From xen-announce-bounces@lists.xen.org Tue Apr 04 12:38:33 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 04 Apr 2017 12:38:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNiA-000219-9J; Tue, 04 Apr 2017 12:37:26 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNi9-00020k-67; Tue, 04 Apr 2017 12:37:25 +0000 Received: from [193.109.254.147] by server-11.bemta-6.messagelabs.com id 0A/BC-03642-48393E85; Tue, 04 Apr 2017 12:37:24 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBIsWRWlGSWpSXmKPExsWS0XRdVbd58uM Ig+ZmRYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmdPxezVTw0a7iwP1PTA2M +626GLk4hASOM0osWLuRCcJZxCgxtWUNSxcjJwezgKvEjX2b2SBsRYkL9xrA4rwCghInZz4Bs yUENCXuvFnFDmKLCBRJ7Dz3EsxmE9CTmHt2EhNEr47Ey/2rgWwODmGBMolvE8shxphJTLw2gR HEZhFQlbh55znjBEaeWUg2z0KyeRaSzbOAJjEDbV6/Sx/ClJZY/o8DolpeYvvbOcwQtrXErz+ NjBC2hcTdzk4WmIlTuh+yL2DkXMWoUZxaVJZapGtkrJdUlJmeUZKbmJmja2hgppebWlycmJ6a k5hUrJecn7uJERjeDECwg/HP/MBDjJIcTEqivIc9H0cI8SXlp1RmJBZnxBeV5qQWH2KU4eBQk uAVnwSUEyxKTU+tSMvMAUYaTFqCg0dJhJcPJM1bXJCYW5yZDpE6xWjM0TJ95xsmjl9dB94wCb Hk5eelSonzPpoIVCoAUppRmgc3CJYALjHKSgnzMgKdJsRTkFqUm1mCKv+KUZyDUUmY9zLIFJ7 MvBK4fa+ATmECOuXJnYcgp5QkIqSkGhj9p+8vb+Sa4f2ofNMEz1s/rO6w3jA6E+czb8LVzWvz /wk3lia6rhLM89qefnKy6D6FZjdnTSZL2Ys/ci6Wpmdv+zZxwzLGu8Wclao7D38JU2r1dZ0ty bfFcO0VnrTtW3/rzpaYrs32s/P9Yfb5lm+mSBSe9G3ju7J996YjQr5cdtrvL+98f3mVEktxRq KhFnNRcSIAq6D3QfsCAAA= X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-15.tower-27.messagelabs.com!1491309442!42664168!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 8650 invoked from network); 4 Apr 2017 12:37:23 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-15.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 4 Apr 2017 12:37:23 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNhy-0000cw-J2; Tue, 04 Apr 2017 12:37:14 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1cvNhy-0000Vj-CZ; Tue, 04 Apr 2017 12:37:14 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 04 Apr 2017 12:37:14 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 212 (CVE-2017-7228) - x86: broken check in memory_exchange() permits PV guest breakout X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2017-7228 / XSA-212 version 3 x86: broken check in memory_exchange() permits PV guest breakout UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= The XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays. IMPACT ====== A malicious or buggy 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks. VULNERABLE SYSTEMS ================== All Xen versions are vulnerable. Only x86 systems are affected. ARM systems are not vulnerable. The vulnerability is only exposed to 64-bit PV guests. HVM guests and 32-bit PV guests can't exploit the vulnerability. MITIGATION ========== Running only HVM or 32-bit PV guests will avoid the vulnerability. The vulnerability can be avoided if the guest kernel is controlled by the host rather than guest administrator, provided that further steps are taken to prevent the guest administrator from loading code into the kernel (e.g. by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. CREDITS ======= This issue was discovered by Jann Horn of Google Project Zero. RESOLUTION ========== Applying the attached patch resolves this issue. xsa212.patch xen-unstable, Xen 4.8.x, Xen 4.7.x, Xen 4.6.x, Xen 4.5.x, Xen 4.4.x $ sha256sum xsa212* be1255bcda06158cdb86eb5297e8a271e05318e88cd21035c58a67f9ada6ccba xsa212.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJY45NxAAoJEIP+FMlX6CvZMRMH/jGfTS4hcPuPAiarYhD4D4YQ pVir0eM/gm/8yJE/CT3m3dieKjjl+GAFW4ehRMoIoxVdSlhiwskx5V+8I5qR/Lo6 6F9BPJw6eaEM62yw7YvMl7EuSexP3WgQeyRSf3BckZ0oxEPSHrIUi0/p0B7FNOFr C1EqK9d08dMKA5AEugpXgDI0t7fbYg3Kkm8SVnW5B8+5OI/iyTOOkFoPx1sbEvWX k+zgzodsDuoh8O25+pKVs+verknzGJm9UdCD7vHW8elLg1+1nS2BlfTSr478cDTE FnbnpuE7r1X/HHd2hPHDAZu3g2IUqfBJCLeYZfhIM9Eioei6bVLXh0f33DvlH/U= =L74k -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa212.patch" Content-Disposition: attachment; filename="xsa212.patch" Content-Transfer-Encoding: base64 bWVtb3J5OiBwcm9wZXJseSBjaGVjayBndWVzdCBtZW1vcnkgcmFuZ2VzIGlu IFhFTk1FTV9leGNoYW5nZSBoYW5kbGluZwoKVGhlIHVzZSBvZiBndWVzdF9o YW5kbGVfb2theSgpIGhlcmUgKGFzIGludHJvZHVjZWQgYnkgdGhlIFhTQS0y OSBmaXgpCmlzIGluc3VmZmljaWVudCBoZXJlLCBndWVzdF9oYW5kbGVfc3Vi cmFuZ2Vfb2theSgpIG5lZWRzIHRvIGJlIHVzZWQKaW5zdGVhZC4KCk5vdGUg dGhhdCB0aGUgdXNlcyBhcmUgb2theSBpbgotIFhFTk1FTV9hZGRfdG9fcGh5 c21hcF9iYXRjaCBoYW5kbGluZyBkdWUgdG8gdGhlIHNpemUgZmllbGQgYmVp bmcgb25seQogIDE2IGJpdHMgd2lkZSwKLSBsaXZlcGF0Y2hfbGlzdCgpIGR1 ZSB0byB0aGUgbGltaXQgb2YgMTAyNCBlbmZvcmNlZCBvbiB0aGUKICBudW1i ZXItb2YtZW50cmllcyBpbnB1dCAobGVhdmluZyBhc2lkZSB0aGUgZmFjdCB0 aGF0IHRoaXMgY2FuIGJlCiAgY2FsbGVkIGJ5IGEgcHJpdmlsZWdlZCBkb21h aW4gb25seSBhbnl3YXkpLAotIGNvbXBhdCBtb2RlIGhhbmRsaW5nIGR1ZSB0 byBjb3VudHMgdGhlcmUgYmVpbmcgbGltaXRlZCB0byAzMiBiaXRzLAotIGV2 ZXJ5d2hlcmUgZWxzZSBkdWUgdG8gZ3Vlc3QgYXJyYXlzIGJlaW5nIGFjY2Vz c2VkIHNlcXVlbnRpYWxseSBmcm9tCiAgaW5kZXggemVyby4KClRoaXMgaXMg WFNBLTIxMi4KClJlcG9ydGVkLWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2ds ZS5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBz dXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5j CisrKyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTQzNiw4ICs0MzYsOCBA QCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hBCiAg ICAgICAgIGdvdG8gZmFpbF9lYXJseTsKICAgICB9CiAKLSAgICBpZiAoICFn dWVzdF9oYW5kbGVfb2theShleGNoLmluLmV4dGVudF9zdGFydCwgZXhjaC5p bi5ucl9leHRlbnRzKSB8fAotICAgICAgICAgIWd1ZXN0X2hhbmRsZV9va2F5 KGV4Y2gub3V0LmV4dGVudF9zdGFydCwgZXhjaC5vdXQubnJfZXh0ZW50cykg KQorICAgIGlmICggIWd1ZXN0X2hhbmRsZV9zdWJyYW5nZV9va2F5KGV4Y2gu aW4uZXh0ZW50X3N0YXJ0LCBleGNoLm5yX2V4Y2hhbmdlZCwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBleGNoLmluLm5yX2V4dGVu dHMgLSAxKSApCiAgICAgewogICAgICAgICByYyA9IC1FRkFVTFQ7CiAgICAg ICAgIGdvdG8gZmFpbF9lYXJseTsKQEAgLTQ0NywxMSArNDQ3LDI3IEBAIHN0 YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEEKICAgICB7 CiAgICAgICAgIGluX2NodW5rX29yZGVyICA9IGV4Y2gub3V0LmV4dGVudF9v cmRlciAtIGV4Y2guaW4uZXh0ZW50X29yZGVyOwogICAgICAgICBvdXRfY2h1 bmtfb3JkZXIgPSAwOworCisgICAgICAgIGlmICggIWd1ZXN0X2hhbmRsZV9z dWJyYW5nZV9va2F5KGV4Y2gub3V0LmV4dGVudF9zdGFydCwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXhjaC5ucl9leGNo YW5nZWQgPj4gaW5fY2h1bmtfb3JkZXIsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGV4Y2gub3V0Lm5yX2V4dGVudHMgLSAx KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVGQVVMVDsKKyAg ICAgICAgICAgIGdvdG8gZmFpbF9lYXJseTsKKyAgICAgICAgfQogICAgIH0K ICAgICBlbHNlCiAgICAgewogICAgICAgICBpbl9jaHVua19vcmRlciAgPSAw OwogICAgICAgICBvdXRfY2h1bmtfb3JkZXIgPSBleGNoLmluLmV4dGVudF9v cmRlciAtIGV4Y2gub3V0LmV4dGVudF9vcmRlcjsKKworICAgICAgICBpZiAo ICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShleGNoLm91dC5leHRlbnRf c3RhcnQsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGV4Y2gubnJfZXhjaGFuZ2VkIDw8IG91dF9jaHVua19vcmRlciwKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXhjaC5v dXQubnJfZXh0ZW50cyAtIDEpICkKKyAgICAgICAgeworICAgICAgICAgICAg cmMgPSAtRUZBVUxUOworICAgICAgICAgICAgZ290byBmYWlsX2Vhcmx5Owor ICAgICAgICB9CiAgICAgfQogCiAgICAgZCA9IHJjdV9sb2NrX2RvbWFpbl9i eV9hbnlfaWQoZXhjaC5pbi5kb21pZCk7Ci0tLSBhL3hlbi9pbmNsdWRlL2Fz bS14ODYveDg2XzY0L3VhY2Nlc3MuaAorKysgYi94ZW4vaW5jbHVkZS9hc20t eDg2L3g4Nl82NC91YWNjZXNzLmgKQEAgLTI5LDggKzI5LDkgQEAgZXh0ZXJu IHZvaWQgKnhsYXRfbWFsbG9jKHVuc2lnbmVkIGxvbmcgKgogLyoKICAqIFZh bGlkIGlmIGluICt2ZSBoYWxmIG9mIDQ4LWJpdCBhZGRyZXNzIHNwYWNlLCBv ciBhYm92ZSBYZW4tcmVzZXJ2ZWQgYXJlYS4KICAqIFRoaXMgaXMgYWxzbyB2 YWxpZCBmb3IgcmFuZ2UgY2hlY2tzIChhZGRyLCBhZGRyK3NpemUpLiBBcyBs b25nIGFzIHRoZQotICogc3RhcnQgYWRkcmVzcyBpcyBvdXRzaWRlIHRoZSBY ZW4tcmVzZXJ2ZWQgYXJlYSB0aGVuIHdlIHdpbGwgYWNjZXNzIGEKLSAqIG5v bi1jYW5vbmljYWwgYWRkcmVzcyAoYW5kIHRodXMgZmF1bHQpIGJlZm9yZSBl dmVyIHJlYWNoaW5nIFZJUlRfU1RBUlQuCisgKiBzdGFydCBhZGRyZXNzIGlz IG91dHNpZGUgdGhlIFhlbi1yZXNlcnZlZCBhcmVhLCBzZXF1ZW50aWFsIGFj Y2Vzc2VzCisgKiAoc3RhcnRpbmcgYXQgYWRkcikgd2lsbCBoaXQgYSBub24t Y2Fub25pY2FsIGFkZHJlc3MgKGFuZCB0aHVzIGZhdWx0KQorICogYmVmb3Jl IGV2ZXIgcmVhY2hpbmcgVklSVF9TVEFSVC4KICAqLwogI2RlZmluZSBfX2Fk ZHJfb2soYWRkcikgXAogICAgICgoKHVuc2lnbmVkIGxvbmcpKGFkZHIpIDwg KDFVTDw8NDcpKSB8fCBcCkBAIC00MCw3ICs0MSw4IEBAIGV4dGVybiB2b2lk ICp4bGF0X21hbGxvYyh1bnNpZ25lZCBsb25nICoKICAgICAoX19hZGRyX29r KGFkZHIpIHx8IGlzX2NvbXBhdF9hcmdfeGxhdF9yYW5nZShhZGRyLCBzaXpl KSkKIAogI2RlZmluZSBhcnJheV9hY2Nlc3Nfb2soYWRkciwgY291bnQsIHNp emUpIFwKLSAgICAoYWNjZXNzX29rKGFkZHIsIChjb3VudCkqKHNpemUpKSkK KyAgICAobGlrZWx5KCgoY291bnQpID86IDBVTCkgPCAofjBVTCAvIChzaXpl KSkpICYmIFwKKyAgICAgYWNjZXNzX29rKGFkZHIsIChjb3VudCkgKiAoc2l6 ZSkpKQogCiAjZGVmaW5lIF9fY29tcGF0X2FkZHJfb2soZCwgYWRkcikgXAog ICAgICgodW5zaWduZWQgbG9uZykoYWRkcikgPCBIWVBFUlZJU09SX0NPTVBB VF9WSVJUX1NUQVJUKGQpKQo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz Lnhlbi5vcmcveGVuLWFubm91bmNl --=separator-- From xen-announce-bounces@lists.xen.org Tue Apr 04 12:38:33 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 04 Apr 2017 12:38:33 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNiA-000219-9J; Tue, 04 Apr 2017 12:37:26 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNi9-00020k-67; Tue, 04 Apr 2017 12:37:25 +0000 Received: from [193.109.254.147] by server-11.bemta-6.messagelabs.com id 0A/BC-03642-48393E85; Tue, 04 Apr 2017 12:37:24 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBIsWRWlGSWpSXmKPExsWS0XRdVbd58uM Ig+ZmRYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmdPxezVTw0a7iwP1PTA2M +626GLk4hASOM0osWLuRCcJZxCgxtWUNSxcjJwezgKvEjX2b2SBsRYkL9xrA4rwCghInZz4Bs yUENCXuvFnFDmKLCBRJ7Dz3EsxmE9CTmHt2EhNEr47Ey/2rgWwODmGBMolvE8shxphJTLw2gR HEZhFQlbh55znjBEaeWUg2z0KyeRaSzbOAJjEDbV6/Sx/ClJZY/o8DolpeYvvbOcwQtrXErz+ NjBC2hcTdzk4WmIlTuh+yL2DkXMWoUZxaVJZapGtkrJdUlJmeUZKbmJmja2hgppebWlycmJ6a k5hUrJecn7uJERjeDECwg/HP/MBDjJIcTEqivIc9H0cI8SXlp1RmJBZnxBeV5qQWH2KU4eBQk uAVnwSUEyxKTU+tSMvMAUYaTFqCg0dJhJcPJM1bXJCYW5yZDpE6xWjM0TJ95xsmjl9dB94wCb Hk5eelSonzPpoIVCoAUppRmgc3CJYALjHKSgnzMgKdJsRTkFqUm1mCKv+KUZyDUUmY9zLIFJ7 MvBK4fa+ATmECOuXJnYcgp5QkIqSkGhj9p+8vb+Sa4f2ofNMEz1s/rO6w3jA6E+czb8LVzWvz /wk3lia6rhLM89qefnKy6D6FZjdnTSZL2Ys/ci6Wpmdv+zZxwzLGu8Wclao7D38JU2r1dZ0ty bfFcO0VnrTtW3/rzpaYrs32s/P9Yfb5lm+mSBSe9G3ju7J996YjQr5cdtrvL+98f3mVEktxRq KhFnNRcSIAq6D3QfsCAAA= X-Env-Sender: iwj@xenbits.xen.org X-Msg-Ref: server-15.tower-27.messagelabs.com!1491309442!42664168!1 X-Originating-IP: [104.130.215.37] X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG X-StarScan-Received: X-StarScan-Version: 9.2.3; banners=-,-,- X-VirusChecked: Checked Received: (qmail 8650 invoked from network); 4 Apr 2017 12:37:23 -0000 Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37) by server-15.tower-27.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 4 Apr 2017 12:37:23 -0000 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cvNhy-0000cw-J2; Tue, 04 Apr 2017 12:37:14 +0000 Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2) (envelope-from ) id 1cvNhy-0000Vj-CZ; Tue, 04 Apr 2017 12:37:14 +0000 Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.505 (Entity 5.505) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team Message-Id: Date: Tue, 04 Apr 2017 12:37:14 +0000 Cc: "Xen.org security team" Subject: [Xen-announce] Xen Security Advisory 212 (CVE-2017-7228) - x86: broken check in memory_exchange() permits PV guest breakout X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Xen Security Advisory CVE-2017-7228 / XSA-212 version 3 x86: broken check in memory_exchange() permits PV guest breakout UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= The XSA-29 fix introduced an insufficient check on XENMEM_exchange input, allowing the caller to drive hypervisor memory accesses outside of the guest provided input/output arrays. IMPACT ====== A malicious or buggy 64-bit PV guest may be able to access all of system memory, allowing for all of privilege escalation, host crashes, and information leaks. VULNERABLE SYSTEMS ================== All Xen versions are vulnerable. Only x86 systems are affected. ARM systems are not vulnerable. The vulnerability is only exposed to 64-bit PV guests. HVM guests and 32-bit PV guests can't exploit the vulnerability. MITIGATION ========== Running only HVM or 32-bit PV guests will avoid the vulnerability. The vulnerability can be avoided if the guest kernel is controlled by the host rather than guest administrator, provided that further steps are taken to prevent the guest administrator from loading code into the kernel (e.g. by disabling loadable modules etc) or from using other mechanisms which allow them to run code at kernel privilege. CREDITS ======= This issue was discovered by Jann Horn of Google Project Zero. RESOLUTION ========== Applying the attached patch resolves this issue. xsa212.patch xen-unstable, Xen 4.8.x, Xen 4.7.x, Xen 4.6.x, Xen 4.5.x, Xen 4.4.x $ sha256sum xsa212* be1255bcda06158cdb86eb5297e8a271e05318e88cd21035c58a67f9ada6ccba xsa212.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- Version: GnuPG v1 iQEcBAEBAgAGBQJY45NxAAoJEIP+FMlX6CvZMRMH/jGfTS4hcPuPAiarYhD4D4YQ pVir0eM/gm/8yJE/CT3m3dieKjjl+GAFW4ehRMoIoxVdSlhiwskx5V+8I5qR/Lo6 6F9BPJw6eaEM62yw7YvMl7EuSexP3WgQeyRSf3BckZ0oxEPSHrIUi0/p0B7FNOFr C1EqK9d08dMKA5AEugpXgDI0t7fbYg3Kkm8SVnW5B8+5OI/iyTOOkFoPx1sbEvWX k+zgzodsDuoh8O25+pKVs+verknzGJm9UdCD7vHW8elLg1+1nS2BlfTSr478cDTE FnbnpuE7r1X/HHd2hPHDAZu3g2IUqfBJCLeYZfhIM9Eioei6bVLXh0f33DvlH/U= =L74k -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa212.patch" Content-Disposition: attachment; filename="xsa212.patch" Content-Transfer-Encoding: base64 bWVtb3J5OiBwcm9wZXJseSBjaGVjayBndWVzdCBtZW1vcnkgcmFuZ2VzIGlu IFhFTk1FTV9leGNoYW5nZSBoYW5kbGluZwoKVGhlIHVzZSBvZiBndWVzdF9o YW5kbGVfb2theSgpIGhlcmUgKGFzIGludHJvZHVjZWQgYnkgdGhlIFhTQS0y OSBmaXgpCmlzIGluc3VmZmljaWVudCBoZXJlLCBndWVzdF9oYW5kbGVfc3Vi cmFuZ2Vfb2theSgpIG5lZWRzIHRvIGJlIHVzZWQKaW5zdGVhZC4KCk5vdGUg dGhhdCB0aGUgdXNlcyBhcmUgb2theSBpbgotIFhFTk1FTV9hZGRfdG9fcGh5 c21hcF9iYXRjaCBoYW5kbGluZyBkdWUgdG8gdGhlIHNpemUgZmllbGQgYmVp bmcgb25seQogIDE2IGJpdHMgd2lkZSwKLSBsaXZlcGF0Y2hfbGlzdCgpIGR1 ZSB0byB0aGUgbGltaXQgb2YgMTAyNCBlbmZvcmNlZCBvbiB0aGUKICBudW1i ZXItb2YtZW50cmllcyBpbnB1dCAobGVhdmluZyBhc2lkZSB0aGUgZmFjdCB0 aGF0IHRoaXMgY2FuIGJlCiAgY2FsbGVkIGJ5IGEgcHJpdmlsZWdlZCBkb21h aW4gb25seSBhbnl3YXkpLAotIGNvbXBhdCBtb2RlIGhhbmRsaW5nIGR1ZSB0 byBjb3VudHMgdGhlcmUgYmVpbmcgbGltaXRlZCB0byAzMiBiaXRzLAotIGV2 ZXJ5d2hlcmUgZWxzZSBkdWUgdG8gZ3Vlc3QgYXJyYXlzIGJlaW5nIGFjY2Vz c2VkIHNlcXVlbnRpYWxseSBmcm9tCiAgaW5kZXggemVyby4KClRoaXMgaXMg WFNBLTIxMi4KClJlcG9ydGVkLWJ5OiBKYW5uIEhvcm4gPGphbm5oQGdvb2ds ZS5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBz dXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5j b29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4vY29tbW9uL21lbW9yeS5j CisrKyBiL3hlbi9jb21tb24vbWVtb3J5LmMKQEAgLTQzNiw4ICs0MzYsOCBA QCBzdGF0aWMgbG9uZyBtZW1vcnlfZXhjaGFuZ2UoWEVOX0dVRVNUX0hBCiAg ICAgICAgIGdvdG8gZmFpbF9lYXJseTsKICAgICB9CiAKLSAgICBpZiAoICFn dWVzdF9oYW5kbGVfb2theShleGNoLmluLmV4dGVudF9zdGFydCwgZXhjaC5p bi5ucl9leHRlbnRzKSB8fAotICAgICAgICAgIWd1ZXN0X2hhbmRsZV9va2F5 KGV4Y2gub3V0LmV4dGVudF9zdGFydCwgZXhjaC5vdXQubnJfZXh0ZW50cykg KQorICAgIGlmICggIWd1ZXN0X2hhbmRsZV9zdWJyYW5nZV9va2F5KGV4Y2gu aW4uZXh0ZW50X3N0YXJ0LCBleGNoLm5yX2V4Y2hhbmdlZCwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICBleGNoLmluLm5yX2V4dGVu dHMgLSAxKSApCiAgICAgewogICAgICAgICByYyA9IC1FRkFVTFQ7CiAgICAg ICAgIGdvdG8gZmFpbF9lYXJseTsKQEAgLTQ0NywxMSArNDQ3LDI3IEBAIHN0 YXRpYyBsb25nIG1lbW9yeV9leGNoYW5nZShYRU5fR1VFU1RfSEEKICAgICB7 CiAgICAgICAgIGluX2NodW5rX29yZGVyICA9IGV4Y2gub3V0LmV4dGVudF9v cmRlciAtIGV4Y2guaW4uZXh0ZW50X29yZGVyOwogICAgICAgICBvdXRfY2h1 bmtfb3JkZXIgPSAwOworCisgICAgICAgIGlmICggIWd1ZXN0X2hhbmRsZV9z dWJyYW5nZV9va2F5KGV4Y2gub3V0LmV4dGVudF9zdGFydCwKKyAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXhjaC5ucl9leGNo YW5nZWQgPj4gaW5fY2h1bmtfb3JkZXIsCisgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgIGV4Y2gub3V0Lm5yX2V4dGVudHMgLSAx KSApCisgICAgICAgIHsKKyAgICAgICAgICAgIHJjID0gLUVGQVVMVDsKKyAg ICAgICAgICAgIGdvdG8gZmFpbF9lYXJseTsKKyAgICAgICAgfQogICAgIH0K ICAgICBlbHNlCiAgICAgewogICAgICAgICBpbl9jaHVua19vcmRlciAgPSAw OwogICAgICAgICBvdXRfY2h1bmtfb3JkZXIgPSBleGNoLmluLmV4dGVudF9v cmRlciAtIGV4Y2gub3V0LmV4dGVudF9vcmRlcjsKKworICAgICAgICBpZiAo ICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShleGNoLm91dC5leHRlbnRf c3RhcnQsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgIGV4Y2gubnJfZXhjaGFuZ2VkIDw8IG91dF9jaHVua19vcmRlciwKKyAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXhjaC5v dXQubnJfZXh0ZW50cyAtIDEpICkKKyAgICAgICAgeworICAgICAgICAgICAg cmMgPSAtRUZBVUxUOworICAgICAgICAgICAgZ290byBmYWlsX2Vhcmx5Owor ICAgICAgICB9CiAgICAgfQogCiAgICAgZCA9IHJjdV9sb2NrX2RvbWFpbl9i eV9hbnlfaWQoZXhjaC5pbi5kb21pZCk7Ci0tLSBhL3hlbi9pbmNsdWRlL2Fz bS14ODYveDg2XzY0L3VhY2Nlc3MuaAorKysgYi94ZW4vaW5jbHVkZS9hc20t eDg2L3g4Nl82NC91YWNjZXNzLmgKQEAgLTI5LDggKzI5LDkgQEAgZXh0ZXJu IHZvaWQgKnhsYXRfbWFsbG9jKHVuc2lnbmVkIGxvbmcgKgogLyoKICAqIFZh bGlkIGlmIGluICt2ZSBoYWxmIG9mIDQ4LWJpdCBhZGRyZXNzIHNwYWNlLCBv ciBhYm92ZSBYZW4tcmVzZXJ2ZWQgYXJlYS4KICAqIFRoaXMgaXMgYWxzbyB2 YWxpZCBmb3IgcmFuZ2UgY2hlY2tzIChhZGRyLCBhZGRyK3NpemUpLiBBcyBs b25nIGFzIHRoZQotICogc3RhcnQgYWRkcmVzcyBpcyBvdXRzaWRlIHRoZSBY ZW4tcmVzZXJ2ZWQgYXJlYSB0aGVuIHdlIHdpbGwgYWNjZXNzIGEKLSAqIG5v bi1jYW5vbmljYWwgYWRkcmVzcyAoYW5kIHRodXMgZmF1bHQpIGJlZm9yZSBl dmVyIHJlYWNoaW5nIFZJUlRfU1RBUlQuCisgKiBzdGFydCBhZGRyZXNzIGlz IG91dHNpZGUgdGhlIFhlbi1yZXNlcnZlZCBhcmVhLCBzZXF1ZW50aWFsIGFj Y2Vzc2VzCisgKiAoc3RhcnRpbmcgYXQgYWRkcikgd2lsbCBoaXQgYSBub24t Y2Fub25pY2FsIGFkZHJlc3MgKGFuZCB0aHVzIGZhdWx0KQorICogYmVmb3Jl IGV2ZXIgcmVhY2hpbmcgVklSVF9TVEFSVC4KICAqLwogI2RlZmluZSBfX2Fk ZHJfb2soYWRkcikgXAogICAgICgoKHVuc2lnbmVkIGxvbmcpKGFkZHIpIDwg KDFVTDw8NDcpKSB8fCBcCkBAIC00MCw3ICs0MSw4IEBAIGV4dGVybiB2b2lk ICp4bGF0X21hbGxvYyh1bnNpZ25lZCBsb25nICoKICAgICAoX19hZGRyX29r KGFkZHIpIHx8IGlzX2NvbXBhdF9hcmdfeGxhdF9yYW5nZShhZGRyLCBzaXpl KSkKIAogI2RlZmluZSBhcnJheV9hY2Nlc3Nfb2soYWRkciwgY291bnQsIHNp emUpIFwKLSAgICAoYWNjZXNzX29rKGFkZHIsIChjb3VudCkqKHNpemUpKSkK KyAgICAobGlrZWx5KCgoY291bnQpID86IDBVTCkgPCAofjBVTCAvIChzaXpl KSkpICYmIFwKKyAgICAgYWNjZXNzX29rKGFkZHIsIChjb3VudCkgKiAoc2l6 ZSkpKQogCiAjZGVmaW5lIF9fY29tcGF0X2FkZHJfb2soZCwgYWRkcikgXAog ICAgICgodW5zaWduZWQgbG9uZykoYWRkcikgPCBIWVBFUlZJU09SX0NPTVBB VF9WSVJUX1NUQVJUKGQpKQo= --=separator Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: base64 Content-Disposition: inline X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91 bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz Lnhlbi5vcmcveGVuLWFubm91bmNl --=separator-- From xen-announce-bounces@lists.xen.org Wed Apr 12 09:35:38 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 12 Apr 2017 09:35:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cyEfO-0008Mq-Q0; Wed, 12 Apr 2017 09:34:22 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cxp1Z-0004z8-5w; Tue, 11 Apr 2017 06:11:33 +0000 Received: from [85.158.139.211] by server-3.bemta-5.messagelabs.com id A1/4B-01936-4937CE85; Tue, 11 Apr 2017 06:11:32 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFlrLIsWRWlGSWpSXmKPExsXS6fjDS3dK8Zs IgwUFFrM3tjFbfN8ymcmByePwhyssAYxRrJl5SfkVCawZd96eZCl4wlyxZu1elgbGZcxdjJwc QgJ5Ekeu7mYDsXkF7CS623+AxSUEDCWevr8OFmcRUJVYu/w/C4jNJqAu0fZsOyuILQJkN8+5C WRzcDALGEjc/W4CEhYWkJZonrgeanyRxN0t/9hASngFBCX+7hAGCTMLaEk8/HWLBcLWlli28D UzxBRpieX/OCYw8s5CaJiFpGEWkoZZCA0LGFlWMaoXpxaVpRbpGuslFWWmZ5TkJmbm6BoamOr lphYXJ6an5iQmFesl5+duYgQGGgMQ7GDc+8/pEKMkB5OSKG/AzNcRQnxJ+SmVGYnFGfFFpTmp xYcYZTg4lCR4Zxe9iRASLEpNT61Iy8wBhjxMWoKDR0mE1w0kzVtckJhbnJkOkTrFaMzxbumH9 0wcc+59fc8kxJKXn5cqJc6bD1IqAFKaUZoHNwgWi5cYZaWEeRmBThPiKUgtys0sQZV/xSjOwa gkDHEPT2ZeCdy+V0CnMAGdcmbXS5BTShIRUlINjPV9k7tipTfbeb9pivzVHhLcdLzd4eWMf82 7ZkoJPFudF9YcapWpZNxmU7nt8+s9O398dNxebqAWKti4yfmAvX+Iyiepz5869MIPJUdJn1i+ 5JCKSXV0zjnDlZJ5tVrHvzEsOVr16M09kf3Npd/fzxXm5F+7+On/uTtWJhmsTDHXCD41y+GJo RJLcUaioRZzUXEiAFzhVZrAAgAA X-Env-Sender: JBeulich@suse.com X-Msg-Ref: server-14.tower-206.messagelabs.com!1491891089!54049684!1 X-Originating-IP: [137.65.248.74] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 6947 invoked from network); 11 Apr 2017 06:11:31 -0000 Received: from prv-mh.provo.novell.com (HELO prv-mh.provo.novell.com) (137.65.248.74) by server-14.tower-206.messagelabs.com with DHE-RSA-AES256-GCM-SHA384 encrypted SMTP; 11 Apr 2017 06:11:31 -0000 Received: from INET-PRV-MTA by prv-mh.provo.novell.com with Novell_GroupWise; Tue, 11 Apr 2017 00:11:29 -0600 Message-Id: <58EC8FAE020000780014FAAF@prv-mh.provo.novell.com> X-Mailer: Novell GroupWise Internet Agent 14.2.1 Date: Tue, 11 Apr 2017 00:11:26 -0600 From: "Jan Beulich" To: References: <58EBA66E020000780014F6B3@prv-mh.provo.novell.com> Mime-Version: 1.0 Content-Disposition: inline X-Mailman-Approved-At: Wed, 12 Apr 2017 09:34:21 +0000 Cc: xen-devel Subject: [Xen-announce] Xen 4.8.1 released X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" QWxsLAoKSSBhbSBwbGVhc2VkIHRvIGFubm91bmNlIHRoZSByZWxlYXNlIG9mIFhlbiA0LjguMS4g VGhpcyBpcwphdmFpbGFibGUgaW1tZWRpYXRlbHkgZnJvbSBpdHMgZ2l0IHJlcG9zaXRvcnkKaHR0 cDovL3hlbmJpdHMueGVuLm9yZy9naXR3ZWIvP3A9eGVuLmdpdDthPXNob3J0bG9nO2g9cmVmcy9o ZWFkcy9zdGFibGUtNC44IAoodGFnIFJFTEVBU0UtNC44LjEpIG9yIGZyb20gdGhlIFhlblByb2pl Y3QgZG93bmxvYWQgcGFnZQpodHRwOi8vd3d3LnhlbnByb2plY3Qub3JnL2Rvd25sb2Fkcy94ZW4t YXJjaGl2ZXMveGVuLTQ4LXNlcmllcy94ZW4tNDgxLmh0bWwgCih3aGVyZSBhIGxpc3Qgb2YgY2hh bmdlcyBjYW4gYWxzbyBiZSBmb3VuZCkuCgpXZSByZWNvbW1lbmQgYWxsIHVzZXJzIG9mIHRoZSA0 Ljggc3RhYmxlIHNlcmllcyB0byB1cGRhdGUgdG8gdGhpcwpmaXJzdCBwb2ludCByZWxlYXNlLgoK UmVnYXJkcywgSmFuCgoKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KWGVuLWFubm91bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9y ZwpodHRwczovL2xpc3RzLnhlbi5vcmcveGVuLWFubm91bmNl From xen-announce-bounces@lists.xen.org Wed Apr 12 12:23:22 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 12 Apr 2017 12:23:22 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cyHHm-0005dW-KR; Wed, 12 Apr 2017 12:22:10 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cyGng-0002nY-1z; Wed, 12 Apr 2017 11:51:04 +0000 Received: from [85.158.137.68] by server-8.bemta-3.messagelabs.com id E5/F9-00609-6A41EE85; Wed, 12 Apr 2017 11:51:02 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrCIsWRWlGSWpSXmKPExsVyMbThkO5SkXc RBvtnqlus7LnIbNHbepfF4s/iRIvZG9uYLb4sb2C0eLfvL7MDm8fhD1dYAhijWDPzkvIrElgz ju78zVRwSKDiyqSJjA2Mp3i7GDk5hASKJSZvOMrWxcjFwSLQzCoxb/00dhBHQmA+q8TT9gY2k CoJgRiJL0+fMELYVRIHju9hhehWl7i36DZYg5DAUiaJ98v2M4EkmAW0JG78ewlm8wroSby6dR msQVggQ2Ll0rtgg9gEtCU23XjADGKzCKhKzF/ewgbR6y6x6/JfKFtbYtnC18wQc2wkzv25CLZ MBGTZpOUL2CEukpXY/fsR0wRGwVlIds9CsnsWklkLGJlXMaoXpxaVpRbpmuglFWWmZ5TkJmbm 6BoaGOvlphYXJ6an5iQmFesl5+duYgSGOgMQ7GBs/OJ0iFGSg0lJlPeywtsIIb6k/JTKjMTij Pii0pzU4kOMMhwcShK8DMLvIoQEi1LTUyvSMnOAUQeTluDgURLhfSEElOYtLkjMLc5Mh0idYr TkeHH5/XsmjndLPwDJJyt/vGcSYsnLz0uVEud9D9IgANKQUZoHNw6WGC4xykoJ8zICHSjEU5B alJtZgir/ilGcg1FJmPc1yBSezLwSuK2vgA5iAjpo7d63IAeVJCKkpBoYFW+UMs1//7aiJUOp a+px7qzafbYeYaXzJiTMXV5XJnLHiteI66H3E/2pvFpseoafnwv9eJt/aV3UK7nKCzxmz29Yx JVkThPL4GhjKPFOZIq9nHPZ//cZ6zllE8TT3Zqvidj9vjFV3Tz8folqaveUVXueljBcz/JLNp 72Q/NlcI9/2ieTprNKLMUZiYZazEXFiQDCn2YMBwMAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-5.tower-31.messagelabs.com!1491997861!92233829!1 X-Originating-IP: [209.85.128.194] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 24720 invoked from network); 12 Apr 2017 11:51:01 -0000 Received: from mail-wr0-f194.google.com (HELO mail-wr0-f194.google.com) (209.85.128.194) by server-5.tower-31.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 12 Apr 2017 11:51:01 -0000 Received: by mail-wr0-f194.google.com with SMTP id l44so3808526wrc.2; Wed, 12 Apr 2017 04:51:01 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:subject:from:date:cc:content-transfer-encoding :message-id:to; bh=B8XaG9+Wq+7eB++HZ2PT7P4UertX1HvECNUFyLfkeTY=; b=FSZaalchiaOyzHCkHkOZ0MEDpuxzf3qtB2LZhZ7d4tI9nnfh6EPbcvl/ioHcCPem5Y DqEperBx9NLzqsBktHGxM/BcjwFaTDekfk+J3Zxnq+KbMJYdM90fhGHqvxlz92Q0XP4u 8LYoa85suZbdvKAMDeK3rrGdJBFapRusD+Kq6w/BwHpyYMQRcPQRqUoJBDBAO+waMIzK RJd4wo9lAWtovuSDZ6IQ+J54yeLNqFCsauqD/BjZlF199dgT+t15FUhiyqNdJ9I10ZxG F5v+LfhJ/CnGm6l/wF4OQYqZhQ9M/u2481pb7XAcnavPKsYVHArJ0CNeG2kXZ07XtVl5 5i2A== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:mime-version:subject:from:date:cc :content-transfer-encoding:message-id:to; bh=B8XaG9+Wq+7eB++HZ2PT7P4UertX1HvECNUFyLfkeTY=; b=CdVtHHasmCRv4301w7pqsrxPY5VAjcK7vQDwaIZvXGuFNYyG3MOye61Zklq/dXENyQ 1p3odQXwDK3Zrofu9+d4+7Bp2MoUfXMNSMw3eaaBNoo+FCvMVb5v025xFgUYBgqJqutv JlQNqni0ohcWsfT4ugCJGXFcnU+th8YvkdsKNB5tS/07XnZc6GeBCfsJoK1Ws1meLjl+ 3zNAd6V/R2sTzv2bL5WRP5YQaKkxPDA0nDDfMDY+yXje3aNNLqAd5Lih2zG69MLeL+hN df4o1sAumpx99d22K40dcC0ou9mN0Y2FIj11DeJBYZUejxFcTiHExw5KtBhvJfmBVmTy eOZg== X-Gm-Message-State: AN3rC/6X+bNvlxjmjooNh0baogSCnMNhnz9yFoaT37wgAOEUzRUsmxTVjoVxDlBLkj7Wdw== X-Received: by 10.223.141.140 with SMTP id o12mr2901472wrb.69.1491997861105; Wed, 12 Apr 2017 04:51:01 -0700 (PDT) Received: from ?IPv6:2a02:c7f:ac18:da00:c61:8670:2196:1b03? ([2a02:c7f:ac18:da00:c61:8670:2196:1b03]) by smtp.gmail.com with ESMTPSA id k26sm17020287wre.9.2017.04.12.04.51.00 (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Wed, 12 Apr 2017 04:51:00 -0700 (PDT) Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) From: Lars Kurth Date: Wed, 12 Apr 2017 12:50:59 +0100 Message-Id: To: xen-announce , xen-users@lists.xenproject.org, xen-api , win-pv-devel , embedded-pv-devel , mirageos-devel X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Wed, 12 Apr 2017 12:22:09 +0000 Cc: Julien Grall Subject: [Xen-announce] Xen Project Developer and Design Summit : PMC, deadline extension for CfP to April 21st and FAQ X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" RGVhciBDb21tdW5pdHkgbWVtYmVycywKCkkgd2FudGVkIHRvIGJyaWVmbHkgYW5ub3VuY2UgdGhl IFByb2dyYW0gTWFuYWdlbWVudCBDb21taXR0ZWUgZm9yIHRoZSBYZW4gUHJvamVjdCBEZXZlbG9w ZXIgYW5kIERlc2lnbiBTdW1taXQuIFBNQyBtZW1iZXJzIHdpbGwgYmUgSnVsaWVuIEdyYWxsIChB Uk0pLCBMYXJzIEt1cnRoIChYZW4gUHJvamVjdCBDaGFpcm1hbiksIFdlaSBMaXUgKENpdHJpeCku IAoKSW4gYWRkaXRpb24sIHdlIGV4dGVuZGVkIHRoZSBDZlAgZGVhZGxpbmUgdG8gQXByaWwgMjFz dCAoMjM6NTkgUERUKSwgZHVlIHRvIEVhc3RlciBhbmQgbGFzdCB3ZWVrJ3MgWGVuIDQuOC4xIGNv ZGUgZnJlZXplLgoKSSBhbHNvIGdvdCBhIG51bWJlciBvZiBxdWVzdGlvbnMgcmVnYXJkaW5nIHRo ZSBIYWNrYXRob24gcGFydCBvZiB0aGUgWGVuIFByb2plY3QgRGV2ZWxvcGVyIGFuZCBEZXNpZ24g U3VtbWl0LCB3aGljaCBJIGFtIGdvaW5nIHRvIGFuc3dlciBpbiBhbiBGQVEuIAoKUTogSXMgdGhl cmUgZ29pbmcgdG8gYmUgYSBzZXBhcmF0ZSBYZW4gUHJvamVjdCBIYWNrYXRob24gdGhpcyB5ZWFy PwpBOiBObywgdGhlIEhhY2thdGhvbiBnb3QgbWVyZ2VkIGludG8gdGhlIFhlbiBQcm9qZWN0IERl dmVsb3BlciBhbmQgRGVzaWduIFN1bW1pdAoKUTogSXMgdGhlcmUgYSByZXF1aXJlbWVudCBmb3Ig cmVnaXN0ZXJpbmcgZm9yIHRoZSBIYWNrYXRob24gcGFydCBvZiB0aGUgZXZlbnQ/CkE6IE5vLCBv bmNlIHlvdSByZWdpc3RlcmVkIGZvciB0aGUgZXZlbnQgYXQgaHR0cDovL2V2ZW50cy5saW51eGZv dW5kYXRpb24ub3JnL2V2ZW50cy94ZW4tZGV2ZWxvcGVyLWFuZC1kZXNpZ24tc3VtbWl0L2F0dGVu ZC9yZWdpc3RlciwgeW91IGNhbiBhdHRlbmQgdGhlIEhhY2thdGhvbiBzZXNzaW9ucy4gTm90ZSB0 aGF0IHRoZXNlIGFyZSBub3cgY2FsbGVkIERlc2lnbiBzZXNzaW9ucy4KClE6IElzIHRoZXJlIGdv aW5nIHRvIGJlIGEgd2lraSBwYWdlLCB3aGVyZSBwZW9wbGUgY2FuIHNpZ24gdXAgZm9yIHRoZSBI YWNrYXRob24vRGVzaWduIHBhcnQgb2YgdGhlIGV2ZW50PwpBOiBObywgdGhlcmUgaXMgbm8gZXh0 cmEgd2lraSBwYWdlCgpROiBBcyB0aGVyZSBpcyBubyB3aWtpIHBhZ2UsIGhvdyBjYW4gSSBzdWdn ZXN0IGEgSGFja2F0aG9uL0Rlc2lnbiBzZXNzaW9ucwpBOiBUaGVyZSBhcmUgc2V2ZXJhbCB3YXlz IHRvIGRvIHRoaXMKICAgLSBZb3UgY2FuIGRvIHRoaXMgZHVyaW5nIHRoZSBldmVudCAoYXMgaW4g dGhlIHBhc3QpLgogICAtIEFsdGVybmF0aXZlbHkgeW91IGNhbiB1c2UgdGhlIENGUCBzeXN0ZW0g YXQgaHR0cDovL2V2ZW50cy5saW51eGZvdW5kYXRpb24ub3JnL2V2ZW50cy94ZW4tZGV2ZWxvcGVy LWFuZC1kZXNpZ24tc3VtbWl0L3Byb2dyYW0vY2ZwIGFuZCBnbyB0byB0aGUgU3VibWl0IGJ1dHRv biBhbmQgY2hvb3NlICJJbnRlcmFjdGl2ZSBEZXNpZ24gYW5kIFByb2JsZW0gU29sdmluZyBTZXNz aW9uIi4gVGhpcyB3aWxsIHJlY29yZCB3aGF0IHVzZWQgdG8gYmUgYSBkZXNpZ24gc2Vzc2lvbiBp biB0aGUgc3VibWlzc2lvbiBzeXN0ZW0uCiAgIC0gTm90ZSB0aGF0IGFmdGVyIHRoZSBDRlAgZGVh ZGxpbmUsIHdlIHdpbGwgY2hhbmdlIHRoZSBzeXN0ZW0gc3VjaCB0aGF0IHlvdSBjYW4gY29udGlu dWUgdG8gc3VibWl0ICJJbnRlcmFjdGl2ZSBEZXNpZ24gYW5kIFByb2JsZW0gU29sdmluZyBTZXNz aW9uIiwgYnV0IG5vIG1vcmUgIlByZXNlbnRhdGlvbnMiIGFuZCAiUGFuZWwgRGlzY3Vzc2lvbnMi LiBUaGUgc3lzdGVtIG1heSBub3QgYmUgb3BlbiBmb3IgYSBjb3VwbGUgb2YgZGF5cywgYWZ0ZXIg dGhlIGRlYWRsaW5lLgoKV2Ugd2lsbCBwdWJsaXNoIHRoZXNlIHNlc3Npb25zIGFzIHBhcnQgb2Yg dGhlIHByb2dyYW0sIGJ1dCBhcyB3aXRoIEhhY2thdGhvbnMsIHRoZSBzZXNzaW9ucyBzY2hlZHVs ZSBmb3IgRGVzaWduIHNlc3Npb25zIG1heSBiZSBhZGp1c3RlZCBkdXJpbmcgdGhlIGV2ZW50LgoK SWYgeW91IGhhdmUgYW55IGZ1cnRoZXIgcXVlc3Rpb25zLCBmZWVsIGZyZWUgdG8gYXNrLgoKQmVz dCBSZWdhcmRzCkxhcnMKX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX18KWGVuLWFubm91bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9y ZwpodHRwczovL2xpc3RzLnhlbi5vcmcveGVuLWFubm91bmNl From xen-announce-bounces@lists.xen.org Thu Apr 13 12:47:54 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 13 Apr 2017 12:47:54 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cye8w-0004xX-QY; Thu, 13 Apr 2017 12:46:34 +0000 Received: from mail6.bemta3.messagelabs.com ([195.245.230.39]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cye8v-0004xR-Ic for xen-announce@lists.xenproject.org; Thu, 13 Apr 2017 12:46:33 +0000 Received: from [85.158.137.68] by server-13.bemta-3.messagelabs.com id 23/57-24989-8237FE85; Thu, 13 Apr 2017 12:46:32 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrKLMWRWlGSWpSXmKPExsXitHSDva5G8fs Ig4m7hC1mb2xjdmD0OPzhCksAYxRrZl5SfkUCa8bqqQvZCjbyVLyYHNvA+IWri5GDQ0LAX+Lg M60uRk4ONgFdiaYtf9lAbF4BQYmTM5+wgNjMAjoSC3Z/YoOw5SW2v53DDFHjILFv1SQmkDEsA qoS+z8LgIRFBNQlmufcZAWxhQUMJB7Nvc0MUiIkoCYxd338BEauWUgWzEKyYBaSBQsYmVcxah SnFpWlFukaGeolFWWmZ5TkJmbm6BoaGOvlphYXJ6an5iQmFesl5+duYgQGQT0DA+MOxp69foc YJTmYlER5X4e+jxDiS8pPqcxILM6ILyrNSS0+xCjDwaEkwStRBJQTLEpNT61Iy8wBhiNMWoKD R0mE910hUJq3uCAxtzgzHSJ1ilGX493SD++ZhFjy8vNSpcR5pUFmCIAUZZTmwY2AxcYlRlkpY V5GBgYGIZ6C1KLczBJU+VeM4hyMSsK8/0BW8WTmlcBtegV0BBPQEWv3vgU5oiQRISXVwBix+V G06aUJK0qvhMQdPs5rHj7nwUNlB7mZ0cyK0u0GAfYawR78cpbSaauiNdKqqz5ezYsTY5W27dY VkbbJXnaub9u+zTPWWB0037Zv+w9pJndd5f0N044dZ+iZby+fzDCr4F1crMkTxY5Xc2IWtBhW v5xmdCh21r058k21686lc+WfbbS4qcRSnJFoqMVcVJwIAIJx0lSIAgAA X-Env-Sender: prvs=2693b67a4=Ian.Jackson@citrix.com X-Msg-Ref: server-15.tower-31.messagelabs.com!1492087590!91599714!1 X-Originating-IP: [66.165.176.63] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni42MyA9PiAzMDYwNDg=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 17933 invoked from network); 13 Apr 2017 12:46:31 -0000 Received: from smtp02.citrix.com (HELO SMTP02.CITRIX.COM) (66.165.176.63) by server-15.tower-31.messagelabs.com with RC4-SHA encrypted SMTP; 13 Apr 2017 12:46:31 -0000 X-IronPort-AV: E=Sophos;i="5.37,194,1488844800"; d="scan'208";a="427661640" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22767.29476.498955.603913@mariner.uk.xensource.com> Date: Thu, 13 Apr 2017 13:46:28 +0100 To: Subject: [Xen-announce] Download server change for Xen releases X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" LS0tLS1CRUdJTiBQR1AgU0lHTkVEIE1FU1NBR0UtLS0tLQpIYXNoOiBTSEExCgpUaGUgb2ZmaWNp YWwgd2F5IHRvIGdldCB0aGUgWGVuIGh5cGVydmlzb3IgYW5kIG90aGVyIFhlbiBQcm9qZWN0CmRv d25sb2FkcyBpcyB2aWEgdGhlIHRoZSBodHRwczovL3d3dy54ZW5wcm9qZWN0Lm9yZy8gd2Vic2l0 ZS4KSWYgeW91IGdldCBYZW4gdmlhIHRoZSBsaW5rcyBvbiB0aGUgd2Vic2l0ZSwgeW91IGRvIG5v dCBuZWVkIHRvIHJlYWQKdGhlIHJlc3Qgb2YgdGhpcyBtZXNzYWdlLgoKV2UgYXJlIGF3YXJlIHRo YXQgc29tZSB1c2VycyBoYXZlIGJlZW4gdmlzaXRpbmcgdGhlIGRvd25sb2FkIHNlcnZlcgpkaXJl Y3RseS4gIFRoYXQgZG93bmxvYWQgc2VydmVyIGlzIGNoYW5naW5nLgoKSW4gdGhlIHBhc3QsIHRo ZSBYZW4gUHJvamVjdCBoYXMgaG9zdGVkIGl0cyByZWxlYXNlcyBvbiBzcGFjZSBraW5kbHkKcHJv dmlkZWQgb24gYml0cy54ZW5zb3VyY2UuY29tIGJ5IENpdHJpeCAoYW5kLCBwcmV2aW91c2x5LCBY ZW5Tb3VyY2UpLgpGb3Igc29tZSB0aW1lIG5vdywgd2UgaGF2ZSBpbiBwYXJhbGxlbCBtYWRlIGF2 YWlsYWJsZSBkb3dubG9hZHMgb24gdGhlClhlbiBQcm9qZWN0J3Mgc2VydmVyIGF0IGh0dHBzOi8v ZG93bmxvYWRzLnhlbnByb2plY3Qub3JnL3JlbGVhc2UveGVuLy4KU3RhcnRpbmcgcmlnaHQgYXdh eSwgWGVuIFByb2plY3QgcmVsZWFzZXMgd2lsbCBhcHBlYXIgb25seSBvbiB0aGUgWGVuClByb2pl Y3QncyBzZXJ2ZXIuCgpUaGUgZGlyZWN0b3J5IHN0cnVjdHVyZSByZW1haW5zIHVuY2hhbmdlZC4g IFNvLCB5b3UgY2FuIHJlcGxhY2UKICBodHRwOi8vYml0cy54ZW5zb3VyY2UuY29tL29zcy14ZW4v cmVsZWFzZS8KYXQgdGhlIHN0YXJ0IG9mIGFsbCB1cmxzLCB3aXRoCiAgaHR0cHM6Ly9kb3dubG9h ZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vCmluIGFsbCBzY3JpcHRzLCBib29rbWFya3Ms IGV0Yy4KClByZXZpb3VzbHkgcHVibGlzaGVkIGZpbGVzIHdpbGwgcmVtYWluIG9uIGJpdHMueGVu c291cmNlLmNvbSwgYnV0IG5ldwpyZWxlYXNlcyB3aWxsIG5vdCBhcHBlYXIgdGhlcmUuCgpUaGFu a3MgZm9yIHlvdXIgYXR0ZW50aW9uLgoKSWFuLgotLS0tLUJFR0lOIFBHUCBTSUdOQVRVUkUtLS0t LQpWZXJzaW9uOiBHbnVQRyB2MQoKaVFFY0JBRUJBZ0FHQlFKWTczTWZBQW9KRUlQK0ZNbFg2Q3Za N1FjSUFNRG1SZDhBU1IvQm1haDlqczNMSGNmRwo0Yk1aczIwQm9YN0hvSXJzclVwS1QreUdka0oy bkVtWGR2R3ZYUEU1S2F3L09ib2ZCbFJWVHM5MW5KbDNZbjRkCk83cFdxTmdJVUdMN2o3YjIyK1M4 c2dZME5sbnVxUTJubEZsWXlHVThKL3hOa0EzcHdERDEzSzRMc3J3TWpkUTgKU05rSkk5WGRhRlB1 c2NnOWNyRWpMb3RkMXk1ZEp0aENHSk41eHNjRFdTbmtscCtXbVpyVnhLZ0c1blJlQk9YMworZDM5 b2NXTEpmMnlqQkhkcDlwTjNBWE5uUVFEMUdMNGNoMHdvWjdvWVkwT1RoUWZiN3ZmSGhwQVFPMGFi VHJsClBySUNSRlMwZnpmRVVZZ0NzUEZIdGVaNTZHQk1GV1Zqc2VXUThOVHhZSzRMSWo4ZDFZeDh4 c0x5Z255WjRpWT0KPUtQa2gKLS0tLS1FTkQgUEdQIFNJR05BVFVSRS0tLS0tCgpfX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpYZW4tYW5ub3VuY2UgbWFpbGlu ZyBsaXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3JnCmh0dHBzOi8vbGlzdHMueGVuLm9yZy94 ZW4tYW5ub3VuY2U= From xen-announce-bounces@lists.xen.org Thu Apr 13 16:34:07 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 13 Apr 2017 16:34:07 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cyhg1-0007TO-4L; Thu, 13 Apr 2017 16:32:57 +0000 Received: from mail6.bemta6.messagelabs.com ([193.109.254.103]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1cyhfL-0007Sf-AQ for xen-announce@lists.xenproject.org; Thu, 13 Apr 2017 16:32:15 +0000 Received: from [85.158.143.35] by server-4.bemta-6.messagelabs.com id D8/DB-03012-E08AFE85; Thu, 13 Apr 2017 16:32:14 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFjrFIsWRWlGSWpSXmKPExsXiVRukrcu74n2 EwfteWYvZG9uYHRg9Dn+4whLAGMWamZeUX5HAmvH522qWguuiFT/Wb2NtYDwi1MXIxSEkMIdR 4uSbVhYQh0WggVVi4+JjbCCOhMAcVomTD74ydzFyAjlJEld637BA2KUSO7ousYHYQgLqEvcW3 WaHsE8ySZxotAax2QS0JTbdeADWywxU82feJShbW2LZwtdgtrCAk8T50+vB5vAK2Eh8PvoBLM 4ioCpxbM5+VhBbRMBE4vS9s4wQNXoSr25dZoW4QVZi9+9HTBMYBWYhWTELyYpZSFoWMDKvYtQ oTi0qSy3SNTLWSyrKTM8oyU3MzNE1NDDTy00tLk5MT81JTCrWS87P3cQIDFEGINjB+Gd+4CFG SQ4mJVHezunvI4T4kvJTKjMSizPii0pzUosPMcpwcChJ8J5aBpQTLEpNT61Iy8wBRgtMWoKDR 0mEl2U5UJq3uCAxtzgzHSJ1itGY493SD++ZOB6t/PGeSYglLz8vVUqc9x3IJAGQ0ozSPLhBsC i+xCgrJczLCHSaEE9BalFuZgmq/CtGcQ5GJWHeGyBTeDLzSuD2vQI6hQnolLV734KcUpKIkJJ qYFSzeTptSw2b5qm5Aj7yscfmCGr3sElNm/1A2C3CzO6nV5fh82s7NDyDlre97/05I+Ol24+z 96quT1Vh2fCM62Xavx+icmnJnYsytVsNvx7a8c7Pc7qTpfWJo8k/rJkqnoROmciSEREk2JZgX LLx8NEHKgs6J/h7b9jtIXUz+dCpu0E+7dOuzFBiKc5INNRiLipOBACRndSx3QIAAA== X-Env-Sender: lars.kurth.xen@gmail.com X-Msg-Ref: server-7.tower-21.messagelabs.com!1492101133!63687848!1 X-Originating-IP: [74.125.82.43] X-SpamReason: No, hits=0.0 required=7.0 tests= X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 18867 invoked from network); 13 Apr 2017 16:32:13 -0000 Received: from mail-wm0-f43.google.com (HELO mail-wm0-f43.google.com) (74.125.82.43) by server-7.tower-21.messagelabs.com with AES128-GCM-SHA256 encrypted SMTP; 13 Apr 2017 16:32:13 -0000 Received: by mail-wm0-f43.google.com with SMTP id t189so50996081wmt.1 for ; Thu, 13 Apr 2017 09:32:13 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=from:content-transfer-encoding:subject:message-id:date:to :mime-version; bh=KPytPaDFf0ux5Ck23PMP/O344tNamuh/yjHYYXO+QV8=; b=GRkM1orPTxw4mONqhQ4klDdLonsJ1hiVt+ss5WuWGXQtu8yyYfsbvdBV0oFpnumttO DZD1SL4PMmzHfUSYC0Soh6/+xw1fNXTRPReYmUe3xDUU3WZGCXXD8JtCBo62Ft90my+H /Fw1J4ETnqEpaGH2X++Vub2JPrhhmeYZ9hjFAZMa71gKIHoKAGwjONSTEtl4ngZt6Apu P7yjdy+hoYbjDp+iI8SrbhFWQ/NRWdUy/w0cyUSH0G3sKXRV45KhIO4g3AAK4UkX3+Rr qLex09g8b9pNIqhJ6Xks1CUn6TSY38xLGbabuxCjKfvbtztFdnGShf4G337ZRuiwhWdP Cxug== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20161025; h=x-gm-message-state:from:content-transfer-encoding:subject :message-id:date:to:mime-version; bh=KPytPaDFf0ux5Ck23PMP/O344tNamuh/yjHYYXO+QV8=; b=Ch+puE5FzBM0PPjn9ZIX8sG0rbCl7YH5sN9/Ph4kC3elMpG1KH6a9l/AC99d+exkkI aWdfY5wz9nhoaX+x4OlrsUjzgCeFdJ1d6GM8rWYGi1+GHbjchKtCYCwEVSyu0uHHDDAZ 5zluejJnhbBtBWfxRGaOIFFcMF6yUuCIF4jeOv1h7E1bNF2Y/hXsZrbVRZa8nXaTsnGa e0EJVHyzQISs3UJP2u+vs0YEO/6AmoWYM6i+lJK5zN1OPvU37kCiFbPR/NSvv0KQzpYb jAwtbDv35fBzzdJuyvnY7dzcpbDlXNEQ0k6OV/Q2x7FHVwcsrrHvMMBzkpiuSMcH1hyK QBaA== X-Gm-Message-State: AN3rC/4Cq87QNeJQoGitv21jO6HexzH8OHMnsP045qR6zjgi4+nrD/h4 EW2cNeWfosL4bNU7tsg= X-Received: by 10.28.24.8 with SMTP id 8mr2784298wmy.133.1492101132654; Thu, 13 Apr 2017 09:32:12 -0700 (PDT) Received: from [10.80.118.98] (default-46-102-197-194.interdsl.co.uk. [46.102.197.194]) by smtp.gmail.com with ESMTPSA id m139sm11055349wmb.27.2017.04.13.09.32.11 for (version=TLS1 cipher=ECDHE-RSA-AES128-SHA bits=128/128); Thu, 13 Apr 2017 09:32:11 -0700 (PDT) From: Lars Kurth Message-Id: <2B7D74E0-2283-4EA9-A62B-F1F6F9FEAD04@gmail.com> Date: Thu, 13 Apr 2017 17:32:10 +0100 To: xen-announce Mime-Version: 1.0 (Mac OS X Mail 8.2 \(2104\)) X-Mailer: Apple Mail (2.2104) X-Mailman-Approved-At: Thu, 13 Apr 2017 16:32:56 +0000 Subject: [Xen-announce] Announcing Xen Project 4.9 RC1 and RC / Test Day Schedule X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" RGVhciBjb21tdW5pdHkgbWVtYmVycywgCgp0b2RheSB3ZSBjcmVhdGVkIFhlbiA0LjkgUkMxLCB3 aGljaCBpcyBhdmFpbGFibGUgZnJvbSAKCiBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCA0 LjkuMC1yYzEuMgoKRm9yIHlvdXIgY29udmVuaWVuY2UgdGhlcmUgaXMgYWxzbyBhIHRhcmJhbGwg YW5kIHNpZ25hdHVyZSBhdDoKIAogaHR0cHM6Ly9kb3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVs ZWFzZS94ZW4vNC45LjAtcmMxLjIveGVuLTQuOS4wLXJjMS4yLnRhci5neiAgCiBodHRwczovL2Rv d25sb2Fkcy54ZW5wcm9qZWN0Lm9yZy9yZWxlYXNlL3hlbi80LjkuMC1yYzEuMi94ZW4tNC45LjAt cmMxLjIudGFyLmd6LnNpZwoKUGxlYXNlIHNlbmQgYnVnIHJlcG9ydHMgYW5kIHRlc3QgcmVwb3J0 cyB0byB4ZW4tZGV2ZWxAbGlzdHMueGVucHJvamVjdC5vcmcuIFdoZW4gc2VuZGluZyBidWcgcmVw b3J0cywgcGxlYXNlIENDIHJlbGV2YW50IG1haW50YWluZXJzIGFuZCB0aGUgcmVsZWFzZSBtYW5h Z2VyICAoanVsaWVuLmdyYWxsQGFybS5jb20pLgoKCj09IFN1YnNlcXVlbnQgUkMncyA9PQoKV2Ug d2lsbCByZWxlYXNlIGEgbmV3IHJlbGVhc2UgY2FuZGlkYXRlIGV2ZXJ5IHdlZWsgb24gRnJpZGF5 LCB1bnRpbCB3ZSBkZWNsYXJlIGEgcmVsZWFzZSBjYW5kaWRhdGUgYXMgdGhlIGZpbmFsIGNhbmRp ZGF0ZSBhbmQgY3V0IHRoZSBYZW4gNC45IHJlbGVhc2UuIFRoZSBwcm9qZWN0ZWQgZGF0ZXMgZm9y IHRoZSBuZXh0IFJDJ3Mgd2lsbCBiZQoKICBYZW4gNC44IFJDMjogQXByaWwgMjEKICBYZW4gNC44 IFJDMzogQXByaWwgMjgKICBYZW4gNC44IFJDNDogTWF5IDUKICBYZW4gNC44IFJDNTogTWF5IDEy CgpSZWxlYXNlIGNhbmRpZGF0ZXMgYXJlIGF2YWlsYWJsZSBmcm9tIG91ciBnaXQgcmVwb3NpdG9y eSBhdAoKICBnaXQ6Ly94ZW5iaXRzLnhlbnByb2plY3Qub3JnL3hlbi5naXQgKHRhZyA0LjkuMC08 cmM+KQoKd2hlcmUgPHJjPiBpcyByYzEsIHJjMiwgcmMzLCBldGMuIGFuZCBhcyB0YXJiYWxsIGZy b20KCiAgaHR0cHM6Ly9kb3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC45LjAt PHJjPi94ZW4tNC45LjAtPHJjPi50YXIuZ3ogCiAgaHR0cHM6Ly9kb3dubG9hZHMueGVucHJvamVj dC5vcmcvcmVsZWFzZS94ZW4vNC45LjAtPHJjPi94ZW4tNC45LjAtPHJjPi50YXIuZ3ouc2lnIAoK RGV0YWlsZWQgYnVpbGQgYW5kIEluc3RhbGwgaW5zdHJ1Y3Rpb25zIGNhbiBiZSBmb3VuZCBvbiB0 aGUgVGVzdCBEYXkgV2lraSAoaHR0cHM6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQu OV9SQ190ZXN0X2luc3RydWN0aW9ucyNJbnN0YWxsaW5nKS4gTWFrZSBzdXJlIHlvdSBjaGVjayB0 aGUga25vd24gaXNzdWVzIHNlY3Rpb24gb2YgdGhlIGluc3RydWN0aW9ucyAoaHR0cHM6Ly93aWtp LnhlbnByb2plY3Qub3JnL3dpa2kvWGVuXzQuOV9SQ190ZXN0X2luc3RydWN0aW9ucyNLbm93bl9p c3N1ZXMpIGJlZm9yZSB0cnlpbmcgdG8gZG93bmxvYWQgYW4gUkMuCgpOb3RlIHRoYXQgUkPigJlz IGFyZSBhbm5vdW5jZWQgb24gdGhlIGZvbGxvd2luZyBtYWlsaW5nIGxpc3RzOiAKICB4ZW4tYW5u b3VuY2UKICB4ZW4tZGV2ZWwKICB4ZW4tdXNlcnMgCgpNYWtlIHN1cmUgdGhhdCB5b3UgYXJlIHN1 YnNjcmliZWQgdG8gYXQgbGVhc3Qgb25lIG9mIHRob3NlIGxpc3RzLgoKPT0gVGVzdCBEYXkgc2No ZWR1bGUgPT0KCldlIHdpbGwgYWxzbyBob2xkIGEgVGVzdCBEYXkgZXZlcnkgVFVFU0RBWSBmb3Ig dGhlIHJlbGVhc2UgY2FuZGlkYXRlIHRoYXQgd2FzIHJlbGVhc2VkIHRoZSB3ZWVrIHByaW9yIHRv IHRoZSBUZXN0IERheSBzdGFydGluZyBmcm9tIFJDMi4gCgpUaGlzIG1lYW5zIHdlIHdpbGwgaGF2 ZSBUZXN0IERheXMgb24gCiAgQXByaWwgMjV0aCAKICBNYXkgMm5kCiAgTWF5IDl0aCAKICBNYXkg MTZ0aAoKWW91ciB0ZXN0aW5nIGlzIHN0aWxsIHZhbHVhYmxlIG9uIG90aGVyIGRheXMsIHNvIHBs ZWFzZSBmZWVsIGZyZWUgdG8gc2VuZCBUZXN0IFJlcG9ydHMgYXMgb3V0bGluZWQgYmVsb3cgYXQg YW55IHRpbWUuCgo9PSBUZXN0aW5nIG5ldyBGZWF0dXJlcywgVGVzdCBhbmQgQnVnIFJlcG9ydHMg PT0KCllvdSBjYW4gZmluZCBUZXN0IEluc3RydWN0aW9ucyBmb3IgbmV3IGZlYXR1cmVzIG9uIG91 ciBUZXN0IERheSBXaWtpIChodHRwczovL3dpa2kueGVucHJvamVjdC5vcmcvd2lraS9YZW5fNC45 X1JDX3Rlc3RfaW5zdHJ1Y3Rpb25zKSBhbmQgaW5zdHJ1Y3Rpb25zIGZvciBnZW5lcmFsIHRlc3Rz IG9uIFRlc3RpbmcgWGVuIChodHRwczovL3dpa2kueGVucHJvamVjdC5vcmcvd2lraS9UZXN0aW5n X1hlbikuIFRoZSBmb2xsb3dpbmcgcGFnZXMgcHJvdmlkZSBpbmZvcm1hdGlvbiBvbiBob3cgdG8g cmVwb3J0IHN1Y2Nlc3NmdWwgdGVzdHMgKGh0dHBzOi8vd2lraS54ZW5wcm9qZWN0Lm9yZy93aWtp L1hlbl80LjlfUkNfdGVzdF9pbnN0cnVjdGlvbnMjUmVwb3J0aW5nX3N1Y2Nlc3MpIGFuZCBob3cg dG8gcmVwb3J0IGJ1Z3MgYW5kIGlzc3VlcyAoaHR0cHM6Ly93aWtpLnhlbnByb2plY3Qub3JnL3dp a2kvWGVuXzQuOV9SQ190ZXN0X2luc3RydWN0aW9ucyNSZXBvcnRpbmdfQnVnc18uMjguMjZfSXNz dWVzLjI5KS4KCkhhcHB5IFRlc3RpbmchCgpCZXN0IFJlZ2FyZHMKTGFycwpfX19fX19fX19fX19f X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fXwpYZW4tYW5ub3VuY2UgbWFpbGluZyBs aXN0Clhlbi1hbm5vdW5jZUBsaXN0cy54ZW4ub3JnCmh0dHBzOi8vbGlzdHMueGVuLm9yZy94ZW4t YW5ub3VuY2U= From xen-announce-bounces@lists.xen.org Fri Apr 28 14:11:38 2017 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 28 Apr 2017 14:11:38 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d46bX-0008Oh-5a; Fri, 28 Apr 2017 14:10:39 +0000 Received: from mail6.bemta5.messagelabs.com ([195.245.231.135]) by lists.xenproject.org with esmtp (Exim 4.84_2) (envelope-from ) id 1d46bW-0008OV-PW; Fri, 28 Apr 2017 14:10:38 +0000 Received: from [85.158.139.211] by server-6.bemta-5.messagelabs.com id 13/50-02180-D5D43095; Fri, 28 Apr 2017 14:10:37 +0000 X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRWlGSWpSXmKPExsXitHRDpG6kL3O kwdYpUhazN7YxW3zfMpnJ4t2+v8wOzB6HP1xhCWCMYs3MS8qvSGDNWDslvOARe8Wx6UcYGxhv sHUxcnJICPhLTNtwlh3EZhPQlWja8hcszisgKHFy5hMWEJtZQEdiwe5PbBC2vMT2t3OYIWocJ D7OOABkc3CwCKhKzO8GC4sI5Ej82TKPCaJcTWLVilawMcICYhJnvi6EWmsi8XbhTjaQViGgmr nr4ycw8sxCsngWksWzkCxewMi8ilGjOLWoLLVI19BSL6koMz2jJDcxM0fX0MBULze1uDgxPTU nMalYLzk/dxMjMJTqGRgYdzA+6vc7xCjJwaQkylvpzhwpxJeUn1KZkVicEV9UmpNafIhRhoND SYLX0AcoJ1iUmp5akZaZAwxqmLQEB4+SCO93b6A0b3FBYm5xZjpE6hSjMce7pR/eM3HMuff1P ZMQS15+XqqUOO87kFIBkNKM0jy4QbBou8QoKyXMy8jAwCDEU5BalJtZgir/ilGcg1FJmJcX5B 6ezLwSuH2vgE5hAjqFxYUB5JSSRISUVAPjVDPzhL9S0z7EMuZYB85ty0r+n/boVtj9lKlGpQ/ Xn69gsl+bs3ayCHdFkcBZne5dL1mr3QMaT5lyV4Qv+8CQqJSxdMV8k8TEJdnHJdc8uMwa+amm 9Yr665T+p50Kkb++9lpU8Yi3VkzU130Wk3J+ro3yr+hCRfn07F/XpGsuxMX2tFTd8lNiKc5IN NRiLipOBAAIKylwsQIAAA== X-Env-Sender: prvs=2845adf7f=Ian.Jackson@citrix.com X-Msg-Ref: server-6.tower-206.messagelabs.com!1493388631!95379084!1 X-Originating-IP: [66.165.176.89] X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No Received headers X-StarScan-Received: X-StarScan-Version: 9.4.12; banners=-,-,- X-VirusChecked: Checked Received: (qmail 2457 invoked from network); 28 Apr 2017 14:10:33 -0000 Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89) by server-6.tower-206.messagelabs.com with RC4-SHA encrypted SMTP; 28 Apr 2017 14:10:33 -0000 X-IronPort-AV: E=Sophos;i="5.37,388,1488844800"; d="scan'208";a="421454436" From: Ian Jackson MIME-Version: 1.0 Message-ID: <22787.19796.719024.937128@mariner.uk.xensource.com> Date: Fri, 28 Apr 2017 15:10:28 +0100 To: , , X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu) Cc: Lars Kurth Subject: [Xen-announce] Xen 4.9.0 RC3 X-BeenThere: xen-announce@lists.xen.org X-Mailman-Version: 2.1.18 Precedence: list List-Id: "Xen announcements \(low volume\)" List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: base64 Errors-To: xen-announce-bounces@lists.xen.org Sender: "Xen-announce" WGVuIDQuOS4wIFJDMyBpcyBub3cgYXZhaWxhYmxlLgoKWW91IGNhbiBjaGVjayBpdCBvdXQgZnJv bSB4ZW4uZ2l0OgoKICBnaXQ6Ly94ZW5iaXRzLnhlbi5vcmcveGVuLmdpdCM0LjkuMC1yYzMKCkZv ciB5b3VyIGNvbnZlbmllbmNlIHRoZXJlIGlzIGFsc28gYSB0YXJiYWxsIGFuZCBzaW5nYXV0cmUg YXQ6CiAgaHR0cHM6Ly9kb3dubG9hZHMueGVucHJvamVjdC5vcmcvcmVsZWFzZS94ZW4vNC45LjAt cmMzL3hlbi00LjkuMC1yYzMudGFyLmd6ICAKICBodHRwczovL2Rvd25sb2Fkcy54ZW5wcm9qZWN0 Lm9yZy9yZWxlYXNlL3hlbi80LjkuMC1yYzMveGVuLTQuOS4wLXJjMy50YXIuZ3ouc2lnCgpQbGVh c2Ugc2VuZCBidWcgcmVwb3J0cyBhbmQgdGVzdCByZXBvcnRzIHRvCnhlbi1kZXZlbEBsaXN0cy54 ZW5wcm9qZWN0Lm9yZy4gV2hlbiBzZW5kaW5nIGJ1ZyByZXBvcnRzLCBwbGVhc2UgQ0MKcmVsZXZh bnQgbWFpbnRhaW5lcnMsIHRoZSBKdWxpZW4gR3JhbGwgdGhlIFJlbGVhc2UgTWFuYWdlcgo8anVs aWVuLmdyYWxsQGFybS5jb20+IGFuZCBtZSAoc3RhbmRpbmcgaW4gZm9yIEp1bGllbiB0aGlzIHdl ZWspLgoKV2UgYXJlIGF3YXJlIG9mIG9uZSBidWlsZCBidWc6IHRoZSB4ODYgaW5zdHJ1Y3Rpb24g ZW11bGF0b3IgZnV6emVyCnV0aWxpdHkgaXMgbm93IGJ1aWx0IGJ5IGRlZmF1bHQsIGJ1dCB0aGVy ZSBpcyBhIHByb2JsZW0gd2hlcmUgaXQgZmFpbHMKdG8gYnVpbGQgd2l0aCBvbGRlciBHQ0MgdmVy c2lvbnMgKEdDQyA0LjMgYW5kIDQuNCwgYXQgbGVhc3QpLiAgVGhlCndvcmthcm91bmQgd291bGQg YmUgdG8gYXBwbHkgYmEzOWU5YjIxMDgzIGZyb20geGVuLmdpdCNzdGFnaW5nCiJ4ODZlbXVsOiBj b3JyZWN0IHN0dWIgaW52b2NhdGlvbiBjb25zdHJhaW50cyBhZ2FpbiIsIG9yIHRvIGNvbW1lbnQK b3V0ICJTVUJESVJTLXkgKz0geDg2X2luc3RydWN0aW9uX2VtdWxhdG9yIiBpbiB0b29scy9mdXp6 L01ha2VmaWxlLgoKVGhhbmtzLApJYW4uCgpfX19fX19fX19fX19fX19fX19fX19fX19fX19fX19f X19fX19fX19fX19fX19fXwpYZW4tYW5ub3VuY2UgbWFpbGluZyBsaXN0Clhlbi1hbm5vdW5jZUBs aXN0cy54ZW4ub3JnCmh0dHBzOi8vbGlzdHMueGVuLm9yZy94ZW4tYW5ub3VuY2U=