From xen-announce-bounces@lists.xen.org Fri Jun 02 16:18:22 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Fri, 02 Jun 2017 16:18:22 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dGpGY-0004FG-Kk; Fri, 02 Jun 2017 16:17:34 +0000
Received: from mail6.bemta5.messagelabs.com ([195.245.231.135])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <julien.grall@arm.com>)
 id 1dGpEx-00047W-No; Fri, 02 Jun 2017 16:15:55 +0000
Received: from [85.158.139.211] by server-11.bemta-5.messagelabs.com id
 39/85-01733-A3F81395; Fri, 02 Jun 2017 16:15:54 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFtrCIsWRWlGSWpSXmKPExsVysyfVTdeq3zD
 S4OtuQYvZG9uYLb5vmcxk8W7fX2YHZo/DH66wBDBGsWbmJeVXJLBmvNxylblgG1PF3p+aDYy/
 GbsYuTiEBDYzSrzee40dwlnOKNF79zMbiCMisIZR4s7+HUAOJwezgJpE19lPYDabgKbEnc+fm
 EBsYQE5iZkv3zOD2LwCVhJzrn9kAbFZBFQkPu3uZASxRQXCJXoP9LNB1AhKnJz5hAVippnEvM
 0PmSFscYlbT+YzQdjyEtvfzmGewMg7C0nLLCQts5C0zELSsoCRZRWjenFqUVlqka6lXlJRZnp
 GSW5iZo6uoYGpXm5qcXFiempOYlKxXnJ+7iZGYAgyAMEOxrWtzocYJTmYlER5TY0NI4X4kvJT
 KjMSizPii0pzUosPMcpwcChJ8Fb3AeUEi1LTUyvSMnOA0QCTluDgURLhndgLlOYtLkjMLc5Mh
 0idYtTlaPqw5QuTEEtefl6qlDhvHsgMAZCijNI8uBGwyLzEKCslzMsIdJQQT0FqUW5mCar8K0
 ZxDkYlYd5pIFN4MvNK4Da9AjqCCeiIF9v0QY4oSURISTUwdlVppQs+awusVGeW2KRZebz6Vp6
 9f0yc10yT+teC0aeD3M9sd/O6FBK9K+XAAU+OPNm9RtsZ95zvvWhxXefyb80DB+9wxbDlyr10
 9lcyapa1Cin2Uenqu/WXjd3GzXZf13O938s6b8UZfTfe+OrLBz3TgnSpZbYHf+wo2292srjGy
 TGoUViJpTgj0VCLuag4EQDEixOKxwIAAA==
X-Env-Sender: julien.grall@arm.com
X-Msg-Ref: server-13.tower-206.messagelabs.com!1496420152!86112002!1
X-Originating-IP: [217.140.101.70]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 7233 invoked from network); 2 Jun 2017 16:15:53 -0000
Received: from foss.arm.com (HELO foss.arm.com) (217.140.101.70)
 by server-13.tower-206.messagelabs.com with SMTP; 2 Jun 2017 16:15:53 -0000
Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249])
 by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 1FBDA15A2;
 Fri,  2 Jun 2017 09:15:52 -0700 (PDT)
Received: from [10.37.12.100] (unknown [10.37.12.100])
 by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 036E43F58B;
 Fri,  2 Jun 2017 09:15:50 -0700 (PDT)
To: "committers@xenproject.org" <committers@xenproject.org>,
 xen-announce@lists.xenproject.org, xen-users@lists.xenproject.org,
 xen-devel <xen-devel@lists.xenproject.org>
From: Julien Grall <julien.grall@arm.com>
Message-ID: <1b03c28c-42c7-fc47-4e76-a4179eeffce5@arm.com>
Date: Fri, 2 Jun 2017 17:15:49 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:52.0) Gecko/20100101
 Thunderbird/52.1.1
MIME-Version: 1.0
Content-Language: en-US
X-Mailman-Approved-At: Fri, 02 Jun 2017 16:17:33 +0000
Cc: Lars Kurth <lars.kurth@citrix.com>
Subject: [Xen-announce] Xen 4.9: Release date
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Content-Transfer-Encoding: base64
Content-Type: text/plain; charset="utf-8"; Format="flowed"
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>
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=

From xen-announce-bounces@lists.xen.org Tue Jun 06 16:12:39 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 06 Jun 2017 16:12:39 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dIH50-0002sj-SA; Tue, 06 Jun 2017 16:11:38 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <julien.grall@arm.com>)
 id 1dIH3v-0002kw-31; Tue, 06 Jun 2017 16:10:31 +0000
Received: from [193.109.254.147] by server-6.bemta-6.messagelabs.com id
 D7/5C-03920-6F3D6395; Tue, 06 Jun 2017 16:10:30 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDIsWRWlGSWpSXmKPExsVysyfVTffrZbN
 Ig3+LDSxmb2xjtvi+ZTKTA5PH4Q9XWAIYo1gz85LyKxJYMyasXsJaMJ2l4vCHfawNjNeYuxg5
 OYQENjNKTPyj1cXIBWTvZpS4eekoG4gjItDBKPFw7jlGkCpmAWOJIzufM4HYbAKaEnc+fwKzh
 QVEJM7d2wY0iYODV8BK4v0sExCTRUBFomOBGUiFqEC4xNvGIywgNq+AoMTJmU9YICaqS/yZd4
 kZwpaX2P52DvMERp5ZSMpmISmbhaRsASPzKkaN4tSistQiXWMjvaSizPSMktzEzBxdQwMzvdz
 U4uLE9NScxKRiveT83E2MwDBiAIIdjKfXBR5ilORgUhLljbxkFinEl5SfUpmRWJwRX1Sak1p8
 iFGGg0NJgvcxSE6wKDU9tSItMwcY0DBpCQ4eJRHeP6eA0rzFBYm5xZnpEKlTjMYcG1av/8LE0
 fRhyxcmIZa8/LxUKXHeEyCTBEBKM0rz4AbBIu0So6yUMC8j0GlCPAWpRbmZJajyrxjFORiVhH
 mbQKbwZOaVwO17BXQKE9ApfJdMQE4pSURISTUwLptr38G/sVfZsej1nINndt958+i41JHG3bd
 LCpnfX4udt3hiqM2H7D/b/0r9UZr/6PaCSy32r0W2HHRf2iLTE6M+20v1XoG4Y4Vwr/KdkKD9
 vxU0n2Qcrq3gOzj39WTPO6Zzt12wVzSfwL1u17mDXa8jezy70l/eCWDuNBHffljvcLF45rF1Y
 kosxRmJhlrMRcWJALOG3T6vAgAA
X-Env-Sender: julien.grall@arm.com
X-Msg-Ref: server-15.tower-27.messagelabs.com!1496765429!53498729!1
X-Originating-IP: [217.140.101.70]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 64033 invoked from network); 6 Jun 2017 16:10:29 -0000
Received: from foss.arm.com (HELO foss.arm.com) (217.140.101.70)
 by server-15.tower-27.messagelabs.com with SMTP; 6 Jun 2017 16:10:29 -0000
Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249])
 by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id DE31E1596;
 Tue,  6 Jun 2017 09:10:28 -0700 (PDT)
Received: from [10.1.206.53] (e108454-lin.cambridge.arm.com [10.1.206.53])
 by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 1C1C73F578;
 Tue,  6 Jun 2017 09:10:27 -0700 (PDT)
To: xen-devel <xen-devel@lists.xenproject.org>,
 xen-announce@lists.xenproject.org,
 "xen-users@lists.xen.org" <xen-users@lists.xen.org>
From: Julien Grall <julien.grall@arm.com>
Message-ID: <1c81f6aa-3f03-bbc9-27eb-84ace18a258d@arm.com>
Date: Tue, 6 Jun 2017 17:10:26 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.8.0
MIME-Version: 1.0
X-Mailman-Approved-At: Tue, 06 Jun 2017 16:11:37 +0000
Cc: "lars.kurth@citrix.com" <lars.kurth@citrix.com>
Subject: [Xen-announce] Xen 4.9 rc8
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>
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From xen-announce-bounces@lists.xen.org Tue Jun 13 15:55:43 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 13 Jun 2017 15:55:43 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dKo9J-0005O7-QY; Tue, 13 Jun 2017 15:54:33 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <prvs=330855b71=Ian.Jackson@citrix.com>)
 id 1dKo9I-0005O1-Jy
 for xen-announce@lists.xenproject.org; Tue, 13 Jun 2017 15:54:32 +0000
Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id
 F6/74-03058-7BA00495; Tue, 13 Jun 2017 15:54:31 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprFIsWRWlGSWpSXmKPExsXitHRDpO4WLod
 Igy9NZhazN7YxOzB6HP5whSWAMYo1My8pvyKBNWP17SuMBQd5KzrOtbM3MLZwdzFyckgI+Eu8
 m/WfHcRmE9CVaNrylw3E5hUQlDg58wkLiM0soCOxYPcnNghbXmL72znMXYwcQDX2Eo9+JoGEW
 QRUJWbf3QRWIiKgLtE85yYrRLmWxL4L65hBbGEBT4n9v6+zg7RyArVOOCYHEhYSsJO4vvUXI8
 Q1JhJvF+5kAykRElCTmLs+fgIj3ywk98xCcs8sJPcsYGRexahRnFpUllqka2ygl1SUmZ5Rkpu
 YmaNraGCml5taXJyYnpqTmFSsl5yfu4kRGGYMQLCD8e/awEOMkhxMSqK8ngJ2kUJ8SfkplRmJ
 xRnxRaU5qcWHGGU4OJQkeHs4HSKFBItS01Mr0jJzgAEPk5bg4FES4b3PApTmLS5IzC3OTIdIn
 WJUlBLnDQTpEwBJZJTmwbXBouwSo6yUMC8j0CFCPAWpRbmZJajyrxjFORiVhHkPcwBN4cnMK4
 Gb/gpoMRPQ4utXbEAWlyQipKQaGJVEtX/NE7A/vy714rNlQg86Je62bVi5aelPHnP72VwZ+sa
 vOyad5LLM/L5fah2n6ImMz6U/5Gbx/sne+WM7a8jWfs47Vkuf/brdYjeb+feeukrVOakH5//c
 9d/hz89NN2b+XJ7WYhz8wEn384fgmpiPeQmeptas/GwffFL8Tp9c7u9TqDb5j6wSS3FGoqEWc
 1FxIgDq5ugtrQIAAA==
X-Env-Sender: prvs=330855b71=Ian.Jackson@citrix.com
X-Msg-Ref: server-9.tower-21.messagelabs.com!1497369267!73567109!1
X-Originating-IP: [66.165.176.89]
X-SpamReason: No, hits=0.0 required=7.0 tests=sa_preprocessor: 
 VHJ1c3RlZCBJUDogNjYuMTY1LjE3Ni44OSA9PiAyMDMwMDc=\n,received_headers: No 
 Received headers
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 41629 invoked from network); 13 Jun 2017 15:54:28 -0000
Received: from smtp.citrix.com (HELO SMTP.CITRIX.COM) (66.165.176.89)
 by server-9.tower-21.messagelabs.com with RC4-SHA encrypted SMTP;
 13 Jun 2017 15:54:28 -0000
X-IronPort-AV: E=Sophos;i="5.39,338,1493683200"; d="scan'208";a="427689184"
From: Ian Jackson <ian.jackson@eu.citrix.com>
MIME-Version: 1.0
Message-ID: <22848.2736.991895.281689@mariner.uk.xensource.com>
Date: Tue, 13 Jun 2017 16:54:24 +0100
To: <xen-announce@lists.xenproject.org>
In-Reply-To: <22803.6113.486674.72765@mariner.uk.xensource.com>
References: <22803.6113.486674.72765@mariner.uk.xensource.com>
X-Mailer: VM 8.2.0b under 24.4.1 (i586-pc-linux-gnu)
Cc: security-team-members@xenproject.org
Subject: [Xen-announce] Reminder: Vulnerability embargo dates - add your
	public holidays
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>
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From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpZ-0006Nm-6n; Tue, 20 Jun 2017 12:00:25 +0000
Received: from mail6.bemta5.messagelabs.com ([195.245.231.135])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpX-0006K9-Hf; Tue, 20 Jun 2017 12:00:23 +0000
Received: from [85.158.139.211] by server-10.bemta-5.messagelabs.com id
 8C/A9-01734-65E09495; Tue, 20 Jun 2017 12:00:22 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFvrHKsWRWlGSWpSXmKPExsWS0XRdVTeUzzP
 SoP+SmsWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzHj5wL/j+jLHiYsNZpgbG
 lruMXYxcHEICxxklbp/vZYVwFjFKrD56nqWLkZODWcBV4sa+zWwQtqLEhXsNYHFeAUGJkzOfg
 NkSApoSd96sYgexRQSKJHaeewlmswnoScw9O4kJotdSYv7EU2BzhAX8JA53zYeaYybR0rISrJ
 5FQFVizuEzzBMYeWYhWT0LyepZSFbPYuQAimtKrN+lD2FKSyz/xwFRLS+x/e0cZoiwtcTOFyw
 QYQuJxQ8b2GEGTul+CGXbS1y5upYJwraRuLSugwWbmtkz77BCjLSRaH/igE3JuhctjDBjZhz8
 hNWqWXMewa1atewSK7KaBYyiqxg1ilOLylKLdI0M9JKKMtMzSnITM3N0DQ1M9XJTi4sT01NzE
 pOK9ZLzczcxAuO/noGBcQdj42y/Q4ySHExKorzqDJ6RQnxJ+SmVGYnFGfFFpTmpxYcYZTg4lC
 R42XmBcoJFqempFWmZOcBEBJOW4OBREuGNB2nlLS5IzC3OTIdInWK05Nj1f80XJo4Nq9cDyWX
 rt3xhEmLJy89LlRLnXcED1CAA0pBRmgc3DpYsLzHKSgnzMjIwMAjxFKQW5WaWoMq/YhTnYFQS
 5pUFuYonM68EbusroIOYgA56ccQD5KCSRISUVAMj58yXFomLFq1bW95oVt714/gdtbv+jOXvz
 T+//T/xb6WwbM/hN2/fVn0MXHDFIZnpQ15+SldL+9bboWVXDfyfz3O7ZXs58LJa0TwDg7Nl62
 wZhBfzmL+STp85Nf7XjS8HMr10PxTdryp7lbtnm7DNo2auBwq3Lp77wC058Z5QdozIVO3tNyq
 7lFiKMxINtZiLihMBs+r4NpEDAAA=
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-10.tower-206.messagelabs.com!1497960020!75769029!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 13068 invoked from network); 20 Jun 2017 12:00:21 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-10.tower-206.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:21 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpH-0004EM-O8; Tue, 20 Jun 2017 12:00:07 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpH-000643-NI; Tue, 20 Jun 2017 12:00:07 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpH-000643-NI@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:07 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 220 - x86: PKRU and BND*
	leakage between vCPU-s
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-220
                              version 2

               x86: PKRU and BND* leakage between vCPU-s

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

Memory Protection Extensions (MPX) and Protection Key (PKU) are features in
newer processors, whose state is intended to be per-thread and context
switched along with all other XSAVE state.

Xen's vCPU context switch code would save and restore the state only
if the guest had set the relevant XSTATE enable bits.  However,
surprisingly, the use of these features is not dependent (PKU) or may
not be dependent (MPX) on having the relevant XSTATE bits enabled.

VMs which use MPX or PKU, and context switch the state manually rather
than via XSAVE, will have the state leak between vCPUs (possibly,
between vCPUs in different guests).  This in turn corrupts state in
the destination vCPU, and hence may lead to weakened protections

Experimentally, MPX appears not to make any interaction with BND*
state if BNDCFGS.EN is set but XCR0.BND{CSR,REGS} are clear.  However,
the SDM is not clear in this case; therefore MPX is included in this
advisory as a precaution.

IMPACT
======

There is an information leak, of control information mentioning
pointers into guest address space; this may weaken address space
randomisation and make other attacks easier.

When an innocent guest acquires leaked state, it will run with
incorrect protection state.  This could weaken the protection intended
by the MPX or PKU features, making other attacks easier which would
otherwise be excluded; and the incorrect state could also cause a
denial of service by preventing legitimate accesses.

VULNERABLE SYSTEMS
==================

Xen 4.4 and earlier are not vulnerable, as they do not use or expose
MPX or PKU to guests.  Xen 4.5 and later expose MPX to guests.  Xen
4.7 and later expose PKU to guests.  Therefore, Xen 4.5 and later are
vulnerable.

Only x86 hardware implementing the MPX or PKU features is vulnerable.
At the time of writing, these are Intel Skylake (and later) processors
for MPX, and Intel Skylake Server (and later) processors for PKU.

ARM hardware is not vulnerable.

The vulnerability is only exposed to HVM guests.  PV guests cannot
exploit the vulnerability.

Vulnerable guest operating systems
- ----------------------------------

Guests which use XSAVE for context switching PKU and MPX state are not
vulnerable to inbound corruption caused by another malicious domain.

With respect to PKU, the remaining outbound information leak is of no
conceivable consequence.  And, experimentally, MPX does not appear to
have a real vulnerability, even though the CPU documentation is not
clear.

Therefore we think that these guests (those which use XSAVE) are not
vulnerable.

Linux uses XSAVE, so is therefore not vulnerable.

MITIGATION
==========

Passing "pku=0" on the hypervisor command line will avoid the PKU
vulnerability (by not advertising the feature to guests).

There is no corresponding option for the probably-theoretical MPX
vulnerability.

CREDITS
=======

This issue was discovered by Andrew Cooper of Citrix.

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa220.patch           xen-unstable
xsa220-4.8.patch       Xen 4.8
xsa220-4.7.patch       Xen 4.7
xsa220-4.6.patch       Xen 4.6
xsa220-4.5.patch       Xen 4.5

$ sha256sum xsa220*
8b86d9a284c0b14717467e672e63aebfc2bce201658493a54c64fb7c1863ce49  xsa220.patch
4b53ad5748313fb92c68eac1160b00d1bf7310019657028122a455855334252b  xsa220-4.5.patch
befe5ca5321d903428fc496abeee3a3b5eb0cee27a382e20d3caf8cc7bdfced2  xsa220-4.6.patch
555fa741348909943393aaf73571bc7817b30eafcff73dbfcd73911113db5d7f  xsa220-4.7.patch
7a41ad9c6f9d46536abae051c517456bdfa3564278e98f80222a904df749fb0c  xsa220-4.8.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.


(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3QAAoJEIP+FMlX6CvZ6ogH/3HavoXiL0zhOEfVyCJqMk8N
4gqV1U++wSP3/C+r/W0joZGnTtr7yDQi+zR0ElDBbwMZynJm4VXwFzCJr7HDc3JF
Pdx3YD3d75QVzJxS1yGF2uGTqlDywqsabja5BqVc4tY78Sxj9dKyKkcR+HNsYDyA
RoqQeOPN7GiAq1gtN5MW2HaUVDWOFCEbyMQhndqs6ZPmhxU9qQdSzltuMuLc/tNb
f9YtxPydfXTYZXSQA8poqySESBikeCUosbLX9hJB0GBoxV9PlPVLSA14nrYPS6Sd
kX9OJ2M4EoYNCROs5FFusbQwNdwLyMK8dNuTzOlZ9S9v5CpIwMQqs2Ypb1BVRqE=
=c/uv
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa220.patch"
Content-Disposition: attachment; filename="xsa220.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ODY6IGF2b2lkIGxlYWtpbmcgUEtSVSBhbmQgQk5EKiBiZXR3ZWVuIHZD
UFUtcwoKUEtSVSBpcyBleHBsaWNpdGx5ICJYU0FWRS1tYW5hZ2VkIGJ1dCBu
b3QgWFNBVkUtZW5hYmxlZCIsIHNvIGd1ZXN0cwptaWdodCBhY2Nlc3MgdGhl
IHJlZ2lzdGVyICh2aWEge1JELFdSfVBLUlUpIHdpdGhvdXQgc2V0dGluZyBY
Q1IwLlBLUlUuCkZvcmNlIGNvbnRleHQgc3dpdGNoaW5nIGFzIHdlbGwgYXMg
bWlncmF0aW5nIHRoZSByZWdpc3RlciBhcyBzb29uIGFzCkNSNC5QS0UgaXMg
YmVpbmcgc2V0IHRoZSBmaXJzdCB0aW1lLgoKRm9yIE1QWCAoQk5EPG4+LCBC
TkRDRkdVLCBhbmQgQk5EU1RBVFVTKSB0aGUgc2l0dWF0aW9uIGlzIGxlc3Mg
Y2xlYXIsCmFuZCB0aGUgU0RNIGhhcyBub3QgZW50aXJlbHkgY29uc2lzdGVu
dCBpbmZvcm1hdGlvbiBmb3IgdGhhdCBjYXNlLgpXaGlsZSBleHBlcmltZW50
YWxseSB0aGUgaW5zdHJ1Y3Rpb25zIGRvbid0IGNoYW5nZSByZWdpc3RlciBz
dGF0ZSBhcwpsb25nIGFzIHRoZSB0d28gWENSMCBiaXRzIGFyZW4ndCBib3Ro
IDEsIGJlIG9uIHRoZSBzYWZlIHNpZGUgYW5kIGVuYWJsZQpib3RoIGlmIEJO
RENGR1MuRU4gaXMgYmVpbmcgc2V0IHRoZSBmaXJzdCB0aW1lLgoKVGhpcyBp
cyBYU0EtMjIwLgoKUmVwb3J0ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJl
dy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVs
aWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6IEFuZHJldyBD
b29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+CgotLS0gYS94ZW4v
YXJjaC94ODYvaHZtL2h2bS5jCisrKyBiL3hlbi9hcmNoL3g4Ni9odm0vaHZt
LmMKQEAgLTMwNywxMCArMzA3LDM5IEBAIGludCBodm1fc2V0X2d1ZXN0X3Bh
dChzdHJ1Y3QgdmNwdSAqdiwgdTYKIAogYm9vbCBodm1fc2V0X2d1ZXN0X2Ju
ZGNmZ3Moc3RydWN0IHZjcHUgKnYsIHU2NCB2YWwpCiB7Ci0gICAgcmV0dXJu
IGh2bV9mdW5jcy5zZXRfZ3Vlc3RfYm5kY2ZncyAmJgotICAgICAgICAgICBp
c19jYW5vbmljYWxfYWRkcmVzcyh2YWwpICYmCi0gICAgICAgICAgICEodmFs
ICYgSUEzMl9CTkRDRkdTX1JFU0VSVkVEKSAmJgotICAgICAgICAgICBodm1f
ZnVuY3Muc2V0X2d1ZXN0X2JuZGNmZ3ModiwgdmFsKTsKKyAgICBpZiAoICFo
dm1fZnVuY3Muc2V0X2d1ZXN0X2JuZGNmZ3MgfHwKKyAgICAgICAgICFpc19j
YW5vbmljYWxfYWRkcmVzcyh2YWwpIHx8CisgICAgICAgICAodmFsICYgSUEz
Ml9CTkRDRkdTX1JFU0VSVkVEKSApCisgICAgICAgIHJldHVybiBmYWxzZTsK
KworICAgIC8qCisgICAgICogV2hpbGUgTVBYIGluc3RydWN0aW9ucyBhcmUg
c3VwcG9zZWQgdG8gYmUgZ2F0ZWQgb24gWENSMC5CTkQqLCBsZXQncworICAg
ICAqIG5ldmVydGhlbGVzcyBmb3JjZSB0aGUgcmVsZXZhbnQgWENSMCBiaXRz
IG9uIHdoZW4gdGhlIGZlYXR1cmUgaXMgYmVpbmcKKyAgICAgKiBlbmFibGVk
IGluIEJORENGR1MuCisgICAgICovCisgICAgaWYgKCAodmFsICYgSUEzMl9C
TkRDRkdTX0VOQUJMRSkgJiYKKyAgICAgICAgICEodi0+YXJjaC54Y3IwX2Fj
Y3VtICYgKFhTVEFURV9CTkRSRUdTIHwgWFNUQVRFX0JORENTUikpICkKKyAg
ICB7CisgICAgICAgIHVpbnQ2NF90IHhjcjAgPSBnZXRfeGNyMCgpOworICAg
ICAgICBpbnQgcmM7CisKKyAgICAgICAgaWYgKCB2ICE9IGN1cnJlbnQgKQor
ICAgICAgICAgICAgcmV0dXJuIGZhbHNlOworCisgICAgICAgIHJjID0gaGFu
ZGxlX3hzZXRidihYQ1JfWEZFQVRVUkVfRU5BQkxFRF9NQVNLLAorICAgICAg
ICAgICAgICAgICAgICAgICAgICAgeGNyMCB8IFhTVEFURV9CTkRSRUdTIHwg
WFNUQVRFX0JORENTUik7CisKKyAgICAgICAgaWYgKCByYyApCisgICAgICAg
IHsKKyAgICAgICAgICAgIEhWTV9EQkdfTE9HKERCR19MRVZFTF8xLCAiRmFp
bGVkIHRvIGZvcmNlIFhDUjAuQk5EKjogJWQiLCByYyk7CisgICAgICAgICAg
ICByZXR1cm4gZmFsc2U7CisgICAgICAgIH0KKworICAgICAgICBpZiAoIGhh
bmRsZV94c2V0YnYoWENSX1hGRUFUVVJFX0VOQUJMRURfTUFTSywgeGNyMCkg
KQorICAgICAgICAgICAgLyogbm90aGluZywgYmVzdCBlZmZvcnQgb25seSAq
LzsKKyAgICB9CisKKyAgICByZXR1cm4gaHZtX2Z1bmNzLnNldF9ndWVzdF9i
bmRjZmdzKHYsIHZhbCk7CiB9CiAKIC8qCkBAIC0yMzM1LDYgKzIzNjQsMjcg
QEAgaW50IGh2bV9zZXRfY3I0KHVuc2lnbmVkIGxvbmcgdmFsdWUsIGJvbwog
ICAgICAgICAgICAgcGFnaW5nX3VwZGF0ZV9wYWdpbmdfbW9kZXModik7CiAg
ICAgfQogCisgICAgLyoKKyAgICAgKiB7UkQsV1J9UEtSVSBhcmUgbm90IGdh
dGVkIG9uIFhDUjAuUEtSVSBhbmQgaGVuY2UgYW4gb2RkbHkgYmVoYXZpbmcK
KyAgICAgKiBndWVzdCBtYXkgZW5hYmxlIHRoZSBmZWF0dXJlIGluIENSNCB3
aXRob3V0IGVuYWJsaW5nIGl0IGluIFhDUjAuIFdlCisgICAgICogbmVlZCB0
byBjb250ZXh0IHN3aXRjaCAvIG1pZ3JhdGUgUEtSVSBuZXZlcnRoZWxlc3Mu
CisgICAgICovCisgICAgaWYgKCAodmFsdWUgJiBYODZfQ1I0X1BLRSkgJiYg
ISh2LT5hcmNoLnhjcjBfYWNjdW0gJiBYU1RBVEVfUEtSVSkgKQorICAgIHsK
KyAgICAgICAgaW50IHJjID0gaGFuZGxlX3hzZXRidihYQ1JfWEZFQVRVUkVf
RU5BQkxFRF9NQVNLLAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
IGdldF94Y3IwKCkgfCBYU1RBVEVfUEtSVSk7CisKKyAgICAgICAgaWYgKCBy
YyApCisgICAgICAgIHsKKyAgICAgICAgICAgIEhWTV9EQkdfTE9HKERCR19M
RVZFTF8xLCAiRmFpbGVkIHRvIGZvcmNlIFhDUjAuUEtSVTogJWQiLCByYyk7
CisgICAgICAgICAgICByZXR1cm4gWDg2RU1VTF9FWENFUFRJT047CisgICAg
ICAgIH0KKworICAgICAgICBpZiAoIGhhbmRsZV94c2V0YnYoWENSX1hGRUFU
VVJFX0VOQUJMRURfTUFTSywKKyAgICAgICAgICAgICAgICAgICAgICAgICAg
IGdldF94Y3IwKCkgJiB+WFNUQVRFX1BLUlUpICkKKyAgICAgICAgICAgIC8q
IG5vdGhpbmcsIGJlc3QgZWZmb3J0IG9ubHkgKi87CisgICAgfQorCiAgICAg
cmV0dXJuIFg4NkVNVUxfT0tBWTsKIH0KIAo=

--=separator
Content-Type: application/octet-stream; name="xsa220-4.5.patch"
Content-Disposition: attachment; filename="xsa220-4.5.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ODY6IGF2b2lkIGxlYWtpbmcgQk5EKiBiZXR3ZWVuIHZDUFUtcwoKRm9y
IE1QWCAoQk5EPG4+LCBCTkRDRkdVLCBhbmQgQk5EU1RBVFVTKSB0aGUgc2l0
dWF0aW9uIGlzIGxlc3MgY2xlYXIsCmFuZCB0aGUgU0RNIGhhcyBub3QgZW50
aXJlbHkgY29uc2lzdGVudCBpbmZvcm1hdGlvbiBmb3IgdGhhdCBjYXNlLgpX
aGlsZSBleHBlcmltZW50YWxseSB0aGUgaW5zdHJ1Y3Rpb25zIGRvbid0IGNo
YW5nZSByZWdpc3RlciBzdGF0ZSBhcwpsb25nIGFzIHRoZSB0d28gWENSMCBi
aXRzIGFyZW4ndCBib3RoIDEsIGJlIG9uIHRoZSBzYWZlIHNpZGUgYW5kIGVu
YWJsZQpib3RoIGlmIEJORENGR1MuRU4gaXMgYmVpbmcgc2V0IHRoZSBmaXJz
dCB0aW1lLgoKVGhpcyBpcyBYU0EtMjIwLgoKUmVwb3J0ZWQtYnk6IEFuZHJl
dyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5jb20+ClNpZ25lZC1v
ZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3
ZWQtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29wZXIzQGNpdHJpeC5j
b20+CgotLS0gYS94ZW4vYXJjaC94ODYvaHZtL3ZteC92bXguYworKysgYi94
ZW4vYXJjaC94ODYvaHZtL3ZteC92bXguYwpAQCAtMzIsNyArMzIsNyBAQAog
I2luY2x1ZGUgPGFzbS9yZWdzLmg+CiAjaW5jbHVkZSA8YXNtL2NwdWZlYXR1
cmUuaD4KICNpbmNsdWRlIDxhc20vcHJvY2Vzc29yLmg+Ci0jaW5jbHVkZSA8
YXNtL3R5cGVzLmg+CisjaW5jbHVkZSA8YXNtL3hzdGF0ZS5oPgogI2luY2x1
ZGUgPGFzbS9kZWJ1Z3JlZy5oPgogI2luY2x1ZGUgPGFzbS9tc3IuaD4KICNp
bmNsdWRlIDxhc20vc3BpbmxvY2suaD4KQEAgLTU4OCw2ICs1ODgsNDUgQEAg
c3RhdGljIGludCB2bXhfbG9hZF92bWNzX2N0eHQoc3RydWN0IHZjcAogICAg
IHJldHVybiAwOwogfQogCitzdGF0aWMgYm9vbF90IHZteF9zZXRfZ3Vlc3Rf
Ym5kY2ZncyhzdHJ1Y3QgdmNwdSAqdiwgdTY0IHZhbCkKK3sKKyAgICBpZiAo
ICFjcHVfaGFzX21weCB8fCAhY3B1X2hhc192bXhfbXB4IHx8CisgICAgICAg
ICAhaXNfY2Fub25pY2FsX2FkZHJlc3ModmFsKSB8fAorICAgICAgICAgKHZh
bCAmIElBMzJfQk5EQ0ZHU19SRVNFUlZFRCkgKQorICAgICAgICByZXR1cm4g
MDsKKworICAgIC8qCisgICAgICogV2hpbGUgTVBYIGluc3RydWN0aW9ucyBh
cmUgc3VwcG9zZWQgdG8gYmUgZ2F0ZWQgb24gWENSMC5CTkQqLCBsZXQncwor
ICAgICAqIG5ldmVydGhlbGVzcyBmb3JjZSB0aGUgcmVsZXZhbnQgWENSMCBi
aXRzIG9uIHdoZW4gdGhlIGZlYXR1cmUgaXMgYmVpbmcKKyAgICAgKiBlbmFi
bGVkIGluIEJORENGR1MuCisgICAgICovCisgICAgaWYgKCAodmFsICYgSUEz
Ml9CTkRDRkdTX0VOQUJMRSkgJiYKKyAgICAgICAgICEodi0+YXJjaC54Y3Iw
X2FjY3VtICYgKFhTVEFURV9CTkRSRUdTIHwgWFNUQVRFX0JORENTUikpICkK
KyAgICB7CisgICAgICAgIHVpbnQ2NF90IHhjcjAgPSBnZXRfeGNyMCgpOwor
ICAgICAgICBpbnQgcmM7CisKKyAgICAgICAgaWYgKCB2ICE9IGN1cnJlbnQg
KQorICAgICAgICAgICAgcmV0dXJuIDA7CisKKyAgICAgICAgcmMgPSBoYW5k
bGVfeHNldGJ2KFhDUl9YRkVBVFVSRV9FTkFCTEVEX01BU0ssCisgICAgICAg
ICAgICAgICAgICAgICAgICAgICB4Y3IwIHwgWFNUQVRFX0JORFJFR1MgfCBY
U1RBVEVfQk5EQ1NSKTsKKworICAgICAgICBpZiAoIHJjICkKKyAgICAgICAg
eworICAgICAgICAgICAgSFZNX0RCR19MT0coREJHX0xFVkVMXzEsICJGYWls
ZWQgdG8gZm9yY2UgWENSMC5CTkQqOiAlZCIsIHJjKTsKKyAgICAgICAgICAg
IHJldHVybiAwOworICAgICAgICB9CisKKyAgICAgICAgaWYgKCBoYW5kbGVf
eHNldGJ2KFhDUl9YRkVBVFVSRV9FTkFCTEVEX01BU0ssIHhjcjApICkKKyAg
ICAgICAgICAgIC8qIG5vdGhpbmcsIGJlc3QgZWZmb3J0IG9ubHkgKi87Cisg
ICAgfQorCisgICAgX192bXdyaXRlKEdVRVNUX0JORENGR1MsIHZhbCk7CisK
KyAgICByZXR1cm4gMTsKK30KKwogc3RhdGljIHVuc2lnbmVkIGludCBfX2lu
aXQgdm14X2luaXRfbXNyKHZvaWQpCiB7CiAgICAgcmV0dXJuIGNwdV9oYXNf
bXB4ICYmIGNwdV9oYXNfdm14X21weDsKQEAgLTYxOSwxMSArNjU4LDggQEAg
c3RhdGljIGludCB2bXhfbG9hZF9tc3Ioc3RydWN0IHZjcHUgKnYsCiAgICAg
ICAgIHN3aXRjaCAoIGN0eHQtPm1zcltpXS5pbmRleCApCiAgICAgICAgIHsK
ICAgICAgICAgY2FzZSBNU1JfSUEzMl9CTkRDRkdTOgotICAgICAgICAgICAg
aWYgKCBjcHVfaGFzX21weCAmJiBjcHVfaGFzX3ZteF9tcHggJiYKLSAgICAg
ICAgICAgICAgICAgaXNfY2Fub25pY2FsX2FkZHJlc3MoY3R4dC0+bXNyW2ld
LnZhbCkgJiYKLSAgICAgICAgICAgICAgICAgIShjdHh0LT5tc3JbaV0udmFs
ICYgSUEzMl9CTkRDRkdTX1JFU0VSVkVEKSApCi0gICAgICAgICAgICAgICAg
X192bXdyaXRlKEdVRVNUX0JORENGR1MsIGN0eHQtPm1zcltpXS52YWwpOwot
ICAgICAgICAgICAgZWxzZQorICAgICAgICAgICAgaWYgKCAhdm14X3NldF9n
dWVzdF9ibmRjZmdzKHYsIGN0eHQtPm1zcltpXS52YWwpICYmCisgICAgICAg
ICAgICAgICAgIGN0eHQtPm1zcltpXS52YWwgKQogICAgICAgICAgICAgICAg
IGVyciA9IC1FTlhJTzsKICAgICAgICAgICAgIGJyZWFrOwogICAgICAgICBk
ZWZhdWx0OgpAQCAtMjMyNywxMSArMjM2Myw4IEBAIHN0YXRpYyBpbnQgdm14
X21zcl93cml0ZV9pbnRlcmNlcHQodW5zaWcKICAgICAgICAgYnJlYWs7CiAg
ICAgfQogICAgIGNhc2UgTVNSX0lBMzJfQk5EQ0ZHUzoKLSAgICAgICAgaWYg
KCAhY3B1X2hhc19tcHggfHwgIWNwdV9oYXNfdm14X21weCB8fAotICAgICAg
ICAgICAgICFpc19jYW5vbmljYWxfYWRkcmVzcyhtc3JfY29udGVudCkgfHwK
LSAgICAgICAgICAgICAobXNyX2NvbnRlbnQgJiBJQTMyX0JORENGR1NfUkVT
RVJWRUQpICkKKyAgICAgICAgaWYgKCAhdm14X3NldF9ndWVzdF9ibmRjZmdz
KHYsIG1zcl9jb250ZW50KSApCiAgICAgICAgICAgICBnb3RvIGdwX2ZhdWx0
OwotICAgICAgICBfX3Ztd3JpdGUoR1VFU1RfQk5EQ0ZHUywgbXNyX2NvbnRl
bnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIElBMzJfRkVBVFVSRV9D
T05UUk9MX01TUjoKICAgICBjYXNlIE1TUl9JQTMyX1ZNWF9CQVNJQy4uLk1T
Ul9JQTMyX1ZNWF9UUlVFX0VOVFJZX0NUTFM6Cg==

--=separator
Content-Type: application/octet-stream; name="xsa220-4.6.patch"
Content-Disposition: attachment; filename="xsa220-4.6.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa220-4.7.patch"
Content-Disposition: attachment; filename="xsa220-4.7.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa220-4.8.patch"
Content-Disposition: attachment; filename="xsa220-4.8.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpe-0006Z7-L0; Tue, 20 Jun 2017 12:00:30 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpc-0006TC-FT; Tue, 20 Jun 2017 12:00:29 +0000
Received: from [85.158.143.35] by server-2.bemta-6.messagelabs.com id
 2C/9E-03058-B5E09495; Tue, 20 Jun 2017 12:00:27 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmpll+JIrShJLcpLzFFi42LJaLquqhvJ5xl
 psOmZosWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzXryYzFIwdQlXxbSN71ga
 GKd3cHUxcnEICRxnlNi69AozhLOIUeLl7dXsXYycHMwCrhI39m1mg7AVJS7ca2ABsXkFBCVOz
 nwCZksIaErcebMKrF5EoEhi57mXYDabgJ7E3LOTmCB6LSXmTzwFNIeDQ1ggXOLpOlYQk1fATG
 LpzhyQChYBVYk/Z5+yT2DkmYVk8Swki2chWTwLqJsZaPH6XfoQprTE8n8cENXyEtvfzmGGCFd
 LvJ4RCxGukFg3aTU7zMAp3Q+h7GqJfZ//s8HUPN64jxVTTb3Euf53LBB2jcSx5ZeYsanZ9fAt
 O0zN+WUrsdhVJjHt1BFGCLtY4vf03VjMKZPY07ILrqa/9RMLppoqiQ+/pgDVsAPZ5RKvA7Gpm
 D31FlRnucTDq0/YsNm0d8FVdphNFy/vYF7A6LSKUb04tagstUjXTC+pKDM9oyQ3MTNH19DATC
 83tbg4MT01JzGpWC85P3cTIzABMgDBDsZ5J/wPMUpyMCmJ8qozeEYK8SXlp1RmJBZnxBeV5qQ
 WH2LU4OAQ6Fuz+gKjFEtefl6qkgQvOy9QnWBRanpqRVpmDjBFw5RKcPAoifDGg4zhLS5IzC3O
 TIdInWI05tj1f80XJo5l67d8YRICmyQlzqsJMkkApDSjNA9uECx3XGKUlRLmZQQ6U4inILUoN
 7MEVf4VozgHo5Iw7z0eoCk8mXklcPteAZ3CBHTKiyMeIKeUJCKkpBoYK/qFdjhrFu+SZn287J
 qjke+7UhNh/RQ7vjnGfC9r3WakOIudXyT8Nev/3va3RWosfKfYHm1Y3fHy2obvt9R0J7gJeCZ
 M01lotEDr6pqWB5sf3pwbt+tZj2ZFjO7PpLDvyQ3Rru9Y759kqzzy4/PH+Hcbt/pe2jL3/fZP
 UStufrr5Srq40+vEMyWW4oxEQy3mouJEAOsoADYYBAAA
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-14.tower-21.messagelabs.com!1497960024!68114350!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 62785 invoked from network); 20 Jun 2017 12:00:24 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-14.tower-21.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:24 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-0004FA-HC; Tue, 20 Jun 2017 12:00:09 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-00069v-G6; Tue, 20 Jun 2017 12:00:09 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpJ-00069v-G6@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:09 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 224 - grant table operations
 mishandle reference counts
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-224
                              version 4

           grant table operations mishandle reference counts

UPDATES IN VERSION 4
====================

Correct 4.5 backports (first patch had an issue which then was
corrected by last one).

Public release.

ISSUE DESCRIPTION
=================

We have discovered a number of bugs in the code mapping and unmapping
grant references.

* If a grant is mapped with both the GNTMAP_device_map and
GNTMAP_host_map flags, but unmapped only with host_map, the device_map
portion remains but the page reference counts are lowered as though it
had been removed. This bug can be leveraged cause a page's reference
counts and type counts to fall to zero while retaining writeable
mappings to the page.

* Under some specific conditions, if a grant is mapped with both the
GNTMAP_device_map and GNTMAP_host_map flags, the operation may not
grab sufficient type counts.  When the grant is then unmapped, the
type count will be erroneously reduced.  This bug can be leveraged
cause a page's reference counts and type counts to fall to zero while
retaining writeable mappings to the page.

* When a grant reference is given to an MMIO region (as opposed to a
normal guest page), if the grant is mapped with only the
GNTMAP_device_map flag set, a mapping is created at host_addr anyway.
This does *not* cause reference counts to change, but there will be no
record of this mapping, so it will not be considered when reporting
whether the grant is still in use.

IMPACT
======

For the worst issue, a PV guest could gain a writeable mapping of its
own pagetable, allowing it to escalate its privileges to that of the
host.

VULNERABLE SYSTEMS
==================

All versions of Xen are vulnerable.

Only x86 systems are vulnerable.

Any system running untrusted PV guests is vulnerable.

Systems with untrusted HVM guests are only vulnerable if those guests
are served by a trusted PV backend which is vulnerable: Namely, one
which calls grant_map() with both the GNTMAP_device_map and
GNTMAP_host_map flags.  The security team is not aware of any backends
which are vulnerable.

MITIGATION
==========

Running only HVM guests will avoid this vulnerability.

CREDITS
=======

This issue was discovered by Jan Beulich of SUSE.

RESOLUTION
==========

Applying the appropriate set of attached patched resolves this issue.
Note that these patches are assumed to be applied on top of the XSA-218
ones; not doing so may cause at least mechanical problems of applying
the ones here.

xsa224-unstable/*.patch         xen-unstable
xsa224-4.8/*.patch       Xen 4.8.x
xsa224-4.7/*.patch       Xen 4.7.x
xsa224-4.6/*.patch       Xen 4.6.x
xsa224-4.5/*.patch       Xen 4.5.x

$ sha256sum xsa224*/*
db39535185c1879775b62873fbed1e6285300ec1e1bd5d09ac2d96a98ac6443c  xsa224-unstable/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch
1588257f5b0c7113cd478475014f56fbeb6e79de7acbe67cf6d7a265e2b3fa15  xsa224-unstable/0002-gnttab-never-create-host-mapping-unless-asked-to.patch
a7517ca0e253fb9fb5b1ea1e56d04167f32ef87be145462a15241af26e4e0d65  xsa224-unstable/0003-gnttab-correct-logic-to-get-page-references-during-m.patch
951217a88f9c945eb9f7933cd66615aef955206fab955020334ac54da05663fa  xsa224-unstable/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch
190470fbd77fca58aab89a9bd034732525ce8f7ce7c417a0ca5d25b366639baa  xsa224-4.5/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch
9374e4dd6666a63fb32e6cfbdc95071b0cc153ff7cb2d2efdd98468e0e079605  xsa224-4.5/0002-gnttab-never-create-host-mapping-unless-asked-to.patch
d825e6fa5827e28e3755c92b274044666cc91b6a8cbc16e2081f43e0371991d4  xsa224-4.5/0003-gnttab-correct-logic-to-get-page-references-during-m.patch
d3aaffaf487a84e43fe10f7dec5af72b64d1b2315440c36335a0ed8ec1439ca1  xsa224-4.5/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch
c6cd6b82ef774bec5eaad5f32e767c917bc7ad2a73ee81d3f7eef67aaf1a1330  xsa224-4.6/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch
db32d15757c9d147c7e89eebd10a16324e59141fbb5ce3feb87fc9bf01864a6a  xsa224-4.6/0002-gnttab-never-create-host-mapping-unless-asked-to.patch
6bc9bbcf320d673822bd41545a014bd998294d06c5b38d79a6badf1a154ed0d6  xsa224-4.6/0003-gnttab-correct-logic-to-get-page-references-during-m.patch
088064fec3192928f205b34b808ca40fd685a8ba5037bb665ed0a4f87d6d4035  xsa224-4.6/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch
cdd93fb950b823cf96fe52685f6394c1b5e0a1e3d7d3c961a5e781da83551a9f  xsa224-4.7/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch
0583da31891084b2557a9623bc2b11a480e296004a8716b91c79fe28a824a6e0  xsa224-4.7/0002-gnttab-never-create-host-mapping-unless-asked-to.patch
2323bf581a835f152285b98ed2e4b5b503b0f67bd8e3449d33e8fe03b14ce064  xsa224-4.7/0003-gnttab-correct-logic-to-get-page-references-during-m.patch
b4f4adb1ea850e0174e51f76da7e97769211977c71809bd62102d33d90444b09  xsa224-4.7/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch
88b20e6765f0bfffe7598215f3a8e25c0931dbe3c7223cb3c08f998842cfc14b  xsa224-4.8/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch
ce62c97f470d6fbf557f50be8936051e91592a6330527515b7cdb187a0d633b2  xsa224-4.8/0002-gnttab-never-create-host-mapping-unless-asked-to.patch
5fd8cd67737c6a038d6c47fcf3c5bd2d238f4ac361538d650292ee185bda8000  xsa224-4.8/0003-gnttab-correct-logic-to-get-page-references-during-m.patch
f9c65c7f04063872602c609d2fc3caffc44716b3d378569969a7884abe881a19  xsa224-4.8/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3YAAoJEIP+FMlX6CvZD8IH/3wQYr87n4rcqeAZl9afsouD
kvasR7upPlxm8gH9wEz5PCg4thPKh1X1dNQhefTUMujPGUdxGgz9DYISukHCksso
Avf5Ge/76k2Xxw9CjH3T5pgYK7V95ABc0omfvHeL8gJjTOwPSrBZkUOEQxUrGSFp
/Q4op0BIIyOUR4TdYyl5gWlQJC1leTCKSvsqju31BdvOg+kJF7aU1NUho5qgXTa8
lq/UjVFufZyhxK371q7eYKDZcFiDngzlRXu5Mz1uowTOJHWwgkRLFJ0kl5NK7O+j
JWSwmJZxBw6yw+sxCwBTKkskxietGRQU9Febz+Aj3Urma3djiBNeazU9t0BEq0E=
=PeqY
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream;
 name="xsa224-unstable/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Disposition: attachment;
 filename="xsa224-unstable/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-unstable/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Disposition: attachment;
 filename="xsa224-unstable/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-unstable/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Disposition: attachment;
 filename="xsa224-unstable/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-unstable/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Disposition: attachment;
 filename="xsa224-unstable/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.5/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Disposition: attachment;
 filename="xsa224-4.5/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.5/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Disposition: attachment;
 filename="xsa224-4.5/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.5/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Disposition: attachment;
 filename="xsa224-4.5/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Transfer-Encoding: base64

RnJvbSA1ZmQ0NzI2ODU3YTkxM2U5MGRlOTU2MjNkYzM4NWY4ODU2NDY1ODM5
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMiBKdW4g
MjAxNyAxNToyMToyNyArMDEwMApTdWJqZWN0OiBbUEFUQ0ggMy80XSBnbnR0
YWI6IGNvcnJlY3QgbG9naWMgdG8gZ2V0IHBhZ2UgcmVmZXJlbmNlcyBkdXJp
bmcgbWFwCiByZXF1ZXN0cwoKVGhlIHJ1bGVzIGZvciByZWZlcmVuY2UgY291
bnRpbmcgYXJlIHNvbWV3aGF0IGNvbXBsaWNhdGVkOgoKKiBFYWNoIG9mIEdO
VFRBQl9ob3N0X21hcCBhbmQgR05UVEFCX2RldmljZV9tYXAgbmVlZCB0aGVp
ciBvd24KcmVmZXJlbmNlIGNvdW50CgoqIElmIHRoZSBtYXBwaW5nIGlzIHdy
aXRlYWJsZToKIC0gR05UVEFCX2hvc3RfbWFwIG5lZWRzIGEgdHlwZSBjb3Vu
dCB1bmRlciBvbmx5IHNvbWUgY29uZGl0aW9ucwogLSBHTlRUQUJfZGV2aWNl
X21hcCBhbHdheXMgbmVlZHMgYSB0eXBlIGNvdW50CgpJZiB0aGUgbWFwcGlu
ZyBzdWNjZWVkcywgd2UgbmVlZCB0byBrZWVwIGFsbCBvZiB0aGVzZTsgaWYg
dGhlIG1hcHBpbmcKZmFpbHMsIHdlIG5lZWQgdG8gcmVsZWFzZSB3aGF0ZXZl
ciByZWZlcmVuY2VzIHdlIGhhdmUgYWNxdWlyZWQgc28gZmFyLgoKQWRkaXRp
b25hbGx5LCB0aGUgY29kZSB0aGF0IGRvZXMgYSBsb3Qgb2YgdGhpcyBjYWxj
dWxhdGlvbiAiaW5oZXJpdHMiCmEgcmVmZXJlbmNlIGFzIHBhcnQgb2YgdGhl
IHByb2Nlc3Mgb2YgZmluZGluZyBvdXQgd2hvIHRoZSBvd25lciBpcy4KCkZp
bmFsbHksIGlmIHRoZSBncmFudCBpcyBtYXBwZWQgYXMgd3JpdGVhYmxlICh3
aXRob3V0IHRoZQpHTlRNQVBfcmVhZG9ubHkgZmxhZyksIGJ1dCB0aGUgaHlw
ZXJ2aXNvciBjYW5ub3QgZ3JhYiBhClBHVF93cml0ZWFibGVfcGFnZSB0eXBl
LCB0aGUgZW50aXJlIG9wZXJhdGlvbiBzaG91bGQgZmFpbC4KClVuZm9ydHVu
YXRlbHksIHRoZSBjdXJyZW50IGNvZGUgaGFzIHNldmVyYWwgbG9naWMgaG9s
ZXM6CgoqIElmIGEgZ3JhbnQgaXMgbWFwcGVkIG9ubHkgR05UVEFCX2Rldmlj
ZV9tYXAsIGFuZCB3aXRoIGEgd3JpdGVhYmxlCiAgbWFwcGluZywgYnV0IGlu
IGNvbmRpdGlvbnMgd2hlcmUgYSAqaG9zdCogdHlwZSBjb3VudCBpcyBub3QK
ICBuZWNlc3NhcnksIHRoZSBjb2RlIHdpbGwgZmFpbCB0byBncmFiIHRoZSBu
ZWNlc3NhcnkgdHlwZSBjb3VudC4KCiogSWYgYSBncmFudCBpcyBtYXBwZWQg
Ym90aCBHTlRUQUJfZGV2aWNlX21hcCBhbmQgR05UVEFCX2hvc3RfbWFwLAog
IHdpdGggYSB3cml0ZWFibGUgbWFwcGluZywgaW4gY29uZGl0aW9ucyB3aGVy
ZSB0aGUgaG9zdCB0eXBlIGNvdW50IGlzCiAgbm90IG5lY2Vzc2FyeSwgKmFu
ZCogd2hlcmUgdGhlIHBhZ2UgY2Fubm90IGJlIGNoYW5nZWQgdG8gdHlwZQog
IFBHVF93cml0ZWFibGUsIHRoZSBjb25kaXRpb24gd2lsbCBub3QgYmUgZGV0
ZWN0ZWQuCgpJbiBib3RoIGNhc2VzLCB0aGlzIG1lYW5zIHRoYXQgb24gc3Vj
Y2VzcywgdGhlIHR5cGUgY291bnQgd2lsbCBiZQplcnJvbmVvdXNseSByZWR1
Y2VkIHdoZW4gdGhlIGdyYW50IGlzIHVubWFwcGVkLiAgSW4gdGhlIHNlY29u
ZCBjYXNlLAp0aGUgdHlwZSBjb3VudCB3aWxsIGJlIGVycm9uZW91c2x5IHJl
ZHVjZWQgb24gdGhlIGZhaWx1cmUgcGF0aCBhcwp3ZWxsLiAgKEluIHRoZSBm
aXJzdCBjYXNlIHRoZSBmYWlsdXJlIHBhdGggbG9naWMgaGFzIHRoZSBzYW1l
IGhvbGUKYXMgdGhlIHJlZmVyZW5jZSBncmFiYmluZyBsb2dpYy4pCgpBZGRp
dGlvbmFsbHksIHRoZSByZXR1cm4gdmFsdWUgb2YgZ2V0X3BhZ2UoKSBpcyBu
b3QgY2hlY2tlZDsgYnV0IHRoaXMKbWF5IGZhaWwgZXZlbiBpZiB0aGUgZmly
c3QgZ2V0X3BhZ2UoKSBzdWNjZWVkZWQgZHVlIHRvIGEgcmVmZXJlbmNlCmNv
dW50aW5nIG92ZXJmbG93LgoKRmlyc3Qgb2YgYWxsLCBzaW1wbGlmeSB0aGUg
cmVzdG9yYXRpb24gbG9naWMgYnkgZXhwbGljaXRseSBjb3VudGluZwp0aGUg
cmVmZXJlbmNlIGFuZCB0eXBlIHJlZmVyZW5jZXMgYWNxdWlyZWQuCgpDb25z
aWRlciBlYWNoIG1hcHBpbmcgdHlwZSBzZXBhcmF0ZWx5LCBleHBsaWNpdGx5
IG1hcmtpbmcgdGhlCidpbmNvbWluZycgcmVmZXJlbmNlIGFzIHVzZWQgc28g
d2Uga25vdyB3aGVuIHdlIG5lZWQgdG8gZ3JhYiBhIHNlY29uZApvbmUuCgpG
aW5hbGx5LCBhbHdheXMgY2hlY2sgdGhlIHJldHVybiB2YWx1ZSBvZiBnZXRf
cGFnZVtfdHlwZV0oKSBhbmQgZ28gdG8KdGhlIGZhaWx1cmUgcGF0aCBpZiBh
cHByb3ByaWF0ZS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjI0LgoKUmVwb3J0
ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVk
LW9mZi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXgu
Y29tPgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz
ZS5jb20+Ci0tLQogeGVuL2NvbW1vbi9ncmFudF90YWJsZS5jIHwgNTggKysr
KysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0t
CiAxIGZpbGUgY2hhbmdlZCwgMzMgaW5zZXJ0aW9ucygrKSwgMjUgZGVsZXRp
b25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5j
IGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IGM0MDA3M2QuLjlm
NGZjMzcgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwor
KysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKQEAgLTU3MiwxMiArNTcy
LDEyIEBAIF9fZ250dGFiX21hcF9ncmFudF9yZWYoCiAgICAgc3RydWN0IGdy
YW50X3RhYmxlICpsZ3QsICpyZ3Q7CiAgICAgc3RydWN0IHZjcHUgICAqbGVk
OwogICAgIGludCAgICAgICAgICAgIGhhbmRsZTsKLSAgICB1bnNpZ25lZCBs
b25nICBmcmFtZSA9IDAsIG5yX2dldHMgPSAwOworICAgIHVuc2lnbmVkIGxv
bmcgIGZyYW1lID0gMDsKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IE5V
TEw7CiAgICAgaW50ICAgICAgICAgICAgcmMgPSBHTlRTVF9va2F5OwogICAg
IHUzMiAgICAgICAgICAgIG9sZF9waW47CiAgICAgdTMyICAgICAgICAgICAg
YWN0X3BpbjsKLSAgICB1bnNpZ25lZCBpbnQgICBjYWNoZV9mbGFnczsKKyAg
ICB1bnNpZ25lZCBpbnQgICBjYWNoZV9mbGFncywgcmVmY250ID0gMCwgdHlw
ZWNudCA9IDA7CiAgICAgc3RydWN0IGFjdGl2ZV9ncmFudF9lbnRyeSAqYWN0
ID0gTlVMTDsKICAgICBzdHJ1Y3QgZ3JhbnRfbWFwcGluZyAqbXQ7CiAgICAg
Z3JhbnRfZW50cnlfdjFfdCAqc2hhMTsKQEAgLTcxNCwxMSArNzE0LDE3IEBA
IF9fZ250dGFiX21hcF9ncmFudF9yZWYoCiAgICAgZWxzZQogICAgICAgICBv
d25lciA9IHBhZ2VfZ2V0X293bmVyKHBnKTsKIAorICAgIGlmICggb3duZXIg
KQorICAgICAgICByZWZjbnQrKzsKKwogICAgIGlmICggIXBnIHx8IChvd25l
ciA9PSBkb21faW8pICkKICAgICB7CiAgICAgICAgIC8qIE9ubHkgbmVlZGVk
IHRoZSByZWZlcmVuY2UgdG8gY29uZmlybSBkb21faW8gb3duZXJzaGlwLiAq
LwogICAgICAgICBpZiAoIHBnICkKKyAgICAgICAgewogICAgICAgICAgICAg
cHV0X3BhZ2UocGcpOworICAgICAgICAgICAgcmVmY250LS07CisgICAgICAg
IH0KIAogICAgICAgICBpZiAoIHBhZ2luZ19tb2RlX2V4dGVybmFsKGxkKSAp
CiAgICAgICAgIHsKQEAgLTc0NiwyNyArNzUyLDM4IEBAIF9fZ250dGFiX21h
cF9ncmFudF9yZWYoCiAgICAgfQogICAgIGVsc2UgaWYgKCBvd25lciA9PSBy
ZCB8fCBvd25lciA9PSBkb21fY293ICkKICAgICB7Ci0gICAgICAgIGlmICgg
Z250dGFiX2hvc3RfbWFwcGluZ19nZXRfcGFnZV90eXBlKG9wLCBsZCwgcmQp
ICkKKyAgICAgICAgaWYgKCAob3AtPmZsYWdzICYgR05UTUFQX2RldmljZV9t
YXApICYmICEob3AtPmZsYWdzICYgR05UTUFQX3JlYWRvbmx5KSApCiAgICAg
ICAgIHsKICAgICAgICAgICAgIGlmICggKG93bmVyID09IGRvbV9jb3cpIHx8
CiAgICAgICAgICAgICAgICAgICFnZXRfcGFnZV90eXBlKHBnLCBQR1Rfd3Jp
dGFibGVfcGFnZSkgKQogICAgICAgICAgICAgICAgIGdvdG8gY291bGRfbm90
X3BpbjsKKyAgICAgICAgICAgIHR5cGVjbnQrKzsKICAgICAgICAgfQogCi0g
ICAgICAgIG5yX2dldHMrKzsKICAgICAgICAgaWYgKCBvcC0+ZmxhZ3MgJiBH
TlRNQVBfaG9zdF9tYXAgKQogICAgICAgICB7Ci0gICAgICAgICAgICByYyA9
IGNyZWF0ZV9ncmFudF9ob3N0X21hcHBpbmcob3AtPmhvc3RfYWRkciwgZnJh
bWUsIG9wLT5mbGFncywgMCk7Ci0gICAgICAgICAgICBpZiAoIHJjICE9IEdO
VFNUX29rYXkgKQotICAgICAgICAgICAgICAgIGdvdG8gdW5kb19vdXQ7Ci0K
KyAgICAgICAgICAgIC8qCisgICAgICAgICAgICAgKiBPbmx5IG5lZWQgdG8g
Z3JhYiBhbm90aGVyIHJlZmVyZW5jZSBpZiBkZXZpY2VfbWFwIGNsYWltZWQK
KyAgICAgICAgICAgICAqIHRoZSBvdGhlciBvbmUuCisgICAgICAgICAgICAg
Ki8KICAgICAgICAgICAgIGlmICggb3AtPmZsYWdzICYgR05UTUFQX2Rldmlj
ZV9tYXAgKQogICAgICAgICAgICAgewotICAgICAgICAgICAgICAgIG5yX2dl
dHMrKzsKLSAgICAgICAgICAgICAgICAodm9pZClnZXRfcGFnZShwZywgcmQp
OwotICAgICAgICAgICAgICAgIGlmICggIShvcC0+ZmxhZ3MgJiBHTlRNQVBf
cmVhZG9ubHkpICkKLSAgICAgICAgICAgICAgICAgICAgZ2V0X3BhZ2VfdHlw
ZShwZywgUEdUX3dyaXRhYmxlX3BhZ2UpOworICAgICAgICAgICAgICAgIGlm
ICggIWdldF9wYWdlKHBnLCByZCkgKQorICAgICAgICAgICAgICAgICAgICBn
b3RvIGNvdWxkX25vdF9waW47CisgICAgICAgICAgICAgICAgcmVmY250Kys7
CisgICAgICAgICAgICB9CisKKyAgICAgICAgICAgIGlmICggZ250dGFiX2hv
c3RfbWFwcGluZ19nZXRfcGFnZV90eXBlKG9wLCBsZCwgcmQpICkKKyAgICAg
ICAgICAgIHsKKyAgICAgICAgICAgICAgICBpZiAoIChvd25lciA9PSBkb21f
Y293KSB8fAorICAgICAgICAgICAgICAgICAgICAgIWdldF9wYWdlX3R5cGUo
cGcsIFBHVF93cml0YWJsZV9wYWdlKSApCisgICAgICAgICAgICAgICAgICAg
IGdvdG8gY291bGRfbm90X3BpbjsKKyAgICAgICAgICAgICAgICB0eXBlY250
Kys7CiAgICAgICAgICAgICB9CisKKyAgICAgICAgICAgIHJjID0gY3JlYXRl
X2dyYW50X2hvc3RfbWFwcGluZyhvcC0+aG9zdF9hZGRyLCBmcmFtZSwgb3At
PmZsYWdzLCAwKTsKKyAgICAgICAgICAgIGlmICggcmMgIT0gR05UU1Rfb2th
eSApCisgICAgICAgICAgICAgICAgZ290byB1bmRvX291dDsKICAgICAgICAg
fQogICAgIH0KICAgICBlbHNlCkBAIC03NzUsOCArNzkyLDYgQEAgX19nbnR0
YWJfbWFwX2dyYW50X3JlZigKICAgICAgICAgaWYgKCAhcmQtPmlzX2R5aW5n
ICkKICAgICAgICAgICAgIGdkcHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiQ291
bGQgbm90IHBpbiBncmFudCBmcmFtZSAlbHhcbiIsCiAgICAgICAgICAgICAg
ICAgICAgICBmcmFtZSk7Ci0gICAgICAgIGlmICggb3duZXIgIT0gTlVMTCAp
Ci0gICAgICAgICAgICBwdXRfcGFnZShwZyk7CiAgICAgICAgIHJjID0gR05U
U1RfZ2VuZXJhbF9lcnJvcjsKICAgICAgICAgZ290byB1bmRvX291dDsKICAg
ICB9CkBAIC04MjcsMTggKzg0MiwxMSBAQCBfX2dudHRhYl9tYXBfZ3JhbnRf
cmVmKAogICAgIHJldHVybjsKIAogIHVuZG9fb3V0OgotICAgIGlmICggbnJf
Z2V0cyA+IDEgKQotICAgIHsKLSAgICAgICAgaWYgKCAhKG9wLT5mbGFncyAm
IEdOVE1BUF9yZWFkb25seSkgKQotICAgICAgICAgICAgcHV0X3BhZ2VfdHlw
ZShwZyk7Ci0gICAgICAgIHB1dF9wYWdlKHBnKTsKLSAgICB9Ci0gICAgaWYg
KCBucl9nZXRzID4gMCApCi0gICAgewotICAgICAgICBpZiAoIGdudHRhYl9o
b3N0X21hcHBpbmdfZ2V0X3BhZ2VfdHlwZShvcCwgbGQsIHJkKSApCi0gICAg
ICAgICAgICBwdXRfcGFnZV90eXBlKHBnKTsKKyAgICB3aGlsZSAoIHR5cGVj
bnQtLSApCisgICAgICAgIHB1dF9wYWdlX3R5cGUocGcpOworCisgICAgd2hp
bGUgKCByZWZjbnQtLSApCiAgICAgICAgIHB1dF9wYWdlKHBnKTsKLSAgICB9
CiAKICAgICBzcGluX2xvY2soJnJndC0+bG9jayk7CiAKLS0gCjIuMS40Cgo=

--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.5/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Disposition: attachment;
 filename="xsa224-4.5/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.6/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Disposition: attachment;
 filename="xsa224-4.6/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Transfer-Encoding: base64

RnJvbSA2MmU3M2M5YTNlMTFjNmJmZmExOGUyMGE5NzMyOWVmN2ZiNjk0NjM1
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFRodSwgMTUgSnVu
IDIwMTcgMTY6MjQ6MDIgKzAxMDAKU3ViamVjdDogW1BBVENIIDEvNF0gZ250
dGFiOiBGaXggaGFuZGxpbmcgb2YgZGV2X2J1c19hZGRyIGR1cmluZyB1bm1h
cAoKSWYgYSBncmFudCBoYXMgYmVlbiBtYXBwZWQgd2l0aCB0aGUgR05UVEFC
X2RldmljZV9tYXAgZmxhZywgY2FsbGluZwpncmFudF91bm1hcF9yZWYoKSB3
aXRoIGRldl9idXNfYWRkciBzZXQgdG8gemVybyBzaG91bGQgY2F1c2UgdGhl
CkdOVFRBQl9kZXZpY2VfbWFwIHBhcnQgb2YgdGhlIG1hcHBpbmcgdG8gYmUg
bGVmdCBhbG9uZS4KClVuZm9ydHVuYXRlbHksIGF0IHRoZSBtb21lbnQsIG9w
LT5kZXZfYnVzX2FkZHIgaXMgaW1wbGljaXRseSBjaGVja2VkCmJlZm9yZSBj
bGVhcmluZyB0aGUgbWFwIGFuZCBhZGp1c3RpbmcgdGhlIHBpbiBjb3VudCwg
YnV0IG9ubHkgdGhlIGJpdHMKYWJvdmUgMTI7IGFuZCBpdCBpcyBub3QgY2hl
Y2tlZCBhdCBhbGwgYmVmb3JlIGRyb3BwaW5nIHBhZ2UKcmVmZXJlbmNlcy4g
IFRoaXMgbWVhbnMgYSBndWVzdCBjYW4gcmVwZWF0ZWRseSBtYWtlIHN1Y2gg
YSBjYWxsIHRvCmNhdXNlIHRoZSByZWZlcmVuY2UgY291bnQgdG8gZHJvcCB0
byB6ZXJvLCBjYXVzaW5nIHRoZSBwYWdlIHRvIGJlCmZyZWVkIGFuZCByZS11
c2VkLCBldmVuIHRob3VnaCBpdCdzIHN0aWxsIG1hcHBlZCBpbiBpdHMgcGFn
ZXRhYmxlcy4KClRvIGZpeCB0aGlzLCBhbHdheXMgY2hlY2sgb3AtPmRldl9i
dXNfYWRkciBleHBsaWNpdGx5IGZvciBiZWluZwpub24temVybywgYXMgd2Vs
bCBhcyBvcC0+ZmxhZyAmIEdOVE1BUF9kZXZpY2VfbWFwLCBiZWZvcmUgZG9p
bmcKb3BlcmF0aW9ucyBvbiB0aGUgZGV2aWNlX21hcC4KCldoaWxlIHdlJ3Jl
IGhlcmUsIG1ha2UgdGhlIGxvZ2ljIGEgYml0IGNsZWFuZXI6CgoqIEFsd2F5
cyBpbml0aWFsaXplIG9wLT5mcmFtZSB0byB6ZXJvIGFuZCBzZXQgaXQgZnJv
bSBhY3QtPmZyYW1lLCB0byByZWR1Y2UgdGhlCmNoYW5jZSBvZiB1bnRydXN0
ZWQgaW5wdXQgYmVpbmcgdXNlZAoKKiBFeHBsaWNpdGx5IGNoZWNrIHRoZSBm
dWxsIGRldl9idXNfYWRkciBhZ2FpbnN0IGFjdC0+ZnJhbWUgPDwKICBQQUdF
X1NISUZULCByYXRoZXIgdGhhbiBpZ25vcmluZyB0aGUgbG93ZXIgMTIgYml0
cwoKVGhpcyBpcyBwYXJ0IG9mIFhTQS0yMjQuCgpSZXBvcnRlZC1ieTogSmFu
IEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTaWduZWQtb2ZmLWJ5OiBH
ZW9yZ2UgRHVubGFwIDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+ClNpZ25l
ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KLS0t
CiB4ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgfCAyMyArKysrKysrKysrKy0t
LS0tLS0tLS0tLQogMSBmaWxlIGNoYW5nZWQsIDExIGluc2VydGlvbnMoKyks
IDEyIGRlbGV0aW9ucygtKQoKZGlmZiAtLWdpdCBhL3hlbi9jb21tb24vZ3Jh
bnRfdGFibGUuYyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwppbmRleCBh
NjQyNzYzLi5jMzVhZWE5IDEwMDY0NAotLS0gYS94ZW4vY29tbW9uL2dyYW50
X3RhYmxlLmMKKysrIGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCkBAIC0x
MDc2LDggKzEwNzYsNiBAQCBfX2dudHRhYl91bm1hcF9jb21tb24oCiAgICAg
bGQgPSBjdXJyZW50LT5kb21haW47CiAgICAgbGd0ID0gbGQtPmdyYW50X3Rh
YmxlOwogCi0gICAgb3AtPmZyYW1lID0gKHVuc2lnbmVkIGxvbmcpKG9wLT5k
ZXZfYnVzX2FkZHIgPj4gUEFHRV9TSElGVCk7Ci0KICAgICBpZiAoIHVubGlr
ZWx5KG9wLT5oYW5kbGUgPj0gbGd0LT5tYXB0cmFja19saW1pdCkgKQogICAg
IHsKICAgICAgICAgZ2RwcmludGsoWEVOTE9HX0lORk8sICJCYWQgaGFuZGxl
ICglZCkuXG4iLCBvcC0+aGFuZGxlKTsKQEAgLTExNjEsMTYgKzExNTksMTQg
QEAgX19nbnR0YWJfdW5tYXBfY29tbW9uKAogICAgICAgICBnb3RvIGFjdF9y
ZWxlYXNlX291dDsKICAgICB9CiAKLSAgICBpZiAoIG9wLT5mcmFtZSA9PSAw
ICkKLSAgICB7Ci0gICAgICAgIG9wLT5mcmFtZSA9IGFjdC0+ZnJhbWU7Ci0g
ICAgfQotICAgIGVsc2UKKyAgICBvcC0+ZnJhbWUgPSBhY3QtPmZyYW1lOwor
CisgICAgaWYgKCBvcC0+ZGV2X2J1c19hZGRyICkKICAgICB7Ci0gICAgICAg
IGlmICggdW5saWtlbHkob3AtPmZyYW1lICE9IGFjdC0+ZnJhbWUpICkKKyAg
ICAgICAgaWYgKCB1bmxpa2VseShvcC0+ZGV2X2J1c19hZGRyICE9IHBmbl90
b19wYWRkcihhY3QtPmZyYW1lKSkgKQogICAgICAgICAgICAgUElOX0ZBSUwo
YWN0X3JlbGVhc2Vfb3V0LCBHTlRTVF9nZW5lcmFsX2Vycm9yLAotICAgICAg
ICAgICAgICAgICAgICAgIkJhZCBmcmFtZSBudW1iZXIgZG9lc24ndCBtYXRj
aCBnbnRyZWYuICglbHggIT0gJWx4KVxuIiwKLSAgICAgICAgICAgICAgICAg
ICAgIG9wLT5mcmFtZSwgYWN0LT5mcmFtZSk7CisgICAgICAgICAgICAgICAg
ICAgICAiQnVzIGFkZHJlc3MgZG9lc24ndCBtYXRjaCBnbnRyZWYgKCUiUFJJ
eDY0IiAhPSAlIlBSSXBhZGRyIilcbiIsCisgICAgICAgICAgICAgICAgICAg
ICBvcC0+ZGV2X2J1c19hZGRyLCBwZm5fdG9fcGFkZHIoYWN0LT5mcmFtZSkp
OwogCiAgICAgICAgIG1hcC0+ZmxhZ3MgJj0gfkdOVE1BUF9kZXZpY2VfbWFw
OwogICAgIH0KQEAgLTEyNjMsNyArMTI1OSw4IEBAIF9fZ250dGFiX3VubWFw
X2NvbW1vbl9jb21wbGV0ZShzdHJ1Y3QgZ250dGFiX3VubWFwX2NvbW1vbiAq
b3ApCiAgICAgZWxzZQogICAgICAgICBzdGF0dXMgPSAmc3RhdHVzX2VudHJ5
KHJndCwgb3AtPnJlZik7CiAKLSAgICBpZiAoIHVubGlrZWx5KG9wLT5mcmFt
ZSAhPSBhY3QtPmZyYW1lKSApIAorICAgIGlmICggb3AtPmRldl9idXNfYWRk
ciAmJgorICAgICAgICAgdW5saWtlbHkob3AtPmRldl9idXNfYWRkciAhPSBw
Zm5fdG9fcGFkZHIoYWN0LT5mcmFtZSkpICkKICAgICB7CiAgICAgICAgIC8q
CiAgICAgICAgICAqIFN1Z2dlc3RzIHRoYXQgX19nbnRhYl91bm1hcF9jb21t
b24gZmFpbGVkIGVhcmx5IGFuZCBzbwpAQCAtMTI3NCw3ICsxMjcxLDcgQEAg
X19nbnR0YWJfdW5tYXBfY29tbW9uX2NvbXBsZXRlKHN0cnVjdCBnbnR0YWJf
dW5tYXBfY29tbW9uICpvcCkKIAogICAgIHBnID0gbWZuX3RvX3BhZ2Uob3At
PmZyYW1lKTsKIAotICAgIGlmICggb3AtPmZsYWdzICYgR05UTUFQX2Rldmlj
ZV9tYXAgKSAKKyAgICBpZiAoIG9wLT5kZXZfYnVzX2FkZHIgJiYgKG9wLT5m
bGFncyAmIEdOVE1BUF9kZXZpY2VfbWFwKSApCiAgICAgewogICAgICAgICBp
ZiAoICFpc19pb21lbV9wYWdlKGFjdC0+ZnJhbWUpICkKICAgICAgICAgewpA
QCAtMTM0NSw2ICsxMzQyLDcgQEAgX19nbnR0YWJfdW5tYXBfZ3JhbnRfcmVm
KAogICAgIC8qIEludGlhbGlzZSB0aGVzZSBpbiBjYXNlIGNvbW1vbiBjb250
YWlucyBvbGQgc3RhdGUgKi8KICAgICBjb21tb24tPm5ld19hZGRyID0gMDsK
ICAgICBjb21tb24tPnJkID0gTlVMTDsKKyAgICBjb21tb24tPmZyYW1lID0g
MDsKIAogICAgIF9fZ250dGFiX3VubWFwX2NvbW1vbihjb21tb24pOwogICAg
IG9wLT5zdGF0dXMgPSBjb21tb24tPnN0YXR1czsKQEAgLTE0MDksNiArMTQw
Nyw3IEBAIF9fZ250dGFiX3VubWFwX2FuZF9yZXBsYWNlKAogICAgIC8qIElu
dGlhbGlzZSB0aGVzZSBpbiBjYXNlIGNvbW1vbiBjb250YWlucyBvbGQgc3Rh
dGUgKi8KICAgICBjb21tb24tPmRldl9idXNfYWRkciA9IDA7CiAgICAgY29t
bW9uLT5yZCA9IE5VTEw7CisgICAgY29tbW9uLT5mcmFtZSA9IDA7CiAKICAg
ICBfX2dudHRhYl91bm1hcF9jb21tb24oY29tbW9uKTsKICAgICBvcC0+c3Rh
dHVzID0gY29tbW9uLT5zdGF0dXM7Ci0tIAoyLjEuNAoK

--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.6/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Disposition: attachment;
 filename="xsa224-4.6/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.6/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Disposition: attachment;
 filename="xsa224-4.6/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.6/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Disposition: attachment;
 filename="xsa224-4.6/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.7/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Disposition: attachment;
 filename="xsa224-4.7/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.7/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Disposition: attachment;
 filename="xsa224-4.7/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.7/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Disposition: attachment;
 filename="xsa224-4.7/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Transfer-Encoding: base64

RnJvbSA1ZDQ5MWUzY2YzMmZmMDM1NTJkYjlkNjZlODQyOTY0ZmVjMDZkY2Q0
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMiBKdW4g
MjAxNyAxNToyMToyNyArMDEwMApTdWJqZWN0OiBbUEFUQ0ggMy80XSBnbnR0
YWI6IGNvcnJlY3QgbG9naWMgdG8gZ2V0IHBhZ2UgcmVmZXJlbmNlcyBkdXJp
bmcgbWFwCiByZXF1ZXN0cwoKVGhlIHJ1bGVzIGZvciByZWZlcmVuY2UgY291
bnRpbmcgYXJlIHNvbWV3aGF0IGNvbXBsaWNhdGVkOgoKKiBFYWNoIG9mIEdO
VFRBQl9ob3N0X21hcCBhbmQgR05UVEFCX2RldmljZV9tYXAgbmVlZCB0aGVp
ciBvd24KcmVmZXJlbmNlIGNvdW50CgoqIElmIHRoZSBtYXBwaW5nIGlzIHdy
aXRlYWJsZToKIC0gR05UVEFCX2hvc3RfbWFwIG5lZWRzIGEgdHlwZSBjb3Vu
dCB1bmRlciBvbmx5IHNvbWUgY29uZGl0aW9ucwogLSBHTlRUQUJfZGV2aWNl
X21hcCBhbHdheXMgbmVlZHMgYSB0eXBlIGNvdW50CgpJZiB0aGUgbWFwcGlu
ZyBzdWNjZWVkcywgd2UgbmVlZCB0byBrZWVwIGFsbCBvZiB0aGVzZTsgaWYg
dGhlIG1hcHBpbmcKZmFpbHMsIHdlIG5lZWQgdG8gcmVsZWFzZSB3aGF0ZXZl
ciByZWZlcmVuY2VzIHdlIGhhdmUgYWNxdWlyZWQgc28gZmFyLgoKQWRkaXRp
b25hbGx5LCB0aGUgY29kZSB0aGF0IGRvZXMgYSBsb3Qgb2YgdGhpcyBjYWxj
dWxhdGlvbiAiaW5oZXJpdHMiCmEgcmVmZXJlbmNlIGFzIHBhcnQgb2YgdGhl
IHByb2Nlc3Mgb2YgZmluZGluZyBvdXQgd2hvIHRoZSBvd25lciBpcy4KCkZp
bmFsbHksIGlmIHRoZSBncmFudCBpcyBtYXBwZWQgYXMgd3JpdGVhYmxlICh3
aXRob3V0IHRoZQpHTlRNQVBfcmVhZG9ubHkgZmxhZyksIGJ1dCB0aGUgaHlw
ZXJ2aXNvciBjYW5ub3QgZ3JhYiBhClBHVF93cml0ZWFibGVfcGFnZSB0eXBl
LCB0aGUgZW50aXJlIG9wZXJhdGlvbiBzaG91bGQgZmFpbC4KClVuZm9ydHVu
YXRlbHksIHRoZSBjdXJyZW50IGNvZGUgaGFzIHNldmVyYWwgbG9naWMgaG9s
ZXM6CgoqIElmIGEgZ3JhbnQgaXMgbWFwcGVkIG9ubHkgR05UVEFCX2Rldmlj
ZV9tYXAsIGFuZCB3aXRoIGEgd3JpdGVhYmxlCiAgbWFwcGluZywgYnV0IGlu
IGNvbmRpdGlvbnMgd2hlcmUgYSAqaG9zdCogdHlwZSBjb3VudCBpcyBub3QK
ICBuZWNlc3NhcnksIHRoZSBjb2RlIHdpbGwgZmFpbCB0byBncmFiIHRoZSBu
ZWNlc3NhcnkgdHlwZSBjb3VudC4KCiogSWYgYSBncmFudCBpcyBtYXBwZWQg
Ym90aCBHTlRUQUJfZGV2aWNlX21hcCBhbmQgR05UVEFCX2hvc3RfbWFwLAog
IHdpdGggYSB3cml0ZWFibGUgbWFwcGluZywgaW4gY29uZGl0aW9ucyB3aGVy
ZSB0aGUgaG9zdCB0eXBlIGNvdW50IGlzCiAgbm90IG5lY2Vzc2FyeSwgKmFu
ZCogd2hlcmUgdGhlIHBhZ2UgY2Fubm90IGJlIGNoYW5nZWQgdG8gdHlwZQog
IFBHVF93cml0ZWFibGUsIHRoZSBjb25kaXRpb24gd2lsbCBub3QgYmUgZGV0
ZWN0ZWQuCgpJbiBib3RoIGNhc2VzLCB0aGlzIG1lYW5zIHRoYXQgb24gc3Vj
Y2VzcywgdGhlIHR5cGUgY291bnQgd2lsbCBiZQplcnJvbmVvdXNseSByZWR1
Y2VkIHdoZW4gdGhlIGdyYW50IGlzIHVubWFwcGVkLiAgSW4gdGhlIHNlY29u
ZCBjYXNlLAp0aGUgdHlwZSBjb3VudCB3aWxsIGJlIGVycm9uZW91c2x5IHJl
ZHVjZWQgb24gdGhlIGZhaWx1cmUgcGF0aCBhcwp3ZWxsLiAgKEluIHRoZSBm
aXJzdCBjYXNlIHRoZSBmYWlsdXJlIHBhdGggbG9naWMgaGFzIHRoZSBzYW1l
IGhvbGUKYXMgdGhlIHJlZmVyZW5jZSBncmFiYmluZyBsb2dpYy4pCgpBZGRp
dGlvbmFsbHksIHRoZSByZXR1cm4gdmFsdWUgb2YgZ2V0X3BhZ2UoKSBpcyBu
b3QgY2hlY2tlZDsgYnV0IHRoaXMKbWF5IGZhaWwgZXZlbiBpZiB0aGUgZmly
c3QgZ2V0X3BhZ2UoKSBzdWNjZWVkZWQgZHVlIHRvIGEgcmVmZXJlbmNlCmNv
dW50aW5nIG92ZXJmbG93LgoKRmlyc3Qgb2YgYWxsLCBzaW1wbGlmeSB0aGUg
cmVzdG9yYXRpb24gbG9naWMgYnkgZXhwbGljaXRseSBjb3VudGluZwp0aGUg
cmVmZXJlbmNlIGFuZCB0eXBlIHJlZmVyZW5jZXMgYWNxdWlyZWQuCgpDb25z
aWRlciBlYWNoIG1hcHBpbmcgdHlwZSBzZXBhcmF0ZWx5LCBleHBsaWNpdGx5
IG1hcmtpbmcgdGhlCidpbmNvbWluZycgcmVmZXJlbmNlIGFzIHVzZWQgc28g
d2Uga25vdyB3aGVuIHdlIG5lZWQgdG8gZ3JhYiBhIHNlY29uZApvbmUuCgpG
aW5hbGx5LCBhbHdheXMgY2hlY2sgdGhlIHJldHVybiB2YWx1ZSBvZiBnZXRf
cGFnZVtfdHlwZV0oKSBhbmQgZ28gdG8KdGhlIGZhaWx1cmUgcGF0aCBpZiBh
cHByb3ByaWF0ZS4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjI0LgoKUmVwb3J0
ZWQtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KU2lnbmVk
LW9mZi1ieTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXgu
Y29tPgpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz
ZS5jb20+Ci0tLQogeGVuL2NvbW1vbi9ncmFudF90YWJsZS5jIHwgNTggKysr
KysrKysrKysrKysrKysrKysrKysrKysrLS0tLS0tLS0tLS0tLS0tLS0tLS0t
CiAxIGZpbGUgY2hhbmdlZCwgMzMgaW5zZXJ0aW9ucygrKSwgMjUgZGVsZXRp
b25zKC0pCgpkaWZmIC0tZ2l0IGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5j
IGIveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCmluZGV4IDQ1MjUzOGUuLjVl
OTJlMmMgMTAwNjQ0Ci0tLSBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwor
KysgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKQEAgLTc1OCwxMiArNzU4
LDEyIEBAIF9fZ250dGFiX21hcF9ncmFudF9yZWYoCiAgICAgc3RydWN0IGdy
YW50X3RhYmxlICpsZ3QsICpyZ3Q7CiAgICAgc3RydWN0IHZjcHUgICAqbGVk
OwogICAgIGludCAgICAgICAgICAgIGhhbmRsZTsKLSAgICB1bnNpZ25lZCBs
b25nICBmcmFtZSA9IDAsIG5yX2dldHMgPSAwOworICAgIHVuc2lnbmVkIGxv
bmcgIGZyYW1lID0gMDsKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZyA9IE5V
TEw7CiAgICAgaW50ICAgICAgICAgICAgcmMgPSBHTlRTVF9va2F5OwogICAg
IHUzMiAgICAgICAgICAgIG9sZF9waW47CiAgICAgdTMyICAgICAgICAgICAg
YWN0X3BpbjsKLSAgICB1bnNpZ25lZCBpbnQgICBjYWNoZV9mbGFnczsKKyAg
ICB1bnNpZ25lZCBpbnQgICBjYWNoZV9mbGFncywgcmVmY250ID0gMCwgdHlw
ZWNudCA9IDA7CiAgICAgc3RydWN0IGFjdGl2ZV9ncmFudF9lbnRyeSAqYWN0
ID0gTlVMTDsKICAgICBzdHJ1Y3QgZ3JhbnRfbWFwcGluZyAqbXQ7CiAgICAg
Z3JhbnRfZW50cnlfaGVhZGVyX3QgKnNoYWg7CkBAIC04ODksMTEgKzg4OSwx
NyBAQCBfX2dudHRhYl9tYXBfZ3JhbnRfcmVmKAogICAgIGVsc2UKICAgICAg
ICAgb3duZXIgPSBwYWdlX2dldF9vd25lcihwZyk7CiAKKyAgICBpZiAoIG93
bmVyICkKKyAgICAgICAgcmVmY250Kys7CisKICAgICBpZiAoICFwZyB8fCAo
b3duZXIgPT0gZG9tX2lvKSApCiAgICAgewogICAgICAgICAvKiBPbmx5IG5l
ZWRlZCB0aGUgcmVmZXJlbmNlIHRvIGNvbmZpcm0gZG9tX2lvIG93bmVyc2hp
cC4gKi8KICAgICAgICAgaWYgKCBwZyApCisgICAgICAgIHsKICAgICAgICAg
ICAgIHB1dF9wYWdlKHBnKTsKKyAgICAgICAgICAgIHJlZmNudC0tOworICAg
ICAgICB9CiAKICAgICAgICAgaWYgKCBwYWdpbmdfbW9kZV9leHRlcm5hbChs
ZCkgKQogICAgICAgICB7CkBAIC05MjEsMjcgKzkyNywzOCBAQCBfX2dudHRh
Yl9tYXBfZ3JhbnRfcmVmKAogICAgIH0KICAgICBlbHNlIGlmICggb3duZXIg
PT0gcmQgfHwgb3duZXIgPT0gZG9tX2NvdyApCiAgICAgewotICAgICAgICBp
ZiAoIGdudHRhYl9ob3N0X21hcHBpbmdfZ2V0X3BhZ2VfdHlwZShvcCwgbGQs
IHJkKSApCisgICAgICAgIGlmICggKG9wLT5mbGFncyAmIEdOVE1BUF9kZXZp
Y2VfbWFwKSAmJiAhKG9wLT5mbGFncyAmIEdOVE1BUF9yZWFkb25seSkgKQog
ICAgICAgICB7CiAgICAgICAgICAgICBpZiAoIChvd25lciA9PSBkb21fY293
KSB8fAogICAgICAgICAgICAgICAgICAhZ2V0X3BhZ2VfdHlwZShwZywgUEdU
X3dyaXRhYmxlX3BhZ2UpICkKICAgICAgICAgICAgICAgICBnb3RvIGNvdWxk
X25vdF9waW47CisgICAgICAgICAgICB0eXBlY250Kys7CiAgICAgICAgIH0K
IAotICAgICAgICBucl9nZXRzKys7CiAgICAgICAgIGlmICggb3AtPmZsYWdz
ICYgR05UTUFQX2hvc3RfbWFwICkKICAgICAgICAgewotICAgICAgICAgICAg
cmMgPSBjcmVhdGVfZ3JhbnRfaG9zdF9tYXBwaW5nKG9wLT5ob3N0X2FkZHIs
IGZyYW1lLCBvcC0+ZmxhZ3MsIDApOwotICAgICAgICAgICAgaWYgKCByYyAh
PSBHTlRTVF9va2F5ICkKLSAgICAgICAgICAgICAgICBnb3RvIHVuZG9fb3V0
OwotCisgICAgICAgICAgICAvKgorICAgICAgICAgICAgICogT25seSBuZWVk
IHRvIGdyYWIgYW5vdGhlciByZWZlcmVuY2UgaWYgZGV2aWNlX21hcCBjbGFp
bWVkCisgICAgICAgICAgICAgKiB0aGUgb3RoZXIgb25lLgorICAgICAgICAg
ICAgICovCiAgICAgICAgICAgICBpZiAoIG9wLT5mbGFncyAmIEdOVE1BUF9k
ZXZpY2VfbWFwICkKICAgICAgICAgICAgIHsKLSAgICAgICAgICAgICAgICBu
cl9nZXRzKys7Ci0gICAgICAgICAgICAgICAgKHZvaWQpZ2V0X3BhZ2UocGcs
IHJkKTsKLSAgICAgICAgICAgICAgICBpZiAoICEob3AtPmZsYWdzICYgR05U
TUFQX3JlYWRvbmx5KSApCi0gICAgICAgICAgICAgICAgICAgIGdldF9wYWdl
X3R5cGUocGcsIFBHVF93cml0YWJsZV9wYWdlKTsKKyAgICAgICAgICAgICAg
ICBpZiAoICFnZXRfcGFnZShwZywgcmQpICkKKyAgICAgICAgICAgICAgICAg
ICAgZ290byBjb3VsZF9ub3RfcGluOworICAgICAgICAgICAgICAgIHJlZmNu
dCsrOworICAgICAgICAgICAgfQorCisgICAgICAgICAgICBpZiAoIGdudHRh
Yl9ob3N0X21hcHBpbmdfZ2V0X3BhZ2VfdHlwZShvcCwgbGQsIHJkKSApCisg
ICAgICAgICAgICB7CisgICAgICAgICAgICAgICAgaWYgKCAob3duZXIgPT0g
ZG9tX2NvdykgfHwKKyAgICAgICAgICAgICAgICAgICAgICFnZXRfcGFnZV90
eXBlKHBnLCBQR1Rfd3JpdGFibGVfcGFnZSkgKQorICAgICAgICAgICAgICAg
ICAgICBnb3RvIGNvdWxkX25vdF9waW47CisgICAgICAgICAgICAgICAgdHlw
ZWNudCsrOwogICAgICAgICAgICAgfQorCisgICAgICAgICAgICByYyA9IGNy
ZWF0ZV9ncmFudF9ob3N0X21hcHBpbmcob3AtPmhvc3RfYWRkciwgZnJhbWUs
IG9wLT5mbGFncywgMCk7CisgICAgICAgICAgICBpZiAoIHJjICE9IEdOVFNU
X29rYXkgKQorICAgICAgICAgICAgICAgIGdvdG8gdW5kb19vdXQ7CiAgICAg
ICAgIH0KICAgICB9CiAgICAgZWxzZQpAQCAtOTUwLDggKzk2Nyw2IEBAIF9f
Z250dGFiX21hcF9ncmFudF9yZWYoCiAgICAgICAgIGlmICggIXJkLT5pc19k
eWluZyApCiAgICAgICAgICAgICBnZHByaW50ayhYRU5MT0dfV0FSTklORywg
IkNvdWxkIG5vdCBwaW4gZ3JhbnQgZnJhbWUgJWx4XG4iLAogICAgICAgICAg
ICAgICAgICAgICAgZnJhbWUpOwotICAgICAgICBpZiAoIG93bmVyICE9IE5V
TEwgKQotICAgICAgICAgICAgcHV0X3BhZ2UocGcpOwogICAgICAgICByYyA9
IEdOVFNUX2dlbmVyYWxfZXJyb3I7CiAgICAgICAgIGdvdG8gdW5kb19vdXQ7
CiAgICAgfQpAQCAtMTAxNCwxOCArMTAyOSwxMSBAQCBfX2dudHRhYl9tYXBf
Z3JhbnRfcmVmKAogICAgIHJldHVybjsKIAogIHVuZG9fb3V0OgotICAgIGlm
ICggbnJfZ2V0cyA+IDEgKQotICAgIHsKLSAgICAgICAgaWYgKCAhKG9wLT5m
bGFncyAmIEdOVE1BUF9yZWFkb25seSkgKQotICAgICAgICAgICAgcHV0X3Bh
Z2VfdHlwZShwZyk7Ci0gICAgICAgIHB1dF9wYWdlKHBnKTsKLSAgICB9Ci0g
ICAgaWYgKCBucl9nZXRzID4gMCApCi0gICAgewotICAgICAgICBpZiAoIGdu
dHRhYl9ob3N0X21hcHBpbmdfZ2V0X3BhZ2VfdHlwZShvcCwgbGQsIHJkKSAp
Ci0gICAgICAgICAgICBwdXRfcGFnZV90eXBlKHBnKTsKKyAgICB3aGlsZSAo
IHR5cGVjbnQtLSApCisgICAgICAgIHB1dF9wYWdlX3R5cGUocGcpOworCisg
ICAgd2hpbGUgKCByZWZjbnQtLSApCiAgICAgICAgIHB1dF9wYWdlKHBnKTsK
LSAgICB9CiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsKIAotLSAKMi4x
LjQKCg==

--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.7/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Disposition: attachment;
 filename="xsa224-4.7/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.8/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Disposition: attachment;
 filename="xsa224-4.8/0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.8/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Disposition: attachment;
 filename="xsa224-4.8/0002-gnttab-never-create-host-mapping-unless-asked-to.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.8/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Disposition: attachment;
 filename="xsa224-4.8/0003-gnttab-correct-logic-to-get-page-references-during-m.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa224-4.8/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Disposition: attachment;
 filename="xsa224-4.8/0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpT-0006EZ-5u; Tue, 20 Jun 2017 12:00:19 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpR-0006DD-9x; Tue, 20 Jun 2017 12:00:17 +0000
Received: from [85.158.143.35] by server-5.bemta-6.messagelabs.com id
 C7/01-03371-05E09495; Tue, 20 Jun 2017 12:00:16 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprDJsWRWlGSWpSXmKPExsWS0XRdVdefzzP
 S4MNifotbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmnGg8xlow9TBTxdLOJsYG
 xus7mLoYuTiEBI4zSqzdP5EdwlnEKPH51j22LkZODmYBV4kb+zZD2YoSF+41sIDYvAKCEidnP
 gGzJQQ0Je68WcUOYosIFEnsPPcSzGYT0JOYe3YSE0SvpcT8iafA5ggL+Ei8ft/BDjHHTGL+wj
 VgNouAqsSqzy8YJzDyzEKyehaS1bOQrJ7FyAEU15RYv0sfwpSWWP6PA6JaXmL72znMELaPxPJ
 dF1ggbE+JbecPsMBMnNL9kB1m04FTe9kgxjhJvDqpiKnETWLG1J/MECXOEjO6vTGVOErM7N3L
 ClFiJ3Houyo2i94vPAllO0m0PD3DhE1N/4N2NpiaqfOmsyGrWcAosYpRozi1qCy1SNfYUC+pK
 DM9oyQ3MTNH19DATC83tbg4MT01JzGpWC85P3cTIzCNMADBDsamRYGHGCU5mJREedUZPCOF+J
 LyUyozEosz4otKc1KLDzHKcHAoSfBO5gHKCRalpqdWpGXmABMaTFqCg0dJhDcepJW3uCAxtzg
 zHSJ1itGYY9f/NV+YOJat3/KFSYglLz8vVUqcV5MXqFQApDSjNA9uECzRXmKUlRLmZQQ6TYin
 ILUoN7MEVf4VozgHo5IwryzIFJ7MvBK4fa+ATmECOuXFEQ+QU0oSEVJSDYwbg89/3trfuTnK9
 +iDim+m0oLf2Hc0Nh9J+udm2Zy/q7pnR9LL1V/Z2bVjPi3hCQpyve/d9uGw7iqDU0sTuLIMLf
 wXqp5VeLt2KbOV38/DIb4T1iRe+XDWzUx3zx7ZkkcLPlQ3qna7aSlazDx9WEBZ97vnYpW4n8G
 HSsM2e5qtDLeXmuUzO06JpTgj0VCLuag4EQBfX4dHrwMAAA==
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-15.tower-21.messagelabs.com!1497960014!74630865!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 34638 invoked from network); 20 Jun 2017 12:00:14 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-15.tower-21.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:14 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpG-0004Dy-50; Tue, 20 Jun 2017 12:00:06 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpG-0005zH-0I; Tue, 20 Jun 2017 12:00:06 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpG-0005zH-0I@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:06 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 216 - blkif responses leak
	backend stack data
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-216
                              version 3

                blkif responses leak backend stack data

UPDATES IN VERSION 3
====================

Public release.

Fix a typo ("our" for "or" in Vulnerable Systems).

ISSUE DESCRIPTION
=================

The block interface response structure has some discontiguous fields.
Certain backends populate the structure fields of an otherwise
uninitialized instance of this structure on their stacks, leaking
data through the (internal or trailing) padding field.

IMPACT
======

A malicious unprivileged guest may be able to obtain sensitive
information from the host or other guests.

VULNERABLE SYSTEMS
==================

All Linux versions supporting the xen-blkback, blkback, or blktap
drivers are vulnerable.

FreeBSD, NetBSD and Windows (with or without PV drivers) are not
vulnerable (either because they do not have backends at all, or
because they use a different implementation technique which does not
suffer from this problem).

All qemu versions supporting the Xen block backend are vulnerable.  The
qemu-xen-traditional code base does not include such code, so is not
vulnerable.  Note that an instance of qemu will be spawned to provide
the backend for most non-raw-format disks; so you may need to apply the
patch to qemu even if you use only PV guests.

MITIGATION
==========

There's no mitigation available for x86 PV and ARM guests.

For x86 HVM guests it may be possible to change the guest
configuaration such that a fully virtualized disk is being made
available instead.  However, this would normally entail changes inside
the guest itself.

CREDITS
=======

This issue was discovered by Anthony Perard of Citrix.

For patch:
Reported by: Anthony Perard <anthony.perard@citrix.com>

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa216-linux-4.11.patch           Linux 4.5 ... 4.11
xsa216-linux-4.4.patch            Linux 3.3 ... 4.4
xsa216-qemuu.patch                qemu-upstream master, 4.8
xsa216-qemuu-4.7.patch            qemu-upstream 4.7, 4.6
xsa216-qemuu-4.5.patch            qemu-upstream 4.5
xsa216-linux-2.6.18-xen.patch     linux-2.6.18-xen.hg

$ sha256sum xsa216*
28beb3d876fa0eee77f4377ef2708d764a5d9a2003dd4f1a4ecb9b8bf60658a4  xsa216-linux-2.6.18-xen.patch
6f6138c0a00df4ed7307ae4e5ee30dbe8594ff05bc1e8fdc7cfd785077d72ddc  xsa216-linux-4.4.patch
e04da27961cd867f7bbba31677f61e3e425c0e7cc7352a7a2d22b5a35eaf8585  xsa216-linux-4.11.patch
850b0143cfe3c69c62abdad71be9813014d46c380109fc650689a10c90ff39f4  xsa216-qemuu.patch
072270274d2554b71579a529c908d16479f8eba6646d8aed2e3d129495b27716  xsa216-qemuu-4.5.patch
5a64e2c5bb78f1c8fae97354be10fcc63ea39d333d6490e3a422ff30460cdef1  xsa216-qemuu-4.7.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches described above (or others which are
substantially similar) is permitted during the embargo, even on
public-facing systems with untrusted guest users and administrators.

However, deployment of the mitigation is NOT permitted (except where
all the affected systems and VMs are administered and used only by
organisations which are members of the Xen Project Security Issues
Predisclosure List).  Specifically, deployment on public cloud systems
is NOT permitted.  This is because this produces a guest-visible
change which will indicate which component contains the vulnerability.

Additionally, distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3JAAoJEIP+FMlX6CvZWkQIAMXD8Lc1PunNw5x9WsLb2y9U
KA0QrsNve4Ugc/xvCiuqUoV+ljZIRiy57A//ZnNtTR8JiRqpjEC47he3oYNleytN
RfOw2ZzsXdD4F8sqT3YvR0vcPL1Pf7fHzg8Ax19RxdcXRWTrN/b/poxuCu4F5PWn
cFi4tQDYLuEb2e9Sj8ue8RbtcVOEyuSG/dP1E29K7sKdc6GB13nWsa93KJsSRLY6
cwKnOmBy+2H66FcfmWomU+OueKI7y5DsYxYV+VVUBGnBTSn0b3dwpHNKUBCuF1nQ
RqOjo2rHOMBeiGaAlGg8toef7IkRH20p/LjiQxAneMndmta3t9enx8rYYxgFd5k=
=3n1c
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa216-linux-2.6.18-xen.patch"
Content-Disposition: attachment; filename="xsa216-linux-2.6.18-xen.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-linux-4.4.patch"
Content-Disposition: attachment; filename="xsa216-linux-4.4.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-linux-4.11.patch"
Content-Disposition: attachment; filename="xsa216-linux-4.11.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu.patch"
Content-Disposition: attachment; filename="xsa216-qemuu.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu-4.5.patch"
Content-Disposition: attachment; filename="xsa216-qemuu-4.5.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu-4.7.patch"
Content-Disposition: attachment; filename="xsa216-qemuu-4.7.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpU-0006Fz-Cd; Tue, 20 Jun 2017 12:00:20 +0000
Received: from mail6.bemta3.messagelabs.com ([195.245.230.39])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpR-0006DF-K3; Tue, 20 Jun 2017 12:00:17 +0000
Received: from [85.158.137.68] by server-16.bemta-3.messagelabs.com id
 C9/A4-29088-05E09495; Tue, 20 Jun 2017 12:00:16 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprEKsWRWlGSWpSXmKPExsWS0XRdVdefzzP
 S4NR+LYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmfFsxi7Xgi13FnibRBsaT
 ll2MXBxCAscZJfa2bGeHcBYxSiyaugDI4eRgFnCVuLFvMxuErShx4V4DC4jNKyAocXLmEzBbQ
 kBT4s6bVWD1IgJFEjvPvQSz2QT0JOaencQE0WspMX/iKbA5wgLREoubJjBCzDGTOHLuDdgcFg
 FViVWfXzBOYOSZhWT1LCSrZyFZPYuRAyiuKbF+lz6EKS2x/B8HRLW8xPa3c5ghbGuJex8ns0P
 YFhLrphxhgpk4pfshVNxe4vW5VVC2jcSrjX1syGoWMPKsYtQoTi0qSy3SNTTXSyrKTM8oyU3M
 zNE1NDDWy00tLk5MT81JTCrWS87P3cQIjBMGINjB+PK05yFGSQ4mJVFedQbPSCG+pPyUyozE4
 oz4otKc1OJDjDIcHEoSvBN5gXKCRanpqRVpmTnAiIVJS3DwKInwxoO08hYXJOYWZ6ZDpE4xWn
 Ls+r/mCxPHnb4NQHLZ+i1fmIRY8vLzUqXEeTVB5gmANGSU5sGNgyWVS4yyUsK8jEAHCvEUpBb
 lZpagyr9iFOdgVBLmnQQyhSczrwRu6yugg5iADnpxxAPkoJJEhJRUA+Pdx+2KQmvc51nLtb97
 dl5KXV3Dye966Nm9rveVDnfv6hRXtdr7Ws9hOXdgSe2q/pqI7n1lDQxxUwR13+pw5S/dsKLXV
 myz5sPvQudLrKy3rDt4PbjL01bBsntm9r/1j7WX+fnlHTjYY3rw7p/wphmiCmXGtzjspjfs+J
 rsN6lbSHyFgueBLCWW4oxEQy3mouJEAPWzhXMlAwAA
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-6.tower-31.messagelabs.com!1497960014!67959706!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 14268 invoked from network); 20 Jun 2017 12:00:15 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-6.tower-31.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:15 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpG-0004E6-L5; Tue, 20 Jun 2017 12:00:06 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpG-00060f-KG; Tue, 20 Jun 2017 12:00:06 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpG-00060f-KG@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:06 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 217 - page transfer may allow
 PV guest to elevate privilege
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-217
                              version 2

         page transfer may allow PV guest to elevate privilege

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

Domains controlling other domains are permitted to map pages owned by
the domain being controlled.  If the controlling domain unmaps such a
page without flushing the TLB, and if soon after the domain being
controlled transfers this page to another PV domain (via
GNTTABOP_transfer or, indirectly, XENMEM_exchange), and that third
domain uses the page as a page table, the controlling domain will have
write access to a live page table until the applicable TLB entry is
flushed or evicted.  Note that the domain being controlled is
necessarily HVM, while the controlling domain is PV.

IMPACT
======

A malicious pair of guests may be able to access all of system memory,
allowing for all of privilege escalation, host crashes, and
information leaks.

VULNERABLE SYSTEMS
==================

All Xen versions are vulnerable.

Only x86 systems are affected.  ARM systems are not vulnerable.

Only systems where an attacker can control both a PV and an HVM guest
are vulnerable.  This must be presumed to include systems containing
HVM domains with service domains such as stub domain device models.

Systems containing only PV guests are not vulnerable.

Systems containing only HVM domains serviced by dom0 device model
processes are not vulnerable.  Note that with libxl, xl, and libvirt,
HVM domains use dom0 device model processes by default.

MITIGATION
==========

There is no mitigation for this vulnerability.

Switching from stub device models to dom0 process device models is not
recommended as a mitigation, as in practice the vulnerability is
likely to be hard to exploit through this route; whereas dom0 process
device models may have unknown vulnerabilities.

CREDITS
=======

This issue was discovered by Jann Horn of Google Project Zero.

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa217.patch           xen-unstable, Xen 4.8.x, Xen 4.7.x, Xen 4.6.x
xsa217-4.5.patch       Xen 4.5.x

$ sha256sum xsa217*
3e896412389d8e59e417ea7bb3d5b47a20de27b8eae0420c98071ce4b17d219c  xsa217.patch
4e555cf47faf5e8d2bba4ff8a31fbe72fb11a6c0e3b286f23b26e684a1809705  xsa217-4.5.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEbBAEBCAAGBQJZSQ3LAAoJEIP+FMlX6CvZe2MH90dkMpagV2W3Q0uzwo3GT4tv
VmrsM5O5oSCvJBpgRk397Nr6jbPfUOdH8LqHSuNjoU4vYThNqM8mTT0mqW0MKniK
didfWFyXIjHuBIBaye2r+mFWQ5AFH9B4vp3XT65k+vgq6GTIlRmV8H/bGdeCE4kT
6ht+ZLzc9XAvOy46pxAw0nz51QkknX4DXC0JTJW77aqKFz3H9+LKS015MLPxBvwj
JFgmGIgLHR9lsMIGHScLLFibzTE1cDGF9u0I2DLHpWsDMaZN6kJfq8xblEtq58EE
goth3SydPXPq4UuLfRMQMHX+pCxCdh9bwz82qThSmMFY7h/kPbw340D9+bBZIw==
=/qch
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa217.patch"
Content-Disposition: attachment; filename="xsa217.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa217-4.5.patch"
Content-Disposition: attachment; filename="xsa217-4.5.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ODYvbW06IGRpc2FsbG93IHBhZ2Ugc3RlYWxpbmcgZnJvbSBIVk0gZG9t
YWlucwoKVGhlIG9wZXJhdGlvbidzIHN1Y2Nlc3MgY2FuJ3QgYmUgY29udHJv
bGxlZCBieSB0aGUgZ3Vlc3QsIGFzIHRoZSBkZXZpY2UKbW9kZWwgbWF5IGhh
dmUgYW4gYWN0aXZlIG1hcHBpbmcgb2YgdGhlIHBhZ2UuIElmIHdlIG5ldmVy
dGhlbGVzcwpwZXJtaXR0ZWQgdGhpcyBvcGVyYXRpb24sIHdlJ2QgaGF2ZSB0
byBhZGQgZnVydGhlciBUTEIgZmx1c2hpbmcgdG8KcHJldmVudCBzY2VuYXJp
b3MgbGlrZQoKIkRvbWFpbnMgQSAoSFZNKSwgQiAoUFYpLCBDIChQVik7IEIt
PnRhcmdldD09QQogU3RlcHM6CiAxLiBCIG1hcHMgcGFnZSBYIGZyb20gQSBh
cyB3cml0YWJsZQogMi4gQiB1bm1hcHMgcGFnZSBYIHdpdGhvdXQgYSBUTEIg
Zmx1c2gKIDMuIEEgc2VuZHMgcGFnZSBYIHRvIEMgdmlhIEdOVFRBQk9QX3Ry
YW5zZmVyCiA0LiBDIG1hcHMgcGFnZSBYIGFzIHBhZ2V0YWJsZSAocG90ZW50
aWFsbHkgY2F1c2luZyBhIFRMQiBmbHVzaCBpbiBDLAogYnV0IG5vdCBpbiBC
KQoKIEF0IHRoaXMgcG9pbnQsIFggd291bGQgYmUgbWFwcGVkIGFzIGEgcGFn
ZXRhYmxlIGluIEMgd2hpbGUgYmVpbmcKIHdyaXRhYmxlIHRocm91Z2ggYSBz
dGFsZSBUTEIgZW50cnkgaW4gQi4iCgpBIHNpbWlsYXIgc2NlbmFyaW8gY291
bGQgYmUgY29uc3RydWN0ZWQgZm9yIEEgdXNpbmcgWEVOTUVNX2V4Y2hhbmdl
IGFuZApzb21lIGFyYml0cmFyeSBQViBkb21haW4gQyB0aGVuIGhhdmluZyB0
aGlzIHBhZ2UgYWxsb2NhdGVkLgoKVGhpcyBpcyBYU0EtMjE3LgoKUmVwb3J0
ZWQtYnk6IEphbm4gSG9ybiA8amFubmhAZ29vZ2xlLmNvbT4KU2lnbmVkLW9m
Zi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpBY2tlZC1i
eTogR2VvcmdlIER1bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgpS
ZXZpZXdlZC1ieTogS29ucmFkIFJ6ZXN6dXRlayBXaWxrIDxrb25yYWQud2ls
a0BvcmFjbGUuY29tPgoKLS0tIGEveGVuL2FyY2gveDg2L21tLmMKKysrIGIv
eGVuL2FyY2gveDg2L21tLmMKQEAgLTQyMTcsNiArNDIxNyw5IEBAIGludCBz
dGVhbF9wYWdlKAogICAgIHVuc2lnbmVkIGxvbmcgeCwgeTsKICAgICBib29s
X3QgZHJvcF9kb21fcmVmID0gMDsKIAorICAgIGlmICggcGFnaW5nX21vZGVf
ZXh0ZXJuYWwoZCkgKQorICAgICAgICByZXR1cm4gLTE7CisKICAgICBzcGlu
X2xvY2soJmQtPnBhZ2VfYWxsb2NfbG9jayk7CiAKICAgICBpZiAoIGlzX3hl
bl9oZWFwX3BhZ2UocGFnZSkgfHwgKHBhZ2VfZ2V0X293bmVyKHBhZ2UpICE9
IGQpICkK

--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpW-0006Jl-Hi; Tue, 20 Jun 2017 12:00:22 +0000
Received: from mail6.bemta3.messagelabs.com ([195.245.230.39])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpU-0006EN-A9; Tue, 20 Jun 2017 12:00:20 +0000
Received: from [85.158.137.68] by server-6.bemta-3.messagelabs.com id
 9B/A9-19409-35E09495; Tue, 20 Jun 2017 12:00:19 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrCJsWRWlGSWpSXmKPExsWS0XRdVTeQzzP
 S4M8HM4tbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmnLnwjr3g3Uz2inOz3rM0
 MD5uZe9i5OIQEjjOKHF8ylymLkZOIGcRo8T2zzYgNrOAq8SNfZvZIGxFiQv3GlhAbF4BQYmTM
 5+A2RICmhJ33qxiB7FFBIokdp57CWazCehJzD07iQmi11Ji/sRTQHM4OIQFoiXevXOCGGMm8f
 vRZ1YQm0VAVeL/m82sExh5ZiHZPAvJ5llINs8CmsQMtHn9Ln0IU1pi+T8OiGp5ie1v5zBD2LY
 S/b8OMEHYVhJPV/cwwkyc0v2QHcJ2lPjycC+UbSfx68pZVmxqNp/8zgJT8/vnOXZMNbYShxdO
 ZYXZ1Tb1PBM2cy6d64Gb87/zFFY1v57dY4Wpmf3xKlb3fNs5BW7O5COPsJrz70EP3F9vX61nQ
 1azgFFuFaN6cWpRWWqRroVeUlFmekZJbmJmjq6hgbFebmpxcWJ6ak5iUrFecn7uJkZgWmMAgh
 2MF9qdDzFKcjApifKqM3hGCvEl5adUZiQWZ8QXleakFh9ilOHgUJLgZecFygkWpaanVqRl5gA
 TLExagoNHSYQ3HqSVt7ggMbc4Mx0idYrRmGPX/zVfmDiWrd/yhUmIJS8/L1VKnFcTZJIASGlG
 aR7cIFjiv8QoKyXMywh0mhBPQWpRbmYJqvwrRnEORiVh3jCQKTyZeSVw+14BncIEdMqLIx4gp
 5QkIqSkGhjd5/nP5969af2CXc0d72v/5wUVz+VzUv5o7N2erSOy8m6xj7jn+WQ34chf1UrbP3
 fMTr3beL22+6DMkZ971+q+kl6y9eNZAd8+nv1JIXOulm5SWZ5vfETXucbzyQ/G+9OjTAWaA8o
 swk/w8F7lV9l3SJ5LptazVt/419qanJvhN2snFyhdT1ViKc5INNRiLipOBACDNIJz9wMAAA==
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-4.tower-31.messagelabs.com!1497960016!48428112!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 12265 invoked from network); 20 Jun 2017 12:00:17 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-4.tower-31.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:17 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpI-0004Ei-KX; Tue, 20 Jun 2017 12:00:08 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpI-00066n-Jg; Tue, 20 Jun 2017 12:00:08 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpI-00066n-Jg@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:08 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 222 - stale P2M mappings due
 to insufficient error checking
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-222
                              version 2

         stale P2M mappings due to insufficient error checking

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

Certain actions require removing pages from a guest's P2M
(Physical-to-Machine) mapping.  When large pages are in use to map
guest pages in the 2nd-stage page tables, such a removal operation may
incur a memory allocation (to replace a large mapping with individual
smaller ones).  If this allocation fails, these errors are ignored by
the callers, which would then continue and (for example) free the
referenced page for reuse.  This leaves the guest with a mapping to a
page it shouldn't have access to.

The allocation involved comes from a separate pool of memory created
when the domain is created; under normal operating conditions it never
fails, but a malicious guest may be able to engineer situations where
this pool is exhausted.

IMPACT
======

A malicious guest may be able to access memory it doesn't own,
potentially allowing privilege escalation, host crashes, or
information leakage.

VULNERABLE SYSTEMS
==================

Xen versions from at least 3.2 onwards are vulnerable.  Older versions
have not been inspected.

Both x86 and ARM systems are vulnerable.

On x86 systems, only HVM guests can leverage the vulnerability.

MITIGATION
==========

On x86, specifying "hap_1gb=0 hap_2mb=0" on the hypervisor command
line will avoid the vulnerability.

Alternatively, running all x86 HVM guests in shadow mode will also
avoid this vulnerability.  (For example, by specifying "hap=0" in the
xl domain configuration file.)

There is no known mitigation on ARM systems.

CREDITS
=======

This issue was discovered by Julien Grall of ARM.

RESOLUTION
==========

Applying the appropriate pair of attached patches resolves this issue.

xsa222-[12].patch                        xen-unstable
xsa222-1.patch, xsa222-2-4.8.patch       Xen 4.8.x
xsa222-[12]-4.7.patch                    Xen 4.7.x
xsa222-[12]-4.6.patch                    Xen 4.6.x
xsa222-1-4.6.patch, xsa222-2-4.5.patch   Xen 4.5.x

$ sha256sum xsa222*
8bd8807ee1cfe01c86194f5d5be38618ba5e0c1206667bb119ed952e5d155c1a  xsa222-1.patch
9288dfcae1f37e6c8f13910046f43ec161710abb7c94a9346b7e0eaba3258ccd  xsa222-1-4.6.patch
ebc2c070bad8012a196e984b568a72e013ff072bb077870508f09ed053c1a4c2  xsa222-1-4.7.patch
ee320b37b365cb3b6660e559902ff8bb50657b2a28ff0fa7ebaf9ffd33fc0942  xsa222-2.patch
97768f4fe564f702de8e4aebd0c4d24858814ebbb7be532b376cfae7ad6834a4  xsa222-2-4.5.patch
4142f76673b996b65301d52216cbf56e27b0c86e5607f6a9eb18dcc7df3f6343  xsa222-2-4.6.patch
a640e190b32e82f5ec7ee4968bf8b9f22137e8379314cc9a29556637c3dc8e87  xsa222-2-4.7.patch
ab43bd590139bed53957b3b37b854183c69bee26cf7cb00900e3f4a150d067a5  xsa222-2-4.8.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3UAAoJEIP+FMlX6CvZUd8H/0Lre7nvQJ+AWb5f9ztcOHcM
Yi+ztFhfKhi9eLrJTGSQqso5rf4Fqf96E+J0UKV5eiI4/u/tRYdhb2kVsv0cwmWR
8npcnpsacTqIzPttTtwiJ4pCh7JM5/OMmEJtuBZHqgw21nCOzIEQjPJTsW0nnnfq
uh20P15sf8ag1mT0N17WuNV1mxdbS6ZqpZMwTYSJfp409oXftsfBkHeH1a9ajdf/
yFZbJQpJ9eizRfZSxmSGMa02V90zQp9vnHhMm1hpy+RrywRysfAVwv4cfIeduo1t
6R3qS+2gAR5YgDvISurBJLAcK1Q0p1qxH5JQd3sYCOPeX3qbbvZ2wDmqPclxa4s=
=iwX3
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa222-1.patch"
Content-Disposition: attachment; filename="xsa222-1.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-1-4.6.patch"
Content-Disposition: attachment; filename="xsa222-1-4.6.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-1-4.7.patch"
Content-Disposition: attachment; filename="xsa222-1-4.7.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-2.patch"
Content-Disposition: attachment; filename="xsa222-2.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-2-4.5.patch"
Content-Disposition: attachment; filename="xsa222-2-4.5.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-2-4.6.patch"
Content-Disposition: attachment; filename="xsa222-2-4.6.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-2-4.7.patch"
Content-Disposition: attachment; filename="xsa222-2-4.7.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa222-2-4.8.patch"
Content-Disposition: attachment; filename="xsa222-2-4.8.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpS-0006EB-NH; Tue, 20 Jun 2017 12:00:18 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpR-0006DB-93; Tue, 20 Jun 2017 12:00:17 +0000
Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id
 E3/03-03557-05E09495; Tue, 20 Jun 2017 12:00:16 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrBIsWRWlGSWpSXmKPExsWS0XRdVdefzzP
 S4OxzJYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmLF7SzVawLKOicZZkA+Pi
 5C5GLg4hgeOMEh/bprBCOIsYJd5suMTWxcjJwSzgKnFj32YoW1Hiwr0GFhCbV0BQ4uTMJ2C2h
 ICmxJ03q9hBbBGBIomd516C2WwCehJzz05igui1lJg/8RTYHGEBX4m7h49AzTGTeP58DyuIzS
 KgKvH/zWbWCYw8s5CsnoVk9Swkq2cxcgDFNSXW79KHMKUllv/jgKiWl9j+dg4zhG0tMaflCJR
 tIXH1LcLEKd0P2Rcwcq5i1ChOLSpLLdI1MtJLKspMzyjJTczM0TU0MNPLTS0uTkxPzUlMKtZL
 zs/dxAgMbwYg2MG4Zn7gIUZJDiYlUV51Bs9IIb6k/JTKjMTijPii0pzU4kOMMhwcShK8k3mAc
 oJFqempFWmZOcBIg0lLcPAoifDGg7TyFhck5hZnpkOkTjEac+z6v+YLE8ey9Vu+MAmx5OXnpU
 qJ82ryApUKgJRmlObBDYIlgEuMslLCvIxApwnxFKQW5WaWoMq/YhTnYFQS5r0Hcg9PZl4J3L5
 XQKcwAZ3y4ogHyCkliQgpqQZGhfPJV3N3Jz0sP8R2+QXnHYtFUU7PpZWL2SYssaj7tejA4WtV
 R03t7vzfUCjN5N/Ftp7hzIG8q5UftZ49vvh1c/fm06c5OewY2RpXsq16wvZ+pt3SRTff7HHXE
 J8QJPpMNnL7zeVPfO96L5t03/XpM0cXq6MpKjGf1cN329T/f/bCxuGts+NWNSWW4oxEQy3mou
 JEAIINSA77AgAA
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-13.tower-27.messagelabs.com!1497960014!99051952!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 25978 invoked from network); 20 Jun 2017 12:00:15 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-13.tower-27.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:15 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpI-0004EU-6G; Tue, 20 Jun 2017 12:00:08 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpI-00065J-5W; Tue, 20 Jun 2017 12:00:08 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpI-00065J-5W@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:08 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 221 - NULL pointer deref in
	event channel poll
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-221
                              version 2

               NULL pointer deref in event channel poll

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

When polling event channels, in general arbitrary port numbers can be
specified.  Specifically, there is no requirement that a polled event
channel ports has ever been created.  When the code was generalised
from an earlier implementation, introducing some intermediate
pointers, a check should have been made that these intermediate
pointers are non-NULL.  However, that check was omitted.

IMPACT
======

A malicious or buggy guest may cause the hypervisor to access
addresses it doesn't control, usually leading to a host crash (Denial
of Service).  Information leaks cannot be excluded.

VULNERABLE SYSTEMS
==================

Xen versions 4.4 and newer are vulnerable.  Xen versions 4.3 and
earlier are not affected.

Both x86 and ARM systems are vulnerable.

While all guest kinds can cause a Denial of Service, only x86 PV guests
may be able to leverage the possible information leaks.

MITIGATION
==========

There is no known mitigation.

CREDITS
=======

This issue was discovered by Ankur Arora of Oracle.

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa221.patch           Xen 4.4.x and later, including xen-unstable

$ sha256sum xsa221*
2425396a713466808b0f75f91337be4dd20a4dee7733972b04489773c6e97655  xsa221.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3TAAoJEIP+FMlX6CvZw20H/jCUm+eX4rPUCQ6CL+Ya/dXH
th34nPKQnq60gm3469sDQQMNbuvfgBItAAAjO87NC6P2BSyYPMny5SvqSsmkWow1
8OkAWq5ZZ3L7ksPhkP6aco+ks1a99SxJX4YfjwOFq9ct6/zfrcW1ThEqs9j87JeP
6RGPYgXc0mP9IOk27JnUVgiej7/v4a8v5FcWrG3bHpw2vp9tY3hdvkfc6wJiuplx
kkqIVkqTpCNu7QYGv3de1RpDeI5mN8TGY+6ahs9eZFEFmRGWiAahhZRnwGVNE7Tl
QcHzaphlzp/etub8sHgZPH90xLaeILJ+9oz29b/SLUVqahRxzTD1bLUElEu2su0=
=xR3U
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa221.patch"
Content-Disposition: attachment; filename="xsa221.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiBldnRjaG46IGF2b2lkIE5VTEwgZGVyZWZzCgpDb21taXQgZmJiZDUwMDll
NiAoImV2dGNobjogcmVmYWN0b3IgbG93LWxldmVsIGV2ZW50IGNoYW5uZWwg
cG9ydCBvcHMiKQphZGRlZCBhIGRlLXJlZmVyZW5jZSBvZiB0aGUgc3RydWN0
IGV2dGNobiBwb2ludGVyIGZvciBhIHBvcnQgd2l0aG91dApmaXJzdCBtYWtp
bmcgc3VyZSB0aGUgYnVja2V0IHBvaW50ZXIgaXMgbm9uLU5VTEwuIFRoaXMg
ZGUtcmVmZXJlbmNlIGlzCmFjdHVhbGx5IGVudGlyZWx5IHVubmVjZXNzYXJ5
LCBhcyBhbGwgcmVsZXZhbnQgY2FsbGVycyAoYmV5b25kIHRoZQpwcm9ibGVt
YXRpYyBkb19wb2xsKCkpIGFscmVhZHkgaG9sZCB0aGUgcG9ydCBudW1iZXIg
aW4gdGhlaXIgaGFuZHMsIGFuZAp0aGUgYWN0dWFsIGxlYWYgZnVuY3Rpb25z
IG5lZWQgbm90aGluZyBlbHNlLgoKRm9yIEZJRk8gZXZlbnQgY2hhbm5lbHMg
dGhlcmUncyBhIHNlY29uZCBwcm9ibGVtIGluIHRoYXQgdGhlIG9yZGVyaW5n
Cm9mIHJlYWRzIGFuZCB1cGRhdGVzIHRvIC0+bnVtX2V2dGNobnMgYW5kIC0+
ZXZlbnRfYXJyYXlbXSB3YXMgc28gZmFyCnVuZGVmaW5lZCAodGhlIHJlYWQg
c2lkZSBpc24ndCBhbHdheXMgaG9sZGluZyB0aGUgZG9tYWluJ3MgZXZlbnQg
bG9jaykuCkFkZCByZXNwZWN0aXZlIGJhcnJpZXJzLgoKVGhpcyBpcyBYU0Et
MjIxLgoKUmVwb3J0ZWQtYnk6IEFua3VyIEFyb3JhIDxhbmt1ci5hLmFyb3Jh
QG9yYWNsZS5jb20+ClNpZ25lZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1
bGljaEBzdXNlLmNvbT4KCi0tLSBhL3hlbi9hcmNoL3g4Ni9pcnEuYworKysg
Yi94ZW4vYXJjaC94ODYvaXJxLmMKQEAgLTE0ODYsNyArMTQ4Niw3IEBAIGlu
dCBwaXJxX2d1ZXN0X3VubWFzayhzdHJ1Y3QgZG9tYWluICpkKQogICAgICAg
ICB7CiAgICAgICAgICAgICBwaXJxID0gcGlycXNbaV0tPnBpcnE7CiAgICAg
ICAgICAgICBpZiAoIHBpcnFzW2ldLT5tYXNrZWQgJiYKLSAgICAgICAgICAg
ICAgICAgIWV2dGNobl9wb3J0X2lzX21hc2tlZChkLCBldnRjaG5fZnJvbV9w
b3J0KGQsIHBpcnFzW2ldLT5ldnRjaG4pKSApCisgICAgICAgICAgICAgICAg
ICFldnRjaG5fcG9ydF9pc19tYXNrZWQoZCwgcGlycXNbaV0tPmV2dGNobikg
KQogICAgICAgICAgICAgICAgIHBpcnFfZ3Vlc3RfZW9pKHBpcnFzW2ldKTsK
ICAgICAgICAgfQogICAgIH0gd2hpbGUgKCArK3BpcnEgPCBkLT5ucl9waXJx
cyAmJiBuID09IEFSUkFZX1NJWkUocGlycXMpICk7CkBAIC0yMjQ0LDcgKzIy
NDQsNiBAQCBzdGF0aWMgdm9pZCBkdW1wX2lycXModW5zaWduZWQgY2hhciBr
ZXkpCiAgICAgaW50IGksIGlycSwgcGlycTsKICAgICBzdHJ1Y3QgaXJxX2Rl
c2MgKmRlc2M7CiAgICAgaXJxX2d1ZXN0X2FjdGlvbl90ICphY3Rpb247Ci0g
ICAgc3RydWN0IGV2dGNobiAqZXZ0Y2huOwogICAgIHN0cnVjdCBkb21haW4g
KmQ7CiAgICAgY29uc3Qgc3RydWN0IHBpcnEgKmluZm87CiAgICAgdW5zaWdu
ZWQgbG9uZyBmbGFnczsKQEAgLTIyODcsMTEgKzIyODYsMTAgQEAgc3RhdGlj
IHZvaWQgZHVtcF9pcnFzKHVuc2lnbmVkIGNoYXIga2V5KQogICAgICAgICAg
ICAgICAgIGQgPSBhY3Rpb24tPmd1ZXN0W2ldOwogICAgICAgICAgICAgICAg
IHBpcnEgPSBkb21haW5faXJxX3RvX3BpcnEoZCwgaXJxKTsKICAgICAgICAg
ICAgICAgICBpbmZvID0gcGlycV9pbmZvKGQsIHBpcnEpOwotICAgICAgICAg
ICAgICAgIGV2dGNobiA9IGV2dGNobl9mcm9tX3BvcnQoZCwgaW5mby0+ZXZ0
Y2huKTsKICAgICAgICAgICAgICAgICBwcmludGsoIiV1OiUzZCglYyVjJWMp
IiwKICAgICAgICAgICAgICAgICAgICAgICAgZC0+ZG9tYWluX2lkLCBwaXJx
LAotICAgICAgICAgICAgICAgICAgICAgICAoZXZ0Y2huX3BvcnRfaXNfcGVu
ZGluZyhkLCBldnRjaG4pID8gJ1AnIDogJy0nKSwKLSAgICAgICAgICAgICAg
ICAgICAgICAgKGV2dGNobl9wb3J0X2lzX21hc2tlZChkLCBldnRjaG4pID8g
J00nIDogJy0nKSwKKyAgICAgICAgICAgICAgICAgICAgICAgZXZ0Y2huX3Bv
cnRfaXNfcGVuZGluZyhkLCBpbmZvLT5ldnRjaG4pID8gJ1AnIDogJy0nLAor
ICAgICAgICAgICAgICAgICAgICAgICBldnRjaG5fcG9ydF9pc19tYXNrZWQo
ZCwgaW5mby0+ZXZ0Y2huKSA/ICdNJyA6ICctJywKICAgICAgICAgICAgICAg
ICAgICAgICAgKGluZm8tPm1hc2tlZCA/ICdNJyA6ICctJykpOwogICAgICAg
ICAgICAgICAgIGlmICggaSAhPSBhY3Rpb24tPm5yX2d1ZXN0cyApCiAgICAg
ICAgICAgICAgICAgICAgIHByaW50aygiLCIpOwotLS0gYS94ZW4vY29tbW9u
L2V2ZW50XzJsLmMKKysrIGIveGVuL2NvbW1vbi9ldmVudF8ybC5jCkBAIC02
MSwxNiArNjEsMjAgQEAgc3RhdGljIHZvaWQgZXZ0Y2huXzJsX3VubWFzayhz
dHJ1Y3QgZG9tYQogICAgIH0KIH0KIAotc3RhdGljIGJvb2xfdCBldnRjaG5f
MmxfaXNfcGVuZGluZyhzdHJ1Y3QgZG9tYWluICpkLAotICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICBjb25zdCBzdHJ1Y3QgZXZ0Y2huICpl
dnRjaG4pCitzdGF0aWMgYm9vbF90IGV2dGNobl8ybF9pc19wZW5kaW5nKHN0
cnVjdCBkb21haW4gKmQsIGV2dGNobl9wb3J0X3QgcG9ydCkKIHsKLSAgICBy
ZXR1cm4gdGVzdF9iaXQoZXZ0Y2huLT5wb3J0LCAmc2hhcmVkX2luZm8oZCwg
ZXZ0Y2huX3BlbmRpbmcpKTsKKyAgICB1bnNpZ25lZCBpbnQgbWF4X3BvcnRz
ID0gQklUU19QRVJfRVZUQ0hOX1dPUkQoZCkgKiBCSVRTX1BFUl9FVlRDSE5f
V09SRChkKTsKKworICAgIEFTU0VSVChwb3J0IDwgbWF4X3BvcnRzKTsKKyAg
ICByZXR1cm4gcG9ydCA8IG1heF9wb3J0cyAmJiB0ZXN0X2JpdChwb3J0LCAm
c2hhcmVkX2luZm8oZCwgZXZ0Y2huX3BlbmRpbmcpKTsKIH0KIAotc3RhdGlj
IGJvb2xfdCBldnRjaG5fMmxfaXNfbWFza2VkKHN0cnVjdCBkb21haW4gKmQs
Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgY29uc3Qgc3Ry
dWN0IGV2dGNobiAqZXZ0Y2huKQorc3RhdGljIGJvb2xfdCBldnRjaG5fMmxf
aXNfbWFza2VkKHN0cnVjdCBkb21haW4gKmQsIGV2dGNobl9wb3J0X3QgcG9y
dCkKIHsKLSAgICByZXR1cm4gdGVzdF9iaXQoZXZ0Y2huLT5wb3J0LCAmc2hh
cmVkX2luZm8oZCwgZXZ0Y2huX21hc2spKTsKKyAgICB1bnNpZ25lZCBpbnQg
bWF4X3BvcnRzID0gQklUU19QRVJfRVZUQ0hOX1dPUkQoZCkgKiBCSVRTX1BF
Ul9FVlRDSE5fV09SRChkKTsKKworICAgIEFTU0VSVChwb3J0IDwgbWF4X3Bv
cnRzKTsKKyAgICByZXR1cm4gcG9ydCA+PSBtYXhfcG9ydHMgfHwgdGVzdF9i
aXQocG9ydCwgJnNoYXJlZF9pbmZvKGQsIGV2dGNobl9tYXNrKSk7CiB9CiAK
IHN0YXRpYyB2b2lkIGV2dGNobl8ybF9wcmludF9zdGF0ZShzdHJ1Y3QgZG9t
YWluICpkLAotLS0gYS94ZW4vY29tbW9uL2V2ZW50X2NoYW5uZWwuYworKysg
Yi94ZW4vY29tbW9uL2V2ZW50X2NoYW5uZWwuYwpAQCAtMTM4MCw4ICsxMzgw
LDggQEAgc3RhdGljIHZvaWQgZG9tYWluX2R1bXBfZXZ0Y2huX2luZm8oc3Ry
dQogCiAgICAgICAgIHByaW50aygiICAgICU0dSBbJWQvJWQvIiwKICAgICAg
ICAgICAgICAgIHBvcnQsCi0gICAgICAgICAgICAgICAhIWV2dGNobl9wb3J0
X2lzX3BlbmRpbmcoZCwgY2huKSwKLSAgICAgICAgICAgICAgICEhZXZ0Y2hu
X3BvcnRfaXNfbWFza2VkKGQsIGNobikpOworICAgICAgICAgICAgICAgZXZ0
Y2huX3BvcnRfaXNfcGVuZGluZyhkLCBwb3J0KSwKKyAgICAgICAgICAgICAg
IGV2dGNobl9wb3J0X2lzX21hc2tlZChkLCBwb3J0KSk7CiAgICAgICAgIGV2
dGNobl9wb3J0X3ByaW50X3N0YXRlKGQsIGNobik7CiAgICAgICAgIHByaW50
aygiXTogcz0lZCBuPSVkIHg9JWQiLAogICAgICAgICAgICAgICAgY2huLT5z
dGF0ZSwgY2huLT5ub3RpZnlfdmNwdV9pZCwgY2huLT54ZW5fY29uc3VtZXIp
OwotLS0gYS94ZW4vY29tbW9uL2V2ZW50X2ZpZm8uYworKysgYi94ZW4vY29t
bW9uL2V2ZW50X2ZpZm8uYwpAQCAtMjcsNiArMjcsMTIgQEAgc3RhdGljIGlu
bGluZSBldmVudF93b3JkX3QgKmV2dGNobl9maWZvXwogICAgIGlmICggdW5s
aWtlbHkocG9ydCA+PSBkLT5ldnRjaG5fZmlmby0+bnVtX2V2dGNobnMpICkK
ICAgICAgICAgcmV0dXJuIE5VTEw7CiAKKyAgICAvKgorICAgICAqIENhbGxl
cnMgYXJlbid0IHJlcXVpcmVkIHRvIGhvbGQgZC0+ZXZlbnRfbG9jaywgc28g
d2UgbmVlZCB0byBzeW5jaHJvbml6ZQorICAgICAqIHdpdGggYWRkX3BhZ2Vf
dG9fZXZlbnRfYXJyYXkoKS4KKyAgICAgKi8KKyAgICBzbXBfcm1iKCk7CisK
ICAgICBwID0gcG9ydCAvIEVWVENITl9GSUZPX0VWRU5UX1dPUkRTX1BFUl9Q
QUdFOwogICAgIHcgPSBwb3J0ICUgRVZUQ0hOX0ZJRk9fRVZFTlRfV09SRFNf
UEVSX1BBR0U7CiAKQEAgLTI4NywyNCArMjkzLDIyIEBAIHN0YXRpYyB2b2lk
IGV2dGNobl9maWZvX3VubWFzayhzdHJ1Y3QgZG8KICAgICAgICAgZXZ0Y2hu
X2ZpZm9fc2V0X3BlbmRpbmcodiwgZXZ0Y2huKTsKIH0KIAotc3RhdGljIGJv
b2xfdCBldnRjaG5fZmlmb19pc19wZW5kaW5nKHN0cnVjdCBkb21haW4gKmQs
Ci0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgY29uc3Qg
c3RydWN0IGV2dGNobiAqZXZ0Y2huKQorc3RhdGljIGJvb2xfdCBldnRjaG5f
Zmlmb19pc19wZW5kaW5nKHN0cnVjdCBkb21haW4gKmQsIGV2dGNobl9wb3J0
X3QgcG9ydCkKIHsKICAgICBldmVudF93b3JkX3QgKndvcmQ7CiAKLSAgICB3
b3JkID0gZXZ0Y2huX2ZpZm9fd29yZF9mcm9tX3BvcnQoZCwgZXZ0Y2huLT5w
b3J0KTsKKyAgICB3b3JkID0gZXZ0Y2huX2ZpZm9fd29yZF9mcm9tX3BvcnQo
ZCwgcG9ydCk7CiAgICAgaWYgKCB1bmxpa2VseSghd29yZCkgKQogICAgICAg
ICByZXR1cm4gMDsKIAogICAgIHJldHVybiB0ZXN0X2JpdChFVlRDSE5fRklG
T19QRU5ESU5HLCB3b3JkKTsKIH0KIAotc3RhdGljIGJvb2xfdCBldnRjaG5f
Zmlmb19pc19tYXNrZWQoc3RydWN0IGRvbWFpbiAqZCwKLSAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgIGNvbnN0IHN0cnVjdCBldnRjaG4g
KmV2dGNobikKK3N0YXRpYyBib29sX3QgZXZ0Y2huX2ZpZm9faXNfbWFza2Vk
KHN0cnVjdCBkb21haW4gKmQsIGV2dGNobl9wb3J0X3QgcG9ydCkKIHsKICAg
ICBldmVudF93b3JkX3QgKndvcmQ7CiAKLSAgICB3b3JkID0gZXZ0Y2huX2Zp
Zm9fd29yZF9mcm9tX3BvcnQoZCwgZXZ0Y2huLT5wb3J0KTsKKyAgICB3b3Jk
ID0gZXZ0Y2huX2ZpZm9fd29yZF9mcm9tX3BvcnQoZCwgcG9ydCk7CiAgICAg
aWYgKCB1bmxpa2VseSghd29yZCkgKQogICAgICAgICByZXR1cm4gMTsKIApA
QCAtNTkzLDYgKzU5NywxMCBAQCBzdGF0aWMgaW50IGFkZF9wYWdlX3RvX2V2
ZW50X2FycmF5KHN0cnVjCiAgICAgICAgIHJldHVybiByYzsKIAogICAgIGQt
PmV2dGNobl9maWZvLT5ldmVudF9hcnJheVtzbG90XSA9IHZpcnQ7CisKKyAg
ICAvKiBTeW5jaHJvbml6ZSB3aXRoIGV2dGNobl9maWZvX3dvcmRfZnJvbV9w
b3J0KCkuICovCisgICAgc21wX3dtYigpOworCiAgICAgZC0+ZXZ0Y2huX2Zp
Zm8tPm51bV9ldnRjaG5zICs9IEVWVENITl9GSUZPX0VWRU5UX1dPUkRTX1BF
Ul9QQUdFOwogCiAgICAgLyoKLS0tIGEveGVuL2NvbW1vbi9zY2hlZHVsZS5j
CisrKyBiL3hlbi9jb21tb24vc2NoZWR1bGUuYwpAQCAtOTY1LDcgKzk2NSw3
IEBAIHN0YXRpYyBsb25nIGRvX3BvbGwoc3RydWN0IHNjaGVkX3BvbGwgKnMK
ICAgICAgICAgICAgIGdvdG8gb3V0OwogCiAgICAgICAgIHJjID0gMDsKLSAg
ICAgICAgaWYgKCBldnRjaG5fcG9ydF9pc19wZW5kaW5nKGQsIGV2dGNobl9m
cm9tX3BvcnQoZCwgcG9ydCkpICkKKyAgICAgICAgaWYgKCBldnRjaG5fcG9y
dF9pc19wZW5kaW5nKGQsIHBvcnQpICkKICAgICAgICAgICAgIGdvdG8gb3V0
OwogICAgIH0KIAotLS0gYS94ZW4vaW5jbHVkZS94ZW4vZXZlbnQuaAorKysg
Yi94ZW4vaW5jbHVkZS94ZW4vZXZlbnQuaApAQCAtMTM3LDggKzEzNyw4IEBA
IHN0cnVjdCBldnRjaG5fcG9ydF9vcHMgewogICAgIHZvaWQgKCpzZXRfcGVu
ZGluZykoc3RydWN0IHZjcHUgKnYsIHN0cnVjdCBldnRjaG4gKmV2dGNobik7
CiAgICAgdm9pZCAoKmNsZWFyX3BlbmRpbmcpKHN0cnVjdCBkb21haW4gKmQs
IHN0cnVjdCBldnRjaG4gKmV2dGNobik7CiAgICAgdm9pZCAoKnVubWFzayko
c3RydWN0IGRvbWFpbiAqZCwgc3RydWN0IGV2dGNobiAqZXZ0Y2huKTsKLSAg
ICBib29sX3QgKCppc19wZW5kaW5nKShzdHJ1Y3QgZG9tYWluICpkLCBjb25z
dCBzdHJ1Y3QgZXZ0Y2huICpldnRjaG4pOwotICAgIGJvb2xfdCAoKmlzX21h
c2tlZCkoc3RydWN0IGRvbWFpbiAqZCwgY29uc3Qgc3RydWN0IGV2dGNobiAq
ZXZ0Y2huKTsKKyAgICBib29sX3QgKCppc19wZW5kaW5nKShzdHJ1Y3QgZG9t
YWluICpkLCBldnRjaG5fcG9ydF90IHBvcnQpOworICAgIGJvb2xfdCAoKmlz
X21hc2tlZCkoc3RydWN0IGRvbWFpbiAqZCwgZXZ0Y2huX3BvcnRfdCBwb3J0
KTsKICAgICAvKgogICAgICAqIElzIHRoZSBwb3J0IHVuYXZhaWxhYmxlIGJl
Y2F1c2UgaXQncyBzdGlsbCBiZWluZyBjbGVhbmVkIHVwCiAgICAgICogYWZ0
ZXIgYmVpbmcgY2xvc2VkPwpAQCAtMTc1LDE1ICsxNzUsMTUgQEAgc3RhdGlj
IGlubGluZSB2b2lkIGV2dGNobl9wb3J0X3VubWFzayhzdAogfQogCiBzdGF0
aWMgaW5saW5lIGJvb2xfdCBldnRjaG5fcG9ydF9pc19wZW5kaW5nKHN0cnVj
dCBkb21haW4gKmQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIGNvbnN0IHN0cnVjdCBldnRjaG4gKmV2dGNobikKKyAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXZ0
Y2huX3BvcnRfdCBwb3J0KQogewotICAgIHJldHVybiBkLT5ldnRjaG5fcG9y
dF9vcHMtPmlzX3BlbmRpbmcoZCwgZXZ0Y2huKTsKKyAgICByZXR1cm4gZC0+
ZXZ0Y2huX3BvcnRfb3BzLT5pc19wZW5kaW5nKGQsIHBvcnQpOwogfQogCiBz
dGF0aWMgaW5saW5lIGJvb2xfdCBldnRjaG5fcG9ydF9pc19tYXNrZWQoc3Ry
dWN0IGRvbWFpbiAqZCwKLSAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICBjb25zdCBzdHJ1Y3QgZXZ0Y2huICpldnRjaG4pCisg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgZXZ0
Y2huX3BvcnRfdCBwb3J0KQogewotICAgIHJldHVybiBkLT5ldnRjaG5fcG9y
dF9vcHMtPmlzX21hc2tlZChkLCBldnRjaG4pOworICAgIHJldHVybiBkLT5l
dnRjaG5fcG9ydF9vcHMtPmlzX21hc2tlZChkLCBwb3J0KTsKIH0KIAogc3Rh
dGljIGlubGluZSBib29sX3QgZXZ0Y2huX3BvcnRfaXNfYnVzeShzdHJ1Y3Qg
ZG9tYWluICpkLCBldnRjaG5fcG9ydF90IHBvcnQpCg==

--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpd-0006Vs-Cj; Tue, 20 Jun 2017 12:00:29 +0000
Received: from mail6.bemta3.messagelabs.com ([195.245.230.39])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpb-0006Pb-4a; Tue, 20 Jun 2017 12:00:27 +0000
Received: from [85.158.137.68] by server-7.bemta-3.messagelabs.com id
 1F/9E-02196-95E09495; Tue, 20 Jun 2017 12:00:25 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFrrKKsWRWlGSWpSXmKPExsWS0XRdVTeCzzP
 S4MxVA4tbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBm/Dy2g73g9mqmijMz2tgb
 GJcvYOpi5OIQEjjOKPFnzXJWCGcRo8TsebOBMpwczAKuEjf2bWaDsBUlLtxrYAGxeQUEJU7Of
 AJmSwhoStx5s4odxBYRKJLYee4lmM0moCcx9+wkqDmWEvMnngKbIyyQIPHyxz4miDlmEvPnnA
 SrZxFQlZhz+AzzBEaeWUhWz0KyehaS1bMYOYDimhLrd+lDmNISy/9xQFTLS2x/O4cZwraWeNr
 YAGVbSCzd8AFu4pTuh+wQtr3EvhlfWCFsG4lZS5ayYlOzqbsXaquNxLarRtiUbDt1lx1mzKTH
 /5mQ1SxgFFrFqF6cWlSWWqRrrJdUlJmeUZKbmJmja2hgrJebWlycmJ6ak5hUrJecn7uJERi5D
 ECwg7H5i9MhRkkOJiVRXnUGz0ghvqT8lMqMxOKM+KLSnNTiQ4wyHBxKErzsvEA5waLU9NSKtM
 wcYAqBSUtw8CiJ8MaDtPIWFyTmFmemQ6ROMRpz7Pq/5gsTx7L1W74wCbHk5eelSonzaoJMEgA
 pzSjNgxsES22XGGWlhHkZgU4T4ilILcrNLEGVf8UozsGoJMwrCzKFJzOvBG7fK6BTmIBOeXHE
 A+SUkkSElFQDo+KMCaJGGr0xwVb6YRwi8W912HkvaiyeNq1n86HiWIczU4sWTlj3x9D8nUTIl
 i9rPmdsjhBmmF0Vxq0Qc8bf87jAI6EAJ82Xq0R28c5hUZY2mb2b41St2YN7C145See5vTMKyr
 +y/r/dspuq55Ua+TmidnFIn3dRNj8dlJoVqFHw/6FnuepTJZbijERDLeai4kQA/GzbwGgDAAA
 =
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-2.tower-31.messagelabs.com!1497960023!94822377!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 45918 invoked from network); 20 Jun 2017 12:00:24 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-2.tower-31.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:24 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpH-0004EE-A0; Tue, 20 Jun 2017 12:00:07 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpH-00062a-7J; Tue, 20 Jun 2017 12:00:07 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpH-00062a-7J@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:07 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 219 - x86: insufficient
 reference counts during shadow emulation
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-219
                              version 2

        x86: insufficient reference counts during shadow emulation

UPDATES IN VERSION 2
====================

Public release.

Add caveat about exploitability by a single HVM guest, to Impact.

ISSUE DESCRIPTION
=================

When using shadow paging, writes to guest pagetables must be trapped and
emulated, so the shadows can be suitably adjusted as well.

When emulating the write, Xen maps the guests pagetable(s) to make the final
adjustment and leave the guest's view of its state consistent.

However, when mapping the frame, Xen drops the page reference before
performing the write.  This is a race window where the underlying frame can
change ownership.

One possible attack scenario is for the frame to change ownership and to be
inserted into a PV guest's pagetables.  At that point, the emulated write will
be an unaudited modification to the PV pagetables whose value is under guest
control.

IMPACT
======

A malicious pair of guests may be able to elevate their privilege to that of
Xen.

We have not ruled out the possibility that a single malicious HVM
guest may be able to elevate their privilege to that of Xen.

VULNERABLE SYSTEMS
==================

All versions of Xen are vulnerable.

Only x86 systems are affected.  ARM systems are not vulnerable.

HVM guests using shadow mode paging can exploit this vulnerability.  HVM guests
using Hardware Assisted Paging (HAP) cannot exploit this vulnerability.

To discover whether your HVM guests are using HAP, or shadow page
tables: request debug key `q' (from the Xen console, or with
`xl debug-keys q').  This will print (to the console, and visible in
`xl dmesg'), debug information for every domain, containing something
like this:

  (XEN) General information for domain 2:
  (XEN)     refcnt=1 dying=2 pause_count=2
  (XEN)     nr_pages=2 xenheap_pages=0 shared_pages=0 paged_pages=0 dirty_cpus={} max_pages=262400
  (XEN)     handle=ef58ef1a-784d-4e59-8079-42bdee87f219 vm_assist=00000000
  (XEN)     paging assistance: hap refcounts translate external
                               ^^^
The presence of `hap' here indicates that the host is not
vulnerable to this domain.  For an HVM domain the presence of `shadow'
indicates that the domain can exploit the vulnerability.

Xen 4.6 and later have the option to compile-out shadow paging support.  (The
default is to compile with shadow paging support).  If Xen is built without
shadow support, it is not vulnerable.

Exploiting this race condition requires coordination between an x86 HVM guest
using shadow paging, and a PV guest.

Running only HVM guests avoids the vulnerability, unless stub device
models are in use (since stub device models are PV domains, each
controlled by the corresponding guest).

Running only PV guests avoids the vulnerability.

MITIGATION
==========

Where the HVM guest is explicitly configured to use shadow paging (eg
via the `hap=0' xl domain configuration file parameter), changing to
HAP (eg by setting `hap=1') will avoid exposing the vulnerability to
those guests.  HAP is the default (in upstream Xen), where the
hardware supports it; so this mitigation is only applicable if HAP has
been disabled by configuration.

(This mitigation is not applicable to PV guests.)

CREDITS
=======

This issue was discovered by Andrew Cooper of Citrix.

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa219.patch           xen-unstable
xsa219-4.8.patch       Xen 4.8, 4.7
xsa219-4.6.patch       Xen 4.6
xsa219-4.5.patch       Xen 4.5, 4.4

$ sha256sum xsa219*
d06759d11dad3b128e65ade9e6afc1c728b65457cc32c34f46690f959c48644f  xsa219.patch
0dd27ad66f964ba163dbc72e3a074d171b0e1edf9b322d811feb7f5c1deb4437  xsa219-4.5.patch
d5fdd9d75dbad4a2315f48f8aec5dd3a10b92307320b5c141e2c1e69e422510c  xsa219-4.6.patch
a2023599abbc3b8f46cd430bec154401ef166493fcb5787f2f6fb9802b12f9b4  xsa219-4.8.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.


(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3PAAoJEIP+FMlX6CvZI5sIAITAsYzu8vcLGz2erkTQOFQ/
87MWZ/OPMHZISeG9Y1lEUYNJ0I/pkvEe6HHGpL1JZegtBkuuMnLIb4XfPFvIuVOs
pwETinpd+FkmhpfPWDc6vKaS9tYUZFi/h7ORcJTn/j6/JWoaqdbCJC+x1hI5UhsA
6iZHNQuuSIM1WH7pAyywhzovsoTnsI5pBYU69cDO6szo7Ig34BmVpliin2qkp0TV
T673fktUoZWcYZK05TvFbAkG7UCQk1Wu46eiHx2SB+dFZ2wXdtxCZnCY5guCrF1i
BqAiJj+MrYMZ38yfoY3XgoIcam3pQTai8bYo5xj8Jcuws0cPK9ja2LBwfHv0YTM=
=Eoho
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa219.patch"
Content-Disposition: attachment; filename="xsa219.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa219-4.5.patch"
Content-Disposition: attachment; filename="xsa219-4.5.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa219-4.6.patch"
Content-Disposition: attachment; filename="xsa219-4.6.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa219-4.8.patch"
Content-Disposition: attachment; filename="xsa219-4.8.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:01:07 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:01:07 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHpV-0006Ho-Hq; Tue, 20 Jun 2017 12:00:21 +0000
Received: from mail6.bemta3.messagelabs.com ([195.245.230.39])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpT-0006EN-Ld; Tue, 20 Jun 2017 12:00:19 +0000
Received: from [85.158.137.68] by server-6.bemta-3.messagelabs.com id
 32/A9-19409-25E09495; Tue, 20 Jun 2017 12:00:18 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrOIsWRWlGSWpSXmKPExsWS0XRdVTeQzzP
 S4NteZYtbN1uZLZZ8XMxiserqAVYHZo+ju38zBTBGsWbmJeVXJLBmTJy/gaXgulbFqk072BsY
 D6l1MXJxCAkcZ5To2H+TFcJZxCjx/+clti5GTg5mAVeJG/s2Q9mKEhfuNbCA2LwCghInZz4Bs
 yUENCXuvFnFDmKLCBRJ7Dz3EsxmE9CTmHt2EhNEr6XE/ImnwOYIC4RJzL33ixlijpnEi2ezwO
 awCKhK/Dn7lH0CI88sJKtnIVk9C8nqWYwcQHFNifW79CFMaYnl/zggquUltr+dwwwRtpZYPJE
 ZImwh8XNTOzPMwCndD9kXMHKuYlQvTi0qSy3StdRLKspMzyjJTczM0TU0MNbLTS0uTkxPzUlM
 KtZLzs/dxAgM7noGBsYdjK9/Oh1ilORgUhLlVWfwjBTiS8pPqcxILM6ILyrNSS0+xCjDwaEkw
 cvOC5QTLEpNT61Iy8wBxhlMWoKDR0mENx6klbe4IDG3ODMdInWK0Zhj1/81X5g4lq3f8oVJiC
 UvPy9VSpxXE2SSAEhpRmke3CBY/F9ilJUS5mVkYGAQ4ilILcrNLEGVf8UozsGoJMwrCzKFJzO
 vBG7fK6BTmIBOeXHEA+SUkkSElFQDo7v3Hu5azi2sTxVzF/I/qKxi4J7lxPH82cUtp/OFqiat
 Pj3x0FWhhY+nbt31Y82/eclhr3TkTqQ/cGXwc/w093PE3RN8Tn7Sf7PWxwnM8Vnce2zx36wzH
 dc+7Huy6GqK7y75ZsnO3gzN3U83md+cEzn7oc6n3SuecWeGR5sdMKjY9kdTO6kpJVWJpTgj0V
 CLuag4EQBdnDpl+gIAAA==
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-15.tower-31.messagelabs.com!1497960016!102452927!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 27896 invoked from network); 20 Jun 2017 12:00:17 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-15.tower-31.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:00:17 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-0004FQ-VT; Tue, 20 Jun 2017 12:00:09 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-0006BC-Uo; Tue, 20 Jun 2017 12:00:09 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpJ-0006BC-Uo@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:09 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 225 - arm: vgic: Out-of-bound
 access when sending SGIs
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-225
                              version 2

           arm: vgic: Out-of-bound access when sending SGIs

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

ARM guests can send SGI (i.e. IPI) targeting a list of vCPUs using the
MMIO register GICD_SGIR (GICv2) or System Register ICC_SGI1R (GICv3).
However, the emulation code does not sanitize the list and will
directly access an array without checking whether the array index is
within bounds.

IMPACT
======

A guest may cause a hypervisor crash, resulting in a Denial of Service
(DoS).

VULNERABLE SYSTEMS
==================

Xen versions 4.6 and onwards are affected.  Xen versions 4.5 and
earlier are not affected.

Only ARM systems are affected.  x86 systems are not affected.

MITIGATION
==========

On systems where the guest kernel is controlled by the host rather than
guest administrator, running only kernels which only send sane IPIs
(i.e. targeting valid CPUs) will prevent untrusted guest users from
exploiting this issue.  However untrusted guest administrators can
still trigger it unless further steps are taken to prevent them from
loading code into the kernel (e.g by disabling loadable modules etc) or
from using other mechanisms which allow them to run code at kernel
privilege.

CREDITS
=======

This issue was discovered by Julien Grall of ARM.

RESOLUTION
==========

Applying the attached patch resolves this issue.

xsa225.patch           xen-unstable, Xen 4.8.x, Xen 4.7.x, Xen 4.6.x

$ sha256sum xsa225*
a52d90a2586b74d6dd0d17390c940bf414c1332a6b4ccb87f10b7d97af3b3877  xsa225.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3mAAoJEIP+FMlX6CvZ/TAH/Role6HA+csMGO/DshXbfuhN
/S+DOPKU7NwynExZhf43Afj37EI4cw3xUcpRrZJbRExhGtlnBInsjUq8V9kmWcZL
pJOgVcTOMyeR6Mc3B/tLqamH49uJdEGoi3zHVtckXY/A8a8+iyT5faSibmsWgl1t
mYylB33xg9JmQ6gEa4NtbXOFi/f7BHjXUqVr8+P/KAyqvEramxoH+lp21Wrc1JZd
wvpeEVnIlXjNBJB3ERqIENc/E0jlHY73mTLPK1br8OkkrJPnwkbC246Nd1cIosVt
v8fe/Lin8yq2K+dPU6VFk/ZawDmOUtOtwJCL8klteIs6iiT+m2F3nGHMoQAGaBk=
=lwE9
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa225.patch"
Content-Disposition: attachment; filename="xsa225.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:02:23 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:02:23 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHqa-0007k9-GP; Tue, 20 Jun 2017 12:01:28 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHqZ-0007ib-DJ; Tue, 20 Jun 2017 12:01:27 +0000
Received: from [85.158.143.35] by server-8.bemta-6.messagelabs.com id
 E6/D8-03696-69E09495; Tue, 20 Jun 2017 12:01:26 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFnrJIsWRWlGSWpSXmKPExsWS0XRdVXcqn2e
 kwYvZOha3brYyWyz5uJjFYtXVA6wOzB5Hd/9mCmCMYs3MS8qvSGDNmHH+OXPBRv2Kx7cuMjUw
 ztLuYuTiEBI4ziix5+gWJghnEaPEhK1vWboYOTmYBVwlbuzbzAZhK0pcuNcAFucVEJQ4OfMJm
 C0hoClx580qdhBbRKBIYue5l2A2m4CexNyzk5ggei0l5k88BTZHWCBQYm/DakaIOWYSCz51MY
 PYLAKqEn/OPmWfwMgzC8nqWUhWz0KyehYjB1BcU2L9Ln0IU1pi+T8OiGp5ie1v5zBD2NYSPx+
 fgrItJHp75sJNnNL9kH0BI+cqRo3i1KKy1CJdQ0O9pKLM9IyS3MTMHF1DAzO93NTi4sT01JzE
 pGK95PzcTYzAAGcAgh2Mn5YFHGKU5GBSEuVVZ/CMFOJLyk+pzEgszogvKs1JLT7EKMPBoSTBO
 5EXKCdYlJqeWpGWmQOMNZi0BAePkghvPEgrb3FBYm5xZjpE6hSjMceu/2u+MHEsW7/lC5MQS1
 5+XqqUOO9ukEkCIKUZpXlwg2Ap4BKjrJQwLyPQaUI8BalFuZklqPKvGMU5GJWEeU+DTOHJzCu
 B2/cK6BQmoFNeHPEAOaUkESEl1cAobhH4aEFQ1p8zqcv6T/9Wf28Xa7Z7+8zqGmsdpfiH+QFZ
 m1kOrL9x6mnGw9lvamZc/rbSWvdhhdIS8VeOtjN6pm26FzD98cvYT3d3LLpcWPXgbIl0nYxHE
 9tyeYH5P/UuZnvlizo6L2py2V19IY01UTvzYH933gmx7j2zDFv/M9ysOuC/aMNOJZbijERDLe
 ai4kQApI9Xk/wCAAA=
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-2.tower-21.messagelabs.com!1497960084!60845323!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 16436 invoked from network); 20 Jun 2017 12:01:25 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-2.tower-21.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:01:25 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-0004Es-1g; Tue, 20 Jun 2017 12:00:09 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHpJ-000683-14; Tue, 20 Jun 2017 12:00:09 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHpJ-000683-14@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:00:09 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 223 - ARM guest disabling
 interrupt may crash Xen
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-223
                              version 2

              ARM guest disabling interrupt may crash Xen

UPDATES IN VERSION 2
====================

Public release.

ISSUE DESCRIPTION
=================

Virtual interrupt injection could be triggered by a guest when sending
an SGI (e.g IPI) to any vCPU or by configuring timers. When the virtual
interrupt is masked, a missing check in the injection path may result in
reading invalid hardware register or crashing the host.

IMPACT
======

A guest may cause a hypervisor crash, resulting in a Denial of Service
(DoS).

VULNERABLE SYSTEMS
==================

All Xen versions which support ARM are affected.

x86 systems are not affected.

MITIGATION
==========

On systems where the guest kernel is controlled by the host rather than
guest administrator, running only kernels which do not disable SGI and
PPI (i.e IRQ < 32) will prevent untrusted guest users from exploiting
this issue. However untrusted guest administrators can still trigger it
unless further steps are taken to prevent them from loading code into
the kernel (e.g by disabling loadable modules etc) or from using other
mechanisms which allow them to run code at kernel privilege.

CREDITS
=======

This issue was discovered by Julien Grall of ARM.

RESOLUTION
==========

Applying the attached patch resolves this issue.

xsa223.patch           xen-unstable, Xen 4.8.x, Xen 4.7.x, Xen 4.6.x, Xen 4.5.x

$ sha256sum xsa223*
b5c8d8e8dac027069bec7dd812cff3f6f99e5949dd4a8ee729255c38274958b1  xsa223.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ3WAAoJEIP+FMlX6CvZpxQH/0nQaJEWEuVZlQliIaB3TUK2
nnXBf3cFMsNCBIsrQtYXetZ8amA7cjULd2SX8/WIR60CPZ5Uj/YQtld5cq4LfxMj
Ngma8mPDUMlu6t+n07vee/fte5fZYOpci0teC9NCLDbG5eTWoJ0K7CzN2JUQWLAb
IgeJAVgyNr3ZibqdB8xBb5KlA+hOBE77MQ6yt8qZeltoYezIxprwgcqE/BgMVrcj
+7pz0WtJtdTe7i8i6jGcqvzbl3WhmcppiDLNhv310V+dV+T2e9cJia5EuapbqYD7
mkMLnOTRngJq97q1RwTQlsLMOp+/deZpqueLKttVCSR6VP4GtKpgr/0O1NW91YU=
=hATV
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa223.patch"
Content-Disposition: attachment; filename="xsa223.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:04:26 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:04:26 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNHsc-0001B8-Lr; Tue, 20 Jun 2017 12:03:34 +0000
Received: from mail6.bemta5.messagelabs.com ([195.245.231.135])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHsa-00019E-HT; Tue, 20 Jun 2017 12:03:33 +0000
Received: from [85.158.139.211] by server-10.bemta-5.messagelabs.com id
 6F/83-01734-31F09495; Tue, 20 Jun 2017 12:03:31 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFmphl+JIrShJLcpLzFFi42LJaLquqivI7xl
 psPKrusWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzdjxewFhws4u94v68z6wN
 jLu+sXUxcnEICRxnlDjYeRfKWcQosenkZ/YuRk4OZgFXiRv7NrNB2IoSF+41sIDYvAKCEidnP
 gGzJQQ0Je68WQVWLyJQJLHz3Eswm01AT2Lu2UlMEL2WEvMnngKbIyzgIfFl2jWgGg6gOWYSnw
 /Wg4RZBFQldu16zT6BkWcWks2zkGyehWTzLKBuZqDN63fpQ5jSEsv/cUBUy0tsfzuHGcLOl9h
 9YRbUlByJ323HWGAmTul+yA7RWifx+LkARLhaYsHCGayoSkDsQokT8/ug4nkSt3fsYcc0plzi
 2ZNUiHCJxLZTa5kxlWRJPG41hQinS3w5vg6LTZUSe3dcgDqyTGJR2wI2TDU5El92bYIanynRe
 W8iI6aacond118yQawtkfh1Vxuba169E4K55tvHJUwLGG1WMaoXpxaVpRbpGuklFWWmZ5TkJm
 bm6BoamOrlphYXJ6an5iQmFesl5+duYgSmPwYg2MH4/Y/TIUZJDiYlUV51Bs9IIb6k/JTKjMT
 ijPii0pzU4kOMGhwcAn1rVl9glGLJy89LVZLgZecFqhMsSk1PrUjLzAEmaJhSCQ4eJRHeeJAx
 vMUFibnFmekQqVOMxhy7/q/5wsSxbP2WL0xCYJOkxHl3g0wSACnNKM2DGwTLHJcYZaWEeRmBz
 hTiKUgtys0sQZV/xSjOwagkzDsJZApPZl4J3L5XQKcwAZ3y4ogHyCkliQgpqQZGmYUBBTyskt
 /lZ7IsOSi94FfylqudU/fwvG111J23MP9n+fOMVb6nrb/MOb10pRGvb/qSY8eMc8xSn2j69bh
 GF9yK9Htyfs/bNVkLAxo2CYToxUrfOyxmr7+w0Ou4tsepCyuVq973CTEpRFo8sTQ6Gxf84eSl
 exw3HjH6eBs3/IhrdKgzKmJUYinOSDTUYi4qTgQABPNwZBcEAAA=
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-3.tower-206.messagelabs.com!1497960208!100624467!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 60281 invoked from network); 20 Jun 2017 12:03:29 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-3.tower-206.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:03:29 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHsQ-0004OP-Im; Tue, 20 Jun 2017 12:03:22 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNHsQ-0007FF-Hf; Tue, 20 Jun 2017 12:03:22 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNHsQ-0007FF-Hf@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:03:22 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 218 - Races in the grant table
	unmap code
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-218
                              version 4

                 Races in the grant table unmap code

UPDATES IN VERSION 4
====================

Adjust last patch description and add review tag.

Public release.

ISSUE DESCRIPTION
=================

We have discovered two bugs in the code unmapping grant references.

* When a grant had been mapped twice by a backend domain, and then
unmapped by two concurrent unmap calls, the frontend may be informed
that the page had no further mappings when the first call completed rather
than when the second call completed.

* A race triggerable by an unprivileged guest could cause a grant
maptrack entry for grants to be "freed" twice.  The ultimate effect of
this would be for maptrack entries for a single domain to be re-used.

IMPACT
======

For the first issue, for a short window of time, a malicious backend
could still read and write memory that the frontend thought was its
own again.  Depending on the usage, this could be either an
information leak, or a backend-to-frontend privilege escalation.

The second issue is more difficult to analyze. It can probably cause
reference counts to leak, preventing memory from being freed on domain
destruction (denial-of-service), but information leakage or host
privilege escalation cannot be ruled out.

VULNERABLE SYSTEMS
==================

All versions of Xen are vulnerable.

Both ARM and x86 are vulnerable.

On x86, systems with either PV or HVM guests are vulnerable.

MITIGATION
==========

None.

CREDITS
=======

This issue was discovered by Jann Horn of Google Project Zero.

RESOLUTION
==========

Applying the appropriate set of attached patches resolves this issue.

xsa218-unstable/*.patch    xen-unstable
xsa218-4.8/*.patch         Xen 4.8.x
xsa218-4.7/*.patch         Xen 4.7.x
xsa218-4.6/*.patch         Xen 4.6.x
xsa218-4.5/*.patch         Xen 4.5.x

$ sha256sum xsa218*/*
6f5e588edb6d3f0a37b89235e95cdcc7ca73cdff236d86b65e6f608bd15b03ec  xsa218-unstable/0001-gnttab-fix-unmap-pin-accounting-race.patch
5cb85f0aaa19ff343fc51b08addbf37d62352774115acd28eb18a73f67507e21  xsa218-unstable/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch
f5f3d27ce2829b3aa5e09b216bf9afcb1dc6b1f9f3b3a0f3ebfe5a68b4948aef  xsa218-unstable/0003-gnttab-correct-maptrack-table-accesses.patch
fafb8773957bbffb21ab43c7a3559efe15f52d234afba5f2ad2739411946c021  xsa218-4.5/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch
4398ad7111421dbf954ede651cb7f9acd83c654c7fa93d54a4e5f9b7b25fe918  xsa218-4.5/0002-gnttab-fix-unmap-pin-accounting-race.patch
9d23946afb96a70c574b8c7ff42ed8b30b72e9a1f751ff617a7578c79645c094  xsa218-4.5/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch
27d92c6f4d89de3fd9e9311337823370303c1ef985cce2bd9bea28f00cd6c184  xsa218-4.5/0004-gnttab-correct-maptrack-table-accesses.patch
99ac090d7955a46c6c9c73ca62b64cef6b8f05439961e52278c662f030a36ee2  xsa218-4.6/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch
e0f0839336e055c1422cf0f76c37f6d9cc8474b0140ffef2451dca6697a9f20f  xsa218-4.6/0002-gnttab-fix-unmap-pin-accounting-race.patch
5f6f63211b18bb6ec157353b9e8b844abe3fd767ef1780e6d28731e935559fbc  xsa218-4.6/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch
6a786a8c4b916b6f99092598bd4d60381907cd7e728c98a79e999afeec4f45a6  xsa218-4.6/0004-gnttab-correct-maptrack-table-accesses.patch
58354eec5f4f0b87640c702c6e1ce0eeb57dffbd09394a96e88bd6ff42c53e7e  xsa218-4.7/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch
0683d7ffdbe60dc8e1d161adeb0c5465df1840e86353b5cbb96dd204f2dbb526  xsa218-4.7/0002-gnttab-fix-unmap-pin-accounting-race.patch
6bfef9e1653a305e49653c5b81acb57ca41ee8410ea085d49c9bc7e4ccd31e54  xsa218-4.7/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch
b4ede29e3a94d9e7992c90b8b7c8d489e071764218b28962b5755a444040e1ae  xsa218-4.7/0004-gnttab-correct-maptrack-table-accesses.patch
c2a1b40e76764333f3ee34dd9bc7d3e34bab91f8b44eaae7aa6f187bbddb358f  xsa218-4.8/0001-gnttab-fix-unmap-pin-accounting-race.patch
a210ff17a0ca1a81f2c98cce84a104ac7dd2f1a72fa3855ca5f3b3d13e95468c  xsa218-4.8/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch
0b8fa3d6a0f3ccb43c8134db2240867d5a850ee0821d4124a1642596b4d6cb5a  xsa218-4.8/0003-gnttab-correct-maptrack-table-accesses.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches and/or mitigations described above (or
others which are substantially similar) is permitted during the
embargo, even on public-facing systems with untrusted guest users and
administrators.

But: Distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSQ8GAAoJEIP+FMlX6CvZMtoH/jDvFJKVeBCD3p/6sg8XiMR9
saDiNfB0ULOIw6ffqFMC8SKYS7cRh+ijmt66ehsPZ/Azv17P5L19bmXQlW2y0Ea9
sAoJ3OJGI7FUz2O8SVhLmN+wSxKmfwmzuK6Rn3xX6VE9UPL8yfzdZIDT1K+Oparz
0mw0IAp7xukXdB0LlWePf1RLTl+0tZAoqsOIQXmM58kz1zvXIgOuSbI/ULUb/vnY
cj6BJKdyARM+7Kgpdj7bw1cunjo5RiH2aSeji9/T6QJbO6sVv3cb7qZfV94SRfJL
eaem+3awJjo39R5itO/UgL55K77/7yqtKt8ZUvhndKgmXeWyQsTp7HQx+lE8zv4=
=sS5B
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream;
 name="xsa218-unstable/0001-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Disposition: attachment;
 filename="xsa218-unstable/0001-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-unstable/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Disposition: attachment;
 filename="xsa218-unstable/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Transfer-Encoding: base64

RnJvbSAwMWIwMTAyNjM0YzA4ZTEyNzIzYWU2NzUxMjMyNmI2YjllNGFiZDRl
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFRodSwgMTUgSnVu
IDIwMTcgMTI6MDU6MTQgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvM10gZ250
dGFiOiBBdm9pZCBwb3RlbnRpYWwgZG91YmxlLXB1dCBvZiBtYXB0cmFjayBl
bnRyeQoKRWFjaCBncmFudCBtYXBwaW5nIGZvciBhIHBhcnRpY3VsYXIgZG9t
YWluIGlzIHRyYWNrZWQgYnkgYW4gaW4tWGVuCiJtYXB0cmFjayIgZW50cnku
ICBUaGlzIGVudHJ5IGlzIGlzIHJlZmVyZW5jZWQgYnkgYSAiaGFuZGxlIiwg
d2hpY2ggaXMKZ2l2ZW4gdG8gdGhlIGd1ZXN0IHdoZW4gaXQgY2FsbHMgZ250
dGFiX21hcF9ncmFudF9yZWYoKS4KClRoZXJlIGFyZSB0d28gdHlwZXMgb2Yg
bWFwcGluZyBhIHBhcnRpY3VsYXIgaGFuZGxlIGNhbiByZWZlciB0bzoKR05U
TUFQX2hvc3RfbWFwIGFuZCBHTlRNQVBfZGV2aWNlX21hcC4gIEEgZ2l2ZW4K
Z250dGFiX3VubWFwX2dyYW50X3JlZigpIGNhbGwgY2FuIHJlbW92ZSBlaXRo
ZXIgb25seSBvbmUgb3IgYm90aCBvZgp0aGVzZSBlbnRyaWVzLiAgV2hlbiBh
IHBhcnRpY3VsYXIgaGFuZGxlIGhhcyBubyBlbnRyaWVzIGxlZnQsIGl0IG11
c3QKYmUgZnJlZWQuCgpnbnR0YWJfdW5tYXBfZ3JhbnRfcmVmKCkgbG9vcHMg
dGhyb3VnaCBpdHMgZ3JhbnQgdW5tYXAgcmVxdWVzdCBsaXN0CnR3aWNlLiAg
SXQgZmlyc3QgcmVtb3ZlcyBlbnRyaWVzIGZyb20gYW55IGhvc3QgcGFnZXRh
YmxlcyBhbmQgKGlmCmFwcHJvcHJhaXRlKSBpb21tdXM7IHRoZW4gaXQgZG9l
cyBhIHNpbmdsZSBkb21haW4gVExCIGZsdXNoOyB0aGVuIGl0CmRvZXMgdGhl
IGNsZWFuLXVwLCBpbmNsdWRpbmcgdGVsbGluZyB0aGUgZ3JhbnRlciB0aGF0
IGVudHJpZXMgYXJlIG5vCmxvbmdlciBiZWluZyB1c2VkIChpZiBhcHByb3By
aWF0ZSkuCgpBdCB0aGUgbW9tZW50LCBpdCdzIGR1cmluZyB0aGUgZmlyc3Qg
cGFzcyB0aGF0IHRoZSBtYXB0cmFjayBmbGFncyBhcmUKY2xlYXJlZCwgYnV0
IHRoZSBzZWNvbmQgcGFzcyB0aGF0IHRoZSBtYXB0cmFjayBlbnRyeSBpcyBm
cmVlZC4KClVuZm9ydHVuYXRlbHkgdGhpcyBhbGxvd3MgdGhlIGZvbGxvd2lu
ZyByYWNlLCB3aGljaCByZXN1bHRzIGluIGEKZG91YmxlLWZyZWU6CgogQTog
KHBhc3MgMSkgY2xlYXIgaG9zdF9tYXAKIEI6IChwYXNzIDEpIGNsZWFyIGRl
dmljZV9tYXAKIEE6IChwYXNzIDIpIFNlZSB0aGF0IG1hcHRyYWNrIGVudHJ5
IGhhcyBubyBtYXBwaW5ncywgZnJlZSBpdAogQjogKHBhc3MgMikgU2VlIHRo
YXQgbWFwdHJhY2sgZW50cnkgaGFzIG5vIG1hcHBpbmdzLCBmcmVlIGl0ICMK
ClVuZm9ydHVuYXRlbHksIHVubGlrZSB0aGUgYWN0aXZlIGVudHJ5IHBpbm5p
bmcgdXBkYXRlLCB3ZSBjYW4ndCBzaW1wbHkKbW92ZSB0aGUgbWFwdHJhY2sg
ZmxhZyBjaGFuZ2VzIHRvIHRoZSBzZWNvbmQgaGFsZiwgYmVjYXVzZSB0aGUK
bWFwdHJhY2sgZmxhZ3MgYXJlIHVzZWQgdG8gZGV0ZXJtaW5lIGlmIGlvbW11
IGVudHJpZXMgbmVlZCB0byBiZQphZGRlZDogYSBkb21haW4ncyBpb21tdSBt
dXN0IG5ldmVyIGhhdmUgZmV3ZXIgcGVybWlzc2lvbnMgdGhhbiB0aGUKbWFw
dHJhY2sgZmxhZ3MgaW5kaWNhdGUsIG9yIGEgc3Vic2VxdWVudCBtYXBfZ3Jh
bnRfcmVmKCkgbWlnaHQgZmFpbCB0bwphZGQgdGhlIG5lY2Vzc2FyeSBpb21t
dSBlbnRyaWVzLgoKSW5zdGVhZCwgZnJlZSB0aGUgbWFwdHJhY2sgZW50cnkg
aW4gdGhlIGZpcnN0IHBhc3MgaWYgdGhlcmUgYXJlIG5vCmZ1cnRoZXIgbWFw
cGluZ3MuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTIxOC4KClJlcG9ydGVkLWJ5
OiBKYW4gQmV1bGljaCA8amJldWxpY2guY29tPgpTaWduZWQtb2ZmLWJ5OiBH
ZW9yZ2UgRHVubGFwIDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+ClNpZ25l
ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KLS0t
CiB4ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgfCA3NyArKysrKysrKysrKysr
KysrKysrKysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0KIDEgZmlsZSBj
aGFuZ2VkLCA1MyBpbnNlcnRpb25zKCspLCAyNCBkZWxldGlvbnMoLSkKCmRp
ZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29t
bW9uL2dyYW50X3RhYmxlLmMKaW5kZXggMTQ3YWZlOS4uNzA5OGFmNyAxMDA2
NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCisrKyBiL3hlbi9j
b21tb24vZ3JhbnRfdGFibGUuYwpAQCAtOTgsOCArOTgsOCBAQCBzdHJ1Y3Qg
Z250dGFiX3VubWFwX2NvbW1vbiB7CiAgICAgLyogU2hhcmVkIHN0YXRlIGJl
dGVlbiAqX3VubWFwIGFuZCAqX3VubWFwX2NvbXBsZXRlICovCiAgICAgdTE2
IGZsYWdzOwogICAgIHVuc2lnbmVkIGxvbmcgZnJhbWU7Ci0gICAgc3RydWN0
IGdyYW50X21hcHBpbmcgKm1hcDsKICAgICBzdHJ1Y3QgZG9tYWluICpyZDsK
KyAgICBncmFudF9yZWZfdCByZWY7CiB9OwogCiAvKiBOdW1iZXIgb2YgdW5t
YXAgb3BlcmF0aW9ucyB0aGF0IGFyZSBkb25lIGJldHdlZW4gZWFjaCB0bGIg
Zmx1c2ggKi8KQEAgLTEwNzksNiArMTA3OSw4IEBAIF9fZ250dGFiX3VubWFw
X2NvbW1vbigKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKmxndCwgKnJndDsK
ICAgICBzdHJ1Y3QgYWN0aXZlX2dyYW50X2VudHJ5ICphY3Q7CiAgICAgczE2
ICAgICAgICAgICAgICByYyA9IDA7CisgICAgc3RydWN0IGdyYW50X21hcHBp
bmcgKm1hcDsKKyAgICBib29sIHB1dF9oYW5kbGUgPSBmYWxzZTsKIAogICAg
IGxkID0gY3VycmVudC0+ZG9tYWluOwogICAgIGxndCA9IGxkLT5ncmFudF90
YWJsZTsKQEAgLTEwOTIsMTEgKzEwOTQsMTEgQEAgX19nbnR0YWJfdW5tYXBf
Y29tbW9uKAogICAgICAgICByZXR1cm47CiAgICAgfQogCi0gICAgb3AtPm1h
cCA9ICZtYXB0cmFja19lbnRyeShsZ3QsIG9wLT5oYW5kbGUpOworICAgIG1h
cCA9ICZtYXB0cmFja19lbnRyeShsZ3QsIG9wLT5oYW5kbGUpOwogCiAgICAg
Z3JhbnRfcmVhZF9sb2NrKGxndCk7CiAKLSAgICBpZiAoIHVubGlrZWx5KCFy
ZWFkX2F0b21pYygmb3AtPm1hcC0+ZmxhZ3MpKSApCisgICAgaWYgKCB1bmxp
a2VseSghcmVhZF9hdG9taWMoJm1hcC0+ZmxhZ3MpKSApCiAgICAgewogICAg
ICAgICBncmFudF9yZWFkX3VubG9jayhsZ3QpOwogICAgICAgICBnZHByaW50
ayhYRU5MT0dfSU5GTywgIlplcm8gZmxhZ3MgZm9yIGhhbmRsZSAlI3hcbiIs
IG9wLT5oYW5kbGUpOwpAQCAtMTEwNCw3ICsxMTA2LDcgQEAgX19nbnR0YWJf
dW5tYXBfY29tbW9uKAogICAgICAgICByZXR1cm47CiAgICAgfQogCi0gICAg
ZG9tID0gb3AtPm1hcC0+ZG9taWQ7CisgICAgZG9tID0gbWFwLT5kb21pZDsK
ICAgICBncmFudF9yZWFkX3VubG9jayhsZ3QpOwogCiAgICAgaWYgKCB1bmxp
a2VseSgocmQgPSByY3VfbG9ja19kb21haW5fYnlfaWQoZG9tKSkgPT0gTlVM
TCkgKQpAQCAtMTEyOSwxNiArMTEzMSw0MyBAQCBfX2dudHRhYl91bm1hcF9j
b21tb24oCiAKICAgICBncmFudF9yZWFkX2xvY2socmd0KTsKIAotICAgIG9w
LT5mbGFncyA9IHJlYWRfYXRvbWljKCZvcC0+bWFwLT5mbGFncyk7Ci0gICAg
aWYgKCB1bmxpa2VseSghb3AtPmZsYWdzKSB8fCB1bmxpa2VseShvcC0+bWFw
LT5kb21pZCAhPSBkb20pICkKKyAgICBvcC0+cmQgPSByZDsKKyAgICBvcC0+
cmVmID0gbWFwLT5yZWY7CisKKyAgICAvKgorICAgICAqIFdlIGNhbid0IGFz
c3VtZSB0aGVyZSB3YXMgbm8gcmFjaW5nIHVubWFwIGZvciB0aGlzIG1hcHRy
YWNrIGVudHJ5LAorICAgICAqIGFuZCBoZW5jZSB3ZSBjYW4ndCBhc3N1bWUg
bWFwLT5yZWYgaXMgdmFsaWQgZm9yIHJkLiBXaGlsZSB0aGUgY2hlY2tzCisg
ICAgICogYmVsb3cgKHdpdGggdGhlIGFjdGl2ZSBlbnRyeSBsb2NrIGhlbGQp
IHdpbGwgcmVqZWN0IGFueSBzdWNoIHJhY2luZworICAgICAqIHJlcXVlc3Rz
LCB3ZSBzdGlsbCBuZWVkIHRvIG1ha2Ugc3VyZSB3ZSBkb24ndCBhdHRlbXB0
IHRvIGFjcXVpcmUgYW4KKyAgICAgKiBpbnZhbGlkIGxvY2suCisgICAgICov
CisgICAgc21wX3JtYigpOworICAgIGlmICggdW5saWtlbHkob3AtPnJlZiA+
PSBucl9ncmFudF9lbnRyaWVzKHJndCkpICkKICAgICB7CiAgICAgICAgIGdk
cHJpbnRrKFhFTkxPR19XQVJOSU5HLCAiVW5zdGFibGUgaGFuZGxlICUjeFxu
Iiwgb3AtPmhhbmRsZSk7CiAgICAgICAgIHJjID0gR05UU1RfYmFkX2hhbmRs
ZTsKLSAgICAgICAgZ290byB1bm1hcF9vdXQ7CisgICAgICAgIGdvdG8gdW5s
b2NrX291dDsKICAgICB9CiAKLSAgICBvcC0+cmQgPSByZDsKLSAgICBhY3Qg
PSBhY3RpdmVfZW50cnlfYWNxdWlyZShyZ3QsIG9wLT5tYXAtPnJlZik7Cisg
ICAgYWN0ID0gYWN0aXZlX2VudHJ5X2FjcXVpcmUocmd0LCBvcC0+cmVmKTsK
KworICAgIC8qCisgICAgICogTm90ZSB0aGF0IHdlIChhYil1c2UgdGhlIGFj
dGl2ZSBlbnRyeSBsb2NrIGhlcmUgdG8gcHJvdGVjdCBhZ2FpbnN0CisgICAg
ICogbXVsdGlwbGUgdW5tYXBzIG9mIHRoZSBzYW1lIG1hcHBpbmcgaGVyZS4g
V2UgZG9uJ3Qgd2FudCB0byBob2xkIGxndCdzCisgICAgICogbG9jaywgYW5k
IHdlIG9ubHkgaG9sZCByZ3QncyBsb2NrIGZvciByZWFkaW5nIChidXQgdGhl
IGxhdHRlciB3b3VsZG4ndAorICAgICAqIGJlIHRoZSByaWdodCBvbmUgYW55
d2F5KS4gSGVuY2UgdGhlIGVhc2llc3QgaXMgdG8gcmVseSBvbiBhIGxvY2sg
d2UKKyAgICAgKiBob2xkIGFueXdheTsgc2VlIGRvY3MvbWlzYy9ncmFudC10
YWJsZXMudHh0J3MgIkxvY2tpbmciIHNlY3Rpb24uCisgICAgICovCisKKyAg
ICBvcC0+ZmxhZ3MgPSByZWFkX2F0b21pYygmbWFwLT5mbGFncyk7CisgICAg
c21wX3JtYigpOworICAgIGlmICggdW5saWtlbHkoIW9wLT5mbGFncykgfHwg
dW5saWtlbHkobWFwLT5kb21pZCAhPSBkb20pIHx8CisgICAgICAgICB1bmxp
a2VseShtYXAtPnJlZiAhPSBvcC0+cmVmKSApCisgICAgeworICAgICAgICBn
ZHByaW50ayhYRU5MT0dfV0FSTklORywgIlVuc3RhYmxlIGhhbmRsZSAlI3hc
biIsIG9wLT5oYW5kbGUpOworICAgICAgICByYyA9IEdOVFNUX2JhZF9oYW5k
bGU7CisgICAgICAgIGdvdG8gYWN0X3JlbGVhc2Vfb3V0OworICAgIH0KIAog
ICAgIGlmICggb3AtPmZyYW1lID09IDAgKQogICAgIHsKQEAgLTExNTEsNyAr
MTE4MCw3IEBAIF9fZ250dGFiX3VubWFwX2NvbW1vbigKICAgICAgICAgICAg
ICAgICAgICAgICJCYWQgZnJhbWUgbnVtYmVyIGRvZXNuJ3QgbWF0Y2ggZ250
cmVmLiAoJWx4ICE9ICVseClcbiIsCiAgICAgICAgICAgICAgICAgICAgICBv
cC0+ZnJhbWUsIGFjdC0+ZnJhbWUpOwogCi0gICAgICAgIG9wLT5tYXAtPmZs
YWdzICY9IH5HTlRNQVBfZGV2aWNlX21hcDsKKyAgICAgICAgbWFwLT5mbGFn
cyAmPSB+R05UTUFQX2RldmljZV9tYXA7CiAgICAgfQogCiAgICAgaWYgKCAo
b3AtPmhvc3RfYWRkciAhPSAwKSAmJiAob3AtPmZsYWdzICYgR05UTUFQX2hv
c3RfbWFwKSApCkBAIC0xMTYxLDE0ICsxMTkwLDIzIEBAIF9fZ250dGFiX3Vu
bWFwX2NvbW1vbigKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICBvcC0+ZmxhZ3MpKSA8IDAgKQogICAgICAgICAgICAg
Z290byBhY3RfcmVsZWFzZV9vdXQ7CiAKLSAgICAgICAgb3AtPm1hcC0+Zmxh
Z3MgJj0gfkdOVE1BUF9ob3N0X21hcDsKKyAgICAgICAgbWFwLT5mbGFncyAm
PSB+R05UTUFQX2hvc3RfbWFwOworICAgIH0KKworICAgIGlmICggIShtYXAt
PmZsYWdzICYgKEdOVE1BUF9kZXZpY2VfbWFwfEdOVE1BUF9ob3N0X21hcCkp
ICkKKyAgICB7CisgICAgICAgIG1hcC0+ZmxhZ3MgPSAwOworICAgICAgICBw
dXRfaGFuZGxlID0gdHJ1ZTsKICAgICB9CiAKICBhY3RfcmVsZWFzZV9vdXQ6
CiAgICAgYWN0aXZlX2VudHJ5X3JlbGVhc2UoYWN0KTsKLSB1bm1hcF9vdXQ6
CisgdW5sb2NrX291dDoKICAgICBncmFudF9yZWFkX3VubG9jayhyZ3QpOwog
CisgICAgaWYgKCBwdXRfaGFuZGxlICkKKyAgICAgICAgcHV0X21hcHRyYWNr
X2hhbmRsZShsZ3QsIG9wLT5oYW5kbGUpOworCiAgICAgaWYgKCByYyA9PSBH
TlRTVF9va2F5ICYmIGdudHRhYl9uZWVkX2lvbW11X21hcHBpbmcobGQpICkK
ICAgICB7CiAgICAgICAgIHVuc2lnbmVkIGludCBraW5kOwpAQCAtMTIwNSw3
ICsxMjQzLDYgQEAgX19nbnR0YWJfdW5tYXBfY29tbW9uX2NvbXBsZXRlKHN0
cnVjdCBnbnR0YWJfdW5tYXBfY29tbW9uICpvcCkKICAgICBncmFudF9lbnRy
eV9oZWFkZXJfdCAqc2hhOwogICAgIHN0cnVjdCBwYWdlX2luZm8gKnBnOwog
ICAgIHVpbnQxNl90ICpzdGF0dXM7Ci0gICAgYm9vbF90IHB1dF9oYW5kbGUg
PSAwOwogCiAgICAgaWYgKCByZCA9PSBOVUxMICkKICAgICB7IApAQCAtMTIy
NiwxMyArMTI2MywxMyBAQCBfX2dudHRhYl91bm1hcF9jb21tb25fY29tcGxl
dGUoc3RydWN0IGdudHRhYl91bm1hcF9jb21tb24gKm9wKQogICAgIGlmICgg
cmd0LT5ndF92ZXJzaW9uID09IDAgKQogICAgICAgICBnb3RvIHVubG9ja19v
dXQ7CiAKLSAgICBhY3QgPSBhY3RpdmVfZW50cnlfYWNxdWlyZShyZ3QsIG9w
LT5tYXAtPnJlZik7Ci0gICAgc2hhID0gc2hhcmVkX2VudHJ5X2hlYWRlcihy
Z3QsIG9wLT5tYXAtPnJlZik7CisgICAgYWN0ID0gYWN0aXZlX2VudHJ5X2Fj
cXVpcmUocmd0LCBvcC0+cmVmKTsKKyAgICBzaGEgPSBzaGFyZWRfZW50cnlf
aGVhZGVyKHJndCwgb3AtPnJlZik7CiAKICAgICBpZiAoIHJndC0+Z3RfdmVy
c2lvbiA9PSAxICkKICAgICAgICAgc3RhdHVzID0gJnNoYS0+ZmxhZ3M7CiAg
ICAgZWxzZQotICAgICAgICBzdGF0dXMgPSAmc3RhdHVzX2VudHJ5KHJndCwg
b3AtPm1hcC0+cmVmKTsKKyAgICAgICAgc3RhdHVzID0gJnN0YXR1c19lbnRy
eShyZ3QsIG9wLT5yZWYpOwogCiAgICAgaWYgKCB1bmxpa2VseShvcC0+ZnJh
bWUgIT0gYWN0LT5mcmFtZSkgKSAKICAgICB7CkBAIC0xMjg5LDkgKzEzMjYs
NiBAQCBfX2dudHRhYl91bm1hcF9jb21tb25fY29tcGxldGUoc3RydWN0IGdu
dHRhYl91bm1hcF9jb21tb24gKm9wKQogICAgICAgICAgICAgYWN0LT5waW4g
LT0gR05UUElOX2hzdHdfaW5jOwogICAgIH0KIAotICAgIGlmICggKG9wLT5t
YXAtPmZsYWdzICYgKEdOVE1BUF9kZXZpY2VfbWFwfEdOVE1BUF9ob3N0X21h
cCkpID09IDAgKQotICAgICAgICBwdXRfaGFuZGxlID0gMTsKLQogICAgIGlm
ICggKChhY3QtPnBpbiAmIChHTlRQSU5fZGV2d19tYXNrfEdOVFBJTl9oc3R3
X21hc2spKSA9PSAwKSAmJgogICAgICAgICAgIShvcC0+ZmxhZ3MgJiBHTlRN
QVBfcmVhZG9ubHkpICkKICAgICAgICAgZ250dGFiX2NsZWFyX2ZsYWcoX0dU
Rl93cml0aW5nLCBzdGF0dXMpOwpAQCAtMTMwNCwxMSArMTMzOCw2IEBAIF9f
Z250dGFiX3VubWFwX2NvbW1vbl9jb21wbGV0ZShzdHJ1Y3QgZ250dGFiX3Vu
bWFwX2NvbW1vbiAqb3ApCiAgdW5sb2NrX291dDoKICAgICBncmFudF9yZWFk
X3VubG9jayhyZ3QpOwogCi0gICAgaWYgKCBwdXRfaGFuZGxlICkKLSAgICB7
Ci0gICAgICAgIG9wLT5tYXAtPmZsYWdzID0gMDsKLSAgICAgICAgcHV0X21h
cHRyYWNrX2hhbmRsZShsZC0+Z3JhbnRfdGFibGUsIG9wLT5oYW5kbGUpOwot
ICAgIH0KICAgICByY3VfdW5sb2NrX2RvbWFpbihyZCk7CiB9CiAKLS0gCjIu
MS40Cgo=

--=separator
Content-Type: application/octet-stream;
 name="xsa218-unstable/0003-gnttab-correct-maptrack-table-accesses.patch"
Content-Disposition: attachment;
 filename="xsa218-unstable/0003-gnttab-correct-maptrack-table-accesses.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.5/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Disposition: attachment;
 filename="xsa218-4.5/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.5/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Disposition: attachment;
 filename="xsa218-4.5/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.5/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Disposition: attachment;
 filename="xsa218-4.5/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Transfer-Encoding: base64

RnJvbSBkMTg4YjRiZjdjNmQxN2ZhZTFhN2QxNDg2N2FhZWI3MmY5NzJkM2Fj
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IEZyaSwgMiBKdW4g
MjAxNyAxMjo0MDowNCArMDEwMApTdWJqZWN0OiBbUEFUQ0ggMy80XSBnbnR0
YWI6IEF2b2lkIHBvdGVudGlhbCBkb3VibGUtcHV0IG9mIG1hcHRyYWNrIGVu
dHJ5CgpFYWNoIGdyYW50IG1hcHBpbmcgZm9yIGEgcGFydGljdWxhciBkb21h
aW4gaXMgdHJhY2tlZCBieSBhbiBpbi1YZW4KIm1hcHRyYWNrIiBlbnRyeS4g
IFRoaXMgZW50cnkgaXMgaXMgcmVmZXJlbmNlZCBieSBhICJoYW5kbGUiLCB3
aGljaCBpcwpnaXZlbiB0byB0aGUgZ3Vlc3Qgd2hlbiBpdCBjYWxscyBnbnR0
YWJfbWFwX2dyYW50X3JlZigpLgoKVGhlcmUgYXJlIHR3byB0eXBlcyBvZiBt
YXBwaW5nIGEgcGFydGljdWxhciBoYW5kbGUgY2FuIHJlZmVyIHRvOgpHTlRN
QVBfaG9zdF9tYXAgYW5kIEdOVE1BUF9kZXZpY2VfbWFwLiAgQSBnaXZlbgpn
bnR0YWJfdW5tYXBfZ3JhbnRfcmVmKCkgY2FsbCBjYW4gcmVtb3ZlIGVpdGhl
ciBvbmx5IG9uZSBvciBib3RoIG9mCnRoZXNlIGVudHJpZXMuICBXaGVuIGEg
cGFydGljdWxhciBoYW5kbGUgaGFzIG5vIGVudHJpZXMgbGVmdCwgaXQgbXVz
dApiZSBmcmVlZC4KCmdudHRhYl91bm1hcF9ncmFudF9yZWYoKSBsb29wcyB0
aHJvdWdoIGl0cyBncmFudCB1bm1hcCByZXF1ZXN0IGxpc3QKdHdpY2UuICBJ
dCBmaXJzdCByZW1vdmVzIGVudHJpZXMgZnJvbSBhbnkgaG9zdCBwYWdldGFi
bGVzIGFuZCAoaWYKYXBwcm9wcmFpdGUpIGlvbW11czsgdGhlbiBpdCBkb2Vz
IGEgc2luZ2xlIGRvbWFpbiBUTEIgZmx1c2g7IHRoZW4gaXQKZG9lcyB0aGUg
Y2xlYW4tdXAsIGluY2x1ZGluZyB0ZWxsaW5nIHRoZSBncmFudGVyIHRoYXQg
ZW50cmllcyBhcmUgbm8KbG9uZ2VyIGJlaW5nIHVzZWQgKGlmIGFwcHJvcHJp
YXRlKS4KCkF0IHRoZSBtb21lbnQsIGl0J3MgZHVyaW5nIHRoZSBmaXJzdCBw
YXNzIHRoYXQgdGhlIG1hcHRyYWNrIGZsYWdzIGFyZQpjbGVhcmVkLCBidXQg
dGhlIHNlY29uZCBwYXNzIHRoYXQgdGhlIG1hcHRyYWNrIGVudHJ5IGlzIGZy
ZWVkLgoKVW5mb3J0dW5hdGVseSB0aGlzIGFsbG93cyB0aGUgZm9sbG93aW5n
IHJhY2UsIHdoaWNoIHJlc3VsdHMgaW4gYQpkb3VibGUtZnJlZToKCiBBOiAo
cGFzcyAxKSBjbGVhciBob3N0X21hcAogQjogKHBhc3MgMSkgY2xlYXIgZGV2
aWNlX21hcAogQTogKHBhc3MgMikgU2VlIHRoYXQgbWFwdHJhY2sgZW50cnkg
aGFzIG5vIG1hcHBpbmdzLCBmcmVlIGl0CiBCOiAocGFzcyAyKSBTZWUgdGhh
dCBtYXB0cmFjayBlbnRyeSBoYXMgbm8gbWFwcGluZ3MsIGZyZWUgaXQgIwoK
VW5mb3J0dW5hdGVseSwgdW5saWtlIHRoZSBhY3RpdmUgZW50cnkgcGlubmlu
ZyB1cGRhdGUsIHdlIGNhbid0IHNpbXBseQptb3ZlIHRoZSBtYXB0cmFjayBm
bGFnIGNoYW5nZXMgdG8gdGhlIHNlY29uZCBoYWxmLCBiZWNhdXNlIHRoZQpt
YXB0cmFjayBmbGFncyBhcmUgdXNlZCB0byBkZXRlcm1pbmUgaWYgaW9tbXUg
ZW50cmllcyBuZWVkIHRvIGJlCmFkZGVkOiBhIGRvbWFpbidzIGlvbW11IG11
c3QgbmV2ZXIgaGF2ZSBmZXdlciBwZXJtaXNzaW9ucyB0aGFuIHRoZQptYXB0
cmFjayBmbGFncyBpbmRpY2F0ZSwgb3IgYSBzdWJzZXF1ZW50IG1hcF9ncmFu
dF9yZWYoKSBtaWdodCBmYWlsIHRvCmFkZCB0aGUgbmVjZXNzYXJ5IGlvbW11
IGVudHJpZXMuCgpJbnN0ZWFkLCBmcmVlIHRoZSBtYXB0cmFjayBlbnRyeSBp
biB0aGUgZmlyc3QgcGFzcyBpZiB0aGVyZSBhcmUgbm8KZnVydGhlciBtYXBw
aW5ncy4KClRoaXMgaXMgcGFydCBvZiBYU0EtMjE4LgoKUmVwb3J0ZWQtYnk6
IEphbiBCZXVsaWNoIDxqYmV1bGljaC5jb20+ClNpZ25lZC1vZmYtYnk6IEdl
b3JnZSBEdW5sYXAgPGdlb3JnZS5kdW5sYXBAY2l0cml4LmNvbT4KU2lnbmVk
LW9mZi1ieTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgotLS0K
IHhlbi9jb21tb24vZ3JhbnRfdGFibGUuYyB8IDYzICsrKysrKysrKysrKysr
KysrKysrKysrKysrKy0tLS0tLS0tLS0tLS0tLS0tLS0tLQogMSBmaWxlIGNo
YW5nZWQsIDM1IGluc2VydGlvbnMoKyksIDI4IGRlbGV0aW9ucygtKQoKZGlm
ZiAtLWdpdCBhL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYyBiL3hlbi9jb21t
b24vZ3JhbnRfdGFibGUuYwppbmRleCA5ZWYwYTZmLi41MjAzOTI5IDEwMDY0
NAotLS0gYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKKysrIGIveGVuL2Nv
bW1vbi9ncmFudF90YWJsZS5jCkBAIC05OCw4ICs5OCw4IEBAIHN0cnVjdCBn
bnR0YWJfdW5tYXBfY29tbW9uIHsKICAgICAvKiBTaGFyZWQgc3RhdGUgYmV0
ZWVuICpfdW5tYXAgYW5kICpfdW5tYXBfY29tcGxldGUgKi8KICAgICB1MTYg
ZmxhZ3M7CiAgICAgdW5zaWduZWQgbG9uZyBmcmFtZTsKLSAgICBzdHJ1Y3Qg
Z3JhbnRfbWFwcGluZyAqbWFwOwogICAgIHN0cnVjdCBkb21haW4gKnJkOwor
ICAgIGdyYW50X3JlZl90IHJlZjsKIH07CiAKIC8qIE51bWJlciBvZiB1bm1h
cCBvcGVyYXRpb25zIHRoYXQgYXJlIGRvbmUgYmV0d2VlbiBlYWNoIHRsYiBm
bHVzaCAqLwpAQCAtODkzLDYgKzg5Myw4IEBAIF9fZ250dGFiX3VubWFwX2Nv
bW1vbigKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKmxndCwgKnJndDsKICAg
ICBzdHJ1Y3QgYWN0aXZlX2dyYW50X2VudHJ5ICphY3Q7CiAgICAgczE2ICAg
ICAgICAgICAgICByYyA9IDA7CisgICAgc3RydWN0IGdyYW50X21hcHBpbmcg
Km1hcDsKKyAgICBib29sX3QgcHV0X2hhbmRsZSA9IDA7CiAKICAgICBsZCA9
IGN1cnJlbnQtPmRvbWFpbjsKICAgICBsZ3QgPSBsZC0+Z3JhbnRfdGFibGU7
CkBAIC05MDYsMTAgKzkwOCwxMCBAQCBfX2dudHRhYl91bm1hcF9jb21tb24o
CiAgICAgICAgIHJldHVybjsKICAgICB9CiAKLSAgICBvcC0+bWFwID0gJm1h
cHRyYWNrX2VudHJ5KGxndCwgb3AtPmhhbmRsZSk7CisgICAgbWFwID0gJm1h
cHRyYWNrX2VudHJ5KGxndCwgb3AtPmhhbmRsZSk7CiAgICAgc3Bpbl9sb2Nr
KCZsZ3QtPmxvY2spOwogCi0gICAgaWYgKCB1bmxpa2VseSghb3AtPm1hcC0+
ZmxhZ3MpICkKKyAgICBpZiAoIHVubGlrZWx5KCFtYXAtPmZsYWdzKSApCiAg
ICAgewogICAgICAgICBzcGluX3VubG9jaygmbGd0LT5sb2NrKTsKICAgICAg
ICAgZ2RwcmludGsoWEVOTE9HX0lORk8sICJaZXJvIGZsYWdzIGZvciBoYW5k
bGUgKCVkKS5cbiIsIG9wLT5oYW5kbGUpOwpAQCAtOTE3LDcgKzkxOSw3IEBA
IF9fZ250dGFiX3VubWFwX2NvbW1vbigKICAgICAgICAgcmV0dXJuOwogICAg
IH0KIAotICAgIGRvbSA9IG9wLT5tYXAtPmRvbWlkOworICAgIGRvbSA9IG1h
cC0+ZG9taWQ7CiAgICAgc3Bpbl91bmxvY2soJmxndC0+bG9jayk7CiAKICAg
ICBpZiAoIHVubGlrZWx5KChyZCA9IHJjdV9sb2NrX2RvbWFpbl9ieV9pZChk
b20pKSA9PSBOVUxMKSApCkBAIC05NDEsOCArOTQzLDggQEAgX19nbnR0YWJf
dW5tYXBfY29tbW9uKAogICAgIHJndCA9IHJkLT5ncmFudF90YWJsZTsKICAg
ICBkb3VibGVfZ3RfbG9jayhsZ3QsIHJndCk7CiAKLSAgICBvcC0+ZmxhZ3Mg
PSBvcC0+bWFwLT5mbGFnczsKLSAgICBpZiAoIHVubGlrZWx5KCFvcC0+Zmxh
Z3MpIHx8IHVubGlrZWx5KG9wLT5tYXAtPmRvbWlkICE9IGRvbSkgKQorICAg
IG9wLT5mbGFncyA9IG1hcC0+ZmxhZ3M7CisgICAgaWYgKCB1bmxpa2VseSgh
b3AtPmZsYWdzKSB8fCB1bmxpa2VseShtYXAtPmRvbWlkICE9IGRvbSkgKQog
ICAgIHsKICAgICAgICAgZ2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJVbnN0
YWJsZSBoYW5kbGUgJXVcbiIsIG9wLT5oYW5kbGUpOwogICAgICAgICByYyA9
IEdOVFNUX2JhZF9oYW5kbGU7CkBAIC05NTAsNyArOTUyLDggQEAgX19nbnR0
YWJfdW5tYXBfY29tbW9uKAogICAgIH0KIAogICAgIG9wLT5yZCA9IHJkOwot
ICAgIGFjdCA9ICZhY3RpdmVfZW50cnkocmd0LCBvcC0+bWFwLT5yZWYpOwor
ICAgIG9wLT5yZWYgPSBtYXAtPnJlZjsKKyAgICBhY3QgPSAmYWN0aXZlX2Vu
dHJ5KHJndCwgbWFwLT5yZWYpOwogCiAgICAgaWYgKCBvcC0+ZnJhbWUgPT0g
MCApCiAgICAgewpAQCAtOTYzLDcgKzk2Niw3IEBAIF9fZ250dGFiX3VubWFw
X2NvbW1vbigKICAgICAgICAgICAgICAgICAgICAgICJCYWQgZnJhbWUgbnVt
YmVyIGRvZXNuJ3QgbWF0Y2ggZ250cmVmLiAoJWx4ICE9ICVseClcbiIsCiAg
ICAgICAgICAgICAgICAgICAgICBvcC0+ZnJhbWUsIGFjdC0+ZnJhbWUpOwog
Ci0gICAgICAgIG9wLT5tYXAtPmZsYWdzICY9IH5HTlRNQVBfZGV2aWNlX21h
cDsKKyAgICAgICAgbWFwLT5mbGFncyAmPSB+R05UTUFQX2RldmljZV9tYXA7
CiAgICAgfQogCiAgICAgaWYgKCAob3AtPmhvc3RfYWRkciAhPSAwKSAmJiAo
b3AtPmZsYWdzICYgR05UTUFQX2hvc3RfbWFwKSApCkBAIC05NzMsMzEgKzk3
Niw0NCBAQCBfX2dudHRhYl91bm1hcF9jb21tb24oCiAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgb3AtPmZsYWdzKSkg
PCAwICkKICAgICAgICAgICAgIGdvdG8gdW5tYXBfb3V0OwogCi0gICAgICAg
IG9wLT5tYXAtPmZsYWdzICY9IH5HTlRNQVBfaG9zdF9tYXA7CisgICAgICAg
IG1hcC0+ZmxhZ3MgJj0gfkdOVE1BUF9ob3N0X21hcDsKICAgICB9CiAKLSAg
ICBpZiAoIGdudHRhYl9uZWVkX2lvbW11X21hcHBpbmcobGQpICkKKyAgICBp
ZiAoICEobWFwLT5mbGFncyAmIChHTlRNQVBfZGV2aWNlX21hcHxHTlRNQVBf
aG9zdF9tYXApKSApCisgICAgeworICAgICAgICBtYXAtPmZsYWdzID0gMDsK
KyAgICAgICAgcHV0X2hhbmRsZSA9IDE7CisgICAgfQorCisgdW5tYXBfb3V0
OgorICAgIGRvdWJsZV9ndF91bmxvY2sobGd0LCByZ3QpOworCisgICAgaWYg
KCBwdXRfaGFuZGxlICkKKyAgICAgICAgcHV0X21hcHRyYWNrX2hhbmRsZShs
Z3QsIG9wLT5oYW5kbGUpOworCisgICAgaWYgKCByYyA9PSBHTlRTVF9va2F5
ICYmIGdudHRhYl9uZWVkX2lvbW11X21hcHBpbmcobGQpICkKICAgICB7CiAg
ICAgICAgIHVuc2lnbmVkIGludCB3cmMsIHJkYzsKICAgICAgICAgaW50IGVy
ciA9IDA7CisKKyAgICAgICAgZG91YmxlX2d0X2xvY2sobGd0LCByZ3QpOwor
CiAgICAgICAgIG1hcGNvdW50KGxndCwgcmQsIG9wLT5mcmFtZSwgJndyYywg
JnJkYyk7CiAgICAgICAgIGlmICggKHdyYyArIHJkYykgPT0gMCApCiAgICAg
ICAgICAgICBlcnIgPSBpb21tdV91bm1hcF9wYWdlKGxkLCBvcC0+ZnJhbWUp
OwogICAgICAgICBlbHNlIGlmICggd3JjID09IDAgKQogICAgICAgICAgICAg
ZXJyID0gaW9tbXVfbWFwX3BhZ2UobGQsIG9wLT5mcmFtZSwgb3AtPmZyYW1l
LCBJT01NVUZfcmVhZGFibGUpOworCisgICAgICAgIGRvdWJsZV9ndF91bmxv
Y2sobGd0LCByZ3QpOworCiAgICAgICAgIGlmICggZXJyICkKLSAgICAgICAg
ewogICAgICAgICAgICAgcmMgPSBHTlRTVF9nZW5lcmFsX2Vycm9yOwotICAg
ICAgICAgICAgZ290byB1bm1hcF9vdXQ7Ci0gICAgICAgIH0KICAgICB9CiAK
ICAgICAvKiBJZiBqdXN0IHVubWFwcGVkIGEgd3JpdGFibGUgbWFwcGluZywg
bWFyayBhcyBkaXJ0aWVkICovCi0gICAgaWYgKCAhKG9wLT5mbGFncyAmIEdO
VE1BUF9yZWFkb25seSkgKQorICAgIGlmICggcmMgPT0gR05UU1Rfb2theSAm
JiAhKG9wLT5mbGFncyAmIEdOVE1BUF9yZWFkb25seSkgKQogICAgICAgICAg
Z250dGFiX21hcmtfZGlydHkocmQsIG9wLT5mcmFtZSk7CiAKLSB1bm1hcF9v
dXQ6Ci0gICAgZG91YmxlX2d0X3VubG9jayhsZ3QsIHJndCk7CiAgICAgb3At
PnN0YXR1cyA9IHJjOwogICAgIHJjdV91bmxvY2tfZG9tYWluKHJkKTsKIH0K
QEAgLTEwMTEsNyArMTAyNyw2IEBAIF9fZ250dGFiX3VubWFwX2NvbW1vbl9j
b21wbGV0ZShzdHJ1Y3QgZ250dGFiX3VubWFwX2NvbW1vbiAqb3ApCiAgICAg
Z3JhbnRfZW50cnlfaGVhZGVyX3QgKnNoYTsKICAgICBzdHJ1Y3QgcGFnZV9p
bmZvICpwZzsKICAgICB1aW50MTZfdCAqc3RhdHVzOwotICAgIGJvb2xfdCBw
dXRfaGFuZGxlID0gMDsKIAogICAgIGlmICggcmQgPT0gTlVMTCApCiAgICAg
eyAKQEAgLTEwMzIsMTMgKzEwNDcsMTMgQEAgX19nbnR0YWJfdW5tYXBfY29t
bW9uX2NvbXBsZXRlKHN0cnVjdCBnbnR0YWJfdW5tYXBfY29tbW9uICpvcCkK
ICAgICBpZiAoIHJndC0+Z3RfdmVyc2lvbiA9PSAwICkKICAgICAgICAgZ290
byB1bm1hcF9vdXQ7CiAKLSAgICBhY3QgPSAmYWN0aXZlX2VudHJ5KHJndCwg
b3AtPm1hcC0+cmVmKTsKLSAgICBzaGEgPSBzaGFyZWRfZW50cnlfaGVhZGVy
KHJndCwgb3AtPm1hcC0+cmVmKTsKKyAgICBhY3QgPSAmYWN0aXZlX2VudHJ5
KHJndCwgb3AtPnJlZik7CisgICAgc2hhID0gc2hhcmVkX2VudHJ5X2hlYWRl
cihyZ3QsIG9wLT5yZWYpOwogCiAgICAgaWYgKCByZ3QtPmd0X3ZlcnNpb24g
PT0gMSApCiAgICAgICAgIHN0YXR1cyA9ICZzaGEtPmZsYWdzOwogICAgIGVs
c2UKLSAgICAgICAgc3RhdHVzID0gJnN0YXR1c19lbnRyeShyZ3QsIG9wLT5t
YXAtPnJlZik7CisgICAgICAgIHN0YXR1cyA9ICZzdGF0dXNfZW50cnkocmd0
LCBvcC0+cmVmKTsKIAogICAgIGlmICggdW5saWtlbHkob3AtPmZyYW1lICE9
IGFjdC0+ZnJhbWUpICkgCiAgICAgewpAQCAtMTA5NSw5ICsxMTEwLDYgQEAg
X19nbnR0YWJfdW5tYXBfY29tbW9uX2NvbXBsZXRlKHN0cnVjdCBnbnR0YWJf
dW5tYXBfY29tbW9uICpvcCkKICAgICAgICAgICAgIGFjdC0+cGluIC09IEdO
VFBJTl9oc3R3X2luYzsKICAgICB9CiAKLSAgICBpZiAoIChvcC0+bWFwLT5m
bGFncyAmIChHTlRNQVBfZGV2aWNlX21hcHxHTlRNQVBfaG9zdF9tYXApKSA9
PSAwICkKLSAgICAgICAgcHV0X2hhbmRsZSA9IDE7Ci0KICAgICBpZiAoICgo
YWN0LT5waW4gJiAoR05UUElOX2RldndfbWFza3xHTlRQSU5faHN0d19tYXNr
KSkgPT0gMCkgJiYKICAgICAgICAgICEob3AtPmZsYWdzICYgR05UTUFQX3Jl
YWRvbmx5KSApCiAgICAgICAgIGdudHRhYl9jbGVhcl9mbGFnKF9HVEZfd3Jp
dGluZywgc3RhdHVzKTsKQEAgLTExMDcsMTEgKzExMTksNiBAQCBfX2dudHRh
Yl91bm1hcF9jb21tb25fY29tcGxldGUoc3RydWN0IGdudHRhYl91bm1hcF9j
b21tb24gKm9wKQogCiAgdW5tYXBfb3V0OgogICAgIHNwaW5fdW5sb2NrKCZy
Z3QtPmxvY2spOwotICAgIGlmICggcHV0X2hhbmRsZSApCi0gICAgewotICAg
ICAgICBvcC0+bWFwLT5mbGFncyA9IDA7Ci0gICAgICAgIHB1dF9tYXB0cmFj
a19oYW5kbGUobGQtPmdyYW50X3RhYmxlLCBvcC0+aGFuZGxlKTsKLSAgICB9
CiAgICAgcmN1X3VubG9ja19kb21haW4ocmQpOwogfQogCi0tIAoyLjEuNAoK

--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.5/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Disposition: attachment;
 filename="xsa218-4.5/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Transfer-Encoding: base64

RnJvbSAxYjBjZjk5ZDA0NjI4NmM2MDFhMjhhZjBlZjdjMWExN2ViM2ViMmNi
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBKYW4gQmV1bGljaCA8
amJldWxpY2hAc3VzZS5jb20+CkRhdGU6IFRodSwgMTUgSnVuIDIwMTcgMTI6
MDU6MjkgKzAxMDAKU3ViamVjdDogW1BBVENIIDQvNF0gZ250dGFiOiBjb3Jy
ZWN0IG1hcHRyYWNrIHRhYmxlIGFjY2Vzc2VzCgpJbiBvcmRlciB0byBvYnNl
cnZlIGEgY29uc2lzdGVudCAobGltaXQscG9pbnRlci10YWJsZSkgcGFpciwg
dGhlIHJlYWRlcgpuZWVkcyB0byBlaXRoZXIgaG9sZCB0aGUgZ3JhbnQgdGFi
bGUgbG9jayBvciBib3RoIHNpZGVzIG5lZWQgdG8gb3JkZXIKdGhlaXIgYWNj
ZXNzZXMgc3VpdGFibHkgKHRoZSB3cml0ZXIgc2lkZSBiYXJyaWVyIGlzIGFs
cmVhZHkgdGhlcmUpLiBBZGQKdGhlIG1pc3NpbmcgYmFycmllci4KClRoaXMg
aXMgcGFydCBvZiBYU0EtMjE4LgoKU2lnbmVkLW9mZi1ieTogSmFuIEJldWxp
Y2ggPGpiZXVsaWNoQHN1c2UuY29tPgpSZXZpZXdlZC1ieTogR2VvcmdlIER1
bmxhcCA8Z2VvcmdlLmR1bmxhcEBjaXRyaXguY29tPgotLS0KIHhlbi9jb21t
b24vZ3JhbnRfdGFibGUuYyB8IDIgKysKIDEgZmlsZSBjaGFuZ2VkLCAyIGlu
c2VydGlvbnMoKykKCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3Rh
YmxlLmMgYi94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMKaW5kZXggNTIwMzky
OS4uYWM5OGFlZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJs
ZS5jCisrKyBiL3hlbi9jb21tb24vZ3JhbnRfdGFibGUuYwpAQCAtOTA4LDcg
KzkwOCw5IEBAIF9fZ250dGFiX3VubWFwX2NvbW1vbigKICAgICAgICAgcmV0
dXJuOwogICAgIH0KIAorICAgIHNtcF9ybWIoKTsKICAgICBtYXAgPSAmbWFw
dHJhY2tfZW50cnkobGd0LCBvcC0+aGFuZGxlKTsKKwogICAgIHNwaW5fbG9j
aygmbGd0LT5sb2NrKTsKIAogICAgIGlmICggdW5saWtlbHkoIW1hcC0+Zmxh
Z3MpICkKLS0gCjIuMS40Cgo=

--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.6/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Disposition: attachment;
 filename="xsa218-4.6/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.6/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Disposition: attachment;
 filename="xsa218-4.6/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.6/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Disposition: attachment;
 filename="xsa218-4.6/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.6/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Disposition: attachment;
 filename="xsa218-4.6/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.7/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Disposition: attachment;
 filename="xsa218-4.7/0001-IOMMU-handle-IOMMU-mapping-and-unmapping-failures.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.7/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Disposition: attachment;
 filename="xsa218-4.7/0002-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.7/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Disposition: attachment;
 filename="xsa218-4.7/0003-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.7/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Disposition: attachment;
 filename="xsa218-4.7/0004-gnttab-correct-maptrack-table-accesses.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.8/0001-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Disposition: attachment;
 filename="xsa218-4.8/0001-gnttab-fix-unmap-pin-accounting-race.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.8/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Disposition: attachment;
 filename="xsa218-4.8/0002-gnttab-Avoid-potential-double-put-of-maptrack-entry.patch"
Content-Transfer-Encoding: base64

RnJvbSBiYjZkNDc2YjA5ZTYzNWJhZjVlOWZiMjI1NDBhYjdjMzUzMGQxZDk4
IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBHZW9yZ2UgRHVubGFw
IDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+CkRhdGU6IFRodSwgMTUgSnVu
IDIwMTcgMTI6MDU6MTQgKzAxMDAKU3ViamVjdDogW1BBVENIIDIvM10gZ250
dGFiOiBBdm9pZCBwb3RlbnRpYWwgZG91YmxlLXB1dCBvZiBtYXB0cmFjayBl
bnRyeQoKRWFjaCBncmFudCBtYXBwaW5nIGZvciBhIHBhcnRpY3VsYXIgZG9t
YWluIGlzIHRyYWNrZWQgYnkgYW4gaW4tWGVuCiJtYXB0cmFjayIgZW50cnku
ICBUaGlzIGVudHJ5IGlzIGlzIHJlZmVyZW5jZWQgYnkgYSAiaGFuZGxlIiwg
d2hpY2ggaXMKZ2l2ZW4gdG8gdGhlIGd1ZXN0IHdoZW4gaXQgY2FsbHMgZ250
dGFiX21hcF9ncmFudF9yZWYoKS4KClRoZXJlIGFyZSB0d28gdHlwZXMgb2Yg
bWFwcGluZyBhIHBhcnRpY3VsYXIgaGFuZGxlIGNhbiByZWZlciB0bzoKR05U
TUFQX2hvc3RfbWFwIGFuZCBHTlRNQVBfZGV2aWNlX21hcC4gIEEgZ2l2ZW4K
Z250dGFiX3VubWFwX2dyYW50X3JlZigpIGNhbGwgY2FuIHJlbW92ZSBlaXRo
ZXIgb25seSBvbmUgb3IgYm90aCBvZgp0aGVzZSBlbnRyaWVzLiAgV2hlbiBh
IHBhcnRpY3VsYXIgaGFuZGxlIGhhcyBubyBlbnRyaWVzIGxlZnQsIGl0IG11
c3QKYmUgZnJlZWQuCgpnbnR0YWJfdW5tYXBfZ3JhbnRfcmVmKCkgbG9vcHMg
dGhyb3VnaCBpdHMgZ3JhbnQgdW5tYXAgcmVxdWVzdCBsaXN0CnR3aWNlLiAg
SXQgZmlyc3QgcmVtb3ZlcyBlbnRyaWVzIGZyb20gYW55IGhvc3QgcGFnZXRh
YmxlcyBhbmQgKGlmCmFwcHJvcHJhaXRlKSBpb21tdXM7IHRoZW4gaXQgZG9l
cyBhIHNpbmdsZSBkb21haW4gVExCIGZsdXNoOyB0aGVuIGl0CmRvZXMgdGhl
IGNsZWFuLXVwLCBpbmNsdWRpbmcgdGVsbGluZyB0aGUgZ3JhbnRlciB0aGF0
IGVudHJpZXMgYXJlIG5vCmxvbmdlciBiZWluZyB1c2VkIChpZiBhcHByb3By
aWF0ZSkuCgpBdCB0aGUgbW9tZW50LCBpdCdzIGR1cmluZyB0aGUgZmlyc3Qg
cGFzcyB0aGF0IHRoZSBtYXB0cmFjayBmbGFncyBhcmUKY2xlYXJlZCwgYnV0
IHRoZSBzZWNvbmQgcGFzcyB0aGF0IHRoZSBtYXB0cmFjayBlbnRyeSBpcyBm
cmVlZC4KClVuZm9ydHVuYXRlbHkgdGhpcyBhbGxvd3MgdGhlIGZvbGxvd2lu
ZyByYWNlLCB3aGljaCByZXN1bHRzIGluIGEKZG91YmxlLWZyZWU6CgogQTog
KHBhc3MgMSkgY2xlYXIgaG9zdF9tYXAKIEI6IChwYXNzIDEpIGNsZWFyIGRl
dmljZV9tYXAKIEE6IChwYXNzIDIpIFNlZSB0aGF0IG1hcHRyYWNrIGVudHJ5
IGhhcyBubyBtYXBwaW5ncywgZnJlZSBpdAogQjogKHBhc3MgMikgU2VlIHRo
YXQgbWFwdHJhY2sgZW50cnkgaGFzIG5vIG1hcHBpbmdzLCBmcmVlIGl0ICMK
ClVuZm9ydHVuYXRlbHksIHVubGlrZSB0aGUgYWN0aXZlIGVudHJ5IHBpbm5p
bmcgdXBkYXRlLCB3ZSBjYW4ndCBzaW1wbHkKbW92ZSB0aGUgbWFwdHJhY2sg
ZmxhZyBjaGFuZ2VzIHRvIHRoZSBzZWNvbmQgaGFsZiwgYmVjYXVzZSB0aGUK
bWFwdHJhY2sgZmxhZ3MgYXJlIHVzZWQgdG8gZGV0ZXJtaW5lIGlmIGlvbW11
IGVudHJpZXMgbmVlZCB0byBiZQphZGRlZDogYSBkb21haW4ncyBpb21tdSBt
dXN0IG5ldmVyIGhhdmUgZmV3ZXIgcGVybWlzc2lvbnMgdGhhbiB0aGUKbWFw
dHJhY2sgZmxhZ3MgaW5kaWNhdGUsIG9yIGEgc3Vic2VxdWVudCBtYXBfZ3Jh
bnRfcmVmKCkgbWlnaHQgZmFpbCB0bwphZGQgdGhlIG5lY2Vzc2FyeSBpb21t
dSBlbnRyaWVzLgoKSW5zdGVhZCwgZnJlZSB0aGUgbWFwdHJhY2sgZW50cnkg
aW4gdGhlIGZpcnN0IHBhc3MgaWYgdGhlcmUgYXJlIG5vCmZ1cnRoZXIgbWFw
cGluZ3MuCgpUaGlzIGlzIHBhcnQgb2YgWFNBLTIxOC4KClJlcG9ydGVkLWJ5
OiBKYW4gQmV1bGljaCA8amJldWxpY2guY29tPgpTaWduZWQtb2ZmLWJ5OiBH
ZW9yZ2UgRHVubGFwIDxnZW9yZ2UuZHVubGFwQGNpdHJpeC5jb20+ClNpZ25l
ZC1vZmYtYnk6IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KLS0t
CiB4ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgfCA3NyArKysrKysrKysrKysr
KysrKysrKysrKysrKysrKysrKystLS0tLS0tLS0tLS0tLS0KIDEgZmlsZSBj
aGFuZ2VkLCA1MyBpbnNlcnRpb25zKCspLCAyNCBkZWxldGlvbnMoLSkKCmRp
ZmYgLS1naXQgYS94ZW4vY29tbW9uL2dyYW50X3RhYmxlLmMgYi94ZW4vY29t
bW9uL2dyYW50X3RhYmxlLmMKaW5kZXggZDgwYmQ0OS4uYmExMGU3NiAxMDA2
NDQKLS0tIGEveGVuL2NvbW1vbi9ncmFudF90YWJsZS5jCisrKyBiL3hlbi9j
b21tb24vZ3JhbnRfdGFibGUuYwpAQCAtOTgsOCArOTgsOCBAQCBzdHJ1Y3Qg
Z250dGFiX3VubWFwX2NvbW1vbiB7CiAgICAgLyogU2hhcmVkIHN0YXRlIGJl
dGVlbiAqX3VubWFwIGFuZCAqX3VubWFwX2NvbXBsZXRlICovCiAgICAgdTE2
IGZsYWdzOwogICAgIHVuc2lnbmVkIGxvbmcgZnJhbWU7Ci0gICAgc3RydWN0
IGdyYW50X21hcHBpbmcgKm1hcDsKICAgICBzdHJ1Y3QgZG9tYWluICpyZDsK
KyAgICBncmFudF9yZWZfdCByZWY7CiB9OwogCiAvKiBOdW1iZXIgb2YgdW5t
YXAgb3BlcmF0aW9ucyB0aGF0IGFyZSBkb25lIGJldHdlZW4gZWFjaCB0bGIg
Zmx1c2ggKi8KQEAgLTEwNzksNiArMTA3OSw4IEBAIF9fZ250dGFiX3VubWFw
X2NvbW1vbigKICAgICBzdHJ1Y3QgZ3JhbnRfdGFibGUgKmxndCwgKnJndDsK
ICAgICBzdHJ1Y3QgYWN0aXZlX2dyYW50X2VudHJ5ICphY3Q7CiAgICAgczE2
ICAgICAgICAgICAgICByYyA9IDA7CisgICAgc3RydWN0IGdyYW50X21hcHBp
bmcgKm1hcDsKKyAgICBib29sIHB1dF9oYW5kbGUgPSBmYWxzZTsKIAogICAg
IGxkID0gY3VycmVudC0+ZG9tYWluOwogICAgIGxndCA9IGxkLT5ncmFudF90
YWJsZTsKQEAgLTEwOTIsMTEgKzEwOTQsMTEgQEAgX19nbnR0YWJfdW5tYXBf
Y29tbW9uKAogICAgICAgICByZXR1cm47CiAgICAgfQogCi0gICAgb3AtPm1h
cCA9ICZtYXB0cmFja19lbnRyeShsZ3QsIG9wLT5oYW5kbGUpOworICAgIG1h
cCA9ICZtYXB0cmFja19lbnRyeShsZ3QsIG9wLT5oYW5kbGUpOwogCiAgICAg
Z3JhbnRfcmVhZF9sb2NrKGxndCk7CiAKLSAgICBpZiAoIHVubGlrZWx5KCFy
ZWFkX2F0b21pYygmb3AtPm1hcC0+ZmxhZ3MpKSApCisgICAgaWYgKCB1bmxp
a2VseSghcmVhZF9hdG9taWMoJm1hcC0+ZmxhZ3MpKSApCiAgICAgewogICAg
ICAgICBncmFudF9yZWFkX3VubG9jayhsZ3QpOwogICAgICAgICBnZHByaW50
ayhYRU5MT0dfSU5GTywgIlplcm8gZmxhZ3MgZm9yIGhhbmRsZSAoJWQpLlxu
Iiwgb3AtPmhhbmRsZSk7CkBAIC0xMTA0LDcgKzExMDYsNyBAQCBfX2dudHRh
Yl91bm1hcF9jb21tb24oCiAgICAgICAgIHJldHVybjsKICAgICB9CiAKLSAg
ICBkb20gPSBvcC0+bWFwLT5kb21pZDsKKyAgICBkb20gPSBtYXAtPmRvbWlk
OwogICAgIGdyYW50X3JlYWRfdW5sb2NrKGxndCk7CiAKICAgICBpZiAoIHVu
bGlrZWx5KChyZCA9IHJjdV9sb2NrX2RvbWFpbl9ieV9pZChkb20pKSA9PSBO
VUxMKSApCkBAIC0xMTI5LDE2ICsxMTMxLDQzIEBAIF9fZ250dGFiX3VubWFw
X2NvbW1vbigKIAogICAgIGdyYW50X3JlYWRfbG9jayhyZ3QpOwogCi0gICAg
b3AtPmZsYWdzID0gcmVhZF9hdG9taWMoJm9wLT5tYXAtPmZsYWdzKTsKLSAg
ICBpZiAoIHVubGlrZWx5KCFvcC0+ZmxhZ3MpIHx8IHVubGlrZWx5KG9wLT5t
YXAtPmRvbWlkICE9IGRvbSkgKQorICAgIG9wLT5yZCA9IHJkOworICAgIG9w
LT5yZWYgPSBtYXAtPnJlZjsKKworICAgIC8qCisgICAgICogV2UgY2FuJ3Qg
YXNzdW1lIHRoZXJlIHdhcyBubyByYWNpbmcgdW5tYXAgZm9yIHRoaXMgbWFw
dHJhY2sgZW50cnksCisgICAgICogYW5kIGhlbmNlIHdlIGNhbid0IGFzc3Vt
ZSBtYXAtPnJlZiBpcyB2YWxpZCBmb3IgcmQuIFdoaWxlIHRoZSBjaGVja3MK
KyAgICAgKiBiZWxvdyAod2l0aCB0aGUgYWN0aXZlIGVudHJ5IGxvY2sgaGVs
ZCkgd2lsbCByZWplY3QgYW55IHN1Y2ggcmFjaW5nCisgICAgICogcmVxdWVz
dHMsIHdlIHN0aWxsIG5lZWQgdG8gbWFrZSBzdXJlIHdlIGRvbid0IGF0dGVt
cHQgdG8gYWNxdWlyZSBhbgorICAgICAqIGludmFsaWQgbG9jay4KKyAgICAg
Ki8KKyAgICBzbXBfcm1iKCk7CisgICAgaWYgKCB1bmxpa2VseShvcC0+cmVm
ID49IG5yX2dyYW50X2VudHJpZXMocmd0KSkgKQogICAgIHsKICAgICAgICAg
Z2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJVbnN0YWJsZSBoYW5kbGUgJXVc
biIsIG9wLT5oYW5kbGUpOwogICAgICAgICByYyA9IEdOVFNUX2JhZF9oYW5k
bGU7Ci0gICAgICAgIGdvdG8gdW5tYXBfb3V0OworICAgICAgICBnb3RvIHVu
bG9ja19vdXQ7CiAgICAgfQogCi0gICAgb3AtPnJkID0gcmQ7Ci0gICAgYWN0
ID0gYWN0aXZlX2VudHJ5X2FjcXVpcmUocmd0LCBvcC0+bWFwLT5yZWYpOwor
ICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9hY3F1aXJlKHJndCwgb3AtPnJlZik7
CisKKyAgICAvKgorICAgICAqIE5vdGUgdGhhdCB3ZSAoYWIpdXNlIHRoZSBh
Y3RpdmUgZW50cnkgbG9jayBoZXJlIHRvIHByb3RlY3QgYWdhaW5zdAorICAg
ICAqIG11bHRpcGxlIHVubWFwcyBvZiB0aGUgc2FtZSBtYXBwaW5nIGhlcmUu
IFdlIGRvbid0IHdhbnQgdG8gaG9sZCBsZ3QncworICAgICAqIGxvY2ssIGFu
ZCB3ZSBvbmx5IGhvbGQgcmd0J3MgbG9jayBmb3IgcmVhZGluZyAoYnV0IHRo
ZSBsYXR0ZXIgd291bGRuJ3QKKyAgICAgKiBiZSB0aGUgcmlnaHQgb25lIGFu
eXdheSkuIEhlbmNlIHRoZSBlYXNpZXN0IGlzIHRvIHJlbHkgb24gYSBsb2Nr
IHdlCisgICAgICogaG9sZCBhbnl3YXk7IHNlZSBkb2NzL21pc2MvZ3JhbnQt
dGFibGVzLnR4dCdzICJMb2NraW5nIiBzZWN0aW9uLgorICAgICAqLworCisg
ICAgb3AtPmZsYWdzID0gcmVhZF9hdG9taWMoJm1hcC0+ZmxhZ3MpOworICAg
IHNtcF9ybWIoKTsKKyAgICBpZiAoIHVubGlrZWx5KCFvcC0+ZmxhZ3MpIHx8
IHVubGlrZWx5KG1hcC0+ZG9taWQgIT0gZG9tKSB8fAorICAgICAgICAgdW5s
aWtlbHkobWFwLT5yZWYgIT0gb3AtPnJlZikgKQorICAgIHsKKyAgICAgICAg
Z2RwcmludGsoWEVOTE9HX1dBUk5JTkcsICJVbnN0YWJsZSBoYW5kbGUgJSN4
XG4iLCBvcC0+aGFuZGxlKTsKKyAgICAgICAgcmMgPSBHTlRTVF9iYWRfaGFu
ZGxlOworICAgICAgICBnb3RvIGFjdF9yZWxlYXNlX291dDsKKyAgICB9CiAK
ICAgICBpZiAoIG9wLT5mcmFtZSA9PSAwICkKICAgICB7CkBAIC0xMTUxLDcg
KzExODAsNyBAQCBfX2dudHRhYl91bm1hcF9jb21tb24oCiAgICAgICAgICAg
ICAgICAgICAgICAiQmFkIGZyYW1lIG51bWJlciBkb2Vzbid0IG1hdGNoIGdu
dHJlZi4gKCVseCAhPSAlbHgpXG4iLAogICAgICAgICAgICAgICAgICAgICAg
b3AtPmZyYW1lLCBhY3QtPmZyYW1lKTsKIAotICAgICAgICBvcC0+bWFwLT5m
bGFncyAmPSB+R05UTUFQX2RldmljZV9tYXA7CisgICAgICAgIG1hcC0+Zmxh
Z3MgJj0gfkdOVE1BUF9kZXZpY2VfbWFwOwogICAgIH0KIAogICAgIGlmICgg
KG9wLT5ob3N0X2FkZHIgIT0gMCkgJiYgKG9wLT5mbGFncyAmIEdOVE1BUF9o
b3N0X21hcCkgKQpAQCAtMTE2MSwxNCArMTE5MCwyMyBAQCBfX2dudHRhYl91
bm1hcF9jb21tb24oCiAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgb3AtPmZsYWdzKSkgPCAwICkKICAgICAgICAgICAg
IGdvdG8gYWN0X3JlbGVhc2Vfb3V0OwogCi0gICAgICAgIG9wLT5tYXAtPmZs
YWdzICY9IH5HTlRNQVBfaG9zdF9tYXA7CisgICAgICAgIG1hcC0+ZmxhZ3Mg
Jj0gfkdOVE1BUF9ob3N0X21hcDsKKyAgICB9CisKKyAgICBpZiAoICEobWFw
LT5mbGFncyAmIChHTlRNQVBfZGV2aWNlX21hcHxHTlRNQVBfaG9zdF9tYXAp
KSApCisgICAgeworICAgICAgICBtYXAtPmZsYWdzID0gMDsKKyAgICAgICAg
cHV0X2hhbmRsZSA9IHRydWU7CiAgICAgfQogCiAgYWN0X3JlbGVhc2Vfb3V0
OgogICAgIGFjdGl2ZV9lbnRyeV9yZWxlYXNlKGFjdCk7Ci0gdW5tYXBfb3V0
OgorIHVubG9ja19vdXQ6CiAgICAgZ3JhbnRfcmVhZF91bmxvY2socmd0KTsK
IAorICAgIGlmICggcHV0X2hhbmRsZSApCisgICAgICAgIHB1dF9tYXB0cmFj
a19oYW5kbGUobGd0LCBvcC0+aGFuZGxlKTsKKwogICAgIGlmICggcmMgPT0g
R05UU1Rfb2theSAmJiBnbnR0YWJfbmVlZF9pb21tdV9tYXBwaW5nKGxkKSAp
CiAgICAgewogICAgICAgICB1bnNpZ25lZCBpbnQga2luZDsKQEAgLTEyMDUs
NyArMTI0Myw2IEBAIF9fZ250dGFiX3VubWFwX2NvbW1vbl9jb21wbGV0ZShz
dHJ1Y3QgZ250dGFiX3VubWFwX2NvbW1vbiAqb3ApCiAgICAgZ3JhbnRfZW50
cnlfaGVhZGVyX3QgKnNoYTsKICAgICBzdHJ1Y3QgcGFnZV9pbmZvICpwZzsK
ICAgICB1aW50MTZfdCAqc3RhdHVzOwotICAgIGJvb2xfdCBwdXRfaGFuZGxl
ID0gMDsKIAogICAgIGlmICggcmQgPT0gTlVMTCApCiAgICAgeyAKQEAgLTEy
MjYsMTMgKzEyNjMsMTMgQEAgX19nbnR0YWJfdW5tYXBfY29tbW9uX2NvbXBs
ZXRlKHN0cnVjdCBnbnR0YWJfdW5tYXBfY29tbW9uICpvcCkKICAgICBpZiAo
IHJndC0+Z3RfdmVyc2lvbiA9PSAwICkKICAgICAgICAgZ290byB1bmxvY2tf
b3V0OwogCi0gICAgYWN0ID0gYWN0aXZlX2VudHJ5X2FjcXVpcmUocmd0LCBv
cC0+bWFwLT5yZWYpOwotICAgIHNoYSA9IHNoYXJlZF9lbnRyeV9oZWFkZXIo
cmd0LCBvcC0+bWFwLT5yZWYpOworICAgIGFjdCA9IGFjdGl2ZV9lbnRyeV9h
Y3F1aXJlKHJndCwgb3AtPnJlZik7CisgICAgc2hhID0gc2hhcmVkX2VudHJ5
X2hlYWRlcihyZ3QsIG9wLT5yZWYpOwogCiAgICAgaWYgKCByZ3QtPmd0X3Zl
cnNpb24gPT0gMSApCiAgICAgICAgIHN0YXR1cyA9ICZzaGEtPmZsYWdzOwog
ICAgIGVsc2UKLSAgICAgICAgc3RhdHVzID0gJnN0YXR1c19lbnRyeShyZ3Qs
IG9wLT5tYXAtPnJlZik7CisgICAgICAgIHN0YXR1cyA9ICZzdGF0dXNfZW50
cnkocmd0LCBvcC0+cmVmKTsKIAogICAgIGlmICggdW5saWtlbHkob3AtPmZy
YW1lICE9IGFjdC0+ZnJhbWUpICkgCiAgICAgewpAQCAtMTI4OSw5ICsxMzI2
LDYgQEAgX19nbnR0YWJfdW5tYXBfY29tbW9uX2NvbXBsZXRlKHN0cnVjdCBn
bnR0YWJfdW5tYXBfY29tbW9uICpvcCkKICAgICAgICAgICAgIGFjdC0+cGlu
IC09IEdOVFBJTl9oc3R3X2luYzsKICAgICB9CiAKLSAgICBpZiAoIChvcC0+
bWFwLT5mbGFncyAmIChHTlRNQVBfZGV2aWNlX21hcHxHTlRNQVBfaG9zdF9t
YXApKSA9PSAwICkKLSAgICAgICAgcHV0X2hhbmRsZSA9IDE7Ci0KICAgICBp
ZiAoICgoYWN0LT5waW4gJiAoR05UUElOX2RldndfbWFza3xHTlRQSU5faHN0
d19tYXNrKSkgPT0gMCkgJiYKICAgICAgICAgICEob3AtPmZsYWdzICYgR05U
TUFQX3JlYWRvbmx5KSApCiAgICAgICAgIGdudHRhYl9jbGVhcl9mbGFnKF9H
VEZfd3JpdGluZywgc3RhdHVzKTsKQEAgLTEzMDQsMTEgKzEzMzgsNiBAQCBf
X2dudHRhYl91bm1hcF9jb21tb25fY29tcGxldGUoc3RydWN0IGdudHRhYl91
bm1hcF9jb21tb24gKm9wKQogIHVubG9ja19vdXQ6CiAgICAgZ3JhbnRfcmVh
ZF91bmxvY2socmd0KTsKIAotICAgIGlmICggcHV0X2hhbmRsZSApCi0gICAg
ewotICAgICAgICBvcC0+bWFwLT5mbGFncyA9IDA7Ci0gICAgICAgIHB1dF9t
YXB0cmFja19oYW5kbGUobGQtPmdyYW50X3RhYmxlLCBvcC0+aGFuZGxlKTsK
LSAgICB9CiAgICAgcmN1X3VubG9ja19kb21haW4ocmQpOwogfQogCi0tIAoy
LjEuNAoK

--=separator
Content-Type: application/octet-stream;
 name="xsa218-4.8/0003-gnttab-correct-maptrack-table-accesses.patch"
Content-Disposition: attachment;
 filename="xsa218-4.8/0003-gnttab-correct-maptrack-table-accesses.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Tue Jun 20 12:35:52 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Tue, 20 Jun 2017 12:35:52 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dNIMy-0007eh-9T; Tue, 20 Jun 2017 12:34:56 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNIMw-0007eV-Nj; Tue, 20 Jun 2017 12:34:55 +0000
Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id
 87/3E-03557-D6619495; Tue, 20 Jun 2017 12:34:53 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprNJsWRWlGSWpSXmKPExsWS0XRdVTdHzDP
 SYFO/ocWtm63MFks+LmaxWHX1AKsDs8fR3b+ZAhijWDPzkvIrElgzbqxtYS5oOsZUcfbvVNYG
 xpO7mboYuTiEBI4zSty7voCti5ETyFnEKPF2owmIzSzgKnFj32Y2CFtR4sK9BhYQm1dAUOLkz
 CdgtoSApsSdN6vYQWwRgSKJnedegtlsAnoSc89OYoLotZSYP/EU2BxhAR+J1+872CHmmEn83D
 qbGcRmEVCV+LN/D9sERp5ZSFbPQrJ6FpLVsxg5gOKaEut36UOY0hLL/3FAVMtLbH87hxnC9pF
 YvusCC4TtKbHt/AEWmIlTuh+yw2w6cGovG8QYJ4lXJxUxlbhJzJj6kxmixFliRrc3phJHiZm9
 e1khSuwkDn1XxWbR+4UnoWwniZanZ5iwqel/0M4GUzN13nQ2ZDULGCVWMWoUpxaVpRbpGprpJ
 RVlpmeU5CZm5ugaGpjp5aYWFyemp+YkJhXrJefnbmIEJhEGINjBeH9jwCFGSQ4mJVFedQbPSC
 G+pPyUyozE4oz4otKc1OJDjDIcHEoSvNdEgHKCRanpqRVpmTnAdAaTluDgURLhFQFJ8xYXJOY
 WZ6ZDpE4xGnPs+r/mCxPHsvVbvjAJseTl56VKifM2iAKVCoCUZpTmwQ2CpdlLjLJSwryMQKcJ
 8RSkFuVmlqDKv2IU52BUEuadDrKQJzOvBG7fK6BTmIBOeXHEA+SUkkSElFQD48Jrh2Yv3JbpK
 OQ/5cXFwxMUpWQm8Je+UzFwuLPl07yQep0697gnFR+YJxf1bd0a7hyxMzt0t97h9/1Jx/U95t
 htMrJ+vnrJ4VqFScs02NhfnKoqTjXa16/mWfZX/faBX/OVN6ezfa4ozZ1nfPb+F67IGbw319V
 PD/G7XCsvd/eHeOL5hP+FC5VYijMSDbWYi4oTAQgjvyiuAwAA
X-Env-Sender: iwj@xenbits.xen.org
X-Msg-Ref: server-3.tower-27.messagelabs.com!1497962091!108288363!1
X-Originating-IP: [104.130.215.37]
X-SpamReason: No, hits=0.5 required=7.0 tests=BODY_RANDOM_LONG
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 43538 invoked from network); 20 Jun 2017 12:34:52 -0000
Received: from mail.xenproject.org (HELO mail.xenproject.org) (104.130.215.37)
 by server-3.tower-27.messagelabs.com with AES128-GCM-SHA256
 encrypted SMTP; 20 Jun 2017 12:34:52 -0000
Received: from xenbits.xenproject.org ([104.239.192.120])
 by mail.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNIMo-0005G1-JQ; Tue, 20 Jun 2017 12:34:46 +0000
Received: from iwj by xenbits.xenproject.org with local (Exim 4.84_2)
 (envelope-from <iwj@xenbits.xen.org>)
 id 1dNIMo-0003Gy-Ei; Tue, 20 Jun 2017 12:34:46 +0000
Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8"
Content-Transfer-Encoding: binary
MIME-Version: 1.0
X-Mailer: MIME-tools 5.505 (Entity 5.505)
To: xen-announce@lists.xen.org, xen-devel@lists.xen.org,
 xen-users@lists.xen.org, oss-security@lists.openwall.com
From: Xen.org security team <security@xen.org>
Message-Id: <E1dNIMo-0003Gy-Ei@xenbits.xenproject.org>
Date: Tue, 20 Jun 2017 12:34:46 +0000
Cc: "Xen.org security team" <security-team-members@xen.org>
Subject: [Xen-announce] Xen Security Advisory 216 - blkif responses leak
	backend stack data
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>

--=separator
Content-Type: text/plain; charset="utf-8"
Content-Disposition: inline
Content-Transfer-Encoding: 7bit

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA256

                    Xen Security Advisory XSA-216
                              version 4

                blkif responses leak backend stack data

UPDATES IN VERSION 4
====================

Move "For patch:" Reported-by to patches as intended.

ISSUE DESCRIPTION
=================

The block interface response structure has some discontiguous fields.
Certain backends populate the structure fields of an otherwise
uninitialized instance of this structure on their stacks, leaking
data through the (internal or trailing) padding field.

IMPACT
======

A malicious unprivileged guest may be able to obtain sensitive
information from the host or other guests.

VULNERABLE SYSTEMS
==================

All Linux versions supporting the xen-blkback, blkback, or blktap
drivers are vulnerable.

FreeBSD, NetBSD and Windows (with or without PV drivers) are not
vulnerable (either because they do not have backends at all, or
because they use a different implementation technique which does not
suffer from this problem).

All qemu versions supporting the Xen block backend are vulnerable.  The
qemu-xen-traditional code base does not include such code, so is not
vulnerable.  Note that an instance of qemu will be spawned to provide
the backend for most non-raw-format disks; so you may need to apply the
patch to qemu even if you use only PV guests.

MITIGATION
==========

There's no mitigation available for x86 PV and ARM guests.

For x86 HVM guests it may be possible to change the guest
configuaration such that a fully virtualized disk is being made
available instead.  However, this would normally entail changes inside
the guest itself.

CREDITS
=======

This issue was discovered by Anthony Perard of Citrix.

RESOLUTION
==========

Applying the appropriate attached patch resolves this issue.

xsa216-linux-4.11.patch           Linux 4.5 ... 4.11
xsa216-linux-4.4.patch            Linux 3.3 ... 4.4
xsa216-qemuu.patch                qemu-upstream master, 4.8
xsa216-qemuu-4.7.patch            qemu-upstream 4.7, 4.6
xsa216-qemuu-4.5.patch            qemu-upstream 4.5
xsa216-linux-2.6.18-xen.patch     linux-2.6.18-xen.hg

$ sha256sum xsa216*
d316e16f8da2078966e9d7d516dd0a9ed5a29c3bc479974374c8fa778859913d  xsa216-linux-2.6.18-xen.patch
4440fe324b61baf0f3f5a73352c4d9ac6f94917e216d8421263a5e67445852db  xsa216-linux-4.4.patch
eb24bfc0303e13e08fd3710463aea139a92a3f83db7f35119c4d3831154a6453  xsa216-linux-4.11.patch
b4b8f68fa05d718c5be7023c84d942e43725bcc563ea15556ee9646f6f9bf7e7  xsa216-qemuu.patch
4fc3665ff07ec79fb31ac66a3fd360a45b7ec546c549c04284f0128ad0c5beba  xsa216-qemuu-4.5.patch
a0e0dfd5ea2643ae14c220124194388017a3656db3e6ce430913cda800c43aad  xsa216-qemuu-4.7.patch
$

DEPLOYMENT DURING EMBARGO
=========================

Deployment of the patches described above (or others which are
substantially similar) is permitted during the embargo, even on
public-facing systems with untrusted guest users and administrators.

However, deployment of the mitigation is NOT permitted (except where
all the affected systems and VMs are administered and used only by
organisations which are members of the Xen Project Security Issues
Predisclosure List).  Specifically, deployment on public cloud systems
is NOT permitted.  This is because this produces a guest-visible
change which will indicate which component contains the vulnerability.

Additionally, distribution of updated software is prohibited (except to other
members of the predisclosure list).

Predisclosure list members who wish to deploy significantly different
patches and/or mitigations, please contact the Xen Project Security
Team.

(Note: this during-embargo deployment notice is retained in
post-embargo publicly released Xen Project advisories, even though it
is then no longer applicable.  This is to enable the community to have
oversight of the Xen Project Security Team's decisionmaking.)

For more information about permissible uses of embargoed information,
consult the Xen Project community's agreed Security Policy:
  http://www.xenproject.org/security-policy.html
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQEcBAEBCAAGBQJZSRYiAAoJEIP+FMlX6CvZILQIALI17G6L+BIr6rXHglleL6Lz
E9Rvlng8K3e5088Hzs5gwq0c9jeK7i9B8PIjdgTH8OS1YjwpWF4wdPveSNACules
590SQVdwN2+Q1oTqdEECnaaCdl7eiEiv+2vRr+LYXNSLJuIRclnc/Fv3nTz/iuTM
5vwIVS/rpdETDBcMJVbCRvUbMeCx/ZM8+lNmEe20QP6h++pmc8wT7B54yGVwk6LT
eknzRMFYhUqcF8eLTJ/QyHf94x1mujVCHNKbOXkMQ27lWAJ5Jt2ut0IZeA6CFAlw
j/u8azGv9VIpXGLp2R1OWPYbEYeAzvjNC7+qoixiscSvfPkiSTfAv7pmr52jvGg=
=+gya
-----END PGP SIGNATURE-----

--=separator
Content-Type: application/octet-stream; name="xsa216-linux-2.6.18-xen.patch"
Content-Disposition: attachment; filename="xsa216-linux-2.6.18-xen.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-linux-4.4.patch"
Content-Disposition: attachment; filename="xsa216-linux-4.4.patch"
Content-Transfer-Encoding: base64

eGVuLWJsa2JhY2s6IGRvbid0IGxlYWsgc3RhY2sgZGF0YSB2aWEgcmVzcG9u
c2UgcmluZwoKUmF0aGVyIHRoYW4gY29uc3RydWN0aW5nIGEgbG9jYWwgc3Ry
dWN0dXJlIGluc3RhbmNlIG9uIHRoZSBzdGFjaywgZmlsbAp0aGUgZmllbGRz
IGRpcmVjdGx5IG9uIHRoZSBzaGFyZWQgcmluZywganVzdCBsaWtlIG90aGVy
IGJhY2tlbmRzIGRvLgpCdWlsZCBvbiB0aGUgZmFjdCB0aGF0IGFsbCByZXNw
b25zZSBzdHJ1Y3R1cmUgZmxhdm9ycyBhcmUgYWN0dWFsbHkKaWRlbnRpY2Fs
ICh0aGUgb2xkIGNvZGUgZGlkIG1ha2UgdGhpcyBhc3N1bXB0aW9uIHRvbyku
CgpUaGlzIGlzIFhTQS0yMTYuCgpSZXBvcnRlZC1ieTogQW50aG9ueSBQZXJh
cmQgPGFudGhvbnkucGVyYXJkQGNpdHJpeC5jb20+ClNpZ25lZC1vZmYtYnk6
IEphbiBCZXVsaWNoIDxqYmV1bGljaEBzdXNlLmNvbT4KUmV2aWV3ZWQtYnk6
IEtvbnJhZCBSemVzenV0ZWsgV2lsayA8a29ucmFkLndpbGtAb3JhY2xlLmNv
bT4KCi0tLSBhL2RyaXZlcnMvYmxvY2sveGVuLWJsa2JhY2svYmxrYmFjay5j
CisrKyBiL2RyaXZlcnMvYmxvY2sveGVuLWJsa2JhY2svYmxrYmFjay5jCkBA
IC0xNDEwLDMzICsxNDEwLDM0IEBAIHN0YXRpYyBpbnQgZGlzcGF0Y2hfcndf
YmxvY2tfaW8oc3RydWN0IHgKIHN0YXRpYyB2b2lkIG1ha2VfcmVzcG9uc2Uo
c3RydWN0IHhlbl9ibGtpZiAqYmxraWYsIHU2NCBpZCwKIAkJCSAgdW5zaWdu
ZWQgc2hvcnQgb3AsIGludCBzdCkKIHsKLQlzdHJ1Y3QgYmxraWZfcmVzcG9u
c2UgIHJlc3A7CisJc3RydWN0IGJsa2lmX3Jlc3BvbnNlICpyZXNwOwogCXVu
c2lnbmVkIGxvbmcgICAgIGZsYWdzOwogCXVuaW9uIGJsa2lmX2JhY2tfcmlu
Z3MgKmJsa19yaW5ncyA9ICZibGtpZi0+YmxrX3JpbmdzOwogCWludCBub3Rp
Znk7CiAKLQlyZXNwLmlkICAgICAgICA9IGlkOwotCXJlc3Aub3BlcmF0aW9u
ID0gb3A7Ci0JcmVzcC5zdGF0dXMgICAgPSBzdDsKLQogCXNwaW5fbG9ja19p
cnFzYXZlKCZibGtpZi0+YmxrX3JpbmdfbG9jaywgZmxhZ3MpOwogCS8qIFBs
YWNlIG9uIHRoZSByZXNwb25zZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9t
YWluLiAqLwogCXN3aXRjaCAoYmxraWYtPmJsa19wcm90b2NvbCkgewogCWNh
c2UgQkxLSUZfUFJPVE9DT0xfTkFUSVZFOgotCQltZW1jcHkoUklOR19HRVRf
UkVTUE9OU0UoJmJsa19yaW5ncy0+bmF0aXZlLCBibGtfcmluZ3MtPm5hdGl2
ZS5yc3BfcHJvZF9wdnQpLAotCQkgICAgICAgJnJlc3AsIHNpemVvZihyZXNw
KSk7CisJCXJlc3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrX3JpbmdzLT5u
YXRpdmUsCisJCQkJCSBibGtfcmluZ3MtPm5hdGl2ZS5yc3BfcHJvZF9wdnQp
OwogCQlicmVhazsKIAljYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl8zMjoKLQkJ
bWVtY3B5KFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl8zMiwg
YmxrX3JpbmdzLT54ODZfMzIucnNwX3Byb2RfcHZ0KSwKLQkJICAgICAgICZy
ZXNwLCBzaXplb2YocmVzcCkpOworCQlyZXNwID0gUklOR19HRVRfUkVTUE9O
U0UoJmJsa19yaW5ncy0+eDg2XzMyLAorCQkJCQkgYmxrX3JpbmdzLT54ODZf
MzIucnNwX3Byb2RfcHZ0KTsKIAkJYnJlYWs7CiAJY2FzZSBCTEtJRl9QUk9U
T0NPTF9YODZfNjQ6Ci0JCW1lbWNweShSSU5HX0dFVF9SRVNQT05TRSgmYmxr
X3JpbmdzLT54ODZfNjQsIGJsa19yaW5ncy0+eDg2XzY0LnJzcF9wcm9kX3B2
dCksCi0JCSAgICAgICAmcmVzcCwgc2l6ZW9mKHJlc3ApKTsKKwkJcmVzcCA9
IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtfcmluZ3MtPng4Nl82NCwKKwkJCQkJ
IGJsa19yaW5ncy0+eDg2XzY0LnJzcF9wcm9kX3B2dCk7CiAJCWJyZWFrOwog
CWRlZmF1bHQ6CiAJCUJVRygpOwogCX0KKworCXJlc3AtPmlkICAgICAgICA9
IGlkOworCXJlc3AtPm9wZXJhdGlvbiA9IG9wOworCXJlc3AtPnN0YXR1cyAg
ICA9IHN0OworCiAJYmxrX3JpbmdzLT5jb21tb24ucnNwX3Byb2RfcHZ0Kys7
CiAJUklOR19QVVNIX1JFU1BPTlNFU19BTkRfQ0hFQ0tfTk9USUZZKCZibGtf
cmluZ3MtPmNvbW1vbiwgbm90aWZ5KTsKIAlzcGluX3VubG9ja19pcnFyZXN0
b3JlKCZibGtpZi0+YmxrX3JpbmdfbG9jaywgZmxhZ3MpOwotLS0gYS9kcml2
ZXJzL2Jsb2NrL3hlbi1ibGtiYWNrL2NvbW1vbi5oCisrKyBiL2RyaXZlcnMv
YmxvY2sveGVuLWJsa2JhY2svY29tbW9uLmgKQEAgLTc0LDkgKzc0LDggQEAg
ZXh0ZXJuIHVuc2lnbmVkIGludCB4ZW5fYmxraWZfbWF4X3Jpbmdfbwogc3Ry
dWN0IGJsa2lmX2NvbW1vbl9yZXF1ZXN0IHsKIAljaGFyIGR1bW15OwogfTsK
LXN0cnVjdCBibGtpZl9jb21tb25fcmVzcG9uc2UgewotCWNoYXIgZHVtbXk7
Ci19OworCisvKiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KIAogc3RydWN0
IGJsa2lmX3g4Nl8zMl9yZXF1ZXN0X3J3IHsKIAl1aW50OF90ICAgICAgICBu
cl9zZWdtZW50czsgIC8qIG51bWJlciBvZiBzZWdtZW50cyAgICAgICAgICAg
ICAgICAgICAqLwpAQCAtMTI4LDE0ICsxMjcsNiBAQCBzdHJ1Y3QgYmxraWZf
eDg2XzMyX3JlcXVlc3QgewogCX0gdTsKIH0gX19hdHRyaWJ1dGVfXygoX19w
YWNrZWRfXykpOwogCi0vKiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KLSNw
cmFnbWEgcGFjayhwdXNoLCA0KQotc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXNw
b25zZSB7Ci0JdWludDY0X3QgICAgICAgIGlkOyAgICAgICAgICAgICAgLyog
Y29waWVkIGZyb20gcmVxdWVzdCAqLwotCXVpbnQ4X3QgICAgICAgICBvcGVy
YXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVlc3QgKi8KLQlpbnQx
Nl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/
ICAgICAgICovCi19OwotI3ByYWdtYSBwYWNrKHBvcCkKIC8qIHg4Nl82NCBw
cm90b2NvbCB2ZXJzaW9uICovCiAKIHN0cnVjdCBibGtpZl94ODZfNjRfcmVx
dWVzdF9ydyB7CkBAIC0xOTIsMTggKzE4MywxMiBAQCBzdHJ1Y3QgYmxraWZf
eDg2XzY0X3JlcXVlc3QgewogCX0gdTsKIH0gX19hdHRyaWJ1dGVfXygoX19w
YWNrZWRfXykpOwogCi1zdHJ1Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsK
LQl1aW50NjRfdCAgICAgICBfX2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4
KSkpIGlkOwotCXVpbnQ4X3QgICAgICAgICBvcGVyYXRpb247ICAgICAgIC8q
IGNvcGllZCBmcm9tIHJlcXVlc3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3Rh
dHVzOyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/ICAgICAgICovCi19Owot
CiBERUZJTkVfUklOR19UWVBFUyhibGtpZl9jb21tb24sIHN0cnVjdCBibGtp
Zl9jb21tb25fcmVxdWVzdCwKLQkJICBzdHJ1Y3QgYmxraWZfY29tbW9uX3Jl
c3BvbnNlKTsKKwkJICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogREVGSU5F
X1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMy
X3JlcXVlc3QsCi0JCSAgc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXNwb25zZSk7
CisJCSAgc3RydWN0IGJsa2lmX3Jlc3BvbnNlIF9fcGFja2VkKTsKIERFRklO
RV9SSU5HX1RZUEVTKGJsa2lmX3g4Nl82NCwgc3RydWN0IGJsa2lmX3g4Nl82
NF9yZXF1ZXN0LAotCQkgIHN0cnVjdCBibGtpZl94ODZfNjRfcmVzcG9uc2Up
OworCQkgIHN0cnVjdCBibGtpZl9yZXNwb25zZSk7CiAKIHVuaW9uIGJsa2lm
X2JhY2tfcmluZ3MgewogCXN0cnVjdCBibGtpZl9iYWNrX3JpbmcgICAgICAg
IG5hdGl2ZTsK

--=separator
Content-Type: application/octet-stream; name="xsa216-linux-4.11.patch"
Content-Disposition: attachment; filename="xsa216-linux-4.11.patch"
Content-Transfer-Encoding: base64
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--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu.patch"
Content-Disposition: attachment; filename="xsa216-qemuu.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z
ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1
Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg
ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg
KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh
bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk
ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv
biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv
bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt
b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll
d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y
YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w
ZXJhcmRAY2l0cml4LmNvbT4KLS0tCnYyOiBBZGQgUUVNVV9QQUNLRUQgdG8g
Zml4IGhhbmRsaW5nIDMyLWJpdCBndWVzdHMgYnkgNjQtYml0IHFlbXUuCgot
LS0gYS9ody9ibG9jay94ZW5fYmxraWYuaAorKysgYi9ody9ibG9jay94ZW5f
YmxraWYuaApAQCAtMTQsOSArMTQsNiBAQAogc3RydWN0IGJsa2lmX2NvbW1v
bl9yZXF1ZXN0IHsKICAgICBjaGFyIGR1bW15OwogfTsKLXN0cnVjdCBibGtp
Zl9jb21tb25fcmVzcG9uc2UgewotICAgIGNoYXIgZHVtbXk7Ci19OwogCiAv
KiBpMzg2IHByb3RvY29sIHZlcnNpb24gKi8KICNwcmFnbWEgcGFjayhwdXNo
LCA0KQpAQCAtMzYsMTMgKzMzLDcgQEAgc3RydWN0IGJsa2lmX3g4Nl8zMl9y
ZXF1ZXN0X2Rpc2NhcmQgewogICAgIGJsa2lmX3NlY3Rvcl90IHNlY3Rvcl9u
dW1iZXI7ICAgIC8qIHN0YXJ0IHNlY3RvciBpZHggb24gZGlzayAoci93IG9u
bHkpICAqLwogICAgIHVpbnQ2NF90ICAgICAgIG5yX3NlY3RvcnM7ICAgICAg
IC8qICMgb2YgY29udGlndW91cyBzZWN0b3JzIHRvIGRpc2NhcmQgICAqLwog
fTsKLXN0cnVjdCBibGtpZl94ODZfMzJfcmVzcG9uc2UgewotICAgIHVpbnQ2
NF90ICAgICAgICBpZDsgICAgICAgICAgICAgIC8qIGNvcGllZCBmcm9tIHJl
cXVlc3QgKi8KLSAgICB1aW50OF90ICAgICAgICAgb3BlcmF0aW9uOyAgICAg
ICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0gICAgaW50MTZfdCAgICAg
ICAgIHN0YXR1czsgICAgICAgICAgLyogQkxLSUZfUlNQXz8/PyAgICAgICAq
LwotfTsKIHR5cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl8zMl9yZXF1ZXN0IGJs
a2lmX3g4Nl8zMl9yZXF1ZXN0X3Q7Ci10eXBlZGVmIHN0cnVjdCBibGtpZl94
ODZfMzJfcmVzcG9uc2UgYmxraWZfeDg2XzMyX3Jlc3BvbnNlX3Q7CiAjcHJh
Z21hIHBhY2socG9wKQogCiAvKiB4ODZfNjQgcHJvdG9jb2wgdmVyc2lvbiAq
LwpAQCAtNjIsMjAgKzUzLDE0IEBAIHN0cnVjdCBibGtpZl94ODZfNjRfcmVx
dWVzdF9kaXNjYXJkIHsKICAgICBibGtpZl9zZWN0b3JfdCBzZWN0b3JfbnVt
YmVyOyAgICAvKiBzdGFydCBzZWN0b3IgaWR4IG9uIGRpc2sgKHIvdyBvbmx5
KSAgKi8KICAgICB1aW50NjRfdCAgICAgICBucl9zZWN0b3JzOyAgICAgICAv
KiAjIG9mIGNvbnRpZ3VvdXMgc2VjdG9ycyB0byBkaXNjYXJkICAgKi8KIH07
Ci1zdHJ1Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLSAgICB1aW50NjRf
dCAgICAgICBfX2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwot
ICAgIHVpbnQ4X3QgICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGll
ZCBmcm9tIHJlcXVlc3QgKi8KLSAgICBpbnQxNl90ICAgICAgICAgc3RhdHVz
OyAgICAgICAgICAvKiBCTEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlw
ZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0
X3JlcXVlc3RfdDsKLXR5cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNw
b25zZSBibGtpZl94ODZfNjRfcmVzcG9uc2VfdDsKIAogREVGSU5FX1JJTkdf
VFlQRVMoYmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVl
c3QsCi0gICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfY29tbW9uX3Jl
c3BvbnNlKTsKKyAgICAgICAgICAgICAgICAgIHN0cnVjdCBibGtpZl9yZXNw
b25zZSk7CiBERUZJTkVfUklOR19UWVBFUyhibGtpZl94ODZfMzIsIHN0cnVj
dCBibGtpZl94ODZfMzJfcmVxdWVzdCwKLSAgICAgICAgICAgICAgICAgIHN0
cnVjdCBibGtpZl94ODZfMzJfcmVzcG9uc2UpOworICAgICAgICAgICAgICAg
ICAgc3RydWN0IGJsa2lmX3Jlc3BvbnNlIFFFTVVfUEFDS0VEKTsKIERFRklO
RV9SSU5HX1RZUEVTKGJsa2lmX3g4Nl82NCwgc3RydWN0IGJsa2lmX3g4Nl82
NF9yZXF1ZXN0LAotICAgICAgICAgICAgICAgICAgc3RydWN0IGJsa2lmX3g4
Nl82NF9yZXNwb25zZSk7CisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxr
aWZfcmVzcG9uc2UpOwogCiB1bmlvbiBibGtpZl9iYWNrX3JpbmdzIHsKICAg
ICBibGtpZl9iYWNrX3JpbmdfdCAgICAgICAgbmF0aXZlOwotLS0gYS9ody9i
bG9jay94ZW5fZGlzay5jCisrKyBiL2h3L2Jsb2NrL3hlbl9kaXNrLmMKQEAg
LTc2OSwzMSArNzY5LDMwIEBAIHN0YXRpYyBpbnQgYmxrX3NlbmRfcmVzcG9u
c2Vfb25lKHN0cnVjdAogICAgIHN0cnVjdCBYZW5CbGtEZXYgICpibGtkZXYg
PSBpb3JlcS0+YmxrZGV2OwogICAgIGludCAgICAgICAgICAgICAgIHNlbmRf
bm90aWZ5ICAgPSAwOwogICAgIGludCAgICAgICAgICAgICAgIGhhdmVfcmVx
dWVzdHMgPSAwOwotICAgIGJsa2lmX3Jlc3BvbnNlX3QgIHJlc3A7Ci0gICAg
dm9pZCAgICAgICAgICAgICAgKmRzdDsKLQotICAgIHJlc3AuaWQgICAgICAg
ID0gaW9yZXEtPnJlcS5pZDsKLSAgICByZXNwLm9wZXJhdGlvbiA9IGlvcmVx
LT5yZXEub3BlcmF0aW9uOwotICAgIHJlc3Auc3RhdHVzICAgID0gaW9yZXEt
PnN0YXR1czsKKyAgICBibGtpZl9yZXNwb25zZV90ICAqcmVzcDsKIAogICAg
IC8qIFBsYWNlIG9uIHRoZSByZXNwb25zZSByaW5nIGZvciB0aGUgcmVsZXZh
bnQgZG9tYWluLiAqLwogICAgIHN3aXRjaCAoYmxrZGV2LT5wcm90b2NvbCkg
ewogICAgIGNhc2UgQkxLSUZfUFJPVE9DT0xfTkFUSVZFOgotICAgICAgICBk
c3QgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUs
IGJsa2Rldi0+cmluZ3MubmF0aXZlLnJzcF9wcm9kX3B2dCk7CisgICAgICAg
IHJlc3AgPSBSSU5HX0dFVF9SRVNQT05TRSgmYmxrZGV2LT5yaW5ncy5uYXRp
dmUsCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICBibGtkZXYt
PnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsK
ICAgICBjYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl8zMjoKLSAgICAgICAgZHN0
ID0gUklOR19HRVRfUkVTUE9OU0UoJmJsa2Rldi0+cmluZ3MueDg2XzMyX3Bh
cnQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+
cmluZ3MueDg2XzMyX3BhcnQucnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVz
cCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtkZXYtPnJpbmdzLng4Nl8zMl9w
YXJ0LAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgYmxrZGV2
LT5yaW5ncy54ODZfMzJfcGFydC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBi
cmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09MX1g4Nl82NDoKLSAgICAg
ICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJsa2Rldi0+cmluZ3MueDg2
XzY0X3BhcnQsCi0gICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgIGJs
a2Rldi0+cmluZ3MueDg2XzY0X3BhcnQucnNwX3Byb2RfcHZ0KTsKKyAgICAg
ICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZibGtkZXYtPnJpbmdzLng4
Nl82NF9wYXJ0LAorICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg
YmxrZGV2LT5yaW5ncy54ODZfNjRfcGFydC5yc3BfcHJvZF9wdnQpOwogICAg
ICAgICBicmVhazsKICAgICBkZWZhdWx0OgotICAgICAgICBkc3QgPSBOVUxM
OwogICAgICAgICByZXR1cm4gMDsKICAgICB9Ci0gICAgbWVtY3B5KGRzdCwg
JnJlc3AsIHNpemVvZihyZXNwKSk7CisKKyAgICByZXNwLT5pZCAgICAgICAg
PSBpb3JlcS0+cmVxLmlkOworICAgIHJlc3AtPm9wZXJhdGlvbiA9IGlvcmVx
LT5yZXEub3BlcmF0aW9uOworICAgIHJlc3AtPnN0YXR1cyAgICA9IGlvcmVx
LT5zdGF0dXM7CisKICAgICBibGtkZXYtPnJpbmdzLmNvbW1vbi5yc3BfcHJv
ZF9wdnQrKzsKIAogICAgIFJJTkdfUFVTSF9SRVNQT05TRVNfQU5EX0NIRUNL
X05PVElGWSgmYmxrZGV2LT5yaW5ncy5jb21tb24sIHNlbmRfbm90aWZ5KTsK

--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu-4.5.patch"
Content-Disposition: attachment; filename="xsa216-qemuu-4.5.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z
ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1
Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg
ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg
KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh
bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk
ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv
biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv
bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt
b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll
d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y
YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w
ZXJhcmRAY2l0cml4LmNvbT4KCi0tLSBhL2h3L2Jsb2NrL3hlbl9ibGtpZi5o
CisrKyBiL2h3L2Jsb2NrL3hlbl9ibGtpZi5oCkBAIC0xMiw5ICsxMiw2IEBA
CiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QgewogCWNoYXIgZHVtbXk7
CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNwb25zZSB7Ci0JY2hhciBk
dW1teTsKLX07CiAKIC8qIGkzODYgcHJvdG9jb2wgdmVyc2lvbiAqLwogI3By
YWdtYSBwYWNrKHB1c2gsIDQpCkBAIC0yNiwxMyArMjMsNyBAQCBzdHJ1Y3Qg
YmxraWZfeDg2XzMyX3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90IHNlY3Rv
cl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChyL3cgb25s
eSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBzZWdbQkxL
SUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1Y3QgYmxr
aWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAgaWQ7ICAg
ICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0JdWludDhf
dCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZyb20gcmVx
dWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAgICAgIC8q
IEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07CiB0eXBlZGVmIHN0cnVjdCBi
bGtpZl94ODZfMzJfcmVxdWVzdCBibGtpZl94ODZfMzJfcmVxdWVzdF90Owot
dHlwZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIGJsa2lmX3g4
Nl8zMl9yZXNwb25zZV90OwogI3ByYWdtYSBwYWNrKHBvcCkKIAogLyogeDg2
XzY0IHByb3RvY29sIHZlcnNpb24gKi8KQEAgLTQ0LDE3ICszNSwxNCBAQCBz
dHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90
IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChy
L3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBz
ZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1
Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICBf
X2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwotCXVpbnQ4X3Qg
ICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVl
c3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBC
TEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlwZWRlZiBzdHJ1Y3QgYmxr
aWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0X3JlcXVlc3RfdDsKLXR5
cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNwb25zZSBibGtpZl94ODZf
NjRfcmVzcG9uc2VfdDsKIAotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZfY29t
bW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsIHN0cnVjdCBibGtp
Zl9jb21tb25fcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZf
eDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMyX3JlcXVlc3QsIHN0cnVjdCBi
bGtpZl94ODZfMzJfcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxr
aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsIHN0cnVj
dCBibGtpZl94ODZfNjRfcmVzcG9uc2UpOworREVGSU5FX1JJTkdfVFlQRVMo
YmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsCisg
ICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOworREVG
SU5FX1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2
XzMyX3JlcXVlc3QsCisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZf
cmVzcG9uc2UgUUVNVV9QQUNLRUQpOworREVGSU5FX1JJTkdfVFlQRVMoYmxr
aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsCisgICAg
ICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogCiB1bmlv
biBibGtpZl9iYWNrX3JpbmdzIHsKIAlibGtpZl9iYWNrX3JpbmdfdCAgICAg
ICAgbmF0aXZlOwotLS0gYS9ody9ibG9jay94ZW5fZGlzay5jCisrKyBiL2h3
L2Jsb2NrL3hlbl9kaXNrLmMKQEAgLTYwOSwzMCArNjA5LDMwIEBAIHN0YXRp
YyBpbnQgYmxrX3NlbmRfcmVzcG9uc2Vfb25lKHN0cnVjdAogICAgIHN0cnVj
dCBYZW5CbGtEZXYgICpibGtkZXYgPSBpb3JlcS0+YmxrZGV2OwogICAgIGlu
dCAgICAgICAgICAgICAgIHNlbmRfbm90aWZ5ICAgPSAwOwogICAgIGludCAg
ICAgICAgICAgICAgIGhhdmVfcmVxdWVzdHMgPSAwOwotICAgIGJsa2lmX3Jl
c3BvbnNlX3QgIHJlc3A7Ci0gICAgdm9pZCAgICAgICAgICAgICAgKmRzdDsK
LQotICAgIHJlc3AuaWQgICAgICAgID0gaW9yZXEtPnJlcS5pZDsKLSAgICBy
ZXNwLm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOwotICAgIHJl
c3Auc3RhdHVzICAgID0gaW9yZXEtPnN0YXR1czsKKyAgICBibGtpZl9yZXNw
b25zZV90ICAqcmVzcDsKIAogICAgIC8qIFBsYWNlIG9uIHRoZSByZXNwb25z
ZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9tYWluLiAqLwogICAgIHN3aXRj
aCAoYmxrZGV2LT5wcm90b2NvbCkgewogICAgIGNhc2UgQkxLSUZfUFJPVE9D
T0xfTkFUSVZFOgotICAgICAgICBkc3QgPSBSSU5HX0dFVF9SRVNQT05TRSgm
YmxrZGV2LT5yaW5ncy5uYXRpdmUsIGJsa2Rldi0+cmluZ3MubmF0aXZlLnJz
cF9wcm9kX3B2dCk7CisgICAgICAgIHJlc3AgPSBSSU5HX0dFVF9SRVNQT05T
RSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUsCisgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICBibGtkZXYtPnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9w
dnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09M
X1g4Nl8zMjoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJs
a2Rldi0+cmluZ3MueDg2XzMyX3BhcnQsCi0gICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzMyX3BhcnQucnNwX3By
b2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZi
bGtkZXYtPnJpbmdzLng4Nl8zMl9wYXJ0LAorICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfMzJfcGFydC5yc3Bf
cHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BS
T1RPQ09MX1g4Nl82NDoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9O
U0UoJmJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQsCi0gICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQu
cnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BP
TlNFKCZibGtkZXYtPnJpbmdzLng4Nl82NF9wYXJ0LAorICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfNjRfcGFy
dC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBkZWZhdWx0
OgotICAgICAgICBkc3QgPSBOVUxMOworICAgICAgICByZXR1cm4gMDsKICAg
ICB9Ci0gICAgbWVtY3B5KGRzdCwgJnJlc3AsIHNpemVvZihyZXNwKSk7CisK
KyAgICByZXNwLT5pZCAgICAgICAgPSBpb3JlcS0+cmVxLmlkOworICAgIHJl
c3AtPm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOworICAgIHJl
c3AtPnN0YXR1cyAgICA9IGlvcmVxLT5zdGF0dXM7CisKICAgICBibGtkZXYt
PnJpbmdzLmNvbW1vbi5yc3BfcHJvZF9wdnQrKzsKIAogICAgIFJJTkdfUFVT
SF9SRVNQT05TRVNfQU5EX0NIRUNLX05PVElGWSgmYmxrZGV2LT5yaW5ncy5j
b21tb24sIHNlbmRfbm90aWZ5KTsK

--=separator
Content-Type: application/octet-stream; name="xsa216-qemuu-4.7.patch"
Content-Disposition: attachment; filename="xsa216-qemuu-4.7.patch"
Content-Transfer-Encoding: base64

RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0
OiB4ZW4vZGlzazogZG9uJ3QgbGVhayBzdGFjayBkYXRhIHZpYSByZXNwb25z
ZSByaW5nCgpSYXRoZXIgdGhhbiBjb25zdHJ1Y3RpbmcgYSBsb2NhbCBzdHJ1
Y3R1cmUgaW5zdGFuY2Ugb24gdGhlIHN0YWNrLCBmaWxsCnRoZSBmaWVsZHMg
ZGlyZWN0bHkgb24gdGhlIHNoYXJlZCByaW5nLCBqdXN0IGxpa2Ugb3RoZXIg
KExpbnV4KQpiYWNrZW5kcyBkby4gQnVpbGQgb24gdGhlIGZhY3QgdGhhdCBh
bGwgcmVzcG9uc2Ugc3RydWN0dXJlIGZsYXZvcnMgYXJlCmFjdHVhbGx5IGlk
ZW50aWNhbCAodGhlIG9sZCBjb2RlIGRpZCBtYWtlIHRoaXMgYXNzdW1wdGlv
biB0b28pLgoKVGhpcyBpcyBYU0EtMjE2LgoKUmVwb3J0ZWQtYnk6IEFudGhv
bnkgUGVyYXJkIDxhbnRob255LnBlcmFyZEBjaXRyaXguY29tPgpTaWduZWQt
b2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+ClJldmll
d2VkLWJ5OiBLb25yYWQgUnplc3p1dGVrIFdpbGsgPGtvbnJhZC53aWxrQG9y
YWNsZS5jb20+CkFja2VkLWJ5OiBBbnRob255IFBFUkFSRCA8YW50aG9ueS5w
ZXJhcmRAY2l0cml4LmNvbT4KCi0tLSBhL2h3L2Jsb2NrL3hlbl9ibGtpZi5o
CisrKyBiL2h3L2Jsb2NrL3hlbl9ibGtpZi5oCkBAIC0xMiw5ICsxMiw2IEBA
CiBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QgewogCWNoYXIgZHVtbXk7
CiB9Owotc3RydWN0IGJsa2lmX2NvbW1vbl9yZXNwb25zZSB7Ci0JY2hhciBk
dW1teTsKLX07CiAKIC8qIGkzODYgcHJvdG9jb2wgdmVyc2lvbiAqLwogI3By
YWdtYSBwYWNrKHB1c2gsIDQpCkBAIC0yNiwxMyArMjMsNyBAQCBzdHJ1Y3Qg
YmxraWZfeDg2XzMyX3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90IHNlY3Rv
cl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChyL3cgb25s
eSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBzZWdbQkxL
SUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1Y3QgYmxr
aWZfeDg2XzMyX3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICAgaWQ7ICAg
ICAgICAgICAgICAvKiBjb3BpZWQgZnJvbSByZXF1ZXN0ICovCi0JdWludDhf
dCAgICAgICAgIG9wZXJhdGlvbjsgICAgICAgLyogY29waWVkIGZyb20gcmVx
dWVzdCAqLwotCWludDE2X3QgICAgICAgICBzdGF0dXM7ICAgICAgICAgIC8q
IEJMS0lGX1JTUF8/Pz8gICAgICAgKi8KLX07CiB0eXBlZGVmIHN0cnVjdCBi
bGtpZl94ODZfMzJfcmVxdWVzdCBibGtpZl94ODZfMzJfcmVxdWVzdF90Owot
dHlwZWRlZiBzdHJ1Y3QgYmxraWZfeDg2XzMyX3Jlc3BvbnNlIGJsa2lmX3g4
Nl8zMl9yZXNwb25zZV90OwogI3ByYWdtYSBwYWNrKHBvcCkKIAogLyogeDg2
XzY0IHByb3RvY29sIHZlcnNpb24gKi8KQEAgLTQ0LDE3ICszNSwxNCBAQCBz
dHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QgewogCWJsa2lmX3NlY3Rvcl90
IHNlY3Rvcl9udW1iZXI7Lyogc3RhcnQgc2VjdG9yIGlkeCBvbiBkaXNrIChy
L3cgb25seSkgICovCiAJc3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCBz
ZWdbQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKIH07Ci1zdHJ1
Y3QgYmxraWZfeDg2XzY0X3Jlc3BvbnNlIHsKLQl1aW50NjRfdCAgICAgICBf
X2F0dHJpYnV0ZV9fKChfX2FsaWduZWRfXyg4KSkpIGlkOwotCXVpbnQ4X3Qg
ICAgICAgICBvcGVyYXRpb247ICAgICAgIC8qIGNvcGllZCBmcm9tIHJlcXVl
c3QgKi8KLQlpbnQxNl90ICAgICAgICAgc3RhdHVzOyAgICAgICAgICAvKiBC
TEtJRl9SU1BfPz8/ICAgICAgICovCi19OwogdHlwZWRlZiBzdHJ1Y3QgYmxr
aWZfeDg2XzY0X3JlcXVlc3QgYmxraWZfeDg2XzY0X3JlcXVlc3RfdDsKLXR5
cGVkZWYgc3RydWN0IGJsa2lmX3g4Nl82NF9yZXNwb25zZSBibGtpZl94ODZf
NjRfcmVzcG9uc2VfdDsKIAotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZfY29t
bW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsIHN0cnVjdCBibGtp
Zl9jb21tb25fcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxraWZf
eDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2XzMyX3JlcXVlc3QsIHN0cnVjdCBi
bGtpZl94ODZfMzJfcmVzcG9uc2UpOwotREVGSU5FX1JJTkdfVFlQRVMoYmxr
aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsIHN0cnVj
dCBibGtpZl94ODZfNjRfcmVzcG9uc2UpOworREVGSU5FX1JJTkdfVFlQRVMo
YmxraWZfY29tbW9uLCBzdHJ1Y3QgYmxraWZfY29tbW9uX3JlcXVlc3QsCisg
ICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOworREVG
SU5FX1JJTkdfVFlQRVMoYmxraWZfeDg2XzMyLCBzdHJ1Y3QgYmxraWZfeDg2
XzMyX3JlcXVlc3QsCisgICAgICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZf
cmVzcG9uc2UgUUVNVV9QQUNLRUQpOworREVGSU5FX1JJTkdfVFlQRVMoYmxr
aWZfeDg2XzY0LCBzdHJ1Y3QgYmxraWZfeDg2XzY0X3JlcXVlc3QsCisgICAg
ICAgICAgICAgICAgICBzdHJ1Y3QgYmxraWZfcmVzcG9uc2UpOwogCiB1bmlv
biBibGtpZl9iYWNrX3JpbmdzIHsKIAlibGtpZl9iYWNrX3JpbmdfdCAgICAg
ICAgbmF0aXZlOwotLS0gYS9ody9ibG9jay94ZW5fZGlzay5jCisrKyBiL2h3
L2Jsb2NrL3hlbl9kaXNrLmMKQEAgLTYxNCwzMSArNjE0LDMwIEBAIHN0YXRp
YyBpbnQgYmxrX3NlbmRfcmVzcG9uc2Vfb25lKHN0cnVjdAogICAgIHN0cnVj
dCBYZW5CbGtEZXYgICpibGtkZXYgPSBpb3JlcS0+YmxrZGV2OwogICAgIGlu
dCAgICAgICAgICAgICAgIHNlbmRfbm90aWZ5ICAgPSAwOwogICAgIGludCAg
ICAgICAgICAgICAgIGhhdmVfcmVxdWVzdHMgPSAwOwotICAgIGJsa2lmX3Jl
c3BvbnNlX3QgIHJlc3A7Ci0gICAgdm9pZCAgICAgICAgICAgICAgKmRzdDsK
LQotICAgIHJlc3AuaWQgICAgICAgID0gaW9yZXEtPnJlcS5pZDsKLSAgICBy
ZXNwLm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOwotICAgIHJl
c3Auc3RhdHVzICAgID0gaW9yZXEtPnN0YXR1czsKKyAgICBibGtpZl9yZXNw
b25zZV90ICAqcmVzcDsKIAogICAgIC8qIFBsYWNlIG9uIHRoZSByZXNwb25z
ZSByaW5nIGZvciB0aGUgcmVsZXZhbnQgZG9tYWluLiAqLwogICAgIHN3aXRj
aCAoYmxrZGV2LT5wcm90b2NvbCkgewogICAgIGNhc2UgQkxLSUZfUFJPVE9D
T0xfTkFUSVZFOgotICAgICAgICBkc3QgPSBSSU5HX0dFVF9SRVNQT05TRSgm
YmxrZGV2LT5yaW5ncy5uYXRpdmUsIGJsa2Rldi0+cmluZ3MubmF0aXZlLnJz
cF9wcm9kX3B2dCk7CisgICAgICAgIHJlc3AgPSBSSU5HX0dFVF9SRVNQT05T
RSgmYmxrZGV2LT5yaW5ncy5uYXRpdmUsCisgICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICBibGtkZXYtPnJpbmdzLm5hdGl2ZS5yc3BfcHJvZF9w
dnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BST1RPQ09M
X1g4Nl8zMjoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9OU0UoJmJs
a2Rldi0+cmluZ3MueDg2XzMyX3BhcnQsCi0gICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzMyX3BhcnQucnNwX3By
b2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BPTlNFKCZi
bGtkZXYtPnJpbmdzLng4Nl8zMl9wYXJ0LAorICAgICAgICAgICAgICAgICAg
ICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfMzJfcGFydC5yc3Bf
cHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBjYXNlIEJMS0lGX1BS
T1RPQ09MX1g4Nl82NDoKLSAgICAgICAgZHN0ID0gUklOR19HRVRfUkVTUE9O
U0UoJmJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQsCi0gICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgIGJsa2Rldi0+cmluZ3MueDg2XzY0X3BhcnQu
cnNwX3Byb2RfcHZ0KTsKKyAgICAgICAgcmVzcCA9IFJJTkdfR0VUX1JFU1BP
TlNFKCZibGtkZXYtPnJpbmdzLng4Nl82NF9wYXJ0LAorICAgICAgICAgICAg
ICAgICAgICAgICAgICAgICAgICAgYmxrZGV2LT5yaW5ncy54ODZfNjRfcGFy
dC5yc3BfcHJvZF9wdnQpOwogICAgICAgICBicmVhazsKICAgICBkZWZhdWx0
OgotICAgICAgICBkc3QgPSBOVUxMOwogICAgICAgICByZXR1cm4gMDsKICAg
ICB9Ci0gICAgbWVtY3B5KGRzdCwgJnJlc3AsIHNpemVvZihyZXNwKSk7CisK
KyAgICByZXNwLT5pZCAgICAgICAgPSBpb3JlcS0+cmVxLmlkOworICAgIHJl
c3AtPm9wZXJhdGlvbiA9IGlvcmVxLT5yZXEub3BlcmF0aW9uOworICAgIHJl
c3AtPnN0YXR1cyAgICA9IGlvcmVxLT5zdGF0dXM7CisKICAgICBibGtkZXYt
PnJpbmdzLmNvbW1vbi5yc3BfcHJvZF9wdnQrKzsKIAogICAgIFJJTkdfUFVT
SF9SRVNQT05TRVNfQU5EX0NIRUNLX05PVElGWSgmYmxrZGV2LT5yaW5ncy5j
b21tb24sIHNlbmRfbm90aWZ5KTsK

--=separator
Content-Type: text/plain; charset="utf-8"
MIME-Version: 1.0
Content-Transfer-Encoding: base64
Content-Disposition: inline

X19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX19fX18KWGVuLWFubm91
bmNlIG1haWxpbmcgbGlzdApYZW4tYW5ub3VuY2VAbGlzdHMueGVuLm9yZwpodHRwczovL2xpc3Rz
Lnhlbi5vcmcveGVuLWFubm91bmNl

--=separator--


From xen-announce-bounces@lists.xen.org Thu Jun 22 17:45:18 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Thu, 22 Jun 2017 17:45:18 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dO69W-0007nH-Rb; Thu, 22 Jun 2017 17:44:22 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <julien.grall@arm.com>)
 id 1dO686-0007dT-C1; Thu, 22 Jun 2017 17:42:54 +0000
Received: from [193.109.254.147] by server-4.bemta-6.messagelabs.com id
 74/05-02956-D910C495; Thu, 22 Jun 2017 17:42:53 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprHIsWRWlGSWpSXmKPExsVysyfVTXcOo0+
 kwaPFFhazN7YxW3zfMpnJgcnj8IcrLAGMUayZeUn5FQmsGZ2X9rMWTGep+L/kMVMD4zXmLkYu
 DiGBTYwSa5Y+YIdwdjNK3N/RxQLiiAh0MEo8nHuOsYuRk4NZwFjiyM7nTCA2m4CmxJ3Pn8BsY
 QERialbV4LV8ApYSXQu+c3WxcjBwSKgKjF9fwRIWFQgXOJt4xEWiBJBiZMzn7BAjFSX+DPvEj
 OELS+x/e0c5gmMPLOQlM1CUjYLSdkCRuZVjBrFqUVlqUW6hqZ6SUWZ6RkluYmZObqGBmZ6uan
 FxYnpqTmJScV6yfm5mxiBocQABDsYvy0LOMQoycGkJMq7udg7UogvKT+lMiOxOCO+qDQntfgQ
 owwHh5IE73kGn0ghwaLU9NSKtMwcYFDDpCU4eJREeN99B2rlLS5IzC3OTIdInWI05tiwev0XJ
 o6mD1u+MAmx5OXnpUqJ864FmSQAUppRmgc3CBZtlxhlpYR5GYFOE+IpSC3KzSxBlX/FKM7BqC
 TMqwUyhSczrwRu3yugU5iATnlxxAPklJJEhJRUA6PoYuslmc6avZ69cheTxQOTlibNqfOzXbX
 LY1PJtxuOUYFPeD+HsH4SKU7QO72h4amgQVh2yZNH5cazeBck2l+s02X9+eezGlOx0IO2I/aL
 o5/qde3fvfDN9IMmMRHXLVr/P7d9n7Une7L6rEdvimLMl6xwaJir/6LGl+//+fNR/K+vRIZ5R
 CmxFGckGmoxFxUnAgB6HrU/sQIAAA==
X-Env-Sender: julien.grall@arm.com
X-Msg-Ref: server-7.tower-27.messagelabs.com!1498153372!104425809!1
X-Originating-IP: [217.140.101.70]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 1247 invoked from network); 22 Jun 2017 17:42:52 -0000
Received: from foss.arm.com (HELO foss.arm.com) (217.140.101.70)
 by server-7.tower-27.messagelabs.com with SMTP; 22 Jun 2017 17:42:52 -0000
Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249])
 by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 8D91B80D;
 Thu, 22 Jun 2017 10:42:51 -0700 (PDT)
Received: from [10.1.206.53] (e108454-lin.cambridge.arm.com [10.1.206.53])
 by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id CDC733F557;
 Thu, 22 Jun 2017 10:42:50 -0700 (PDT)
To: xen-devel <xen-devel@lists.xenproject.org>,
 xen-announce@lists.xenproject.org,
 "xen-users@lists.xen.org" <xen-users@lists.xen.org>
From: Julien Grall <julien.grall@arm.com>
Message-ID: <0662601d-a77b-7d52-4be0-bcb76bea3b12@arm.com>
Date: Thu, 22 Jun 2017 18:42:49 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.8.0
MIME-Version: 1.0
X-Mailman-Approved-At: Thu, 22 Jun 2017 17:44:21 +0000
Cc: "lars.kurth@citrix.com" <lars.kurth@citrix.com>
Subject: [Xen-announce] Xen 4.9 rc9
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>
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From xen-announce-bounces@lists.xen.org Wed Jun 28 13:08:53 2017
Return-path: <xen-announce-bounces@lists.xen.org>
Envelope-to: archives@lists.xen.org
Delivery-date: Wed, 28 Jun 2017 13:08:53 +0000
Received: from localhost ([127.0.0.1] helo=lists.xenproject.org)
	by lists.xenproject.org with esmtp (Exim 4.84_2)
	(envelope-from <xen-announce-bounces@lists.xen.org>)
	id 1dQChJ-0003WV-M8; Wed, 28 Jun 2017 13:07:57 +0000
Received: from mail6.bemta6.messagelabs.com ([193.109.254.103])
 by lists.xenproject.org with esmtp (Exim 4.84_2)
 (envelope-from <julien.grall@arm.com>)
 id 1dQCfr-0003NJ-Hh; Wed, 28 Jun 2017 13:06:27 +0000
Received: from [193.109.254.147] by server-9.bemta-6.messagelabs.com id
 94/09-03406-2D9A3595; Wed, 28 Jun 2017 13:06:26 +0000
X-Brightmail-Tracker: H4sIAAAAAAAAA+NgFprJIsWRWlGSWpSXmKPExsVysyfVTffSyuB
 Ig86/XBazN7YxW3zfMpnJgcnj8IcrLAGMUayZeUn5FQmsGRvOrmAs+MJecXj2LuYGxs9sXYxc
 HEICmxglbva0sEA4uxkl/rU8YgJxRAQ6GCVe921k7mLk5GAWMJY4svM5E4jNJqApcefzJzBbW
 EBXYvauJywgNq+AlcTpI4vB4iwCqhKP+y6xg9iiAuESbxuPQNUISpycCVHPLKAu8WfeJaj58h
 Lb385hnsDIMwtJ2SwkZbOQlC1gZF7FqFGcWlSWWqRrZKaXVJSZnlGSm5iZo2toYKaXm1pcnJi
 empOYVKyXnJ+7iREYTAxAsIPxzILAQ4ySHExKorx7vwRFCvEl5adUZiQWZ8QXleakFh9ilOHg
 UJLgPbgiOFJIsCg1PbUiLTMHGNYwaQkOHiUR3gXLgdK8xQWJucWZ6RCpU4y6HBtWr//CJMSSl
 5+XKiXOuxxkhgBIUUZpHtwIWIxdYpSVEuZlBDpKiKcgtSg3swRV/hWjOAejkjBvMDBihXgy80
 rgNr0COoIJ6AiWeQEgR5QkIqSkGhjPXle7dOj5HjfN+FcKsevdJrfO5/q1YdKP/pNPZxW4r7x
 yv+q9wR5fa4G361PuTUuUFtC+MMWXPzy6MNXQf0OezOxXKl8fu1l7L9UojFcv3mFS0O7490yc
 qK7UjcA1iQ6+c336dO5ONXK8cavMpPiljrh/aQlbTEk661FJkW9v9ym+XznnH5cSS3FGoqEWc
 1FxIgCvYdr5rAIAAA==
X-Env-Sender: julien.grall@arm.com
X-Msg-Ref: server-5.tower-27.messagelabs.com!1498655185!99107833!1
X-Originating-IP: [217.140.101.70]
X-SpamReason: No, hits=0.0 required=7.0 tests=
X-StarScan-Received: 
X-StarScan-Version: 9.4.19; banners=-,-,-
X-VirusChecked: Checked
Received: (qmail 21853 invoked from network); 28 Jun 2017 13:06:26 -0000
Received: from foss.arm.com (HELO foss.arm.com) (217.140.101.70)
 by server-5.tower-27.messagelabs.com with SMTP; 28 Jun 2017 13:06:26 -0000
Received: from usa-sjc-imap-foss1.foss.arm.com (unknown [10.72.51.249])
 by usa-sjc-mx-foss1.foss.arm.com (Postfix) with ESMTP id 3D640344;
 Wed, 28 Jun 2017 06:06:25 -0700 (PDT)
Received: from [10.1.206.53] (e108454-lin.cambridge.arm.com [10.1.206.53])
 by usa-sjc-imap-foss1.foss.arm.com (Postfix) with ESMTPSA id 7B30C3F557;
 Wed, 28 Jun 2017 06:06:24 -0700 (PDT)
To: xen-announce@lists.xenproject.org,
 xen-devel <xen-devel@lists.xenproject.org>,
 "xen-users@lists.xen.org" <xen-users@lists.xen.org>
From: Julien Grall <julien.grall@arm.com>
Message-ID: <a84e77ae-d70c-5968-8817-c2c731a4a487@arm.com>
Date: Wed, 28 Jun 2017 14:06:23 +0100
User-Agent: Mozilla/5.0 (X11; Linux x86_64; rv:45.0) Gecko/20100101
 Thunderbird/45.8.0
MIME-Version: 1.0
X-Mailman-Approved-At: Wed, 28 Jun 2017 13:07:56 +0000
Cc: "lars.kurth@citrix.com" <lars.kurth@citrix.com>
Subject: [Xen-announce] [ANNOUNCEMENT] Xen 4.9.0 is released
X-BeenThere: xen-announce@lists.xen.org
X-Mailman-Version: 2.1.18
Precedence: list
List-Id: "Xen announcements \(low volume\)" <xen-announce.lists.xen.org>
List-Unsubscribe: <https://lists.xen.org/cgi-bin/mailman/options/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=unsubscribe>
List-Post: <mailto:xen-announce@lists.xen.org>
List-Help: <mailto:xen-announce-request@lists.xen.org?subject=help>
List-Subscribe: <https://lists.xen.org/cgi-bin/mailman/listinfo/xen-announce>, 
 <mailto:xen-announce-request@lists.xen.org?subject=subscribe>
Content-Type: text/plain; charset="utf-8"
Content-Transfer-Encoding: base64
Errors-To: xen-announce-bounces@lists.xen.org
Sender: "Xen-announce" <xen-announce-bounces@lists.xen.org>
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