKCVyYngpLCVyZHgKICAgICAgICAgdGVzdHEgJXJheCwlcmF4CiAgICAgICAgIGxlYWwgICgs JXJjeCxUQkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEg IFZDUFVfZG9tYWluKCVyYngpLCVyZGkKK1VOTElLRUxZX1NUQVJUKHosIHN5c2VudGVyX2dwZikK KyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJzaQorICAgICAgICBtb3ZsICAk VFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VicSAgJDIs VVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2Rl KCVyZHgpCisgICAgICAgIG1vdnEgIFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBU UkFQSU5GT19laXAoJXJzaSksJXJheAorICAgICAgICB0ZXN0YiAkNCxUUkFQX2dwX2ZhdWx0ICog VFJBUElORk9fc2l6ZW9mICsgVFJBUElORk9fZmxhZ3MoJXJzaSkKKyAgICAgICAgc2V0bnogJWNs CisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4 LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChzeXNlbnRlcl9ncGYpCisgICAgICAg IG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAgICAgbW92cSAgJXJheCxUUkFQQk9V TkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYoJXJkaSkKICAgICAgICAgam56ICAg Y29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAg ICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1vdnEgIFZDUFVfdHJhcF9jdHh0KCVy YngpLCVyY3gKLSAgICAgICAgbW92bCAgJWVheCxUUkFQQk9VTkNFX2Vycm9yX2NvZGUoJXJkeCkK LSAgICAgICAgbW92cSAgVFJBUF9ncF9mYXVsdCAqIFRSQVBJTkZPX3NpemVvZiArIFRSQVBJTkZP X2VpcCglcmN4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRUUkFQX2dwX2Zh dWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgorICAgICAgICBq bXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3RyYXApCiAgICAg ICAgIHB1c2hxICQwCkBAIC00ODMsNiArNDk2LDcgQEAgMTogICAgICBtb3ZxICAlcnNwLCVyZGkK ICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAgICAgICB0ZXN0 YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIGp6ICAgIHRl c3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxsICBjcmVhdGVf Ym91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAg ICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.1.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.1.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciAzNTI0OGJlNjY5ZTcgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTI6MzMgMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjEyOjMzIDIwMTIgKzAxMDAKQEAgLTIxNCw2ICsyMTQsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjI2LDE5ICsyMjcsMjAgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAgICAgICAgIGxlYXEgIFZDUFVfdHJhcF9ib3VuY2UoJXJieCksJXJkeAogICAg ICAgICB0ZXN0bCAkfjMsJWVzaQogICAgICAgICBsZWFsICAoLCVyY3gsVEJGX0lOVEVSUlVQVCks JWVjeAotICAgICAgICBqeiAgICAyZgotMTogICAgICBtb3ZxICAlcmF4LFRSQVBCT1VOQ0VfZWlw KCVyZHgpCitVTkxJS0VMWV9TVEFSVCh6LCBjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJs ICAkMixVUkVHU19yaXAoJXJzcCkKKyAgICAgICAgbW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9j b2RlKCVyZHgpCisgICAgICAgIG1vdmwgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlZWF4Cisg ICAgICAgIG1vdnp3bCBWQ1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCisgICAgICAgIHRlc3Ri ICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAg IGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRF UlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAgICAgbW92dyAgJXNpLFRSQVBCT1VO Q0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKLSAg ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgY29t cGF0X3Rlc3RfYWxsX2V2ZW50cwotMjogICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19l bnRyeV92ZWN0b3IoJXJzcCkKLSAgICAgICAgc3VibCAgJDIsVVJFR1NfcmlwKCVyc3ApCi0gICAg ICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdnp3bCBW Q1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElP TnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwg ICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAxYgorICAgICAg ICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBhdF9zeXNlbnRl cikKICAgICAgICAgY21wbCAgJFRSQVBfZ3BfZmF1bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3Ap CmRpZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJTW9uIE1heSAxNCAxNjo1OToxMiAyMDEyICswMTAw CisrKyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwlUaHUgTWF5IDI0IDExOjEyOjMzIDIw MTIgKzAxMDAKQEAgLTQwLDYgKzQwLDEzIEBAIHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICB0 ZXN0dyAkVFJBUF9zeXNjYWxsLDQoJXJzcCkKICAgICAgICAganogICAgaXJldF9leGl0X3RvX2d1 ZXN0CiAKKyAgICAgICAgLyogRG9uJ3QgdXNlIFNZU1JFVCBwYXRoIGlmIHRoZSByZXR1cm4gYWRk cmVzcyBpcyBub3QgY2Fub25pY2FsLiAqLworICAgICAgICBtb3ZxICA4KCVyc3ApLCVyY3gKKyAg ICAgICAgc2FycSAgJDQ3LCVyY3gKKyAgICAgICAgaW5jbCAgJWVjeAorICAgICAgICBjbXBsICAk MSwlZWN4CisgICAgICAgIGphICAgIC5MZm9yY2VfaXJldAorCiAgICAgICAgIGFkZHEgICQ4LCVy c3AKICAgICAgICAgcG9wcSAgJXJjeCAgICAgICAgICAgICAgICAgICAgIyBSSVAKICAgICAgICAg cG9wcSAgJXIxMSAgICAgICAgICAgICAgICAgICAgIyBDUwpAQCAtNTAsNiArNTcsMTAgQEAgcmVz dG9yZV9hbGxfZ3Vlc3Q6CiAgICAgICAgIHN5c3JldHEKIDE6ICAgICAgc3lzcmV0bAogCisuTGZv cmNlX2lyZXQ6CisgICAgICAgIC8qIE1pbWljIFNZU1JFVCBiZWhhdmlvci4gKi8KKyAgICAgICAg bW92cSAgOCglcnNwKSwlcmN4ICAgICAgICAgICAgIyBSSVAKKyAgICAgICAgbW92cSAgMjQoJXJz cCksJXIxMSAgICAgICAgICAgIyBSRkxBR1MKICAgICAgICAgQUxJR04KIC8qIE5vIHNwZWNpYWwg cmVnaXN0ZXIgYXNzdW1wdGlvbnMuICovCiBpcmV0X2V4aXRfdG9fZ3Vlc3Q6CkBAIC0yNzgsMTkg KzI4OSwyMSBAQCBzeXNlbnRlcl9lZmxhZ3Nfc2F2ZWQ6CiAgICAgICAgIGxlYXEgIFZDUFVfdHJh cF9ib3VuY2UoJXJieCksJXJkeAogICAgICAgICB0ZXN0cSAlcmF4LCVyYXgKICAgICAgICAgbGVh bCAgKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKLSAgICAgICAganogICAgMmYKLTE6ICAgICAg bW92cSAgVkNQVV9kb21haW4oJXJieCksJXJkaQorVU5MSUtFTFlfU1RBUlQoeiwgc3lzZW50ZXJf Z3BmKQorICAgICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJz cCkKKyAgICAgICAgc3VicSAgJDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgs VFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRf YWRkciglcmJ4KSwlcmF4CisgICAgICAgIHRlc3RiICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJi eCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VY Q0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChz eXNlbnRlcl9ncGYpCisgICAgICAgIG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAg ICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJB UEJPVU5DRV9mbGFncyglcmR4KQogICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYo JXJkaSkKICAgICAgICAgam56ICAgY29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0 ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCi0gICAgICAgIG1vdnEgIFZDUFVf Z3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxU QkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRU UkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgor ICAgICAgICBqbXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3Ry YXApCiAgICAgICAgIHB1c2hxICQwCkBAIC00ODIsNiArNDk1LDcgQEAgMTogICAgICBtb3ZxICAl cnNwLCVyZGkKICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAg ICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAg IGp6ICAgIHRlc3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxs ICBjcmVhdGVfYm91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3Mo JXJkeCkKICAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.0.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.0.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciBkOGZkNDI1YjYwZDMgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTg6NDcgMjAxMiArMDEwMApAQCAtODksNiArODksOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgZDhmZDQyNWI2MGQzIHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjE4OjQ3IDIwMTIgKzAxMDAKQEAgLTIyNyw2ICsyMjcsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjQzLDE0ICsyNDQsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IGQ4ZmQ0MjViNjBkMyB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBNYXkgMDEgMTQ6MTg6NDYgMjAxMiArMDEwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMToxODo0NyAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk4LDEyICszMDksMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ5MCw2ICs1MDMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-3.4.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-3.4.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA1MWJkMWYxNzI3NTggeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTI6NDE6MDggMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgNTFiZDFmMTcyNzU4IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDEyOjQxOjA4IDIwMTIgKzAxMDAKQEAgLTIxNSw2ICsyMTUsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjMxLDE0ICsyMzIsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IDUxYmQxZjE3Mjc1OCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCUZyaSBTZXAgMzAgMTc6MzU6MjkgMjAxMSAtMDQwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMjo0MTowOCAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk2LDEyICszMDcsMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ4MCw2ICs0OTMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --dbC35hETsu Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --dbC35hETsu-- From xen-announce-bounces@lists.xen.org Tue Jun 12 12:08:36 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 12 Jun 2012 12:08:36 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePra-0003VM-Ka; Tue, 12 Jun 2012 12:06:22 +0000 Received: from mail6.bemta4.messagelabs.com ([85.158.143.247]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SePoh-0002dk-EX for xen-announce@lists.xensource.com; Tue, 12 Jun 2012 12:03:23 +0000 Received: from [85.158.143.99:64771] by server-1.bemta-4.messagelabs.com id 3E/91-24392-A0037DF4; Tue, 12 Jun 2012 12:03:22 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-9.tower-216.messagelabs.com!1339502601!30118335!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDIyMTU=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 13741 invoked from network); 12 Jun 2012 12:03:22 -0000 Received: from smtp.ctxuk.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-9.tower-216.messagelabs.com with RC4-SHA encrypted SMTP; 12 Jun 2012 12:03:22 -0000 X-IronPort-AV: E=Sophos;i="4.75,757,1330905600"; d="scan'208";a="12966420" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 12 Jun 2012 12:03:19 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 12 Jun 2012 13:03:19 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1SePod-0006Qb-2T; Tue, 12 Jun 2012 12:03:19 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1SePod-0005U2-1b; Tue, 12 Jun 2012 13:03:19 +0100 MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="dbC35hETsu" Content-Transfer-Encoding: 7bit Message-ID: <20439.12295.26429.618451@mariner.uk.xensource.com> Date: Tue, 12 Jun 2012 13:03:19 +0100 From: Xen.org security team To: xen-announce@lists.xensource.com, xen-devel@lists.xensource.com, xen-users@lists.xensource.com, oss-security@lists.openwall.com X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Tue, 12 Jun 2012 12:06:20 +0000 Subject: [Xen-announce] Xen Security Advisory 8 (CVE-2012-0218) - syscall/enter guest DoS X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org --dbC35hETsu Content-Type: text/plain; charset="us-ascii" Content-Description: message body text Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2012-0218 / XSA-8 version 7 guest denial of service on syscall/sysenter exception generation UPDATES IN VERSION 7 ==================== Public release. Previous versions were embargoed. ISSUE DESCRIPTION ================= When guest user code running inside a Xen guest operating system attempts to execute a syscall or sysenter instruction, but when the guest operating system has not registered a handler for that instruction, a General Protection Fault may need to be injected into the guest. It has been discovered that the code in Xen which does this fails to clear a flag requesting exception injection, with the result that a future exception taken by the guest and handled entirely inside Xen will also be injected into the guest despite Xen having handled it already, probably crashing the guest. IMPACT ====== User space processes on some guest operating systems may be able to crash the guest. VULNERABLE SYSTEMS ================== HVM guests are not vulnerable. 32- and 64-bit PV guests may be vulnerable, depending on the CPU hardware, the guest operating system, and its exact kernel version and configuration. MITIGATION ========== This issue can be mitigated by running HVM (fully-virtualised). In some cases this issue can be mitigated by upgrading the guest kernel to one which installs hooks for sysenter and/or syscall, as applicable. RESOLUTION ========== Applying the appropriate attached patch will resolve the issue. These patches also resolve the (more serious) issue described in XSA-7 (CVE-2012-0217). These changes have been made to the staging Xen repositories: XSA-7: XSA-8: xen-unstable.hg 25480:76eaf5966c05 25200:80f4113be500+25204:569d6f05e1ef xen-4.1-testing.hg 23299:f08e61b9b33f 23300:0fec1afa4638 xen-4.0-testing.hg 21590:dd367837e089 21591:adb943a387c8 xen-3.4-testing.hg 19996:894aa06e4f79 19997:ddb7578abb89 PATCH INFORMATION ================= The attached patches resolve both this issue and that reported in XSA-7 (CVE-2012-0217). xen-unstable 25204:569d6f05e1ef or later xsa7-xsa8-unstable-recent.patch xen-unstable 25199:6092641e3644 or earlier xsa7-xsa8-unstable-apr16.patch Xen 4.1, 4.1.x xsa7-xsa8-xen-4.1.patch Xen 4.0, 4.0.x xsa7-xsa8-xen-4.0.patch Xen 3.4, 3.4.x xsa7-xsa8-xen-3.4.patch $ sha256sum xsa7-xsa8-*patch 00853d799d24af16b17c8bbbdb5bb5144a8a7fad31467c4be3d879244774f8d2 xsa7-xsa8-unstable-apr16.patch 71f9907a58c1a1cd601d8088faf8791923d78f77065b94dba8df2a61f512530d xsa7-xsa8-unstable-recent.patch 55fb925a7f4519ea31a0bc42d3ee83093bb7abd98b3a0e4f58591f1ae738840a xsa7-xsa8-xen-3.4.patch 6a7e39121ec1f134351fdf34f494d108500aaa4190a9f7965e81c4e96270924e xsa7-xsa8-xen-4.0.patch 52d8288718b4a833eb437fd18d92b7d412fbe01900dbd0b437744a1df4d459da xsa7-xsa8-xen-4.1.patch NOTE REGARDING EMBARGO ====================== The fix for this issue has already been published as xen-unstable.hg changesets 25200:80f4113be500 and 25204:569d6f05e1ef. However, this has not been flagged as a security problem, and since the affected area of code is the same as that for XSA-7 (CVE-2012-0217), we have concluded that this advisory should be under the same embargo as XSA-7. -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.10 (GNU/Linux) iQEcBAEBAgAGBQJP1yqMAAoJEIP+FMlX6CvZQRoH/1Do71YkaMvKoPo/VCHqUuB1 5mJve/SiTK5Y5kggnLfnpZeuLjlntHCT5F//Do7N21WDVdwZXFBItlvjhKyNGA0Y ohqzqzAQ0c2l/mE3ToaLhhtuFb8U06q8Ud+pQ9QbMHHpJvGXPzDbNG12L/fZDwyf ZbMqB2j8+TVuRXPlbdZabNUAcZ+HOJHb1NloKCbX0qwMG4p5FJ3OdkDX7r5OjPKj sIJAaltBINGjRrqYMLB4UUQdrftu1ftfU/GFVYy8+t3uNj0fBgkCPUlGbbQs2SF2 +VtLUUG6rzVlRdHyhVMswz3sZtR7Tow6xwPk3Sr4yfrI15rH2pUJI7if8vZ1ZQ8= =elZi -----END PGP SIGNATURE----- --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-recent.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-recent.patch" Content-Transfer-Encoding: base64 eDg2XzY0OiBEbyBub3QgZXhlY3V0ZSBzeXNyZXQgd2l0aCBhIG5vbi1jYW5vbmljYWwgcmV0dXJu IGFkZHJlc3MKCkNoZWNrIGZvciBub24tY2Fub25pY2FsIGd1ZXN0IFJJUCBiZWZvcmUgYXR0ZW1w dGluZyB0byBleGVjdXRlIHN5c3JldC4KSWYgc3lzcmV0IGlzIGV4ZWN1dGVkIHdpdGggYSBub24t Y2Fub25pY2FsIHZhbHVlIGluIFJDWCwgSW50ZWwgQ1BVcwp0YWtlIHRoZSBmYXVsdCBpbiByaW5n MCwgYnV0IHdlIHdpbGwgbmVjZXNzYXJpbHkgYWxyZWFkeSBoYXZlIHN3aXRjaGVkCnRvIHRoZSB0 aGUgdXNlcidzIHN0YWNrIHBvaW50ZXIuCgpUaGlzIGlzIGEgc2VjdXJpdHkgdnVsbmVyYWJpbGl0 eSwgWFNBLTcgLyBDVkUtMjAxMi0wMjE3LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxpY2ggPEpC ZXVsaWNoQHN1c2UuY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVs bEBjaXRyaXguY29tPgpTaWduZWQtb2ZmLWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUu Y2l0cml4LmNvbT4KVGVzdGVkLWJ5OiBJYW4gQ2FtcGJlbGwgPElhbi5DYW1wYmVsbEBjaXRyaXgu Y29tPgpBY2tlZC1ieTogS2VpciBGcmFzZXIgPGtlaXIueGVuQGdtYWlsLmNvbT4KQ29tbWl0dGVk LWJ5OiBJYW4gSmFja3NvbiA8aWFuLmphY2tzb25AZXUuY2l0cml4LmNvbT4KCmRpZmYgLXIgMzQw MDYyZmFmMjk4IC1yIGFkODc5MDNmZGNhMSB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9lbnRyeS5TCVdlZCBNYXkgMjMgMTE6MDY6NDkgMjAxMiAr MDEwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowMjoz NSAyMDEyICswMTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAg ICAgdGVzdHcgJFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90 b19ndWVzdAogCisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJu IGFkZHJlc3MgaXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4 CisgICAgICAgIHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21w bCAgJDEsJWVjeAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAk OCwlcnNwCiAgICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAg ICAgIHBvcHEgICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBA IHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAor Lkxmb3JjZV9pcmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAg ICAgIG1vdnEgIDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0 KCVyc3ApLCVyMTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVj aWFsIHJlZ2lzdGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0Ogo= --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-unstable-apr16.patch" Content-Disposition: attachment; filename="xsa7-xsa8-unstable-apr16.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgQXByIDE3IDE1OjA1OjA1 IDIwMTIgKzAyMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMTQ1LDYgKzE0NSw3IEBAIHZvaWQgX19kdW1t eV9fKHZvaWQpCiAKICAgICBPRkZTRVQoVFJBUElORk9fZWlwLCBzdHJ1Y3QgdHJhcF9pbmZvLCBh ZGRyZXNzKTsKICAgICBPRkZTRVQoVFJBUElORk9fY3MsIHN0cnVjdCB0cmFwX2luZm8sIGNzKTsK KyAgICBPRkZTRVQoVFJBUElORk9fZmxhZ3MsIHN0cnVjdCB0cmFwX2luZm8sIGZsYWdzKTsKICAg ICBERUZJTkUoVFJBUElORk9fc2l6ZW9mLCBzaXplb2Yoc3RydWN0IHRyYXBfaW5mbykpOwogICAg IEJMQU5LKCk7CiAKZGlmZiAtciA2MDkyNjQxZTM2NDQgeGVuL2FyY2gveDg2L3g4Nl82NC9jb21w YXQvZW50cnkuUwotLS0gYS94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBhdC9lbnRyeS5TCVR1ZSBB cHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysgYi94ZW4vYXJjaC94ODYveDg2XzY0L2NvbXBh dC9lbnRyeS5TCVRodSBNYXkgMjQgMTE6MDU6MTkgMjAxMiArMDEwMApAQCAtMjEzLDYgKzIxMyw3 IEBAIDE6ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKIEVOVFJZKGNvbXBh dF9wb3N0X2hhbmRsZV9leGNlcHRpb24pCiAgICAgICAgIHRlc3RiICRUQkZfRVhDRVBUSU9OLFRS QVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50 cworLkxjb21wYXRfYm91bmNlX2V4Y2VwdGlvbjoKICAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0 ZV9ib3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCkBAIC0yMjUsMjAgKzIyNiwyMSBA QCBFTlRSWShjb21wYXRfc3lzY2FsbCkKICAgICAgICAgbGVhcSAgVkNQVV90cmFwX2JvdW5jZSgl cmJ4KSwlcmR4CiAgICAgICAgIHRlc3RsICR+MywlZXNpCiAgICAgICAgIGxlYWwgICgsJXJjeCxU QkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEgICVyYXgs VFJBUEJPVU5DRV9laXAoJXJkeCkKK1VOTElLRUxZX1NUQVJUKHosIGNvbXBhdF9zeXNjYWxsX2dw ZikKKyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJkaQorICAgICAgICBtb3Zs ICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VibCAg JDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29k ZSglcmR4KQorICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsg VFJBUElORk9fZWlwKCVyZGkpLCVlYXgKKyAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBU UkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcmRpKSwlZXNpCisgICAgICAgIHRlc3RiICQ0 LFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBUUkFQSU5GT19mbGFncyglcmRpKQor ICAgICAgICBzZXRueiAlY2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREUoLCVyY3gsVEJGX0lOVEVSUlVQVCksJWVjeAorVU5MSUtFTFlfRU5EKGNvbXBh dF9zeXNjYWxsX2dwZikKKyAgICAgICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQog ICAgICAgICBtb3Z3ICAlc2ksVFJBUEJPVU5DRV9jcyglcmR4KQogICAgICAgICBtb3ZiICAlY2ws VFJBUEJPVU5DRV9mbGFncyglcmR4KQotICAgICAgICBjYWxsICBjb21wYXRfY3JlYXRlX2JvdW5j ZV9mcmFtZQotICAgICAgICBqbXAgICBjb21wYXRfdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dnEgIFZDUFVfdHJhcF9jdHh0KCVyYngpLCVyc2kKLSAgICAgICAgbW92bCAgJFRSQVBfZ3BfZmF1 bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3ApCi0gICAgICAgIHN1YmwgICQyLFVSRUdTX3JpcCgl cnNwKQotICAgICAgICBtb3ZsICBUUkFQX2dwX2ZhdWx0ICogVFJBUElORk9fc2l6ZW9mICsgVFJB UElORk9fZWlwKCVyc2kpLCVlYXgKLSAgICAgICAgbW92endsIFRSQVBfZ3BfZmF1bHQgKiBUUkFQ SU5GT19zaXplb2YgKyBUUkFQSU5GT19jcyglcnNpKSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJG X0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAg ICAgIG1vdmwgICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAx YgorICAgICAgICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBh dF9zeXNlbnRlcikKICAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJjeApkaWZm IC1yIDYwOTI2NDFlMzY0NCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2Fy Y2gveDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBBcHIgMTcgMTU6MDU6MDUgMjAxMiArMDIwMAorKysg Yi94ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMTowNToxOSAyMDEyICsw MTAwCkBAIC00MCw2ICs0MCwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcg JFRSQVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAog CisgICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3Mg aXMgbm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAg IHNhcnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVj eAorICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAg ICAgICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEg ICVyMTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTUwLDYgKzU3LDEwIEBAIHJlc3RvcmVf YWxsX2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9p cmV0OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEg IDgoJXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVy MTEgICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lz dGVyIGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjc3LDIwICsyODgs MjIgQEAgc3lzZW50ZXJfZWZsYWdzX3NhdmVkOgogICAgICAgICBsZWFxICBWQ1BVX3RyYXBfYm91 bmNlKCVyYngpLCVyZHgKICAgICAgICAgdGVzdHEgJXJheCwlcmF4CiAgICAgICAgIGxlYWwgICgs JXJjeCxUQkZfSU5URVJSVVBUKSwlZWN4Ci0gICAgICAgIGp6ICAgIDJmCi0xOiAgICAgIG1vdnEg IFZDUFVfZG9tYWluKCVyYngpLCVyZGkKK1VOTElLRUxZX1NUQVJUKHosIHN5c2VudGVyX2dwZikK KyAgICAgICAgbW92cSAgVkNQVV90cmFwX2N0eHQoJXJieCksJXJzaQorICAgICAgICBtb3ZsICAk VFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJzcCkKKyAgICAgICAgc3VicSAgJDIs VVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2Rl KCVyZHgpCisgICAgICAgIG1vdnEgIFRSQVBfZ3BfZmF1bHQgKiBUUkFQSU5GT19zaXplb2YgKyBU UkFQSU5GT19laXAoJXJzaSksJXJheAorICAgICAgICB0ZXN0YiAkNCxUUkFQX2dwX2ZhdWx0ICog VFJBUElORk9fc2l6ZW9mICsgVFJBUElORk9fZmxhZ3MoJXJzaSkKKyAgICAgICAgc2V0bnogJWNs CisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4 LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChzeXNlbnRlcl9ncGYpCisgICAgICAg IG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAgICAgbW92cSAgJXJheCxUUkFQQk9V TkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJBUEJPVU5DRV9mbGFncyglcmR4KQog ICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYoJXJkaSkKICAgICAgICAgam56ICAg Y29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAg ICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1vdnEgIFZDUFVfdHJhcF9jdHh0KCVy YngpLCVyY3gKLSAgICAgICAgbW92bCAgJWVheCxUUkFQQk9VTkNFX2Vycm9yX2NvZGUoJXJkeCkK LSAgICAgICAgbW92cSAgVFJBUF9ncF9mYXVsdCAqIFRSQVBJTkZPX3NpemVvZiArIFRSQVBJTkZP X2VpcCglcmN4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBU SU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRUUkFQX2dwX2Zh dWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgorICAgICAgICBq bXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3RyYXApCiAgICAg ICAgIHB1c2hxICQwCkBAIC00ODMsNiArNDk2LDcgQEAgMTogICAgICBtb3ZxICAlcnNwLCVyZGkK ICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAgICAgICB0ZXN0 YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIGp6ICAgIHRl c3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxsICBjcmVhdGVf Ym91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAg ICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.1.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.1.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciAzNTI0OGJlNjY5ZTcgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTI6MzMgMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlNb24gTWF5IDE0IDE2OjU5OjEy IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjEyOjMzIDIwMTIgKzAxMDAKQEAgLTIxNCw2ICsyMTQsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjI2LDE5ICsyMjcsMjAgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAgICAgICAgIGxlYXEgIFZDUFVfdHJhcF9ib3VuY2UoJXJieCksJXJkeAogICAg ICAgICB0ZXN0bCAkfjMsJWVzaQogICAgICAgICBsZWFsICAoLCVyY3gsVEJGX0lOVEVSUlVQVCks JWVjeAotICAgICAgICBqeiAgICAyZgotMTogICAgICBtb3ZxICAlcmF4LFRSQVBCT1VOQ0VfZWlw KCVyZHgpCitVTkxJS0VMWV9TVEFSVCh6LCBjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJs ICAkMixVUkVHU19yaXAoJXJzcCkKKyAgICAgICAgbW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9j b2RlKCVyZHgpCisgICAgICAgIG1vdmwgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlZWF4Cisg ICAgICAgIG1vdnp3bCBWQ1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCisgICAgICAgIHRlc3Ri ICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAg IGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRF UlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChjb21wYXRfc3lzY2FsbF9ncGYpCisgICAgICAgIG1v dnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAgICAgbW92dyAgJXNpLFRSQVBCT1VO Q0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKLSAg ICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgY29t cGF0X3Rlc3RfYWxsX2V2ZW50cwotMjogICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19l bnRyeV92ZWN0b3IoJXJzcCkKLSAgICAgICAgc3VibCAgJDIsVVJFR1NfcmlwKCVyc3ApCi0gICAg ICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdnp3bCBW Q1BVX2dwX2ZhdWx0X3NlbCglcmJ4KSwlZXNpCi0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElP TnxUQkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwg ICQwLFRSQVBCT1VOQ0VfZXJyb3JfY29kZSglcmR4KQotICAgICAgICBqbXAgICAxYgorICAgICAg ICBqbXAgICAuTGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAKIEVOVFJZKGNvbXBhdF9zeXNlbnRl cikKICAgICAgICAgY21wbCAgJFRSQVBfZ3BfZmF1bHQsVVJFR1NfZW50cnlfdmVjdG9yKCVyc3Ap CmRpZmYgLXIgMzUyNDhiZTY2OWU3IHhlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwotLS0gYS94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJTW9uIE1heSAxNCAxNjo1OToxMiAyMDEyICswMTAw CisrKyBiL3hlbi9hcmNoL3g4Ni94ODZfNjQvZW50cnkuUwlUaHUgTWF5IDI0IDExOjEyOjMzIDIw MTIgKzAxMDAKQEAgLTQwLDYgKzQwLDEzIEBAIHJlc3RvcmVfYWxsX2d1ZXN0OgogICAgICAgICB0 ZXN0dyAkVFJBUF9zeXNjYWxsLDQoJXJzcCkKICAgICAgICAganogICAgaXJldF9leGl0X3RvX2d1 ZXN0CiAKKyAgICAgICAgLyogRG9uJ3QgdXNlIFNZU1JFVCBwYXRoIGlmIHRoZSByZXR1cm4gYWRk cmVzcyBpcyBub3QgY2Fub25pY2FsLiAqLworICAgICAgICBtb3ZxICA4KCVyc3ApLCVyY3gKKyAg ICAgICAgc2FycSAgJDQ3LCVyY3gKKyAgICAgICAgaW5jbCAgJWVjeAorICAgICAgICBjbXBsICAk MSwlZWN4CisgICAgICAgIGphICAgIC5MZm9yY2VfaXJldAorCiAgICAgICAgIGFkZHEgICQ4LCVy c3AKICAgICAgICAgcG9wcSAgJXJjeCAgICAgICAgICAgICAgICAgICAgIyBSSVAKICAgICAgICAg cG9wcSAgJXIxMSAgICAgICAgICAgICAgICAgICAgIyBDUwpAQCAtNTAsNiArNTcsMTAgQEAgcmVz dG9yZV9hbGxfZ3Vlc3Q6CiAgICAgICAgIHN5c3JldHEKIDE6ICAgICAgc3lzcmV0bAogCisuTGZv cmNlX2lyZXQ6CisgICAgICAgIC8qIE1pbWljIFNZU1JFVCBiZWhhdmlvci4gKi8KKyAgICAgICAg bW92cSAgOCglcnNwKSwlcmN4ICAgICAgICAgICAgIyBSSVAKKyAgICAgICAgbW92cSAgMjQoJXJz cCksJXIxMSAgICAgICAgICAgIyBSRkxBR1MKICAgICAgICAgQUxJR04KIC8qIE5vIHNwZWNpYWwg cmVnaXN0ZXIgYXNzdW1wdGlvbnMuICovCiBpcmV0X2V4aXRfdG9fZ3Vlc3Q6CkBAIC0yNzgsMTkg KzI4OSwyMSBAQCBzeXNlbnRlcl9lZmxhZ3Nfc2F2ZWQ6CiAgICAgICAgIGxlYXEgIFZDUFVfdHJh cF9ib3VuY2UoJXJieCksJXJkeAogICAgICAgICB0ZXN0cSAlcmF4LCVyYXgKICAgICAgICAgbGVh bCAgKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKLSAgICAgICAganogICAgMmYKLTE6ICAgICAg bW92cSAgVkNQVV9kb21haW4oJXJieCksJXJkaQorVU5MSUtFTFlfU1RBUlQoeiwgc3lzZW50ZXJf Z3BmKQorICAgICAgICBtb3ZsICAkVFJBUF9ncF9mYXVsdCxVUkVHU19lbnRyeV92ZWN0b3IoJXJz cCkKKyAgICAgICAgc3VicSAgJDIsVVJFR1NfcmlwKCVyc3ApCisgICAgICAgIG1vdmwgICVlYXgs VFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRf YWRkciglcmJ4KSwlcmF4CisgICAgICAgIHRlc3RiICQ0LFZDUFVfZ3BfZmF1bHRfZmxhZ3MoJXJi eCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwgIFRCRl9FWENFUFRJT058VEJGX0VY Q0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQpLCVlY3gKK1VOTElLRUxZX0VORChz eXNlbnRlcl9ncGYpCisgICAgICAgIG1vdnEgIFZDUFVfZG9tYWluKCVyYngpLCVyZGkKICAgICAg ICAgbW92cSAgJXJheCxUUkFQQk9VTkNFX2VpcCglcmR4KQogICAgICAgICBtb3ZiICAlY2wsVFJB UEJPVU5DRV9mbGFncyglcmR4KQogICAgICAgICB0ZXN0YiAkMSxET01BSU5faXNfMzJiaXRfcHYo JXJkaSkKICAgICAgICAgam56ICAgY29tcGF0X3N5c2VudGVyCi0gICAgICAgIGNhbGwgIGNyZWF0 ZV9ib3VuY2VfZnJhbWUKLSAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCi0yOiAgICAgIG1v dmwgICVlYXgsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCi0gICAgICAgIG1vdnEgIFZDUFVf Z3BfZmF1bHRfYWRkciglcmJ4KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxU QkZfRVhDRVBUSU9OX0VSUkNPREV8VEJGX0lOVEVSUlVQVCksJWNsCi0gICAgICAgIG1vdmwgICRU UkFQX2dwX2ZhdWx0LFVSRUdTX2VudHJ5X3ZlY3RvciglcnNwKQotICAgICAgICBqbXAgICAxYgor ICAgICAgICBqbXAgICAuTGJvdW5jZV9leGNlcHRpb24KIAogRU5UUlkoaW50ODBfZGlyZWN0X3Ry YXApCiAgICAgICAgIHB1c2hxICQwCkBAIC00ODIsNiArNDk1LDcgQEAgMTogICAgICBtb3ZxICAl cnNwLCVyZGkKICAgICAgICAgam56ICAgY29tcGF0X3Bvc3RfaGFuZGxlX2V4Y2VwdGlvbgogICAg ICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAg IGp6ICAgIHRlc3RfYWxsX2V2ZW50cworLkxib3VuY2VfZXhjZXB0aW9uOgogICAgICAgICBjYWxs ICBjcmVhdGVfYm91bmNlX2ZyYW1lCiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3Mo JXJkeCkKICAgICAgICAgam1wICAgdGVzdF9hbGxfZXZlbnRzCg== --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-4.0.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-4.0.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciBkOGZkNDI1YjYwZDMgeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTE6MTg6NDcgMjAxMiArMDEwMApAQCAtODksNiArODksOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgZDhmZDQyNWI2MGQzIHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUdWUgTWF5IDAxIDE0OjE4OjQ2 IDIwMTIgKzAxMDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDExOjE4OjQ3IDIwMTIgKzAxMDAKQEAgLTIyNyw2ICsyMjcsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjQzLDE0ICsyNDQsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IGQ4ZmQ0MjViNjBkMyB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCVR1ZSBNYXkgMDEgMTQ6MTg6NDYgMjAxMiArMDEwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMToxODo0NyAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk4LDEyICszMDksMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ5MCw2ICs1MDMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --dbC35hETsu Content-Type: application/octet-stream; name="xsa7-xsa8-xen-3.4.patch" Content-Disposition: attachment; filename="xsa7-xsa8-xen-3.4.patch" Content-Transfer-Encoding: base64 ZGlmZiAtciA1MWJkMWYxNzI3NTggeGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCi0t LSBhL3hlbi9hcmNoL3g4Ni94ODZfNjQvYXNtLW9mZnNldHMuYwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9hc20tb2Zmc2V0cy5jCVRodSBN YXkgMjQgMTI6NDE6MDggMjAxMiArMDEwMApAQCAtOTAsNiArOTAsOCBAQCB2b2lkIF9fZHVtbXlf Xyh2b2lkKQogICAgICAgICAgICBhcmNoLmd1ZXN0X2NvbnRleHQudHJhcF9jdHh0W1RSQVBfZ3Bf ZmF1bHRdLmFkZHJlc3MpOwogICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X3NlbCwgc3RydWN0IHZj cHUsCiAgICAgICAgICAgIGFyY2guZ3Vlc3RfY29udGV4dC50cmFwX2N0eHRbVFJBUF9ncF9mYXVs dF0uY3MpOworICAgIE9GRlNFVChWQ1BVX2dwX2ZhdWx0X2ZsYWdzLCBzdHJ1Y3QgdmNwdSwKKyAg ICAgICAgICAgYXJjaC5ndWVzdF9jb250ZXh0LnRyYXBfY3R4dFtUUkFQX2dwX2ZhdWx0XS5mbGFn cyk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NwLCBzdHJ1Y3QgdmNwdSwgYXJjaC5ndWVzdF9j b250ZXh0Lmtlcm5lbF9zcCk7CiAgICAgT0ZGU0VUKFZDUFVfa2VybmVsX3NzLCBzdHJ1Y3QgdmNw dSwgYXJjaC5ndWVzdF9jb250ZXh0Lmtlcm5lbF9zcyk7CiAgICAgT0ZGU0VUKFZDUFVfZ3Vlc3Rf Y29udGV4dF9mbGFncywgc3RydWN0IHZjcHUsIGFyY2guZ3Vlc3RfY29udGV4dC5mbGFncyk7CmRp ZmYgLXIgNTFiZDFmMTcyNzU4IHhlbi9hcmNoL3g4Ni94ODZfNjQvY29tcGF0L2VudHJ5LlMKLS0t IGEveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlGcmkgU2VwIDMwIDE3OjM1OjI5 IDIwMTEgLTA0MDAKKysrIGIveGVuL2FyY2gveDg2L3g4Nl82NC9jb21wYXQvZW50cnkuUwlUaHUg TWF5IDI0IDEyOjQxOjA4IDIwMTIgKzAxMDAKQEAgLTIxNSw2ICsyMTUsNyBAQCAxOiAgICAgIGNh bGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1lCiBFTlRSWShjb21wYXRfcG9zdF9oYW5kbGVf ZXhjZXB0aW9uKQogICAgICAgICB0ZXN0YiAkVEJGX0VYQ0VQVElPTixUUkFQQk9VTkNFX2ZsYWdz KCVyZHgpCiAgICAgICAgIGp6ICAgIGNvbXBhdF90ZXN0X2FsbF9ldmVudHMKKy5MY29tcGF0X2Jv dW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNvbXBhdF9jcmVhdGVfYm91bmNlX2ZyYW1l CiAgICAgICAgIG1vdmIgICQwLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAgam1wICAg Y29tcGF0X3Rlc3RfYWxsX2V2ZW50cwpAQCAtMjMxLDE0ICsyMzIsMTUgQEAgRU5UUlkoY29tcGF0 X3N5c2NhbGwpCiAxOiAgICAgIG1vdnEgICVyYXgsVFJBUEJPVU5DRV9laXAoJXJkeCkKICAgICAg ICAgbW92dyAgJXNpLFRSQVBCT1VOQ0VfY3MoJXJkeCkKICAgICAgICAgbW92YiAgJWNsLFRSQVBC T1VOQ0VfZmxhZ3MoJXJkeCkKLSAgICAgICAgY2FsbCAgY29tcGF0X2NyZWF0ZV9ib3VuY2VfZnJh bWUKLSAgICAgICAgam1wICAgY29tcGF0X3Rlc3RfYWxsX2V2ZW50cworICAgICAgICBqbXAgICAu TGNvbXBhdF9ib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVS RUdTX2VudHJ5X3ZlY3RvciglcnNwKQogICAgICAgICBzdWJsICAkMixVUkVHU19yaXAoJXJzcCkK ICAgICAgICAgbW92cSAgVkNQVV9ncF9mYXVsdF9hZGRyKCVyYngpLCVyYXgKICAgICAgICAgbW92 endsIFZDUFVfZ3BfZmF1bHRfc2VsKCVyYngpLCVlc2kKLSAgICAgICAgbW92YiAgJChUQkZfRVhD RVBUSU9OfFRCRl9FWENFUFRJT05fRVJSQ09ERXxUQkZfSU5URVJSVVBUKSwlY2wKICAgICAgICAg bW92bCAgJDAsVFJBUEJPVU5DRV9lcnJvcl9jb2RlKCVyZHgpCisgICAgICAgIHRlc3RiICQ0LFZD UFVfZ3BfZmF1bHRfZmxhZ3MoJXJieCkKKyAgICAgICAgc2V0bnogJWNsCisgICAgICAgIGxlYWwg IFRCRl9FWENFUFRJT058VEJGX0VYQ0VQVElPTl9FUlJDT0RFKCwlcmN4LFRCRl9JTlRFUlJVUFQp LCVlY3gKICAgICAgICAgam1wICAgMWIKIAogRU5UUlkoY29tcGF0X3N5c2VudGVyKQpkaWZmIC1y IDUxYmQxZjE3Mjc1OCB4ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMKLS0tIGEveGVuL2FyY2gv eDg2L3g4Nl82NC9lbnRyeS5TCUZyaSBTZXAgMzAgMTc6MzU6MjkgMjAxMSAtMDQwMAorKysgYi94 ZW4vYXJjaC94ODYveDg2XzY0L2VudHJ5LlMJVGh1IE1heSAyNCAxMjo0MTowOCAyMDEyICswMTAw CkBAIC01MSw2ICs1MSwxMyBAQCByZXN0b3JlX2FsbF9ndWVzdDoKICAgICAgICAgdGVzdHcgJFRS QVBfc3lzY2FsbCw0KCVyc3ApCiAgICAgICAgIGp6ICAgIGlyZXRfZXhpdF90b19ndWVzdAogCisg ICAgICAgIC8qIERvbid0IHVzZSBTWVNSRVQgcGF0aCBpZiB0aGUgcmV0dXJuIGFkZHJlc3MgaXMg bm90IGNhbm9uaWNhbC4gKi8KKyAgICAgICAgbW92cSAgOCglcnNwKSwlcmN4CisgICAgICAgIHNh cnEgICQ0NywlcmN4CisgICAgICAgIGluY2wgICVlY3gKKyAgICAgICAgY21wbCAgJDEsJWVjeAor ICAgICAgICBqYSAgICAuTGZvcmNlX2lyZXQKKwogICAgICAgICBhZGRxICAkOCwlcnNwCiAgICAg ICAgIHBvcHEgICVyY3ggICAgICAgICAgICAgICAgICAgICMgUklQCiAgICAgICAgIHBvcHEgICVy MTEgICAgICAgICAgICAgICAgICAgICMgQ1MKQEAgLTYxLDYgKzY4LDEwIEBAIHJlc3RvcmVfYWxs X2d1ZXN0OgogICAgICAgICBzeXNyZXRxCiAxOiAgICAgIHN5c3JldGwKIAorLkxmb3JjZV9pcmV0 OgorICAgICAgICAvKiBNaW1pYyBTWVNSRVQgYmVoYXZpb3IuICovCisgICAgICAgIG1vdnEgIDgo JXJzcCksJXJjeCAgICAgICAgICAgICMgUklQCisgICAgICAgIG1vdnEgIDI0KCVyc3ApLCVyMTEg ICAgICAgICAgICMgUkZMQUdTCiAgICAgICAgIEFMSUdOCiAvKiBObyBzcGVjaWFsIHJlZ2lzdGVy IGFzc3VtcHRpb25zLiAqLwogaXJldF9leGl0X3RvX2d1ZXN0OgpAQCAtMjk2LDEyICszMDcsMTQg QEAgMTogICAgICBtb3ZxICBWQ1BVX2RvbWFpbiglcmJ4KSwlcmRpCiAgICAgICAgIG1vdmIgICVj bCxUUkFQQk9VTkNFX2ZsYWdzKCVyZHgpCiAgICAgICAgIHRlc3RiICQxLERPTUFJTl9pc18zMmJp dF9wdiglcmRpKQogICAgICAgICBqbnogICBjb21wYXRfc3lzZW50ZXIKLSAgICAgICAgY2FsbCAg Y3JlYXRlX2JvdW5jZV9mcmFtZQotICAgICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMKKyAgICAg ICAgam1wICAgLkxib3VuY2VfZXhjZXB0aW9uCiAyOiAgICAgIG1vdmwgICVlYXgsVFJBUEJPVU5D RV9lcnJvcl9jb2RlKCVyZHgpCiAgICAgICAgIG1vdnEgIFZDUFVfZ3BfZmF1bHRfYWRkciglcmJ4 KSwlcmF4Ci0gICAgICAgIG1vdmIgICQoVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNP REV8VEJGX0lOVEVSUlVQVCksJWNsCiAgICAgICAgIG1vdmwgICRUUkFQX2dwX2ZhdWx0LFVSRUdT X2VudHJ5X3ZlY3RvciglcnNwKQorICAgICAgICBzdWJxICAkMixVUkVHU19yaXAoJXJzcCkKKyAg ICAgICAgdGVzdGIgJDQsVkNQVV9ncF9mYXVsdF9mbGFncyglcmJ4KQorICAgICAgICBzZXRueiAl Y2wKKyAgICAgICAgbGVhbCAgVEJGX0VYQ0VQVElPTnxUQkZfRVhDRVBUSU9OX0VSUkNPREUoLCVy Y3gsVEJGX0lOVEVSUlVQVCksJWVjeAogICAgICAgICBqbXAgICAxYgogCiBFTlRSWShpbnQ4MF9k aXJlY3RfdHJhcCkKQEAgLTQ4MCw2ICs0OTMsNyBAQCAxOiAgICAgIG1vdnEgICVyc3AsJXJkaQog ICAgICAgICBqbnogICBjb21wYXRfcG9zdF9oYW5kbGVfZXhjZXB0aW9uCiAgICAgICAgIHRlc3Ri ICRUQkZfRVhDRVBUSU9OLFRSQVBCT1VOQ0VfZmxhZ3MoJXJkeCkKICAgICAgICAganogICAgdGVz dF9hbGxfZXZlbnRzCisuTGJvdW5jZV9leGNlcHRpb246CiAgICAgICAgIGNhbGwgIGNyZWF0ZV9i b3VuY2VfZnJhbWUKICAgICAgICAgbW92YiAgJDAsVFJBUEJPVU5DRV9mbGFncyglcmR4KQogICAg ICAgICBqbXAgICB0ZXN0X2FsbF9ldmVudHMK --dbC35hETsu Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce --dbC35hETsu-- From xen-announce-bounces@lists.xen.org Wed Jun 27 14:57:26 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 27 Jun 2012 14:57:26 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SjtdG-0001dF-Rn; Wed, 27 Jun 2012 14:54:14 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Sh3BQ-0006Xq-Oa for xen-announce@lists.xen.org; Tue, 19 Jun 2012 18:29:44 +0000 Received: from [193.109.254.147:6015] by server-10.bemta-14.messagelabs.com id 4C/69-05433-815C0EF4; Tue, 19 Jun 2012 18:29:44 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1340130583!10460133!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDEyOTQ=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1943 invoked from network); 19 Jun 2012 18:29:43 -0000 Received: from smtp.eu.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-4.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 19 Jun 2012 18:29:43 -0000 X-IronPort-AV: E=Sophos;i="4.75,799,1330905600"; d="scan'208";a="13109306" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 19 Jun 2012 18:29:42 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 19 Jun 2012 19:29:42 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1Sh2zG-0006hp-6c; Tue, 19 Jun 2012 18:17:10 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1Sh2zG-0007V0-5n; Tue, 19 Jun 2012 19:17:10 +0100 From: Ian Jackson MIME-Version: 1.0 Message-ID: <20448.49702.165323.218158@mariner.uk.xensource.com> Date: Tue, 19 Jun 2012 19:17:10 +0100 To: xen-announce@lists.xen.org, xen-users@lists.xen.org X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Wed, 27 Jun 2012 14:54:13 +0000 Subject: [Xen-announce] Security vulnerability process, and CVE-2012-0217 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list Reply-To: xen-devel@lists.xen.org List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org The Xen.org security response team is charged with implementing the Xen security response process, the current version of which can be found here: http://www.xen.org/projects/security_vulnerability_process.html Over the past two months we on that team have been involved with XSA-7 / CVE-2012-0217 and its various fallout. During this exercise we have encountered some problems with the process. The process needs improvement. Also, we have had to make some difficult decisions. We feel it is essential for keeping us honest that we explain to the community what we did, and when. A message starting this discussion has just been posted to the xen-devel mailing list: http://lists.xen.org/archives/html/xen-devel/2012-06/msg01072.html The outcome of this discussion will be a set of changes to be agreed on and/or voted on using the existing Xen.org governance processes: http://www.xen.org/projects/governance.html This discussion will take place on xen-devel. We expect it to take some weeks. We welcome the views of everyone in the Xen community - please come and have your say. Thanks for your attention, Ian. on behalf of the Xen.org security response team _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce From xen-announce-bounces@lists.xen.org Wed Jun 27 14:57:26 2012 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 27 Jun 2012 14:57:26 +0000 Received: from localhost ([127.0.0.1] helo=lists.xen.org) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1SjtdG-0001dF-Rn; Wed, 27 Jun 2012 14:54:14 +0000 Received: from mail6.bemta14.messagelabs.com ([193.109.254.103]) by lists.xen.org with esmtp (Exim 4.72) (envelope-from ) id 1Sh3BQ-0006Xq-Oa for xen-announce@lists.xen.org; Tue, 19 Jun 2012 18:29:44 +0000 Received: from [193.109.254.147:6015] by server-10.bemta-14.messagelabs.com id 4C/69-05433-815C0EF4; Tue, 19 Jun 2012 18:29:44 +0000 X-Env-Sender: Ian.Jackson@eu.citrix.com X-Msg-Ref: server-4.tower-27.messagelabs.com!1340130583!10460133!1 X-Originating-IP: [62.200.22.115] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjIuMjAwLjIyLjExNSA9PiAxMDEyOTQ=\n X-StarScan-Version: 6.5.10; banners=-,-,- X-VirusChecked: Checked Received: (qmail 1943 invoked from network); 19 Jun 2012 18:29:43 -0000 Received: from smtp.eu.citrix.com (HELO SMTP.EU.CITRIX.COM) (62.200.22.115) by server-4.tower-27.messagelabs.com with RC4-SHA encrypted SMTP; 19 Jun 2012 18:29:43 -0000 X-IronPort-AV: E=Sophos;i="4.75,799,1330905600"; d="scan'208";a="13109306" Received: from lonpmailmx01.citrite.net ([10.30.203.162]) by LONPIPO01.EU.CITRIX.COM with ESMTP/TLS/RC4-MD5; 19 Jun 2012 18:29:42 +0000 Received: from norwich.cam.xci-test.com (10.80.248.129) by smtprelay.citrix.com (10.30.203.162) with Microsoft SMTP Server id 8.3.213.0; Tue, 19 Jun 2012 19:29:42 +0100 Received: from mariner.cam.xci-test.com ([10.80.2.22] helo=mariner.uk.xensource.com ident=Debian-exim) by norwich.cam.xci-test.com with esmtp (Exim 4.72) (envelope-from ) id 1Sh2zG-0006hp-6c; Tue, 19 Jun 2012 18:17:10 +0000 Received: from iwj by mariner.uk.xensource.com with local (Exim 4.72) (envelope-from ) id 1Sh2zG-0007V0-5n; Tue, 19 Jun 2012 19:17:10 +0100 From: Ian Jackson MIME-Version: 1.0 Message-ID: <20448.49702.165323.218158@mariner.uk.xensource.com> Date: Tue, 19 Jun 2012 19:17:10 +0100 To: xen-announce@lists.xen.org, xen-users@lists.xen.org X-Mailer: VM 8.1.0 under 23.2.1 (i486-pc-linux-gnu) X-Mailman-Approved-At: Wed, 27 Jun 2012 14:54:13 +0000 Subject: [Xen-announce] Security vulnerability process, and CVE-2012-0217 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.13 Precedence: list Reply-To: xen-devel@lists.xen.org List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: 7bit Sender: xen-announce-bounces@lists.xen.org Errors-To: xen-announce-bounces@lists.xen.org The Xen.org security response team is charged with implementing the Xen security response process, the current version of which can be found here: http://www.xen.org/projects/security_vulnerability_process.html Over the past two months we on that team have been involved with XSA-7 / CVE-2012-0217 and its various fallout. During this exercise we have encountered some problems with the process. The process needs improvement. Also, we have had to make some difficult decisions. We feel it is essential for keeping us honest that we explain to the community what we did, and when. A message starting this discussion has just been posted to the xen-devel mailing list: http://lists.xen.org/archives/html/xen-devel/2012-06/msg01072.html The outcome of this discussion will be a set of changes to be agreed on and/or voted on using the existing Xen.org governance processes: http://www.xen.org/projects/governance.html This discussion will take place on xen-devel. We expect it to take some weeks. We welcome the views of everyone in the Xen community - please come and have your say. Thanks for your attention, Ian. on behalf of the Xen.org security response team _______________________________________________ Xen-announce mailing list Xen-announce@lists.xen.org http://lists.xen.org/xen-announce