From xen-users-bounces@lists.xenproject.org Wed Sep 02 15:04:18 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Wed, 02 Sep 2026 15:04:18 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1404837.1639492 (Exim 4.92) (envelope-from ) id 1x1mUh-0001Kn-LX; Wed, 02 Sep 2026 15:03:19 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1404837.1639492; Wed, 02 Sep 2026 15:03:19 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x1mUh-0001Kg-Ib; Wed, 02 Sep 2026 15:03:19 +0000 Received: by outflank-mailman (input) for mailman id 1404837; Tue, 01 Sep 2026 16:01:20 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) id 1x1QvI-0006Ks-BF for xen-users@lists.xenproject.org; Tue, 01 Sep 2026 16:01:20 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x1QvH-00DoB9-OS for xen-users@lists.xenproject.org; Tue, 01 Sep 2026 18:01:19 +0200 Received: from [10.42.69.9] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a96f6c3-e002-0a2a0a5209dd-0a2a4509ea3a-32 for ; Tue, 01 Sep 2026 18:01:19 +0200 Received: from [209.85.221.54] (helo=mail-wr1-f54.google.com) by tlsNG-bad1c0.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a96f6cf-be1a-0a2a45090019-d155dd36ad08-3 for ; Tue, 01 Sep 2026 18:01:19 +0200 Received: by mail-wr1-f54.google.com with SMTP id ffacd0b85a97d-48433fad54aso43559f8f.1 for ; Tue, 01 Sep 2026 09:01:19 -0700 (PDT) Received: from [192.168.1.6] (user-109-243-144-234.play-internet.pl. [109.243.144.234]) by smtp.gmail.com with ESMTPSA id ffacd0b85a97d-48442d6e9cfsm6093550f8f.22.2026.09.01.09.01.18 (version=TLS1_3 cipher=TLS_AES_128_GCM_SHA256 bits=128/128); Tue, 01 Sep 2026 09:01:18 -0700 (PDT) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=20251104 header.d=gmail.com header.i="@gmail.com" header.h="Content-Transfer-Encoding:Content-Type:Subject:From:Cc:To:Content-Language:User-Agent:MIME-Version:Date:Message-ID" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20251104; t=1788278479; x=1788883279; darn=lists.xenproject.org; h=content-transfer-encoding:content-type:subject:from:cc:to :content-language:user-agent:mime-version:date:message-id:from:to:cc :subject:date:message-id:reply-to:content-type; bh=Uxs4dwxHLDrtpiehWQZcP6/OkQeIFJi5v0FYqUxYdnc=; b=nB38xEYMcSjGlnTkv426FbLxZd3cM++3MZ5URx4z/gYfIWglW6LJJBeh9JsQb0FkpT jLPdIaGeDY66ZOe47uCDSZVE0T3tNBDWeSXbe+98twnquQmMW3fdcBFPozhCPUrnlju5 kc9fx2H7Dqa56jdECk/iaVS2KbtVGT84qWUsfcFR+HF4xNMENflMJbEStBLOW1Kc3jtg hmijjC0f6ElcQ2RUQAx1vSLPdex7lCf5zkYBu9HkzYWe4TcYKjO4B7cXK5NNCBhLEHgI xmT2IUo5H/gTjgVv7DjGHzTNS5zVuIZBAal2vv+U3ciODv1880rbaT4Oe3GBnlntj9CM gmTw== X-Google-DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=1e100.net; s=20251104; t=1788278479; x=1788883279; h=content-transfer-encoding:content-type:subject:from:cc:to :content-language:user-agent:mime-version:date:message-id:x-gm-gg :x-gm-message-state:from:to:cc:subject:date:message-id:reply-to :content-type; bh=Uxs4dwxHLDrtpiehWQZcP6/OkQeIFJi5v0FYqUxYdnc=; b=dvvoCCgXjbtDYgSxJs2ms2M9e6sHap0zrSLHjOGJIMDjSh9xj6RS5f89IiNrbryqm5 ACh4rN8B1OOYy6RZatnNiovSPFlIhmyLqnL9JD7xtbAiSijgPNc9IPPITcaP79U7jWzD IWSdvDomnGcU2upsBgpEjFYbfOG/ifqE59naBhdcnsnHGJyceBM44jBn4m05oJfMpOlb WggTCJd0UE4mtibMTquTDSlVWauOplp0mnEB8Adx2S0lN3v81Rll9d2t+85FuJP6UpKO 42jsEateuv9sl47YwjeJuv6Fw3BXEQdi5FxwYXWCVrBT05ssDB6FUUMuKRpsZUu9qGu2 1pwg== X-Gm-Message-State: AFuF++nuRoOJxT8NtOUeyhaJerbwIvneaqr7YsYcsKtfzX8AmQhRRNWI 1XqN2ltHIcC4smFrkSmKTVTBOeT44NIcCebCvpJUGjBTGH8rYwaFpDM6 X-Gm-Gg: AYBFou1JYLaYeEO+DB4tpkndfDmCGHhIYTQI35zI7ukiLzMC+S8s4V9+LWboHprqZC6 MKAQbVaKG/VsFzHj+MJ6QkIns+EYCNpZ7xph+o/z8E4rSX/31BZR1k3hDf9R5gqiefUV91gcG3a MGKQd4rS9ER0xuePKpS6XPKLdOm9e2POc2+3L6oBTL9ji3j5Ah7Znz5PcaOla7+5Kl8XkdXi5e7 L57J7lMZ6BT8kKz6bZy+f42I4T0lnoQOJOvz9aWVF9joUaNbGk296rqqtGZLbSHy7qUC6tXLOW4 W6ccdrtXc2BqyguLfwqgbGyIyTahNvE47GCvxbF2zhUpyWTT39YQ/Dc0IFkFbti82pr8A2P6J5I N9hhhDBrAc+vwqF8ytly+qFz/t9jTR9N58QHbQtJimR/yHakL7FKinSeyfpt7D0+LuBacbqzYu/ fAP36C9EHnT8nvmE9aPXv5MYziWk/EseKmZmez/2QlXnGTfthuiD3GOntDpaAeWXgsUZauDOmMs URqnZRCbylhskS5xHrcpbfeUdiPnC+1jijEmXBA1g== X-Received: by 2002:a05:6000:27c6:b0:484:3310:710b with SMTP id ffacd0b85a97d-48441025c15mr13724662f8f.23.1788278478991; Tue, 01 Sep 2026 09:01:18 -0700 (PDT) Message-ID: <74fb7d16-7042-4311-a39b-d00e5a0560f8@gmail.com> Date: Tue, 1 Sep 2026 18:01:18 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: Xen-devel Cc: xen-users@lists.xenproject.org, Community Manager , "committers@xenproject.org" From: Oleksii Kurochko Subject: Xen 4.23 release schedule proposal Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 7bit X-purgate-ID: tlsNG-bad1c0/1788278479-3B6D2034-9E6B4D07/10/73395122804 X-purgate-type: spam X-purgate-size: 2884 Hello everyone, Following the 8-month release cycle, and taking into account that Xen 4.22 was released on July 30, 2026, the next "good" month for a release should be March, according to: https://lists.xen.org/archives/html/xen-devel/2018-07/msg02240.html I have two options in mind: Option A: Proposed release date: Wednesday, March 17, 2027 (~8 months after the Xen 4.22 release) Last posting date: Friday, December 25, 2026 (~16 weeks from now) Patches adding new features are expected to be posted to the mailing list by this date, although they do not necessarily need to be in their final version. Feature freeze: Friday, January 15, 2027 (+3 weeks from the Last posting date) Patches adding new features should be committed by this date. Straightforward bug fixes may continue to be accepted by maintainers. Code freeze: Friday, February 5, 2027 (+3 weeks from the Feature freeze) Bug fixes only. Hard code freeze: Friday, February 26, 2027 (+3 weeks from the Code freeze) Only bug fixes for serious bugs (including regressions) and low-risk fixes should be accepted. Final commits: Friday, March 12, 2027 (+2 weeks from the Hard code freeze) Branch off staging-4.23. Release: Wednesday, March 17, 2027 Considering that there are several holidays at the end of December and in January, I would also consider the following schedule: Option B: Proposed release date: Wednesday, March 24, 2027 (~8 months after the Xen 4.22 release) Last posting date: Friday, January 8, 2027 Patches adding new features are expected to be posted to the mailing list by this date, although they do not necessarily need to be in their final version. Feature freeze: Friday, January 22, 2027 (+2 weeks from the Last posting date) Patches adding new features should be committed by this date. Straightforward bug fixes may continue to be accepted by maintainers. Code freeze: Friday, February 12, 2027 (+3 weeks from the Feature freeze) Bug fixes only. Hard code freeze: Friday, March 5, 2027 (+3 weeks from the Code freeze) Only bug fixes for serious bugs (including regressions) and low-risk fixes should be accepted. Final commits: Friday, March 19, 2027 (+2 weeks from the Hard code freeze) Branch off staging-4.23. Release: Wednesday, March 24, 2027 I slightly prefer Option B. Please don't hesitate to provide your feedback. If there are no objections to Option B, I plan to update the Wiki page Xen_Project_X.YY_Release_Notes to make it easier to find our final schedule, especially for people who are not following the xen-devel mailing list. As an additional benefit, it will also be accessible via SUPPORT.md (in the Wiki at https://xenbits.xen.org/docs/unstable-staging/support-matrix.html). Thanks, and have a good weekend. Best regards, Oleksii From xen-users-bounces@lists.xenproject.org Tue Sep 08 12:01:25 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 08 Sep 2026 12:01:25 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1411338.1642121 (Exim 4.92) (envelope-from ) id 1x3uVY-0006ud-U1; Tue, 08 Sep 2026 12:01:00 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1411338.1642121; Tue, 08 Sep 2026 12:01:00 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVY-0006qP-Dl; Tue, 08 Sep 2026 12:01:00 +0000 Received: by outflank-mailman (input) for mailman id 1411338; Tue, 08 Sep 2026 12:00:57 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVU-00061x-Lr; Tue, 08 Sep 2026 12:00:56 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x3uVU-00H0es-2W; Tue, 08 Sep 2026 14:00:56 +0200 Received: from [10.42.69.6] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a9ff8ef-bab6-0a2a0a5309dd-0a2a450691f0-34 for ; Tue, 08 Sep 2026 14:00:56 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-16d1c6.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a9ff8f6-195a-0a2a45060019-6882d725cd8e-3 for ; Tue, 08 Sep 2026 14:00:55 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1x3uVM-004n5G-0m; Tue, 08 Sep 2026 12:00:48 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1x3uVM-00GkcL-1j; Tue, 08 Sep 2026 12:00:48 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 512 v3 (CVE-2026-79604) - oxenstored: Unbounded accumulation of watches Message-Id: Date: Tue, 08 Sep 2026 12:00:48 +0000 X-purgate-ID: tlsNG-16d1c6/1788868855-F460277B-5B52116B/0/0 X-purgate-type: clean X-purgate-size: 30031 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-79604 / XSA-512 version 3 oxenstored: Unbounded accumulation of watches UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= Oxenstored maintains two datastructures about watches; one global trie, and one hashtable tracked per domain. When a xenbus reconnect is requested, watches are not cleared out of the global trie. IMPACT ====== A guest can cause unbounded memory usage in oxenstored. This can lead to a system-wide DoS. VULNERABLE SYSTEMS ================== All version of Xen from 4.6 onwards are vulnerable. Only systems using the Ocaml Xenstored implementation are vulnerable. Systems using the C Xenstored implementation are not vulnerable. MITIGATION ========== There are no mitigations. CREDITS ======= Found by Anthropic using agents to study the security of open-source projects, with Ada Logics validating and reporting. RESOLUTION ========== Applying the appropriate set of attached patches resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. For xen.git oxenstored: xsa512-?.patch xen-unstable - Xen 4.18.x xsa512-4.17-?.patch Xen 4.17.x For xapi-project/oxenstored: xsa512-oxenstored-?.patch oxenstored master $ sha256sum xsa512* c4f92a3e032f853a85cbd43391b6fd6a2c8f6f4caeee49bec9bc97a5279ce9a3 xsa512-1.patch 2cc57079eda8f0db34885e8be242d736f590ae8094c60a044b55b4889e10392f xsa512-2.patch 16bfa30473d4ba67dea69f1915357ecbe4aefc3b10bfd413f0bd7a7d2cfe2a80 xsa512-4.17-1.patch 7c23fb0e64429db074d7ec4cf7ba6ba319b69d5f1d059aa848c19b9ce148244c xsa512-4.17-2.patch 28c6267057ccf3508eee92dd82a9726e6b0d616fd7cc3e7dcee9cbfd3b0b80f7 xsa512-oxenstored-1.patch 00b9df35d9cc3ee393385a65725a2a681e31b9e00c4d1d76e0441e284f005707 xsa512-oxenstored-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmqf98gMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZk9kIAMqGI+5EVMLUd++EmpLqiTyGPcMYcDexca9XIpfJ Gx+DICPIRfRDCFtUG4jEeEDi8lmDvIKp5XXTNRkxyWF3uVKYDA5xCxekKOGmS40A p46pGzVVzGeSKdm2FfxEDDyuhhET5QrZLN98rJBcoL0/aX5sI4UoDR/FfdFemoAV BVrRG4WgQuBDa7+/t4jgZ8DysZbn/zmLoOtNIPVtaH5zvep0ehGQSnR8sAOEB+mV tmiW3kQoR1hxlOF/p1iVKLoBdOtJktwJ+Tk6OCCssS5TNGlGcpTs0KPukkXKwrem vYDYkHeUTf4rd3khUfCdW1S0Gc/3XSBtdL26VSj1xku5kMA= =6TLi -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa512-1.patch" Content-Disposition: attachment; filename="xsa512-1.patch" Content-Transfer-Encoding: base64 RnJvbSA1MzMyYTJjNDZkYjRmOTZlNWQ1YTU3MTAwYzU1MDc2ZmU1NjEwYmVi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE2OjAwOjAyICswMTAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IEZhY3RvciBvdXQgUHJvY2Vzcy5kb19yZWNvbm5lY3QoKQoKVGhlIGxvZ2lj IGZsb3cgaGVyZSBpcyBjb21wbGljYXRlZC4gIEluIHByZXBhcmF0aW9uIHRv IGZpeCBhIGJ1ZywgZmFjdG9yIG91dApyZWNvbm5lY3RpbmcgYSB4ZW5idXMg Y29ubmVjdGlvbiwgYW5kIGZvbGQgSGlzdG9yeS5yZWNvbm5lY3QgaW50byBp dCdzIHNpbmdsZQpjYWxsZXIuCgpObyBmdW5jdGlvbmFsIGNoYW5nZS4KClRo aXMgaXMgcGFydCBvZiBYU0EtNTEyIC8gQ1ZFLTIwMjYtNzk2MDQuCgpTaWdu ZWQtb2ZmLWJ5OiBBbmRyaWkgU3VsdGFub3YgPGFuZHJpeS5zdWx0YW5vdkB2 YXRlcy50ZWNoPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogQW5kcmlpIFN1 bHRhbm92IDxhbmRyaXkuc3VsdGFub3ZAdmF0ZXMudGVjaD4KCmRpZmYgLS1n aXQgYS90b29scy9vY2FtbC94ZW5zdG9yZWQvaGlzdG9yeS5tbCBiL3Rvb2xz L29jYW1sL3hlbnN0b3JlZC9oaXN0b3J5Lm1sCmluZGV4IGYwM2ZiMTgzMjky My4uMzQ3NGE2MmRhMjMwIDEwMDY0NAotLS0gYS90b29scy9vY2FtbC94ZW5z dG9yZWQvaGlzdG9yeS5tbAorKysgYi90b29scy9vY2FtbC94ZW5zdG9yZWQv aGlzdG9yeS5tbApAQCAtMzksMTAgKzM5LDYgQEAgbGV0IGVuZF90cmFuc2Fj dGlvbiB0eG4gY29uIHRpZCBjb21taXQgPQogICB0cmltIH50eG4gKCk7CiAg IHN1Y2Nlc3MKIAotbGV0IHJlY29ubmVjdCBjb24gPQotICB0cmltICgpOwot ICBDb25uZWN0aW9uLmRvX3JlY29ubmVjdCBjb24KLQogbGV0IHB1c2ggKHg6 IGhpc3RvcnlfcmVjb3JkKSA9CiAgIGxldCBkb20gPSB4LmNvbi5Db25uZWN0 aW9uLmRvbSBpbgogICBtYXRjaCBkb20gd2l0aApkaWZmIC0tZ2l0IGEvdG9v bHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nlc3MubWwgYi90b29scy9vY2FtbC94 ZW5zdG9yZWQvcHJvY2Vzcy5tbAppbmRleCAwYzljNDYwYTk5MTUuLmJjNjhj NTRjOWFiYSAxMDA2NDQKLS0tIGEvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3By b2Nlc3MubWwKKysrIGIvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nlc3Mu bWwKQEAgLTM1MCw2ICszNTAsMTMgQEAgbGV0IGRvX3Jlc2V0X3dhdGNoZXMg Y29uIF90IF9kb21haW5zIGNvbnMgX2RhdGEgPQogICBDb25uZWN0aW9ucy5k ZWxfd2F0Y2hlcyBjb25zIGNvbjsKICAgQ29ubmVjdGlvbi5kZWxfdHJhbnNh Y3Rpb25zIGNvbgogCitsZXQgZG9fcmVjb25uZWN0IGNvbnMgY29uID0KKyAg bGV0IGRvbXN0ciA9IENvbm5lY3Rpb24uZ2V0X2RvbXN0ciBjb24gaW4KKyAg aW5mbyAiJXMgcmVxdWVzdHMgYSByZWNvbm5lY3QiIGRvbXN0cjsKKyAgSGlz dG9yeS50cmltICgpOworICBDb25uZWN0aW9uLmRvX3JlY29ubmVjdCBjb247 CisgIGluZm8gIiVzIHJlY29ubmVjdGlvbiBjb21wbGV0ZSIgZG9tc3RyCisK ICgqIG9ubHkgaW4gPj0geGVuMy4zICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgKikKIGxldCBkb19zZXRfdGFyZ2V0IGNvbiBfdCBf ZG9tYWlucyBjb25zIGRhdGEgPQogICBpZiBub3QgKENvbm5lY3Rpb24uaXNf ZG9tMCBjb24pCkBAIC03MzUsOSArNzQyLDcgQEAgbGV0IGRvX2lucHV0IHN0 b3JlIGNvbnMgZG9tcyBjb24gPQogICAgICAgaWYgQ29ubmVjdGlvbi5jYW5f aW5wdXQgY29uIHRoZW4gQ29ubmVjdGlvbi5kb19pbnB1dCBjb24KICAgICAg IGVsc2UgTm9uZQogICAgIHdpdGggWGVuYnVzLlhiLlJlY29ubmVjdCAtPgot ICAgICAgaW5mbyAiJXMgcmVxdWVzdHMgYSByZWNvbm5lY3QiIChDb25uZWN0 aW9uLmdldF9kb21zdHIgY29uKTsKLSAgICAgIEhpc3RvcnkucmVjb25uZWN0 IGNvbjsKLSAgICAgIGluZm8gIiVzIHJlY29ubmVjdGlvbiBjb21wbGV0ZSIg KENvbm5lY3Rpb24uZ2V0X2RvbXN0ciBjb24pOworICAgICAgZG9fcmVjb25u ZWN0IGNvbnMgY29uOwogICAgICAgTm9uZQogICAgICAgIHwgSW52YWxpZF9h cmd1bWVudCBleHAgfCBGYWlsdXJlIGV4cCAtPgogICAgICAgICAgZXJyb3Ig ImNhdWdodCBleGNlcHRpb24gJXMiIGV4cDsKQEAgLTc2MCw3ICs3NjUsNyBA QCBsZXQgZG9faW5wdXQgc3RvcmUgY29ucyBkb21zIGNvbiA9CiAgICAgd3Jp dGVfYWNjZXNzX2xvZyB+dHkgfnRpZCB+Y29uOihDb25uZWN0aW9uLmdldF9k b21zdHIgY29uKSB+ZGF0YTsKICAgICBDb25uZWN0aW9uLmluY3Jfb3BzIGNv bgogCi1sZXQgZG9fb3V0cHV0IF9zdG9yZSBfY29ucyBfZG9tcyBjb24gPQor bGV0IGRvX291dHB1dCBfc3RvcmUgY29ucyBfZG9tcyBjb24gPQogICBDb25u ZWN0aW9uLnNvdXJjZV9mbHVzaF93YXRjaGV2ZW50cyBjb247CiAgIGlmIENv bm5lY3Rpb24uaGFzX291dHB1dCBjb24gdGhlbiAoCiAgICAgaWYgQ29ubmVj dGlvbi5oYXNfbmV3X291dHB1dCBjb24gdGhlbiAoCkBAIC03NzUsOCArNzgw LDYgQEAgbGV0IGRvX291dHB1dCBfc3RvcmUgX2NvbnMgX2RvbXMgY29uID0K ICAgICB0cnkKICAgICAgIGlnbm9yZSAoQ29ubmVjdGlvbi5kb19vdXRwdXQg Y29uKQogICAgIHdpdGggWGVuYnVzLlhiLlJlY29ubmVjdCAtPgotICAgICAg aW5mbyAiJXMgcmVxdWVzdHMgYSByZWNvbm5lY3QiIChDb25uZWN0aW9uLmdl dF9kb21zdHIgY29uKTsKLSAgICAgIEhpc3RvcnkucmVjb25uZWN0IGNvbjsK LSAgICAgIGluZm8gIiVzIHJlY29ubmVjdGlvbiBjb21wbGV0ZSIgKENvbm5l Y3Rpb24uZ2V0X2RvbXN0ciBjb24pCisgICAgICBkb19yZWNvbm5lY3QgY29u cyBjb24KICAgKQogCg== --=separator Content-Type: application/octet-stream; name="xsa512-2.patch" Content-Disposition: attachment; filename="xsa512-2.patch" Content-Transfer-Encoding: base64 RnJvbSA4ZGM0Y2E1MGU2MmYyNTg3YTAyMTNiMDc4ZmM5MDhmZGZiNTQ4Mjhi IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE1OjAwOjAyICswMDAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IFJlc2V0IHRoZSB3YXRjaGVzIHRyaWUgb24gZG9tYWluIHJlY29ubmVjdAoK b3hlbnN0b3JlZCBtYWludGFpbnMgdHdvIGRhdGFzdHJ1Y3R1cmVzIGFib3V0 IHdhdGNoZXM7IG9uZSBnbG9iYWwgdHJpZSwgYW5kCm9uZSBoYXNodGFibGUg dHJhY2tlZCBwZXIgZG9tYWluLiAgQm90aCBuZWVkIGtlZXBpbmcgaW4gc3lu YywgYW5kIHJpZ2h0IG5vdwp0aGUgZ2xvYmFsIHRyaWUgaXMgbm90IGVtcHRp ZWQgd2hlbiBhIHhlbmJ1cyByZWNvbm5lY3QgaXMgcmVxdWVzdGVkLgoKVGhp cyBpcyBiYXNpY2FsbHkgdGhlIHNhbWUgYnVnIGFzIFhTQS0zMzAsIGNvbW1p dCA0OTFhMDc3ZWQ0YzUKKCJ0b29scy9vY2FtbC94ZW5zdG9yZWQ6IGRlbGV0 ZSB3YXRjaCBmcm9tIHRyaWUgdG9vIHdoZW4gcmVzZXR0aW5nIHdhdGNoZXMi KSwKanVzdCB0aWNrbGVkIHZpYSBhbm90aGVyIHBhdGguCgpBcnJhbmdlIGZv ciBib3RoIFByb2Nlc3MuZG9fcmVzZXRfd2F0Y2hlcygpIGFuZCBQcm9jZXNz LmRvX3JlY29ubmVjdCgpIHRvCnNoYXJlIGEgY29tbW9uIGNvZGVwYXRoIGZv ciB0aGUgcmVzZXR0aW5nIG9mIHdhdGNoZXMgYW5kIHRyYW5zYWN0aW9ucy4K Tm90YWJseSwgdGhpcyBtZWFucyB0aGF0IHRoZSBsYXR0ZXIgbm93IGNhbGxz IENvbm5lY3Rpb25zLmRlbF93YXRjaGVzKCkgd2hpY2gKY2xlYXJzIHRoZSBn bG9iYWwgdHJpZSB0b28uCgpDb25uZWN0aW9ucy5kZWxfd2F0Y2hlcygpIGFs cmVhZHkgY2FsbHMgQ29ubmVjdGlvbi5kZWxfd2F0Y2hlcygpIHNvIHJlbW92 ZSB0aGUKcmUtY2xlYXJpbmcgb2YgdGhlIHN0YXRlIGZyb20gQ29ubmVjdGlv bi5kb19yZWNvbm5lY3QoKS4KCk1vdmUgSGlzdG9yeS50cmltKCkgaW50byBy ZXNldF93YXRjaGVzX2FuZF90cmFuc2FjdGlvbnMoKSBzbyBpdCdzIG9uIHRo ZQpjb21tb24gcGF0aCwgYW5kIHBsYWNlIGl0IGFmdGVyIHJlbW92aW5nIHRo ZSB0cmFuc2FjdGlvbnMgcmF0aGVyIHRoYW4gYmVmb3JlLgoKVGhpcyBpcyBw YXJ0IG9mIFhTQS01MTIgLyBDVkUtMjAyNi03OTYwNC4KClJlcG9ydGVkLWJ5 OiBEYXZpZCBLb3Jjenluc2tpIDxEYXZpZEBBZGFsb2dpY3MuY29tPgpGaXhl czogNjc0YWQyYmU0MDlkICgieGVuc3RvcmU6IGV4dGVuZCB0aGUgeGVuc3Rv cmUgcmluZyB3aXRoIGEgJ2Nsb3NpbmcnIHNpZ25hbCIpClNpZ25lZC1vZmYt Ynk6IEFuZHJpaSBTdWx0YW5vdiA8YW5kcml5LnN1bHRhbm92QHZhdGVzLnRl Y2g+ClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBBbmRyaWkgU3VsdGFub3Yg PGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgoKZGlmZiAtLWdpdCBhL3Rv b2xzL29jYW1sL3hlbnN0b3JlZC9jb25uZWN0aW9uLm1sIGIvdG9vbHMvb2Nh bWwveGVuc3RvcmVkL2Nvbm5lY3Rpb24ubWwKaW5kZXggZDExMDExZTE2NDM5 Li4zN2ViMjQ0NGI5MzYgMTAwNjQ0Ci0tLSBhL3Rvb2xzL29jYW1sL3hlbnN0 b3JlZC9jb25uZWN0aW9uLm1sCisrKyBiL3Rvb2xzL29jYW1sL3hlbnN0b3Jl ZC9jb25uZWN0aW9uLm1sCkBAIC0xNDgsMTMgKzE0OCwxMSBAQCBsZXQgbWFy a19hc19iYWQgY29uID0KIGxldCBpbml0aWFsX25leHRfdGlkID0gMQogCiBs ZXQgZG9fcmVjb25uZWN0IGNvbiA9CisgICgqIHRyYW5zYWN0aW9ucyBhbmQg d2F0Y2hlcyBoYW5kbGVkIGJ5IGNhbGxlciAqKQogICBYZW5idXMuWGIucmVj b25uZWN0IGNvbi54YjsKICAgKCogZG9tIGlzIHRoZSBzYW1lICopCi0gIEhh c2h0YmwuY2xlYXIgY29uLnRyYW5zYWN0aW9uczsKICAgY29uLm5leHRfdGlk IDwtIGluaXRpYWxfbmV4dF90aWQ7Ci0gIEhhc2h0YmwuY2xlYXIgY29uLndh dGNoZXM7CiAgICgqIGFub25pZCBpcyB0aGUgc2FtZSAqKQotICBjb24ubmJf d2F0Y2hlcyA8LSAwOwogICBjb24uc3RhdF9uYl9vcHMgPC0gMDsKICAgKCog cGVybSBpcyB0aGUgc2FtZSAqKQogICAoKQpkaWZmIC0tZ2l0IGEvdG9vbHMv b2NhbWwveGVuc3RvcmVkL3Byb2Nlc3MubWwgYi90b29scy9vY2FtbC94ZW5z dG9yZWQvcHJvY2Vzcy5tbAppbmRleCBiYzY4YzU0YzlhYmEuLmZjMjU1OGFj M2Q5YiAxMDA2NDQKLS0tIGEvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nl c3MubWwKKysrIGIvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nlc3MubWwK QEAgLTM0NSwxNSArMzQ1LDE4IEBAIGxldCBkb19pc2ludHJvZHVjZWQgY29u IF90IGRvbWFpbnMgX2NvbnMgZGF0YSA9CiAgIGluCiAgIGlmIGRvbWlkID0g RGVmaW5lLmRvbWlkX3NlbGYgfHwgRG9tYWlucy5leGlzdCBkb21haW5zIGRv bWlkIHRoZW4gIlRcMDAwIiBlbHNlICJGXDAwMCIKIAotKCogb25seSBpbiB4 ZW4gPj0gNC4yICopCi1sZXQgZG9fcmVzZXRfd2F0Y2hlcyBjb24gX3QgX2Rv bWFpbnMgY29ucyBfZGF0YSA9CitsZXQgcmVzZXRfd2F0Y2hlc19hbmRfdHJh bnNhY3Rpb25zIGNvbnMgY29uID0KICAgQ29ubmVjdGlvbnMuZGVsX3dhdGNo ZXMgY29ucyBjb247Ci0gIENvbm5lY3Rpb24uZGVsX3RyYW5zYWN0aW9ucyBj b24KKyAgQ29ubmVjdGlvbi5kZWxfdHJhbnNhY3Rpb25zIGNvbjsKKyAgSGlz dG9yeS50cmltICgpCisKK2xldCBkb19yZXNldF93YXRjaGVzIGNvbiBfdCBf ZG9tYWlucyBjb25zIF9kYXRhID0KKyAgcmVzZXRfd2F0Y2hlc19hbmRfdHJh bnNhY3Rpb25zIGNvbnMgY29uCiAKIGxldCBkb19yZWNvbm5lY3QgY29ucyBj b24gPQogICBsZXQgZG9tc3RyID0gQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNv biBpbgogICBpbmZvICIlcyByZXF1ZXN0cyBhIHJlY29ubmVjdCIgZG9tc3Ry OwotICBIaXN0b3J5LnRyaW0gKCk7CisgIHJlc2V0X3dhdGNoZXNfYW5kX3Ry YW5zYWN0aW9ucyBjb25zIGNvbjsKICAgQ29ubmVjdGlvbi5kb19yZWNvbm5l Y3QgY29uOwogICBpbmZvICIlcyByZWNvbm5lY3Rpb24gY29tcGxldGUiIGRv bXN0cgogCg== --=separator Content-Type: application/octet-stream; name="xsa512-4.17-1.patch" Content-Disposition: attachment; filename="xsa512-4.17-1.patch" Content-Transfer-Encoding: base64 RnJvbSBjYTIxZjIyOGZlODMwMmYzZmM3MjRiMmZmZjQ2YjI0OTA2ZDlkY2Q3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE2OjAwOjAyICswMTAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IEZhY3RvciBvdXQgUHJvY2Vzcy5kb19yZWNvbm5lY3QoKQoKVGhlIGxvZ2lj IGZsb3cgaGVyZSBpcyBjb21wbGljYXRlZC4gIEluIHByZXBhcmF0aW9uIHRv IGZpeCBhIGJ1ZywgZmFjdG9yIG91dApyZWNvbm5lY3RpbmcgYSB4ZW5idXMg Y29ubmVjdGlvbiwgYW5kIGZvbGQgSGlzdG9yeS5yZWNvbm5lY3QgaW50byBp dCdzIHNpbmdsZQpjYWxsZXIuCgpObyBmdW5jdGlvbmFsIGNoYW5nZS4KClRo aXMgaXMgcGFydCBvZiBYU0EtNTEyIC8gQ1ZFLTIwMjYtNzk2MDQuCgpTaWdu ZWQtb2ZmLWJ5OiBBbmRyaWkgU3VsdGFub3YgPGFuZHJpeS5zdWx0YW5vdkB2 YXRlcy50ZWNoPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogQW5kcmlpIFN1 bHRhbm92IDxhbmRyaXkuc3VsdGFub3ZAdmF0ZXMudGVjaD4KCmRpZmYgLS1n aXQgYS90b29scy9vY2FtbC94ZW5zdG9yZWQvaGlzdG9yeS5tbCBiL3Rvb2xz L29jYW1sL3hlbnN0b3JlZC9oaXN0b3J5Lm1sCmluZGV4IGJhNWM5Y2I1NzFm Zi4uMDI5ODAyYmQxNTQ0IDEwMDY0NAotLS0gYS90b29scy9vY2FtbC94ZW5z dG9yZWQvaGlzdG9yeS5tbAorKysgYi90b29scy9vY2FtbC94ZW5zdG9yZWQv aGlzdG9yeS5tbApAQCAtMzksMTAgKzM5LDYgQEAgbGV0IGVuZF90cmFuc2Fj dGlvbiB0eG4gY29uIHRpZCBjb21taXQgPQogCXRyaW0gfnR4biAoKTsKIAlz dWNjZXNzCiAKLWxldCByZWNvbm5lY3QgY29uID0KLQl0cmltICgpOwotCUNv bm5lY3Rpb24uZG9fcmVjb25uZWN0IGNvbgotCiBsZXQgcHVzaCAoeDogaGlz dG9yeV9yZWNvcmQpID0KIAlsZXQgZG9tID0geC5jb24uQ29ubmVjdGlvbi5k b20gaW4KIAltYXRjaCBkb20gd2l0aApkaWZmIC0tZ2l0IGEvdG9vbHMvb2Nh bWwveGVuc3RvcmVkL3Byb2Nlc3MubWwgYi90b29scy9vY2FtbC94ZW5zdG9y ZWQvcHJvY2Vzcy5tbAppbmRleCAwMmJkMGY3ZDgwOTguLjMzMTYxZGE1ZWI4 YiAxMDA2NDQKLS0tIGEvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nlc3Mu bWwKKysrIGIvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nlc3MubWwKQEAg LTMzMyw2ICszMzMsMTMgQEAgbGV0IGRvX3Jlc2V0X3dhdGNoZXMgY29uIF90 IF9kb21haW5zIGNvbnMgX2RhdGEgPQogICBDb25uZWN0aW9ucy5kZWxfd2F0 Y2hlcyBjb25zIGNvbjsKICAgQ29ubmVjdGlvbi5kZWxfdHJhbnNhY3Rpb25z IGNvbgogCitsZXQgZG9fcmVjb25uZWN0IGNvbnMgY29uID0KKyAgbGV0IGRv bXN0ciA9IENvbm5lY3Rpb24uZ2V0X2RvbXN0ciBjb24gaW4KKyAgaW5mbyAi JXMgcmVxdWVzdHMgYSByZWNvbm5lY3QiIGRvbXN0cjsKKyAgSGlzdG9yeS50 cmltICgpOworICBDb25uZWN0aW9uLmRvX3JlY29ubmVjdCBjb247CisgIGlu Zm8gIiVzIHJlY29ubmVjdGlvbiBjb21wbGV0ZSIgZG9tc3RyCisKICgqIG9u bHkgaW4gPj0geGVuMy4zICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgKikKIGxldCBkb19zZXRfdGFyZ2V0IGNvbiBfdCBfZG9tYWlu cyBjb25zIGRhdGEgPQogCWlmIG5vdCAoQ29ubmVjdGlvbi5pc19kb20wIGNv bikKQEAgLTcxOCw5ICs3MjUsNyBAQCBsZXQgZG9faW5wdXQgc3RvcmUgY29u cyBkb21zIGNvbiA9CiAJCQlpZiBDb25uZWN0aW9uLmNhbl9pbnB1dCBjb24g dGhlbiBDb25uZWN0aW9uLmRvX2lucHV0IGNvbgogCQkJZWxzZSBOb25lCiAJ CXdpdGggWGVuYnVzLlhiLlJlY29ubmVjdCAtPgotCQkJaW5mbyAiJXMgcmVx dWVzdHMgYSByZWNvbm5lY3QiIChDb25uZWN0aW9uLmdldF9kb21zdHIgY29u KTsKLQkJCUhpc3RvcnkucmVjb25uZWN0IGNvbjsKLQkJCWluZm8gIiVzIHJl Y29ubmVjdGlvbiBjb21wbGV0ZSIgKENvbm5lY3Rpb24uZ2V0X2RvbXN0ciBj b24pOworCQkJZG9fcmVjb25uZWN0IGNvbnMgY29uOwogCQkJTm9uZQogCQl8 IEludmFsaWRfYXJndW1lbnQgZXhwIHwgRmFpbHVyZSBleHAgLT4KIAkJCWVy cm9yICJjYXVnaHQgZXhjZXB0aW9uICVzIiBleHA7CkBAIC03NDMsNyArNzQ4 LDcgQEAgbGV0IGRvX2lucHV0IHN0b3JlIGNvbnMgZG9tcyBjb24gPQogCQl3 cml0ZV9hY2Nlc3NfbG9nIH50eSB+dGlkIH5jb246KENvbm5lY3Rpb24uZ2V0 X2RvbXN0ciBjb24pIH5kYXRhOwogCQlDb25uZWN0aW9uLmluY3Jfb3BzIGNv bgogCi1sZXQgZG9fb3V0cHV0IF9zdG9yZSBfY29ucyBfZG9tcyBjb24gPQor bGV0IGRvX291dHB1dCBfc3RvcmUgY29ucyBfZG9tcyBjb24gPQogCUNvbm5l Y3Rpb24uc291cmNlX2ZsdXNoX3dhdGNoZXZlbnRzIGNvbjsKIAlpZiBDb25u ZWN0aW9uLmhhc19vdXRwdXQgY29uIHRoZW4gKAogCQlpZiBDb25uZWN0aW9u Lmhhc19uZXdfb3V0cHV0IGNvbiB0aGVuICgKQEAgLTc1OCw4ICs3NjMsNiBA QCBsZXQgZG9fb3V0cHV0IF9zdG9yZSBfY29ucyBfZG9tcyBjb24gPQogCQl0 cnkKIAkJCWlnbm9yZSAoQ29ubmVjdGlvbi5kb19vdXRwdXQgY29uKQogCQl3 aXRoIFhlbmJ1cy5YYi5SZWNvbm5lY3QgLT4KLQkJCWluZm8gIiVzIHJlcXVl c3RzIGEgcmVjb25uZWN0IiAoQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNvbik7 Ci0JCQlIaXN0b3J5LnJlY29ubmVjdCBjb247Ci0JCQlpbmZvICIlcyByZWNv bm5lY3Rpb24gY29tcGxldGUiIChDb25uZWN0aW9uLmdldF9kb21zdHIgY29u KQorCQkJZG9fcmVjb25uZWN0IGNvbnMgY29uOwogCSkKIAo= --=separator Content-Type: application/octet-stream; name="xsa512-4.17-2.patch" Content-Disposition: attachment; filename="xsa512-4.17-2.patch" Content-Transfer-Encoding: base64 RnJvbSA2NmIzMTA1NzA5OTZjNjliZjc5NTRhYWJhY2RkNjY3ODYzMGVmOGFj IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE1OjAwOjAyICswMDAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IFJlc2V0IHRoZSB3YXRjaGVzIHRyaWUgb24gZG9tYWluIHJlY29ubmVjdAoK b3hlbnN0b3JlZCBtYWludGFpbnMgdHdvIGRhdGFzdHJ1Y3R1cmVzIGFib3V0 IHdhdGNoZXM7IG9uZSBnbG9iYWwgdHJpZSwgYW5kCm9uZSBoYXNodGFibGUg dHJhY2tlZCBwZXIgZG9tYWluLiAgQm90aCBuZWVkIGtlZXBpbmcgaW4gc3lu YywgYW5kIHJpZ2h0IG5vdwp0aGUgZ2xvYmFsIHRyaWUgaXMgbm90IGVtcHRp ZWQgd2hlbiBhIHhlbmJ1cyByZWNvbm5lY3QgaXMgcmVxdWVzdGVkLgoKVGhp cyBpcyBiYXNpY2FsbHkgdGhlIHNhbWUgYnVnIGFzIFhTQS0zMzAsIGNvbW1p dCA0OTFhMDc3ZWQ0YzUKKCJ0b29scy9vY2FtbC94ZW5zdG9yZWQ6IGRlbGV0 ZSB3YXRjaCBmcm9tIHRyaWUgdG9vIHdoZW4gcmVzZXR0aW5nIHdhdGNoZXMi KSwKanVzdCB0aWNrbGVkIHZpYSBhbm90aGVyIHBhdGguCgpBcnJhbmdlIGZv ciBib3RoIFByb2Nlc3MuZG9fcmVzZXRfd2F0Y2hlcygpIGFuZCBQcm9jZXNz LmRvX3JlY29ubmVjdCgpIHRvCnNoYXJlIGEgY29tbW9uIGNvZGVwYXRoIGZv ciB0aGUgcmVzZXR0aW5nIG9mIHdhdGNoZXMgYW5kIHRyYW5zYWN0aW9ucy4K Tm90YWJseSwgdGhpcyBtZWFucyB0aGF0IHRoZSBsYXR0ZXIgbm93IGNhbGxz IENvbm5lY3Rpb25zLmRlbF93YXRjaGVzKCkgd2hpY2gKY2xlYXJzIHRoZSBn bG9iYWwgdHJpZSB0b28uCgpDb25uZWN0aW9ucy5kZWxfd2F0Y2hlcygpIGFs cmVhZHkgY2FsbHMgQ29ubmVjdGlvbi5kZWxfd2F0Y2hlcygpIHNvIHJlbW92 ZSB0aGUKcmUtY2xlYXJpbmcgb2YgdGhlIHN0YXRlIGZyb20gQ29ubmVjdGlv bi5kb19yZWNvbm5lY3QoKS4KCk1vdmUgSGlzdG9yeS50cmltKCkgaW50byBy ZXNldF93YXRjaGVzX2FuZF90cmFuc2FjdGlvbnMoKSBzbyBpdCdzIG9uIHRo ZQpjb21tb24gcGF0aCwgYW5kIHBsYWNlIGl0IGFmdGVyIHJlbW92aW5nIHRo ZSB0cmFuc2FjdGlvbnMgcmF0aGVyIHRoYW4gYmVmb3JlLgoKVGhpcyBpcyBw YXJ0IG9mIFhTQS01MTIgLyBDVkUtMjAyNi03OTYwNC4KClJlcG9ydGVkLWJ5 OiBEYXZpZCBLb3Jjenluc2tpIDxEYXZpZEBBZGFsb2dpY3MuY29tPgpGaXhl czogNjc0YWQyYmU0MDlkICgieGVuc3RvcmU6IGV4dGVuZCB0aGUgeGVuc3Rv cmUgcmluZyB3aXRoIGEgJ2Nsb3NpbmcnIHNpZ25hbCIpClNpZ25lZC1vZmYt Ynk6IEFuZHJpaSBTdWx0YW5vdiA8YW5kcml5LnN1bHRhbm92QHZhdGVzLnRl Y2g+ClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBBbmRyaWkgU3VsdGFub3Yg PGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgoKZGlmZiAtLWdpdCBhL3Rv b2xzL29jYW1sL3hlbnN0b3JlZC9jb25uZWN0aW9uLm1sIGIvdG9vbHMvb2Nh bWwveGVuc3RvcmVkL2Nvbm5lY3Rpb24ubWwKaW5kZXggNTRmN2Y3NjUxNjdi Li5hOTFjYWFiZWM2NzQgMTAwNjQ0Ci0tLSBhL3Rvb2xzL29jYW1sL3hlbnN0 b3JlZC9jb25uZWN0aW9uLm1sCisrKyBiL3Rvb2xzL29jYW1sL3hlbnN0b3Jl ZC9jb25uZWN0aW9uLm1sCkBAIC0xNDgsMTMgKzE0OCwxMSBAQCBsZXQgbWFy a19hc19iYWQgY29uID0KIGxldCBpbml0aWFsX25leHRfdGlkID0gMQogCiBs ZXQgZG9fcmVjb25uZWN0IGNvbiA9CisJKCogdHJhbnNhY3Rpb25zIGFuZCB3 YXRjaGVzIGhhbmRsZWQgYnkgY2FsbGVyICopCiAJWGVuYnVzLlhiLnJlY29u bmVjdCBjb24ueGI7CiAJKCogZG9tIGlzIHRoZSBzYW1lICopCi0JSGFzaHRi bC5jbGVhciBjb24udHJhbnNhY3Rpb25zOwogCWNvbi5uZXh0X3RpZCA8LSBp bml0aWFsX25leHRfdGlkOwotCUhhc2h0YmwuY2xlYXIgY29uLndhdGNoZXM7 CiAJKCogYW5vbmlkIGlzIHRoZSBzYW1lICopCi0JY29uLm5iX3dhdGNoZXMg PC0gMDsKIAljb24uc3RhdF9uYl9vcHMgPC0gMDsKIAkoKiBwZXJtIGlzIHRo ZSBzYW1lICopCiAJKCkKZGlmZiAtLWdpdCBhL3Rvb2xzL29jYW1sL3hlbnN0 b3JlZC9wcm9jZXNzLm1sIGIvdG9vbHMvb2NhbWwveGVuc3RvcmVkL3Byb2Nl c3MubWwKaW5kZXggMzMxNjFkYTVlYjhiLi5iMmVlNGQwYWRmMWIgMTAwNjQ0 Ci0tLSBhL3Rvb2xzL29jYW1sL3hlbnN0b3JlZC9wcm9jZXNzLm1sCisrKyBi L3Rvb2xzL29jYW1sL3hlbnN0b3JlZC9wcm9jZXNzLm1sCkBAIC0zMjgsMTUg KzMyOCwxOCBAQCBsZXQgZG9faXNpbnRyb2R1Y2VkIGNvbiBfdCBkb21haW5z IF9jb25zIGRhdGEgPQogCQlpbgogCWlmIGRvbWlkID0gRGVmaW5lLmRvbWlk X3NlbGYgfHwgRG9tYWlucy5leGlzdCBkb21haW5zIGRvbWlkIHRoZW4gIlRc MDAwIiBlbHNlICJGXDAwMCIKIAotKCogb25seSBpbiB4ZW4gPj0gNC4yICop Ci1sZXQgZG9fcmVzZXRfd2F0Y2hlcyBjb24gX3QgX2RvbWFpbnMgY29ucyBf ZGF0YSA9CitsZXQgcmVzZXRfd2F0Y2hlc19hbmRfdHJhbnNhY3Rpb25zIGNv bnMgY29uID0KICAgQ29ubmVjdGlvbnMuZGVsX3dhdGNoZXMgY29ucyBjb247 Ci0gIENvbm5lY3Rpb24uZGVsX3RyYW5zYWN0aW9ucyBjb24KKyAgQ29ubmVj dGlvbi5kZWxfdHJhbnNhY3Rpb25zIGNvbjsKKyAgSGlzdG9yeS50cmltICgp CisKK2xldCBkb19yZXNldF93YXRjaGVzIGNvbiBfdCBfZG9tYWlucyBjb25z IF9kYXRhID0KKyAgcmVzZXRfd2F0Y2hlc19hbmRfdHJhbnNhY3Rpb25zIGNv bnMgY29uCiAKIGxldCBkb19yZWNvbm5lY3QgY29ucyBjb24gPQogICBsZXQg ZG9tc3RyID0gQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNvbiBpbgogICBpbmZv ICIlcyByZXF1ZXN0cyBhIHJlY29ubmVjdCIgZG9tc3RyOwotICBIaXN0b3J5 LnRyaW0gKCk7CisgIHJlc2V0X3dhdGNoZXNfYW5kX3RyYW5zYWN0aW9ucyBj b25zIGNvbjsKICAgQ29ubmVjdGlvbi5kb19yZWNvbm5lY3QgY29uOwogICBp bmZvICIlcyByZWNvbm5lY3Rpb24gY29tcGxldGUiIGRvbXN0cgogCg== --=separator Content-Type: application/octet-stream; name="xsa512-oxenstored-1.patch" Content-Disposition: attachment; filename="xsa512-oxenstored-1.patch" Content-Transfer-Encoding: base64 RnJvbSA1NDkzMTI2OTJkZTFkMjJlNzBiZTc1YjkzMzllZjFlNTc1YmFhOTY0 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE2OjAwOjAyICswMTAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IEZhY3RvciBvdXQgUHJvY2Vzcy5kb19yZWNvbm5lY3QoKQoKVGhlIGxvZ2lj IGZsb3cgaGVyZSBpcyBjb21wbGljYXRlZC4gIEluIHByZXBhcmF0aW9uIHRv IGZpeCBhIGJ1ZywgZmFjdG9yIG91dApyZWNvbm5lY3RpbmcgYSB4ZW5idXMg Y29ubmVjdGlvbiwgYW5kIGZvbGQgSGlzdG9yeS5yZWNvbm5lY3QgaW50byBp dCdzIHNpbmdsZQpjYWxsZXIuCgpObyBmdW5jdGlvbmFsIGNoYW5nZS4KClRo aXMgaXMgcGFydCBvZiBYU0EtNTEyIC8gQ1ZFLTIwMjYtNzk2MDQuCgpTaWdu ZWQtb2ZmLWJ5OiBBbmRyaWkgU3VsdGFub3YgPGFuZHJpeS5zdWx0YW5vdkB2 YXRlcy50ZWNoPgpTaWduZWQtb2ZmLWJ5OiBBbmRyZXcgQ29vcGVyIDxhbmRy ZXcuY29vcGVyM0BjaXRyaXguY29tPgpSZXZpZXdlZC1ieTogQW5kcmlpIFN1 bHRhbm92IDxhbmRyaXkuc3VsdGFub3ZAdmF0ZXMudGVjaD4KCmRpZmYgLS1n aXQgYS9veGVuc3RvcmVkL2hpc3RvcnkubWwgYi9veGVuc3RvcmVkL2hpc3Rv cnkubWwKaW5kZXggYmUxOTk0ZjE4MDIwLi40OTBkN2EwZWU2NmUgMTAwNjQ0 Ci0tLSBhL294ZW5zdG9yZWQvaGlzdG9yeS5tbAorKysgYi9veGVuc3RvcmVk L2hpc3RvcnkubWwKQEAgLTQxLDEwICs0MSw2IEBAIGxldCBlbmRfdHJhbnNh Y3Rpb24gdHhuIGNvbiB0aWQgY29tbWl0ID0KICAgbGV0IHN1Y2Nlc3MgPSBD b25uZWN0aW9uLmVuZF90cmFuc2FjdGlvbiBjb24gdGlkIGNvbW1pdCBpbgog ICB0cmltIH50eG4gKCkgOyBzdWNjZXNzCiAKLWxldCByZWNvbm5lY3QgY29u ID0KLSAgdHJpbSAoKSA7Ci0gIENvbm5lY3Rpb24uZG9fcmVjb25uZWN0IGNv bgotCiBsZXQgcHVzaCAoeCA6IGhpc3RvcnlfcmVjb3JkKSA9CiAgIGxldCBk b20gPSB4LmNvbi5Db25uZWN0aW9uLmRvbSBpbgogICBtYXRjaCBkb20gd2l0 aApkaWZmIC0tZ2l0IGEvb3hlbnN0b3JlZC9wcm9jZXNzLm1sIGIvb3hlbnN0 b3JlZC9wcm9jZXNzLm1sCmluZGV4IDQ3N2I0ZTQxYjNiZS4uNTIzYWQ0ZmFh ZmQ4IDEwMDY0NAotLS0gYS9veGVuc3RvcmVkL3Byb2Nlc3MubWwKKysrIGIv b3hlbnN0b3JlZC9wcm9jZXNzLm1sCkBAIC00NzcsNiArNDc3LDEzIEBAIGxl dCBkb19yZXNldF93YXRjaGVzIGNvbiBfdCBfZG9tYWlucyBjb25zIF9kYXRh ID0KICAgQ29ubmVjdGlvbnMuZGVsX3dhdGNoZXMgY29ucyBjb24gOwogICBD b25uZWN0aW9uLmRlbF90cmFuc2FjdGlvbnMgY29uCiAKK2xldCBkb19yZWNv bm5lY3QgY29ucyBjb24gPQorICBsZXQgZG9tc3RyID0gQ29ubmVjdGlvbi5n ZXRfZG9tc3RyIGNvbiBpbgorICBpbmZvICIlcyByZXF1ZXN0cyBhIHJlY29u bmVjdCIgZG9tc3RyIDsKKyAgSGlzdG9yeS50cmltICgpIDsKKyAgQ29ubmVj dGlvbi5kb19yZWNvbm5lY3QgY29uIDsKKyAgaW5mbyAiJXMgcmVjb25uZWN0 aW9uIGNvbXBsZXRlIiBkb21zdHIKKwogKCogb25seSBpbiA+PSB4ZW4zLjMg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAqKQogbGV0 IGRvX3NldF90YXJnZXQgY29uIF90IF9kb21haW5zIGNvbnMgZGF0YSA9CiAg IGlmIG5vdCAoQ29ubmVjdGlvbi5pc19kb20wIGNvbikgdGhlbgpAQCAtOTc2 LDEwICs5ODMsNyBAQCBsZXQgZG9faW5wdXQgc3RvcmUgY29ucyBkb21zIGNv biA9CiAgICAgICAgIE5vbmUKICAgICB3aXRoCiAgICAgfCBYZW5idXMuWGIu UmVjb25uZWN0IC0+Ci0gICAgICAgIGluZm8gIiVzIHJlcXVlc3RzIGEgcmVj b25uZWN0IiAoQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNvbikgOwotICAgICAg ICBIaXN0b3J5LnJlY29ubmVjdCBjb24gOwotICAgICAgICBpbmZvICIlcyBy ZWNvbm5lY3Rpb24gY29tcGxldGUiIChDb25uZWN0aW9uLmdldF9kb21zdHIg Y29uKSA7Ci0gICAgICAgIE5vbmUKKyAgICAgICAgZG9fcmVjb25uZWN0IGNv bnMgY29uIDsgTm9uZQogICAgIHwgSW52YWxpZF9hcmd1bWVudCBleHAgfCBG YWlsdXJlIGV4cCAtPgogICAgICAgICBlcnJvciAiY2F1Z2h0IGV4Y2VwdGlv biAlcyIgZXhwIDsKICAgICAgICAgZXJyb3IgImdvdCBhIGJhZCBjbGllbnQg JXMiIChzcHJpbnRmICIlLThzIiAoQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNv bikpIDsKQEAgLTEwMDIsNyArMTAwNiw3IEBAIGxldCBkb19pbnB1dCBzdG9y ZSBjb25zIGRvbXMgY29uID0KICAgICAgIHdyaXRlX2FjY2Vzc19sb2cgfnR5 IH50aWQgfmNvbjooQ29ubmVjdGlvbi5nZXRfZG9tc3RyIGNvbikgfmRhdGEg OwogICAgICAgQ29ubmVjdGlvbi5pbmNyX29wcyBjb24KIAotbGV0IGRvX291 dHB1dCBfc3RvcmUgX2NvbnMgX2RvbXMgY29uID0KK2xldCBkb19vdXRwdXQg X3N0b3JlIGNvbnMgX2RvbXMgY29uID0KICAgQ29ubmVjdGlvbi5zb3VyY2Vf Zmx1c2hfd2F0Y2hldmVudHMgY29uIDsKICAgaWYgQ29ubmVjdGlvbi5oYXNf b3V0cHV0IGNvbiB0aGVuICgKICAgICAoIGlmIENvbm5lY3Rpb24uaGFzX25l d19vdXRwdXQgY29uIHRoZW4KQEAgLTEwMTUsOCArMTAxOSw1IEBAIGxldCBk b19vdXRwdXQgX3N0b3JlIF9jb25zIF9kb21zIGNvbiA9CiAgICAgICAgIHdy aXRlX2Fuc3dlcl9sb2cgfnR5IH50aWQgfmNvbjooQ29ubmVjdGlvbi5nZXRf ZG9tc3RyIGNvbikgfmRhdGEKICAgICApIDsKICAgICB0cnkgaWdub3JlIChD b25uZWN0aW9uLmRvX291dHB1dCBjb24pCi0gICAgd2l0aCBYZW5idXMuWGIu UmVjb25uZWN0IC0+Ci0gICAgICBpbmZvICIlcyByZXF1ZXN0cyBhIHJlY29u bmVjdCIgKENvbm5lY3Rpb24uZ2V0X2RvbXN0ciBjb24pIDsKLSAgICAgIEhp c3RvcnkucmVjb25uZWN0IGNvbiA7Ci0gICAgICBpbmZvICIlcyByZWNvbm5l Y3Rpb24gY29tcGxldGUiIChDb25uZWN0aW9uLmdldF9kb21zdHIgY29uKQor ICAgIHdpdGggWGVuYnVzLlhiLlJlY29ubmVjdCAtPiBkb19yZWNvbm5lY3Qg Y29ucyBjb24KICAgKQo= --=separator Content-Type: application/octet-stream; name="xsa512-oxenstored-2.patch" Content-Disposition: attachment; filename="xsa512-oxenstored-2.patch" Content-Transfer-Encoding: base64 RnJvbSBkYTQ3YjU5Njk1NzZkNjBlODg2NGI1ZWNjNGZkMGRiNjdlN2U0NjAx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBBbmRyaWkgU3VsdGFu b3YgPGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgpEYXRlOiBUaHUsIDIw IEF1ZyAyMDI2IDE1OjAwOjAyICswMDAwClN1YmplY3Q6IG94ZW5zdG9yZWQ6 IFJlc2V0IHRoZSB3YXRjaGVzIHRyaWUgb24gZG9tYWluIHJlY29ubmVjdAoK b3hlbnN0b3JlZCBtYWludGFpbnMgdHdvIGRhdGFzdHJ1Y3R1cmVzIGFib3V0 IHdhdGNoZXM7IG9uZSBnbG9iYWwgdHJpZSwgYW5kCm9uZSBoYXNodGFibGUg dHJhY2tlZCBwZXIgZG9tYWluLiAgQm90aCBuZWVkIGtlZXBpbmcgaW4gc3lu YywgYW5kIHJpZ2h0IG5vdwp0aGUgZ2xvYmFsIHRyaWUgaXMgbm90IGVtcHRp ZWQgd2hlbiBhIHhlbmJ1cyByZWNvbm5lY3QgaXMgcmVxdWVzdGVkLgoKVGhp cyBpcyBiYXNpY2FsbHkgdGhlIHNhbWUgYnVnIGFzIFhTQS0zMzAsIGNvbW1p dCA5MTAzODhiYjRmMzcKKCJ0b29scy9vY2FtbC94ZW5zdG9yZWQ6IGRlbGV0 ZSB3YXRjaCBmcm9tIHRyaWUgdG9vIHdoZW4gcmVzZXR0aW5nIHdhdGNoZXMi KSwKanVzdCB0aWNrbGVkIHZpYSBhbm90aGVyIHBhdGguCgpBcnJhbmdlIGZv ciBib3RoIFByb2Nlc3MuZG9fcmVzZXRfd2F0Y2hlcygpIGFuZCBQcm9jZXNz LmRvX3JlY29ubmVjdCgpIHRvCnNoYXJlIGEgY29tbW9uIGNvZGVwYXRoIGZv ciB0aGUgcmVzZXR0aW5nIG9mIHdhdGNoZXMgYW5kIHRyYW5zYWN0aW9ucy4K Tm90YWJseSwgdGhpcyBtZWFucyB0aGF0IHRoZSBsYXR0ZXIgbm93IGNhbGxz IENvbm5lY3Rpb25zLmRlbF93YXRjaGVzKCkgd2hpY2gKY2xlYXJzIHRoZSBn bG9iYWwgdHJpZSB0b28uCgpDb25uZWN0aW9ucy5kZWxfd2F0Y2hlcygpIGFs cmVhZHkgY2FsbHMgQ29ubmVjdGlvbi5kZWxfd2F0Y2hlcygpIHNvIHJlbW92 ZSB0aGUKcmUtY2xlYXJpbmcgb2YgdGhlIHN0YXRlIGZyb20gQ29ubmVjdGlv bi5kb19yZWNvbm5lY3QoKS4KCk1vdmUgSGlzdG9yeS50cmltKCkgaW50byBy ZXNldF93YXRjaGVzX2FuZF90cmFuc2FjdGlvbnMoKSBzbyBpdCdzIG9uIHRo ZQpjb21tb24gcGF0aCwgYW5kIHBsYWNlIGl0IGFmdGVyIHJlbW92aW5nIHRo ZSB0cmFuc2FjdGlvbnMgcmF0aGVyIHRoYW4gYmVmb3JlLgoKVGhpcyBpcyBw YXJ0IG9mIFhTQS01MTIgLyBDVkUtMjAyNi03OTYwNC4KClJlcG9ydGVkLWJ5 OiBEYXZpZCBLb3Jjenluc2tpIDxEYXZpZEBBZGFsb2dpY3MuY29tPgpGaXhl czogNjc0YWQyYmU0MDlkICgieGVuc3RvcmU6IGV4dGVuZCB0aGUgeGVuc3Rv cmUgcmluZyB3aXRoIGEgJ2Nsb3NpbmcnIHNpZ25hbCIpClNpZ25lZC1vZmYt Ynk6IEFuZHJpaSBTdWx0YW5vdiA8YW5kcml5LnN1bHRhbm92QHZhdGVzLnRl Y2g+ClNpZ25lZC1vZmYtYnk6IEFuZHJldyBDb29wZXIgPGFuZHJldy5jb29w ZXIzQGNpdHJpeC5jb20+ClJldmlld2VkLWJ5OiBBbmRyaWkgU3VsdGFub3Yg PGFuZHJpeS5zdWx0YW5vdkB2YXRlcy50ZWNoPgoKZGlmZiAtLWdpdCBhL294 ZW5zdG9yZWQvY29ubmVjdGlvbi5tbCBiL294ZW5zdG9yZWQvY29ubmVjdGlv bi5tbAppbmRleCAyOWQxOTExZjMxNzkuLjU4YjkwYThmYWE1YyAxMDA2NDQK LS0tIGEvb3hlbnN0b3JlZC9jb25uZWN0aW9uLm1sCisrKyBiL294ZW5zdG9y ZWQvY29ubmVjdGlvbi5tbApAQCAtMTkzLDEzICsxOTMsMTEgQEAgbGV0IG1h cmtfYXNfYmFkIGNvbiA9CiBsZXQgaW5pdGlhbF9uZXh0X3RpZCA9IDEKIAog bGV0IGRvX3JlY29ubmVjdCBjb24gPQorICAoKiB0cmFuc2FjdGlvbnMgYW5k IHdhdGNoZXMgaGFuZGxlZCBieSBjYWxsZXIgKikKICAgWGVuYnVzLlhiLnJl Y29ubmVjdCBjb24ueGIgOwogICAoKiBkb20gaXMgdGhlIHNhbWUgKikKLSAg SGFzaHRibC5jbGVhciBjb24udHJhbnNhY3Rpb25zIDsKICAgY29uLm5leHRf dGlkIDwtIGluaXRpYWxfbmV4dF90aWQgOwotICBIYXNodGJsLmNsZWFyIGNv bi53YXRjaGVzIDsKICAgKCogYW5vbmlkIGlzIHRoZSBzYW1lICopCi0gIGNv bi5uYl93YXRjaGVzIDwtIDAgOwogICBjb24uc3RhdF9uYl9vcHMgPC0gMCA7 CiAgICgqIHBlcm0gaXMgdGhlIHNhbWUgKikKICAgKCkKZGlmZiAtLWdpdCBh L294ZW5zdG9yZWQvcHJvY2Vzcy5tbCBiL294ZW5zdG9yZWQvcHJvY2Vzcy5t bAppbmRleCA1MjNhZDRmYWFmZDguLjAzOGNkYjcyYmUwYiAxMDA2NDQKLS0t IGEvb3hlbnN0b3JlZC9wcm9jZXNzLm1sCisrKyBiL294ZW5zdG9yZWQvcHJv Y2Vzcy5tbApAQCAtNDcyLDE1ICs0NzIsMTggQEAgbGV0IGRvX2lzaW50cm9k dWNlZCBjb24gX3QgZG9tYWlucyBfY29ucyBkYXRhID0KICAgZWxzZQogICAg ICJGXDAwMCIKIAotKCogb25seSBpbiB4ZW4gPj0gNC4yICopCi1sZXQgZG9f cmVzZXRfd2F0Y2hlcyBjb24gX3QgX2RvbWFpbnMgY29ucyBfZGF0YSA9Cits ZXQgcmVzZXRfd2F0Y2hlc19hbmRfdHJhbnNhY3Rpb25zIGNvbnMgY29uID0K ICAgQ29ubmVjdGlvbnMuZGVsX3dhdGNoZXMgY29ucyBjb24gOwotICBDb25u ZWN0aW9uLmRlbF90cmFuc2FjdGlvbnMgY29uCisgIENvbm5lY3Rpb24uZGVs X3RyYW5zYWN0aW9ucyBjb24gOworICBIaXN0b3J5LnRyaW0gKCkKKworbGV0 IGRvX3Jlc2V0X3dhdGNoZXMgY29uIF90IF9kb21haW5zIGNvbnMgX2RhdGEg PQorICByZXNldF93YXRjaGVzX2FuZF90cmFuc2FjdGlvbnMgY29ucyBjb24K IAogbGV0IGRvX3JlY29ubmVjdCBjb25zIGNvbiA9CiAgIGxldCBkb21zdHIg PSBDb25uZWN0aW9uLmdldF9kb21zdHIgY29uIGluCiAgIGluZm8gIiVzIHJl cXVlc3RzIGEgcmVjb25uZWN0IiBkb21zdHIgOwotICBIaXN0b3J5LnRyaW0g KCkgOworICByZXNldF93YXRjaGVzX2FuZF90cmFuc2FjdGlvbnMgY29ucyBj b24gOwogICBDb25uZWN0aW9uLmRvX3JlY29ubmVjdCBjb24gOwogICBpbmZv ICIlcyByZWNvbm5lY3Rpb24gY29tcGxldGUiIGRvbXN0cgogCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Sep 08 12:01:25 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 08 Sep 2026 12:01:25 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1411326.1642008 (Exim 4.92) (envelope-from ) id 1x3uVN-0004MQ-H5; Tue, 08 Sep 2026 12:00:49 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1411326.1642008; Tue, 08 Sep 2026 12:00:49 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVN-0004Jt-DC; Tue, 08 Sep 2026 12:00:49 +0000 Received: by outflank-mailman (input) for mailman id 1411326; Tue, 08 Sep 2026 12:00:47 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVL-0004Co-IW; Tue, 08 Sep 2026 12:00:47 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x3uVK-00BhQN-FC; Tue, 08 Sep 2026 14:00:46 +0200 Received: from [10.42.69.5] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a9ff8ea-8faa-0a2a0a5109dd-0a2a45058a8e-24 for ; Tue, 08 Sep 2026 14:00:46 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-c201ff.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a9ff8ed-4cb1-0a2a45050019-6882d725a1bc-3 for ; Tue, 08 Sep 2026 14:00:46 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1x3uVB-004n4N-1v; Tue, 08 Sep 2026 12:00:37 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1x3uVB-00GjSA-2j; Tue, 08 Sep 2026 12:00:37 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 509 v3 (CVE-2026-62437) - x86: DMs may cause mem leak by IRQ binding Message-Id: Date: Tue, 08 Sep 2026 12:00:37 +0000 X-purgate-ID: tlsNG-c201ff/1788868846-71CA82A1-59F74CBE/0/0 X-purgate-type: clean X-purgate-size: 5993 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-62437 / XSA-509 version 3 x86: DMs may cause mem leak by IRQ binding UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= When guests are terminated, various pieces of cleanup need carrying out. The cleaning up of PCI devices which were assigned to guests, and the associated removal of tracking structures for IRQs used by the devices occurs relatively early in the process. Unfortunately after that point the guest about to be terminated could cause its device model (DM) to re-establish such tracking structures, by having it bind one or more IRQs anew. While some of those tracking structures would still be cleaned up later on, at least one would not be. IMPACT ====== A HVM guest with one or more PCI devices assigned can cause a memory leak in the hypervisor, possibly leading to Denial of Service (DoS) of the entire host. VULNERABLE SYSTEMS ================== All Xen versions from at least 3.2 onwards are affected. Older versions have not been inspected. Only HVM guests with assigned PCI devices can leverage the vulnerability. MITIGATION ========== Running only PV or PVH guests will avoid the vulnerability. Running only HVM guests without passing through PCI devices to them will also avoid the vulnerability. CREDITS ======= This issue was discovered by Jan Beulich of SUSE. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa509.patch xen-unstable - Xen 4.17.x $ sha256sum xsa509* 1e027737afa753f3498102ceac4abe62b11a49cfa019f25bb19728a7931f9096 xsa509.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patch described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. HOWEVER, deployment of the mitigation is NOT permitted (except where all the affected systems and VMs are administered and used only by organisations which are members of the Xen Project Security Issues Predisclosure List). Specifically, deployment on public cloud systems is NOT permitted. This is because removing/replacing of pass-through devices or their replacement by emulated devices is a guest visible configuration change, which may lead to re-discovery of the issue. Deployment of this mitigation is permitted only AFTER the embargo ends. AND: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmqf970MHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ6hYIAIDrF44cxjA9slR5fXYXpQvlGHE8wvTr5F5vNdXO JlB8yMQjdUPMfSLX0oMPapUwLE/UzFFA/MTXORrK6nj3TbRRHLqF9e9upL6e3QHH RrV4m2R5OSVjD6PG+T+e24ES5I4SLUTWv9i4vQZPzY54rjMtZ4d53DZk2eQ5v9kj ozYgQzwk5vMvRhnPv6MVdcBr2EfQ274+XxMKioMBZaFuv+zeomaQTAiok8gXhotX 6twiuhuhvMOtF2FA8V1WkKwUqw5NKm/plv54d8RRB/XNdxPe/8bxY0NlLGgRpMf3 cjSqsuhpEgpY3Vh62v3S0fAtExnWppdb/glJE+g4MZGzC7s= =J7JJ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa509.patch" Content-Disposition: attachment; filename="xsa509.patch" Content-Transfer-Encoding: base64 RnJvbTogSmFuIEJldWxpY2ggPGpiZXVsaWNoQHN1c2UuY29tPgpTdWJqZWN0 OiB4ODYvcGFzcy10aHJvdWdoOiBkaXNhbGxvdyBwdF9pcnFfY3JlYXRlX2Jp bmQoKSBvbiBkeWluZyBkb21haW5zCgpETXMgbWF5IGludm9rZSBYRU5fRE9N Q1RMX2JpbmRfcHRfaXJxIGZvciBkb21haW5zIGFscmVhZHkgdW5kZXIKZGVz dHJ1Y3Rpb24uIFdoZW4gWEVOX0RPTUNUTF9iaW5kX3B0X2lycSBpcyBpbnZv a2VkIGFmdGVyCnBjaV9yZWxlYXNlX2RldmljZXMoKSAoaW52b2tlZCBmcm9t IHVuZGVybmVhdGggZG9tYWluX2tpbGwoKSkgaGFkIGFscmVhZHkKY29tcGxl dGVkLCBpdCB3b3VsZCBhbGxvY2F0ZSBodm1fZG9tYWluX2lycShkKS0+ZHBj aSBhbmV3LCB3aXRob3V0IHRoYXQKZXZlciBiZWluZyBmcmVlZCBkdXJpbmcg c3Vic2VxdWVudCBkb21haW4gY2xlYW51cC4KCkxldmVyYWdlIGV2dGNobl9k ZXN0cm95KCkncyBraW5kLW9mLXNwaW4tYmFycmllciwgYWxsb3dpbmcgdG8g c2ltcGx5IGNoZWNrCi0+aXNfZHlpbmcgd2l0aCB0aGUgZG9tYWluJ3MgZXZl bnQgbG9jayBoZWxkLgoKVGhpcyBpcyBYU0EtNTA5IC8gQ1ZFLTIwMjYtNjI0 MzcuCgpGaXhlczogN2EyNmI1NDFhMjAyICgidnRkOiBEeW5hbWljYWxseSBh bGxvY2F0ZSBJUlEtdHJhY2tpbmcgc3RydWN0dXJlcywgb25seSBmb3IgdGhv c2UiKQpTaWduZWQtb2ZmLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+ClJldmlld2VkLWJ5OiBSb2dlciBQYXUgTW9ubsOpIDxyb2dlci5w YXVAY2l0cml4LmNvbT4KCi0tLSBhL3hlbi9kcml2ZXJzL3Bhc3N0aHJvdWdo L3g4Ni9odm0uYworKysgYi94ZW4vZHJpdmVycy9wYXNzdGhyb3VnaC94ODYv aHZtLmMKQEAgLTIzMSw2ICsyMzEsMTIgQEAgaW50IHB0X2lycV9jcmVhdGVf YmluZCgKICByZXN0YXJ0OgogICAgIHdyaXRlX2xvY2soJmQtPmV2ZW50X2xv Y2spOwogCisgICAgaWYgKCBkLT5pc19keWluZyApCisgICAgeworICAgICAg ICB3cml0ZV91bmxvY2soJmQtPmV2ZW50X2xvY2spOworICAgICAgICByZXR1 cm4gLUVTUkNIOworICAgIH0KKwogICAgIGh2bV9pcnFfZHBjaSA9IGRvbWFp bl9nZXRfaXJxX2RwY2koZCk7CiAgICAgaWYgKCAhaHZtX2lycV9kcGNpICYm ICFpc19oYXJkd2FyZV9kb21haW4oZCkgKQogICAgIHsK --=separator-- From xen-users-bounces@lists.xenproject.org Tue Sep 08 12:01:25 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 08 Sep 2026 12:01:25 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1411330.1642051 (Exim 4.92) (envelope-from ) id 1x3uVQ-0005Hh-IY; Tue, 08 Sep 2026 12:00:52 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1411330.1642051; Tue, 08 Sep 2026 12:00:52 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVQ-0005Gp-Bx; Tue, 08 Sep 2026 12:00:52 +0000 Received: by outflank-mailman (input) for mailman id 1411330; Tue, 08 Sep 2026 12:00:50 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVN-0004KE-J8; Tue, 08 Sep 2026 12:00:49 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x3uVM-00BhQN-Vy; Tue, 08 Sep 2026 14:00:48 +0200 Received: from [10.42.69.5] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a9ff8ea-8faa-0a2a0a5109dd-0a2a45058a8e-48 for ; Tue, 08 Sep 2026 14:00:48 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-c201ff.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a9ff8ef-4cb1-0a2a45050019-6882d725b970-3 for ; Tue, 08 Sep 2026 14:00:48 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1x3uVF-004n4b-2Z; Tue, 08 Sep 2026 12:00:42 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1x3uVG-00GjtI-0E; Tue, 08 Sep 2026 12:00:42 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 510 v3 (CVE-2026-79602) - x86: improper handling of HVM emulation return codes Message-Id: Date: Tue, 08 Sep 2026 12:00:42 +0000 X-purgate-ID: tlsNG-c201ff/1788868848-F4AA72A1-504A4F66/0/0 X-purgate-type: clean X-purgate-size: 5243 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-79602 / XSA-510 version 3 x86: improper handling of HVM emulation return codes UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= A guest with a PCI device assigned that has at least a BAR on the IO port space can trigger a BUG() in Xen. IMPACT ====== Passing through a PCI device with at least one BAR in IO address space to unprivileged HVM guests can result in a Denial of Service (DoS) affecting the entire host. VULNERABLE SYSTEMS ================== Xen versions 4.6 and later are vulnerable. This is known to be the case with the fix for XSA-491, but it's possible the issue can also be triggered from other, non-analyzed paths. Only x86 systems are vulnerable. Arm systems are not vulnerable. Only HVM guests with a PCI device with IO BARs assigned can leverage the vulnerability. MITIGATION ========== There is no mitigation available. CREDITS ======= This issue was discovered by Jiqian Chen of AMD and diagnosed as a security issue by Roger Pau Monné of AMD. RESOLUTION ========== Applying the attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa510.patch xen-unstable - Xen 4.17.x $ sha256sum xsa510* 915cca4f0e6af998683a3551e5913d2489b23a697d5eab11358d4d8ffe0a0e55 xsa510.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmqf98UMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZ3GEIALHxkeOzpl3/ctf8o9R89LFTfayDXMY6xGbUTsRk oiLIoKkYkZJPtiG6cY8YGRvzm/UYr+KpeMBsNtm0EcbZlPClGjkEc7JSSpMvcVps XTzRkIUhyOTfpKklhDQJynIIpMu8NkJBLvyVYDcY8fpeZ7yDykMkQ4RyvXT5A56r Vn18FJ401QqBO0+NTD0aCcasiLFpfrsh3AhPfKLIi7c3q0tIayyNBS8NBSNss+TF OJew3jWX7bWnAUlPl4b8EMm4gwK/7o6YJYW+NMCTNMJ/UdfvOJkkq9T8l/41FIXq ArtZrFpKWxsitNoXG7pJIyH/C5wBH2DFABzfqgNjkpzfqKw= =sVA/ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa510.patch" Content-Disposition: attachment; filename="xsa510.patch" Content-Transfer-Encoding: base64 RnJvbSA3OTY1MzczMTE3OTdkNjAwYzBjNzE2ZDBjMDE1NTMxZmM0MWFiYjky IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBGcmksIDcgQXVnIDIw MjYgMTE6MDM6NDggKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ODYvZW11bDog Y29wZSB3aXRoIGludGVybmFsIGhhbmRsZXJzIHJldHVybmluZyBYODZFTVVM X1JFVFJZCk1JTUUtVmVyc2lvbjogMS4wCkNvbnRlbnQtVHlwZTogdGV4dC9w bGFpbjsgY2hhcnNldD1VVEYtOApDb250ZW50LVRyYW5zZmVyLUVuY29kaW5n OiA4Yml0Cgpodm1faW9faW50ZXJjZXB0KCkgY2FuIHJldHVybiBYODZFTVVM X1JFVFJZLCBhbmQgYXMgc3VjaCBpdCBuZWVkcyB0byBiZQpoYW5kbGVkIGlu IHRoZSBzd2l0Y2ggaW4gaHZtZW11bF9kb19pbygpIHRvIGF2b2lkIHRyaWdn ZXJpbmcgdGhlIEJVRygpIGZyb20KdGhlIGRlZmF1bHQgY2FzZS4KClJlc2V0 IHRoZSB2Q1BVIHN0YXRlIHRvIG5vIGluLWZsaWdodCBJT1JFUSBhbmQgcmV0 dXJuIFg4NkVNVUxfUkVUUlkgc28gdGhhdAp0aGUgYWNjZXNzIGlzIHJldHJp ZWQuCgpUaGlzIGlzIFhTQS01MTAgLyBDVkUtMjAyNi03OTYwMi4KClJlcG9y dGVkLWJ5OiBKaXFpYW4gQ2hlbiA8SmlxaWFuLkNoZW5AYW1kLmNvbT4KU2ln bmVkLW9mZi1ieTogUm9nZXIgUGF1IE1vbm7DqSA8cm9nZXJAeGVucHJvamVj dC5vcmc+ClJldmlld2VkLWJ5OiBKYW4gQmV1bGljaCA8amJldWxpY2hAc3Vz ZS5jb20+Ci0tLQogeGVuL2FyY2gveDg2L2h2bS9lbXVsYXRlLmMgfCAxICsK IDEgZmlsZSBjaGFuZ2VkLCAxIGluc2VydGlvbigrKQoKZGlmZiAtLWdpdCBh L3hlbi9hcmNoL3g4Ni9odm0vZW11bGF0ZS5jIGIveGVuL2FyY2gveDg2L2h2 bS9lbXVsYXRlLmMKaW5kZXggMmVmYjFkNGYwODIzLi5jMDllYTAwMmVjNjIg MTAwNjQ0Ci0tLSBhL3hlbi9hcmNoL3g4Ni9odm0vZW11bGF0ZS5jCisrKyBi L3hlbi9hcmNoL3g4Ni9odm0vZW11bGF0ZS5jCkBAIC0zMDgsNiArMzA4LDcg QEAgc3RhdGljIGludCBodm1lbXVsX2RvX2lvKAogICAgIHN3aXRjaCAoIHJj ICkKICAgICB7CiAgICAgY2FzZSBYODZFTVVMX09LQVk6CisgICAgY2FzZSBY ODZFTVVMX1JFVFJZOgogICAgICAgICB2aW8tPnJlcS5zdGF0ZSA9IFNUQVRF X0lPUkVRX05PTkU7CiAgICAgICAgIGJyZWFrOwogICAgIGNhc2UgWDg2RU1V TF9VTkhBTkRMRUFCTEU6Ci0tIAoyLjUzLjAKCg== --=separator-- From xen-users-bounces@lists.xenproject.org Tue Sep 08 12:01:25 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 08 Sep 2026 12:01:25 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1411334.1642090 (Exim 4.92) (envelope-from ) id 1x3uVV-0006Bd-Rr; Tue, 08 Sep 2026 12:00:57 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1411334.1642090; Tue, 08 Sep 2026 12:00:57 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVV-00069y-Gl; Tue, 08 Sep 2026 12:00:57 +0000 Received: by outflank-mailman (input) for mailman id 1411334; Tue, 08 Sep 2026 12:00:55 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVS-0005zp-SD; Tue, 08 Sep 2026 12:00:55 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x3uVS-00H0es-8n; Tue, 08 Sep 2026 14:00:54 +0200 Received: from [10.42.69.6] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a9ff8ef-bab6-0a2a0a5309dd-0a2a450691f0-26 for ; Tue, 08 Sep 2026 14:00:54 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-16d1c6.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a9ff8f4-195a-0a2a45060019-6882d725bd26-3 for ; Tue, 08 Sep 2026 14:00:53 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1x3uVI-004n4v-2j; Tue, 08 Sep 2026 12:00:45 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1x3uVJ-00GkHd-0R; Tue, 08 Sep 2026 12:00:45 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 511 v3 (CVE-2026-79603) - Unconditionally do TLB flushing ahead of page scrubbing Message-Id: Date: Tue, 08 Sep 2026 12:00:45 +0000 X-purgate-ID: tlsNG-16d1c6/1788868854-1FCCD77B-EEAF3B43/0/0 X-purgate-type: clean X-purgate-size: 54589 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-79603 / XSA-511 version 3 Unconditionally do TLB flushing ahead of page scrubbing UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= x86 PV guests can free memory pages while still keeping a stale TLB entry pointing to them. A TLB flush is only issued by Xen (if needed) when the page is re-used. Since it's possible for the page to be scrubbed ahead of the TLB flush, there's a window where a PV guest can modify an already scrubbed page. IMPACT ====== Deployments using `xsm=silo scrub-domheap` with the aim of not allowing the exchange of information amongst guests are not effective in the presence of PV guests. VULNERABLE SYSTEMS ================== All Xen versions from 4.13 onwards are vulnerable. Xen versions 4.12 and earlier are not vulnerable as they lack the `scrub-domheap` command line option. Only x86 PV guests can exploit the vulnerability. MITIGATION ========== There is no known mitigation. CREDITS ======= This issue was discovered by Roger Pau Monné of AMD. RESOLUTION ========== Applying the appropriate attached patch resolves this issue. Note that patches for released versions are generally prepared to apply to the stable branches, and may not apply cleanly to the most recent release tarball. Downstreams are encouraged to update to the tip of the stable branch before applying these patches. xsa511.patch xen-unstable - Xen 4.22.x xsa511-4.21.patch Xen 4.21.x xsa511-4.20.patch Xen 4.20.x xsa511-4.19.patch Xen 4.19.x xsa511-4.18.patch Xen 4.18.x - Xen 4.17.x $ sha256sum xsa511* ba3731960983ef88836f96655f917abb25447eab69fda1d9cf7f4e8203138403 xsa511.patch c05a2d9fb391739a9ed39aa9247be264eb039bdac74f2db3b51e20199e6234cd xsa511-4.18.patch 9653110b3e82ea5c28185d436b22231f39d6e875712a7c9c6882d8cb1bd0d406 xsa511-4.19.patch 0a475b8622d867210346612c5f97a9c3b7b638de2704d51fbd86317b6b11a840 xsa511-4.20.patch 61aa358aef962a1e4dda3dd45cac7436e395362e9b5f9314ad3c60d39231cb97 xsa511-4.21.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmqf98YMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZf6EH/3BoQ+95hSDLUYJzmWNdjdqwYpyrWe1RaMcXWfuM DuvbkEd6SIrtkhEmO8ZHSiBm2g5v9/SyXrm0L4NZ2+LcZWbOAx0PK9D3DOjpIZk2 LpQJg75GPWLkBZ62vgZlCzcXa0opVNSrmnJvYimoHvdplMpFQOhd7Ve3988XCx1G Mb7tKeQ7IdgAW0P/gMTGpunGL9dF58N2d8H5qbp5695tneszzW1UtAVB+4BxlEuh WenQ1hJVtEWznRTYvaEJ7v6CYBoY7TmeYkpZviGhTj8cuTWguMNrKuSitPkRNJ+P OLIQ/pz3E6PGhJxXWw8BpjkDzHf9ETACu1g+sa+18z6/+1o= =/FMW -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa511.patch" Content-Disposition: attachment; filename="xsa511.patch" Content-Transfer-Encoding: base64 RnJvbSA2MGFkMzM5N2Y3Y2U0MzJmYTQ1ZjQ4ZTMwMTRlMWJkYjc0NzkwZDg3 IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBUdWUsIDQgQXVnIDIw MjYgMTI6MjM6MTkgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW4vcGFnZV9h bGxvYzogZW5zdXJlIFRMQiBmbHVzaCBpcyBkb25lIGFoZWFkIG9mIHBhZ2UK IHNjcnViYmluZwpNSU1FLVZlcnNpb246IDEuMApDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNv ZGluZzogOGJpdAoKVGhlIGN1cnJlbnQgd2F5IGluIHdoaWNoIGlkbGUgVExC IGZsdXNoIGFuZCBUTEIgZmx1c2hpbmcgd2hlbiBhbGxvY2F0aW5nIGEKcGFn ZSBhcmUgZG9uZSBhbGxvd3MgZm9yIHRoZSBzY3J1YmJpbmcgdG8gYmUgZG9u ZSBhaGVhZCBvZiB0aGUgVExCIGZsdXNoLgpBIFBWIGRvbWFpbiBjYW4gc3Rp bGwgaGF2ZSBhIFRMQiBlbnRyeSBmb3IgdGhlIHBhZ2UgYWZ0ZXIgc2NydWJi aW5nLCBhbmQKaGVuY2UgaXQgbWF5IGJlIGFibGUgdG8gbW9kaWZ5IGl0LiAg U3VjaCB1bmludGVuZGVkIHBhZ2UgYWNjZXNzaW5nIGFsbG93cwpkb21haW5z IHRvIHBvc3NpYmx5IGV4Y2hhbmdlIGluZm9ybWF0aW9uIGV2ZW4gd2hlbiBg eHNtPXNpbG8gc2NydWItZG9taGVhcGAKYXJlIGluIGVmZmVjdC4KClJlbW92 ZSB0aGUgTUVNRl9ub190bGJmbHVzaCBtZW1vcnkgYWxsb2NhdGlvbiBmbGFn LCBhbmQgcmVvcmRlciB0aGUKZmx1c2hpbmcgc28gaXQncyBhbHdheXMgZG9u ZSBhaGVhZCBvZiB0aGUgc2NydWJiaW5nIGluCmFsbG9jX3ssY29sb3JffWhl YXBfcGFnZXMoKS4gIFRoZSBzb2xlIHVzZXIgb2YgTUVNRl9ub190bGJmbHVz aCBpcwpwb3B1bGF0ZV9waHlzbWFwKCksIGFuZCBnaXZlbiB0aGUgY29uc3Ry YWlucyBhYm92ZSBpdCdzIG5vIGxvbmdlciBzYWZlCnRvIGRlZmVyIHRoZSBm bHVzaCwgaGVuY2UgdGhlIGZsYWcgcmVtb3ZhbCBhbmQgdGhlIGZvbGRpbmcg b2YgdGhlIGZsdXNoIGluCnRoZSBhbGxvY2F0b3IgZnVuY3Rpb24gaXRzZWxm LgoKVGhpcyBpcyBYU0EtNTExIC8gQ1ZFLTIwMjYtNzk2MDMuCgpGaXhlczog MjRmMWE1OGQxOTU0ICgibW06IG9wdGlvbiB0byBfYWx3YXlzXyBzY3J1YiBm cmVlZCBkb21oZWFwIHBhZ2VzIikKU2lnbmVkLW9mZi1ieTogUm9nZXIgUGF1 IE1vbm7DqSA8cm9nZXJAeGVucHJvamVjdC5vcmc+ClJldmlld2VkLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQogeGVuL2NvbW1v bi9tZW1vcnkuYyAgICAgfCAyMSAtLS0tLS0tLS0tLS0tLS0tLS0tLS0KIHhl bi9jb21tb24vcGFnZV9hbGxvYy5jIHwgMzQgKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLQogeGVuL2luY2x1ZGUveGVuL21tLmggICAgfCAg MiAtLQogMyBmaWxlcyBjaGFuZ2VkLCAxOSBpbnNlcnRpb25zKCspLCAzOCBk ZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5j IGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCBlMjQ1YjE2MGQ0NjcuLmZm MmVkNjFmZTJmMiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYwor KysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC0yMzIsOCArMjMyLDYgQEAg c3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJn cyAqYSkKICAgICB1bnNpZ25lZCBpbnQgaSwgajsKICAgICB4ZW5fcGZuX3Qg Z3BmbjsKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gYS0+ZG9tYWluLCAqY3Vy cl9kID0gY3VycmVudC0+ZG9tYWluOwotICAgIGJvb2wgbmVlZF90bGJmbHVz aCA9IGZhbHNlOwotICAgIHVpbnQzMl90IHRsYmZsdXNoX3RpbWVzdGFtcCA9 IDA7CiAKICAgICBpZiAoICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShh LT5leHRlbnRfbGlzdCwgYS0+bnJfZG9uZSwKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBhLT5ucl9leHRlbnRzLTEpICkKQEAgLTI0 NSwxNSArMjQzLDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChz dHJ1Y3QgbWVtb3BfYXJncyAqYSkKIAogICAgIGlmICggdW5saWtlbHkoIWQt PmNyZWF0aW9uX2ZpbmlzaGVkKSApCiAgICAgewotICAgICAgICAvKgotICAg ICAgICAgKiBXaXRoIE1FTUZfbm9fdGxiZmx1c2ggc2V0LCBhbGxvY19oZWFw X3BhZ2VzKCkgd2lsbCBpZ25vcmUKLSAgICAgICAgICogVExCLWZsdXNoZXMu IEFmdGVyIFZNIGNyZWF0aW9uLCB0aGlzIGlzIGEgc2VjdXJpdHkgaXNzdWUg KGl0IGNhbgotICAgICAgICAgKiBtYWtlIHBhZ2VzIGFjY2Vzc2libGUgdG8g Z3Vlc3QgQiwgd2hlbiBndWVzdCBBIG1heSBzdGlsbCBoYXZlIGEKLSAgICAg ICAgICogY2FjaGVkIG1hcHBpbmcgdG8gdGhlbSkuIFNvIHdlIGRvIHRoaXMg b25seSBkdXJpbmcgZG9tYWluIGNyZWF0aW9uLAotICAgICAgICAgKiB3aGVu IHRoZSBkb21haW4gaXRzZWxmIGhhcyBub3QgeWV0IGJlZW4gdW5wYXVzZWQg Zm9yIHRoZSBmaXJzdAotICAgICAgICAgKiB0aW1lLgotICAgICAgICAgKi8K LSAgICAgICAgYS0+bWVtZmxhZ3MgfD0gTUVNRl9ub190bGJmbHVzaDsKICAg ICAgICAgLyoKICAgICAgICAgICogV2l0aCBNRU1GX25vX2ljYWNoZV9mbHVz aCwgYWxsb2NfaGVhcF9wYWdlcygpIHdpbGwgc2tpcAogICAgICAgICAgKiBw ZXJmb3JtaW5nIGljYWNoZSBmbHVzaGVzLiBXZSBkbyBpdCBvbmx5IGJlZm9y ZSBkb21haW4KQEAgLTM5NiwxMyArMzg1LDYgQEAgc3RhdGljIHZvaWQgcG9w dWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICAgICAg ICAgICAgICAgICAgfQogICAgICAgICAgICAgICAgIH0KIAotICAgICAgICAg ICAgICAgIGlmICggdW5saWtlbHkoYS0+bWVtZmxhZ3MgJiBNRU1GX25vX3Rs YmZsdXNoKSApCi0gICAgICAgICAgICAgICAgewotICAgICAgICAgICAgICAg ICAgICBmb3IgKCBqID0gMDsgaiA8ICgxVSA8PCBhLT5leHRlbnRfb3JkZXIp OyBqKysgKQotICAgICAgICAgICAgICAgICAgICAgICAgYWNjdW11bGF0ZV90 bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBhZ2Vbal0sCi0gICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICZ0bGJmbHVzaF90 aW1lc3RhbXApOwotICAgICAgICAgICAgICAgIH0KLQogICAgICAgICAgICAg ICAgIG1mbiA9IHBhZ2VfdG9fbWZuKHBhZ2UpOwogICAgICAgICAgICAgfQog CkBAIC00MTcsOSArMzk5LDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5 c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICB9CiAKIG91dDoKLSAg ICBpZiAoIG5lZWRfdGxiZmx1c2ggKQotICAgICAgICBmaWx0ZXJlZF9mbHVz aF90bGJfbWFzayh0bGJmbHVzaF90aW1lc3RhbXApOwotCiAgICAgaWYgKCBh LT5tZW1mbGFncyAmIE1FTUZfbm9faWNhY2hlX2ZsdXNoICkKICAgICAgICAg aW52YWxpZGF0ZV9pY2FjaGUoKTsKIApkaWZmIC0tZ2l0IGEveGVuL2NvbW1v bi9wYWdlX2FsbG9jLmMgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYwppbmRl eCA0MGZkYjVmYjk4YzIuLjJlZTlkNzMwZjBjMiAxMDA2NDQKLS0tIGEveGVu L2NvbW1vbi9wYWdlX2FsbG9jLmMKKysrIGIveGVuL2NvbW1vbi9wYWdlX2Fs bG9jLmMKQEAgLTEwOTksMTUgKzEwOTksMTcgQEAgc3RhdGljIHN0cnVjdCBw YWdlX2luZm8gKmFsbG9jX2hlYXBfcGFnZXMoCiAgICAgICAgIC8qIFByZXNl cnZlIFBHQ19uZWVkX3NjcnViIHNvIHdlIGNhbiBjaGVjayBpdCBhZnRlciBs b2NrIGlzIGRyb3BwZWQuICovCiAgICAgICAgIHBnW2ldLmNvdW50X2luZm8g PSBQR0Nfc3RhdGVfaW51c2UgfCAocGdbaV0uY291bnRfaW5mbyAmIFBHQ19u ZWVkX3NjcnViKTsKIAotICAgICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1G X25vX3RsYmZsdXNoKSApCi0gICAgICAgICAgICBhY2N1bXVsYXRlX3RsYmZs dXNoKCZuZWVkX3RsYmZsdXNoLCAmcGdbaV0sCi0gICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICZ0bGJmbHVzaF90aW1lc3RhbXApOworICAgICAg ICBhY2N1bXVsYXRlX3RsYmZsdXNoKCZuZWVkX3RsYmZsdXNoLCAmcGdbaV0s ICZ0bGJmbHVzaF90aW1lc3RhbXApOwogCiAgICAgICAgIGluaXRfZnJlZV9w YWdlX2ZpZWxkcygmcGdbaV0pOwogICAgIH0KIAogICAgIHNwaW5fdW5sb2Nr KCZoZWFwX2xvY2spOwogCisgICAgLyogRmx1c2ggYWhlYWQgb2Ygc2NydWJi aW5nOiBlbnN1cmUgbm8gUFYgZG9tYWluIGhhcyBhIHN0YWxlIFRMQiBlbnRy eS4gKi8KKyAgICBpZiAoIG5lZWRfdGxiZmx1c2ggKQorICAgICAgICBmaWx0 ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90aW1lc3RhbXApOworCiAg ICAgaWYgKCBmaXJzdF9kaXJ0eSAhPSBJTlZBTElEX0RJUlRZX0lEWCB8fAog ICAgICAgICAgKHNjcnViX2RlYnVnICYmICEobWVtZmxhZ3MgJiBNRU1GX25v X3NjcnViKSkgKQogICAgIHsKQEAgLTExNDMsOSArMTE0NSw2IEBAIHN0YXRp YyBzdHJ1Y3QgcGFnZV9pbmZvICphbGxvY19oZWFwX3BhZ2VzKAogICAgICAg ICB9CiAgICAgfQogCi0gICAgaWYgKCBuZWVkX3RsYmZsdXNoICkKLSAgICAg ICAgZmlsdGVyZWRfZmx1c2hfdGxiX21hc2sodGxiZmx1c2hfdGltZXN0YW1w KTsKLQogICAgIC8qCiAgICAgICogRW5zdXJlIGNhY2hlIGFuZCBSQU0gYXJl IGNvbnNpc3RlbnQgZm9yIHBsYXRmb3JtcyB3aGVyZSB0aGUgZ3Vlc3QKICAg ICAgKiBjYW4gY29udHJvbCBpdHMgb3duIHZpc2liaWxpdHkgb2YvdGhyb3Vn aCB0aGUgY2FjaGUuCkBAIC0xNDA1LDYgKzE0MDQsMTMgQEAgYm9vbCBzY3J1 Yl9mcmVlX3BhZ2VzKHZvaWQpCiAgICAgICAgICAgICAgICAgewogICAgICAg ICAgICAgICAgICAgICBpZiAoIHRlc3RfYml0KF9QR0NfbmVlZF9zY3J1Yiwg JnBnW2ldLmNvdW50X2luZm8pICkKICAgICAgICAgICAgICAgICAgICAgewor ICAgICAgICAgICAgICAgICAgICAgICAgYm9vbCBuZWVkX3RsYmZsdXNoID0g ZmFsc2U7CisgICAgICAgICAgICAgICAgICAgICAgICB1aW50MzJfdCB0bGJm bHVzaF90cyA9IDA7CisKKyAgICAgICAgICAgICAgICAgICAgICAgIGFjY3Vt dWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwgJnRsYmZs dXNoX3RzKTsKKyAgICAgICAgICAgICAgICAgICAgICAgIGlmICggbmVlZF90 bGJmbHVzaCApCisgICAgICAgICAgICAgICAgICAgICAgICAgICAgZmlsdGVy ZWRfZmx1c2hfdGxiX21hc2sodGxiZmx1c2hfdHMpOworCiAgICAgICAgICAg ICAgICAgICAgICAgICBzY3J1Yl9vbmVfcGFnZSgmcGdbaV0sIHRydWUpOwog ICAgICAgICAgICAgICAgICAgICAgICAgLyoKICAgICAgICAgICAgICAgICAg ICAgICAgICAqIFdlIGNhbiBtb2RpZnkgY291bnRfaW5mbyB3aXRob3V0IGhv bGRpbmcgaGVhcApAQCAtMjA3Miw3ICsyMDc4LDcgQEAgc3RhdGljIHN0cnVj dCBwYWdlX2luZm8gKmFsbG9jX2NvbG9yX2hlYXBfcGFnZSh1bnNpZ25lZCBp bnQgbWVtZmxhZ3MsCiAgICAgdWludDMyX3QgdGxiZmx1c2hfdGltZXN0YW1w ID0gMDsKICAgICBib29sIG5lZWRfc2NydWI7CiAKLSAgICBpZiAoIG1lbWZs YWdzICYgfihNRU1GX25vX3JlZmNvdW50IHwgTUVNRl9ub19vd25lciB8IE1F TUZfbm9fdGxiZmx1c2ggfAorICAgIGlmICggbWVtZmxhZ3MgJiB+KE1FTUZf bm9fcmVmY291bnQgfCBNRU1GX25vX293bmVyIHwKICAgICAgICAgICAgICAg ICAgICAgICBNRU1GX25vX2ljYWNoZV9mbHVzaCB8IE1FTUZfbm9fc2NydWIp ICkKICAgICAgICAgcmV0dXJuIE5VTEw7CiAKQEAgLTIxMDEsMTMgKzIxMDcs MTYgQEAgc3RhdGljIHN0cnVjdCBwYWdlX2luZm8gKmFsbG9jX2NvbG9yX2hl YXBfcGFnZSh1bnNpZ25lZCBpbnQgbWVtZmxhZ3MsCiAgICAgZnJlZV9jb2xv cmVkX3BhZ2VzW2NvbG9yXS0tOwogICAgIHBhZ2VfbGlzdF9kZWwocGcsIGNv bG9yX2hlYXAoY29sb3IpKTsKIAotICAgIGlmICggIShtZW1mbGFncyAmIE1F TUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgYWNjdW11bGF0ZV90bGJmbHVz aCgmbmVlZF90bGJmbHVzaCwgcGcsICZ0bGJmbHVzaF90aW1lc3RhbXApOwor ICAgIGFjY3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsIHBnLCAm dGxiZmx1c2hfdGltZXN0YW1wKTsKIAogICAgIGluaXRfZnJlZV9wYWdlX2Zp ZWxkcyhwZyk7CiAKICAgICBzcGluX3VubG9jaygmaGVhcF9sb2NrKTsKIAor ICAgIC8qIEZsdXNoIGFoZWFkIG9mIHNjcnViYmluZzogZW5zdXJlIG5vIFBW IGRvbWFpbiBoYXMgYSBzdGFsZSBUTEIgZW50cnkuICovCisgICAgaWYgKCBu ZWVkX3RsYmZsdXNoICkKKyAgICAgICAgZmlsdGVyZWRfZmx1c2hfdGxiX21h c2sodGxiZmx1c2hfdGltZXN0YW1wKTsKKwogICAgIGlmICggIShtZW1mbGFn cyAmIE1FTUZfbm9fc2NydWIpICkKICAgICB7CiAgICAgICAgIGlmICggbmVl ZF9zY3J1YiApCkBAIC0yMTE2LDkgKzIxMjUsNiBAQCBzdGF0aWMgc3RydWN0 IHBhZ2VfaW5mbyAqYWxsb2NfY29sb3JfaGVhcF9wYWdlKHVuc2lnbmVkIGlu dCBtZW1mbGFncywKICAgICAgICAgICAgIGNoZWNrX29uZV9wYWdlKHBnKTsK ICAgICB9CiAKLSAgICBpZiAoIG5lZWRfdGxiZmx1c2ggKQotICAgICAgICBm aWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90aW1lc3RhbXApOwot CiAgICAgZmx1c2hfcGFnZV90b19yYW0obWZuX3gocGFnZV90b19tZm4ocGcp KSwKICAgICAgICAgICAgICAgICAgICAgICAhKG1lbWZsYWdzICYgTUVNRl9u b19pY2FjaGVfZmx1c2gpKTsKIApAQCAtMzAzMyw5ICszMDM5LDcgQEAgc3Rh dGljIGJvb2wgcHJlcGFyZV9zdGF0aWNtZW1fcGFnZXMoc3RydWN0IHBhZ2Vf aW5mbyAqcGcsIHVuc2lnbmVkIGxvbmcgbnJfbWZucywKICAgICAgICAgICAg IGdvdG8gb3V0X2VycjsKICAgICAgICAgfQogCi0gICAgICAgIGlmICggISht ZW1mbGFncyAmIE1FTUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgICAgIGFj Y3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwKLSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVz dGFtcCk7CisgICAgICAgIGFjY3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxi Zmx1c2gsICZwZ1tpXSwgJnRsYmZsdXNoX3RpbWVzdGFtcCk7CiAKICAgICAg ICAgLyoKICAgICAgICAgICogUHJlc2VydmUgZmxhZyBQR0Nfc3RhdGljIGFu ZCBjaGFuZ2UgcGFnZSBzdGF0ZQpkaWZmIC0tZ2l0IGEveGVuL2luY2x1ZGUv eGVuL21tLmggYi94ZW4vaW5jbHVkZS94ZW4vbW0uaAppbmRleCBiODBiZWMw MGMxMjQuLjM3OWE4ZTRjYmU1NiAxMDA2NDQKLS0tIGEveGVuL2luY2x1ZGUv eGVuL21tLmgKKysrIGIveGVuL2luY2x1ZGUveGVuL21tLmgKQEAgLTIyMiw4 ICsyMjIsNiBAQCBzdHJ1Y3QgbnBmZWMgewogI2RlZmluZSAgTUVNRl9leGFj dF9ub2RlICAoMVU8PF9NRU1GX2V4YWN0X25vZGUpCiAjZGVmaW5lIF9NRU1G X25vX293bmVyICAgIDUKICNkZWZpbmUgIE1FTUZfbm9fb3duZXIgICAgKDFV PDxfTUVNRl9ub19vd25lcikKLSNkZWZpbmUgX01FTUZfbm9fdGxiZmx1c2gg NgotI2RlZmluZSAgTUVNRl9ub190bGJmbHVzaCAoMVU8PF9NRU1GX25vX3Rs YmZsdXNoKQogI2RlZmluZSBfTUVNRl9ub19pY2FjaGVfZmx1c2ggNwogI2Rl ZmluZSAgTUVNRl9ub19pY2FjaGVfZmx1c2ggKDFVPDxfTUVNRl9ub19pY2Fj aGVfZmx1c2gpCiAjZGVmaW5lIF9NRU1GX25vX3NjcnViICAgIDgKLS0gCjIu NTMuMAoK --=separator Content-Type: application/octet-stream; name="xsa511-4.18.patch" Content-Disposition: attachment; filename="xsa511-4.18.patch" Content-Transfer-Encoding: base64 RnJvbSA4YzAyMWExZGY5ZTAxZjBhNjczYmM4MjgwMzViMzllMjY1OTBmZjZm IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBUdWUsIDQgQXVnIDIw MjYgMTI6MjM6MTkgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW4vcGFnZV9h bGxvYzogZW5zdXJlIFRMQiBmbHVzaCBpcyBkb25lIGFoZWFkIG9mIHBhZ2UK IHNjcnViYmluZwpNSU1FLVZlcnNpb246IDEuMApDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNv ZGluZzogOGJpdAoKVGhlIGN1cnJlbnQgd2F5IGluIHdoaWNoIGlkbGUgVExC IGZsdXNoIGFuZCBUTEIgZmx1c2hpbmcgd2hlbiBhbGxvY2F0aW5nIGEKcGFn ZSBhcmUgZG9uZSBhbGxvd3MgZm9yIHRoZSBzY3J1YmJpbmcgdG8gYmUgZG9u ZSBhaGVhZCBvZiB0aGUgVExCIGZsdXNoLgpBIFBWIGRvbWFpbiBjYW4gc3Rp bGwgaGF2ZSBhIFRMQiBlbnRyeSBmb3IgdGhlIHBhZ2UgYWZ0ZXIgc2NydWJi aW5nLCBhbmQKaGVuY2UgaXQgbWF5IGJlIGFibGUgdG8gbW9kaWZ5IGl0LiAg U3VjaCB1bmludGVuZGVkIHBhZ2UgYWNjZXNzaW5nIGFsbG93cwpkb21haW5z IHRvIHBvc3NpYmx5IGV4Y2hhbmdlIGluZm9ybWF0aW9uIGV2ZW4gd2hlbiBg eHNtPXNpbG8gc2NydWItZG9taGVhcGAKYXJlIGluIGVmZmVjdC4KClJlbW92 ZSB0aGUgTUVNRl9ub190bGJmbHVzaCBtZW1vcnkgYWxsb2NhdGlvbiBmbGFn LCBhbmQgcmVvcmRlciB0aGUKZmx1c2hpbmcgc28gaXQncyBhbHdheXMgZG9u ZSBhaGVhZCBvZiB0aGUgc2NydWJiaW5nIGluCmFsbG9jX3ssY29sb3JffWhl YXBfcGFnZXMoKS4gIFRoZSBzb2xlIHVzZXIgb2YgTUVNRl9ub190bGJmbHVz aCBpcwpwb3B1bGF0ZV9waHlzbWFwKCksIGFuZCBnaXZlbiB0aGUgY29uc3Ry YWlucyBhYm92ZSBpdCdzIG5vIGxvbmdlciBzYWZlCnRvIGRlZmVyIHRoZSBm bHVzaCwgaGVuY2UgdGhlIGZsYWcgcmVtb3ZhbCBhbmQgdGhlIGZvbGRpbmcg b2YgdGhlIGZsdXNoIGluCnRoZSBhbGxvY2F0b3IgZnVuY3Rpb24gaXRzZWxm LgoKVGhpcyBpcyBYU0EtNTExIC8gQ1ZFLTIwMjYtNzk2MDMuCgpGaXhlczog MjRmMWE1OGQxOTU0ICgibW06IG9wdGlvbiB0byBfYWx3YXlzXyBzY3J1YiBm cmVlZCBkb21oZWFwIHBhZ2VzIikKU2lnbmVkLW9mZi1ieTogUm9nZXIgUGF1 IE1vbm7DqSA8cm9nZXJAeGVucHJvamVjdC5vcmc+ClJldmlld2VkLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQogeGVuL2NvbW1v bi9tZW1vcnkuYyAgICAgfCAyMSAtLS0tLS0tLS0tLS0tLS0tLS0tLS0KIHhl bi9jb21tb24vcGFnZV9hbGxvYy5jIHwgMjIgKysrKysrKysrKysrKy0tLS0t LS0tLQogeGVuL2luY2x1ZGUveGVuL21tLmggICAgfCAgMiAtLQogMyBmaWxl cyBjaGFuZ2VkLCAxMyBpbnNlcnRpb25zKCspLCAzMiBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5jIGIveGVuL2NvbW1v bi9tZW1vcnkuYwppbmRleCA1MjUxYWIzNDM3NzguLjY0MGYzYTcwYWI1NCAx MDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29t bW9uL21lbW9yeS5jCkBAIC0xNjEsOCArMTYxLDYgQEAgc3RhdGljIHZvaWQg cG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICB1 bnNpZ25lZCBpbnQgaSwgajsKICAgICB4ZW5fcGZuX3QgZ3BmbjsKICAgICBz dHJ1Y3QgZG9tYWluICpkID0gYS0+ZG9tYWluLCAqY3Vycl9kID0gY3VycmVu dC0+ZG9tYWluOwotICAgIGJvb2wgbmVlZF90bGJmbHVzaCA9IGZhbHNlOwot ICAgIHVpbnQzMl90IHRsYmZsdXNoX3RpbWVzdGFtcCA9IDA7CiAKICAgICBp ZiAoICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShhLT5leHRlbnRfbGlz dCwgYS0+bnJfZG9uZSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBhLT5ucl9leHRlbnRzLTEpICkKQEAgLTE3NCwxNSArMTcyLDYg QEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3Bf YXJncyAqYSkKIAogICAgIGlmICggdW5saWtlbHkoIWQtPmNyZWF0aW9uX2Zp bmlzaGVkKSApCiAgICAgewotICAgICAgICAvKgotICAgICAgICAgKiBXaXRo IE1FTUZfbm9fdGxiZmx1c2ggc2V0LCBhbGxvY19oZWFwX3BhZ2VzKCkgd2ls bCBpZ25vcmUKLSAgICAgICAgICogVExCLWZsdXNoZXMuIEFmdGVyIFZNIGNy ZWF0aW9uLCB0aGlzIGlzIGEgc2VjdXJpdHkgaXNzdWUgKGl0IGNhbgotICAg ICAgICAgKiBtYWtlIHBhZ2VzIGFjY2Vzc2libGUgdG8gZ3Vlc3QgQiwgd2hl biBndWVzdCBBIG1heSBzdGlsbCBoYXZlIGEKLSAgICAgICAgICogY2FjaGVk IG1hcHBpbmcgdG8gdGhlbSkuIFNvIHdlIGRvIHRoaXMgb25seSBkdXJpbmcg ZG9tYWluIGNyZWF0aW9uLAotICAgICAgICAgKiB3aGVuIHRoZSBkb21haW4g aXRzZWxmIGhhcyBub3QgeWV0IGJlZW4gdW5wYXVzZWQgZm9yIHRoZSBmaXJz dAotICAgICAgICAgKiB0aW1lLgotICAgICAgICAgKi8KLSAgICAgICAgYS0+ bWVtZmxhZ3MgfD0gTUVNRl9ub190bGJmbHVzaDsKICAgICAgICAgLyoKICAg ICAgICAgICogV2l0aCBNRU1GX25vX2ljYWNoZV9mbHVzaCwgYWxsb2NfaGVh cF9wYWdlcygpIHdpbGwgc2tpcAogICAgICAgICAgKiBwZXJmb3JtaW5nIGlj YWNoZSBmbHVzaGVzLiBXZSBkbyBpdCBvbmx5IGJlZm9yZSBkb21haW4KQEAg LTI4MiwxMyArMjcxLDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21h cChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICAgICAgICAgICAgICAgICAg Z290byBvdXQ7CiAgICAgICAgICAgICAgICAgfQogCi0gICAgICAgICAgICAg ICAgaWYgKCB1bmxpa2VseShhLT5tZW1mbGFncyAmIE1FTUZfbm9fdGxiZmx1 c2gpICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAg IGZvciAoIGogPSAwOyBqIDwgKDFVIDw8IGEtPmV4dGVudF9vcmRlcik7IGor KyApCi0gICAgICAgICAgICAgICAgICAgICAgICBhY2N1bXVsYXRlX3RsYmZs dXNoKCZuZWVkX3RsYmZsdXNoLCAmcGFnZVtqXSwKLSAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVz dGFtcCk7Ci0gICAgICAgICAgICAgICAgfQotCiAgICAgICAgICAgICAgICAg bWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICB9CiAKQEAg LTMwMyw5ICsyODUsNiBAQCBzdGF0aWMgdm9pZCBwb3B1bGF0ZV9waHlzbWFw KHN0cnVjdCBtZW1vcF9hcmdzICphKQogICAgIH0KIAogb3V0OgotICAgIGlm ICggbmVlZF90bGJmbHVzaCApCi0gICAgICAgIGZpbHRlcmVkX2ZsdXNoX3Rs Yl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7Ci0KICAgICBpZiAoIGEtPm1l bWZsYWdzICYgTUVNRl9ub19pY2FjaGVfZmx1c2ggKQogICAgICAgICBpbnZh bGlkYXRlX2ljYWNoZSgpOwogCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL3Bh Z2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4IDli NWRmNzRmZGRhYi4uNWU4ODI0OWY1MDk5IDEwMDY0NAotLS0gYS94ZW4vY29t bW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2Mu YwpAQCAtMTAzMCw5ICsxMDMwLDcgQEAgc3RhdGljIHN0cnVjdCBwYWdlX2lu Zm8gKmFsbG9jX2hlYXBfcGFnZXMoCiAgICAgICAgIC8qIFByZXNlcnZlIFBH Q19uZWVkX3NjcnViIHNvIHdlIGNhbiBjaGVjayBpdCBhZnRlciBsb2NrIGlz IGRyb3BwZWQuICovCiAgICAgICAgIHBnW2ldLmNvdW50X2luZm8gPSBQR0Nf c3RhdGVfaW51c2UgfCAocGdbaV0uY291bnRfaW5mbyAmIFBHQ19uZWVkX3Nj cnViKTsKIAotICAgICAgICBpZiAoICEobWVtZmxhZ3MgJiBNRU1GX25vX3Rs YmZsdXNoKSApCi0gICAgICAgICAgICBhY2N1bXVsYXRlX3RsYmZsdXNoKCZu ZWVkX3RsYmZsdXNoLCAmcGdbaV0sCi0gICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICZ0bGJmbHVzaF90aW1lc3RhbXApOworICAgICAgICBhY2N1 bXVsYXRlX3RsYmZsdXNoKCZuZWVkX3RsYmZsdXNoLCAmcGdbaV0sICZ0bGJm bHVzaF90aW1lc3RhbXApOwogCiAgICAgICAgIC8qIEluaXRpYWxpc2UgZmll bGRzIHdoaWNoIGhhdmUgb3RoZXIgdXNlcyBmb3IgZnJlZSBwYWdlcy4gKi8K ICAgICAgICAgcGdbaV0udS5pbnVzZS50eXBlX2luZm8gPSBQR1RfVFlQRV9J TkZPX0lOSVRJQUxJWkVSOwpAQCAtMTA0Miw2ICsxMDQwLDEwIEBAIHN0YXRp YyBzdHJ1Y3QgcGFnZV9pbmZvICphbGxvY19oZWFwX3BhZ2VzKAogCiAgICAg c3Bpbl91bmxvY2soJmhlYXBfbG9jayk7CiAKKyAgICAvKiBGbHVzaCBhaGVh ZCBvZiBzY3J1YmJpbmc6IGVuc3VyZSBubyBQViBkb21haW4gaGFzIGEgc3Rh bGUgVExCIGVudHJ5LiAqLworICAgIGlmICggbmVlZF90bGJmbHVzaCApCisg ICAgICAgIGZpbHRlcmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVz dGFtcCk7CisKICAgICBpZiAoIGZpcnN0X2RpcnR5ICE9IElOVkFMSURfRElS VFlfSURYIHx8CiAgICAgICAgICAoc2NydWJfZGVidWcgJiYgIShtZW1mbGFn cyAmIE1FTUZfbm9fc2NydWIpKSApCiAgICAgewpAQCAtMTA2Niw5ICsxMDY4 LDYgQEAgc3RhdGljIHN0cnVjdCBwYWdlX2luZm8gKmFsbG9jX2hlYXBfcGFn ZXMoCiAgICAgICAgIH0KICAgICB9CiAKLSAgICBpZiAoIG5lZWRfdGxiZmx1 c2ggKQotICAgICAgICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVz aF90aW1lc3RhbXApOwotCiAgICAgLyoKICAgICAgKiBFbnN1cmUgY2FjaGUg YW5kIFJBTSBhcmUgY29uc2lzdGVudCBmb3IgcGxhdGZvcm1zIHdoZXJlIHRo ZSBndWVzdAogICAgICAqIGNhbiBjb250cm9sIGl0cyBvd24gdmlzaWJpbGl0 eSBvZi90aHJvdWdoIHRoZSBjYWNoZS4KQEAgLTEzMTUsNiArMTMxNCwxMyBA QCBib29sIHNjcnViX2ZyZWVfcGFnZXModm9pZCkKICAgICAgICAgICAgICAg ICB7CiAgICAgICAgICAgICAgICAgICAgIGlmICggdGVzdF9iaXQoX1BHQ19u ZWVkX3NjcnViLCAmcGdbaV0uY291bnRfaW5mbykgKQogICAgICAgICAgICAg ICAgICAgICB7CisgICAgICAgICAgICAgICAgICAgICAgICBib29sIG5lZWRf dGxiZmx1c2ggPSBmYWxzZTsKKyAgICAgICAgICAgICAgICAgICAgICAgIHVp bnQzMl90IHRsYmZsdXNoX3RzID0gMDsKKworICAgICAgICAgICAgICAgICAg ICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBn W2ldLCAmdGxiZmx1c2hfdHMpOworICAgICAgICAgICAgICAgICAgICAgICAg aWYgKCBuZWVkX3RsYmZsdXNoICkKKyAgICAgICAgICAgICAgICAgICAgICAg ICAgICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90cyk7CisK ICAgICAgICAgICAgICAgICAgICAgICAgIHNjcnViX29uZV9wYWdlKCZwZ1tp XSk7CiAgICAgICAgICAgICAgICAgICAgICAgICAvKgogICAgICAgICAgICAg ICAgICAgICAgICAgICogV2UgY2FuIG1vZGlmeSBjb3VudF9pbmZvIHdpdGhv dXQgaG9sZGluZyBoZWFwCkBAIC0yNzkxLDkgKzI3OTcsNyBAQCBzdGF0aWMg Ym9vbCBwcmVwYXJlX3N0YXRpY21lbV9wYWdlcyhzdHJ1Y3QgcGFnZV9pbmZv ICpwZywgdW5zaWduZWQgbG9uZyBucl9tZm5zLAogICAgICAgICAgICAgZ290 byBvdXRfZXJyOwogICAgICAgICB9CiAKLSAgICAgICAgaWYgKCAhKG1lbWZs YWdzICYgTUVNRl9ub190bGJmbHVzaCkgKQotICAgICAgICAgICAgYWNjdW11 bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ldLAotICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAmdGxiZmx1c2hfdGltZXN0YW1w KTsKKyAgICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVz aCwgJnBnW2ldLCAmdGxiZmx1c2hfdGltZXN0YW1wKTsKIAogICAgICAgICAv KgogICAgICAgICAgKiBQcmVzZXJ2ZSBmbGFnIFBHQ19zdGF0aWMgYW5kIGNo YW5nZSBwYWdlIHN0YXRlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS94ZW4v bW0uaCBiL3hlbi9pbmNsdWRlL3hlbi9tbS5oCmluZGV4IDhiYzVmNDI0OWQx Yi4uMWZlZjU0MmY2ZmJhIDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS94ZW4v bW0uaAorKysgYi94ZW4vaW5jbHVkZS94ZW4vbW0uaApAQCAtMTk3LDggKzE5 Nyw2IEBAIHN0cnVjdCBucGZlYyB7CiAjZGVmaW5lICBNRU1GX2V4YWN0X25v ZGUgICgxVTw8X01FTUZfZXhhY3Rfbm9kZSkKICNkZWZpbmUgX01FTUZfbm9f b3duZXIgICAgNQogI2RlZmluZSAgTUVNRl9ub19vd25lciAgICAoMVU8PF9N RU1GX25vX293bmVyKQotI2RlZmluZSBfTUVNRl9ub190bGJmbHVzaCA2Ci0j ZGVmaW5lICBNRU1GX25vX3RsYmZsdXNoICgxVTw8X01FTUZfbm9fdGxiZmx1 c2gpCiAjZGVmaW5lIF9NRU1GX25vX2ljYWNoZV9mbHVzaCA3CiAjZGVmaW5l ICBNRU1GX25vX2ljYWNoZV9mbHVzaCAoMVU8PF9NRU1GX25vX2ljYWNoZV9m bHVzaCkKICNkZWZpbmUgX01FTUZfbm9fc2NydWIgICAgOAotLSAKMi41My4w Cgo= --=separator Content-Type: application/octet-stream; name="xsa511-4.19.patch" Content-Disposition: attachment; filename="xsa511-4.19.patch" Content-Transfer-Encoding: base64 RnJvbSBkZTk0YzFlODJkNTc5ZDYxN2I2NmQzNDNmZTdhNWVhODc1NzdhYTYy IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBUdWUsIDQgQXVnIDIw MjYgMTI6MjM6MTkgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW4vcGFnZV9h bGxvYzogZW5zdXJlIFRMQiBmbHVzaCBpcyBkb25lIGFoZWFkIG9mIHBhZ2UK IHNjcnViYmluZwpNSU1FLVZlcnNpb246IDEuMApDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNv ZGluZzogOGJpdAoKVGhlIGN1cnJlbnQgd2F5IGluIHdoaWNoIGlkbGUgVExC IGZsdXNoIGFuZCBUTEIgZmx1c2hpbmcgd2hlbiBhbGxvY2F0aW5nIGEKcGFn ZSBhcmUgZG9uZSBhbGxvd3MgZm9yIHRoZSBzY3J1YmJpbmcgdG8gYmUgZG9u ZSBhaGVhZCBvZiB0aGUgVExCIGZsdXNoLgpBIFBWIGRvbWFpbiBjYW4gc3Rp bGwgaGF2ZSBhIFRMQiBlbnRyeSBmb3IgdGhlIHBhZ2UgYWZ0ZXIgc2NydWJi aW5nLCBhbmQKaGVuY2UgaXQgbWF5IGJlIGFibGUgdG8gbW9kaWZ5IGl0LiAg U3VjaCB1bmludGVuZGVkIHBhZ2UgYWNjZXNzaW5nIGFsbG93cwpkb21haW5z IHRvIHBvc3NpYmx5IGV4Y2hhbmdlIGluZm9ybWF0aW9uIGV2ZW4gd2hlbiBg eHNtPXNpbG8gc2NydWItZG9taGVhcGAKYXJlIGluIGVmZmVjdC4KClJlbW92 ZSB0aGUgTUVNRl9ub190bGJmbHVzaCBtZW1vcnkgYWxsb2NhdGlvbiBmbGFn LCBhbmQgcmVvcmRlciB0aGUKZmx1c2hpbmcgc28gaXQncyBhbHdheXMgZG9u ZSBhaGVhZCBvZiB0aGUgc2NydWJiaW5nIGluCmFsbG9jX3ssY29sb3JffWhl YXBfcGFnZXMoKS4gIFRoZSBzb2xlIHVzZXIgb2YgTUVNRl9ub190bGJmbHVz aCBpcwpwb3B1bGF0ZV9waHlzbWFwKCksIGFuZCBnaXZlbiB0aGUgY29uc3Ry YWlucyBhYm92ZSBpdCdzIG5vIGxvbmdlciBzYWZlCnRvIGRlZmVyIHRoZSBm bHVzaCwgaGVuY2UgdGhlIGZsYWcgcmVtb3ZhbCBhbmQgdGhlIGZvbGRpbmcg b2YgdGhlIGZsdXNoIGluCnRoZSBhbGxvY2F0b3IgZnVuY3Rpb24gaXRzZWxm LgoKVGhpcyBpcyBYU0EtNTExIC8gQ1ZFLTIwMjYtNzk2MDMuCgpGaXhlczog MjRmMWE1OGQxOTU0ICgibW06IG9wdGlvbiB0byBfYWx3YXlzXyBzY3J1YiBm cmVlZCBkb21oZWFwIHBhZ2VzIikKU2lnbmVkLW9mZi1ieTogUm9nZXIgUGF1 IE1vbm7DqSA8cm9nZXJAeGVucHJvamVjdC5vcmc+ClJldmlld2VkLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQogeGVuL2NvbW1v bi9tZW1vcnkuYyAgICAgfCAyMSAtLS0tLS0tLS0tLS0tLS0tLS0tLS0KIHhl bi9jb21tb24vcGFnZV9hbGxvYy5jIHwgMjIgKysrKysrKysrKysrKy0tLS0t LS0tLQogeGVuL2luY2x1ZGUveGVuL21tLmggICAgfCAgMiAtLQogMyBmaWxl cyBjaGFuZ2VkLCAxMyBpbnNlcnRpb25zKCspLCAzMiBkZWxldGlvbnMoLSkK CmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5jIGIveGVuL2NvbW1v bi9tZW1vcnkuYwppbmRleCA3MjNhYjNjMGRhOGYuLmU2NWQzY2UzYjA0NiAx MDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYworKysgYi94ZW4vY29t bW9uL21lbW9yeS5jCkBAIC0xNjEsOCArMTYxLDYgQEAgc3RhdGljIHZvaWQg cG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICB1 bnNpZ25lZCBpbnQgaSwgajsKICAgICB4ZW5fcGZuX3QgZ3BmbjsKICAgICBz dHJ1Y3QgZG9tYWluICpkID0gYS0+ZG9tYWluLCAqY3Vycl9kID0gY3VycmVu dC0+ZG9tYWluOwotICAgIGJvb2wgbmVlZF90bGJmbHVzaCA9IGZhbHNlOwot ICAgIHVpbnQzMl90IHRsYmZsdXNoX3RpbWVzdGFtcCA9IDA7CiAKICAgICBp ZiAoICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShhLT5leHRlbnRfbGlz dCwgYS0+bnJfZG9uZSwKICAgICAgICAgICAgICAgICAgICAgICAgICAgICAg ICAgICAgICBhLT5ucl9leHRlbnRzLTEpICkKQEAgLTE3NCwxNSArMTcyLDYg QEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3Bf YXJncyAqYSkKIAogICAgIGlmICggdW5saWtlbHkoIWQtPmNyZWF0aW9uX2Zp bmlzaGVkKSApCiAgICAgewotICAgICAgICAvKgotICAgICAgICAgKiBXaXRo IE1FTUZfbm9fdGxiZmx1c2ggc2V0LCBhbGxvY19oZWFwX3BhZ2VzKCkgd2ls bCBpZ25vcmUKLSAgICAgICAgICogVExCLWZsdXNoZXMuIEFmdGVyIFZNIGNy ZWF0aW9uLCB0aGlzIGlzIGEgc2VjdXJpdHkgaXNzdWUgKGl0IGNhbgotICAg ICAgICAgKiBtYWtlIHBhZ2VzIGFjY2Vzc2libGUgdG8gZ3Vlc3QgQiwgd2hl biBndWVzdCBBIG1heSBzdGlsbCBoYXZlIGEKLSAgICAgICAgICogY2FjaGVk IG1hcHBpbmcgdG8gdGhlbSkuIFNvIHdlIGRvIHRoaXMgb25seSBkdXJpbmcg ZG9tYWluIGNyZWF0aW9uLAotICAgICAgICAgKiB3aGVuIHRoZSBkb21haW4g aXRzZWxmIGhhcyBub3QgeWV0IGJlZW4gdW5wYXVzZWQgZm9yIHRoZSBmaXJz dAotICAgICAgICAgKiB0aW1lLgotICAgICAgICAgKi8KLSAgICAgICAgYS0+ bWVtZmxhZ3MgfD0gTUVNRl9ub190bGJmbHVzaDsKICAgICAgICAgLyoKICAg ICAgICAgICogV2l0aCBNRU1GX25vX2ljYWNoZV9mbHVzaCwgYWxsb2NfaGVh cF9wYWdlcygpIHdpbGwgc2tpcAogICAgICAgICAgKiBwZXJmb3JtaW5nIGlj YWNoZSBmbHVzaGVzLiBXZSBkbyBpdCBvbmx5IGJlZm9yZSBkb21haW4KQEAg LTI4MiwxMyArMjcxLDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21h cChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICAgICAgICAgICAgICAgICAg Z290byBvdXQ7CiAgICAgICAgICAgICAgICAgfQogCi0gICAgICAgICAgICAg ICAgaWYgKCB1bmxpa2VseShhLT5tZW1mbGFncyAmIE1FTUZfbm9fdGxiZmx1 c2gpICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAgICAgICAgICAgICAg IGZvciAoIGogPSAwOyBqIDwgKDFVIDw8IGEtPmV4dGVudF9vcmRlcik7IGor KyApCi0gICAgICAgICAgICAgICAgICAgICAgICBhY2N1bXVsYXRlX3RsYmZs dXNoKCZuZWVkX3RsYmZsdXNoLCAmcGFnZVtqXSwKLSAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVz dGFtcCk7Ci0gICAgICAgICAgICAgICAgfQotCiAgICAgICAgICAgICAgICAg bWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAgICAgICB9CiAKQEAg LTMwMyw5ICsyODUsNiBAQCBzdGF0aWMgdm9pZCBwb3B1bGF0ZV9waHlzbWFw KHN0cnVjdCBtZW1vcF9hcmdzICphKQogICAgIH0KIAogb3V0OgotICAgIGlm ICggbmVlZF90bGJmbHVzaCApCi0gICAgICAgIGZpbHRlcmVkX2ZsdXNoX3Rs Yl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7Ci0KICAgICBpZiAoIGEtPm1l bWZsYWdzICYgTUVNRl9ub19pY2FjaGVfZmx1c2ggKQogICAgICAgICBpbnZh bGlkYXRlX2ljYWNoZSgpOwogCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL3Bh Z2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxvYy5jCmluZGV4IGJi Yjg1Nzg0NTk2NS4uN2JkNTY1Y2QyN2JlIDEwMDY0NAotLS0gYS94ZW4vY29t bW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9uL3BhZ2VfYWxsb2Mu YwpAQCAtMTAzOCwxNSArMTAzOCwxNyBAQCBzdGF0aWMgc3RydWN0IHBhZ2Vf aW5mbyAqYWxsb2NfaGVhcF9wYWdlcygKICAgICAgICAgLyogUHJlc2VydmUg UEdDX25lZWRfc2NydWIgc28gd2UgY2FuIGNoZWNrIGl0IGFmdGVyIGxvY2sg aXMgZHJvcHBlZC4gKi8KICAgICAgICAgcGdbaV0uY291bnRfaW5mbyA9IFBH Q19zdGF0ZV9pbnVzZSB8IChwZ1tpXS5jb3VudF9pbmZvICYgUEdDX25lZWRf c2NydWIpOwogCi0gICAgICAgIGlmICggIShtZW1mbGFncyAmIE1FTUZfbm9f dGxiZmx1c2gpICkKLSAgICAgICAgICAgIGFjY3VtdWxhdGVfdGxiZmx1c2go Jm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwKLSAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVzdGFtcCk7CisgICAgICAgIGFj Y3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwgJnRs YmZsdXNoX3RpbWVzdGFtcCk7CiAKICAgICAgICAgaW5pdF9mcmVlX3BhZ2Vf ZmllbGRzKCZwZ1tpXSk7CiAgICAgfQogCiAgICAgc3Bpbl91bmxvY2soJmhl YXBfbG9jayk7CiAKKyAgICAvKiBGbHVzaCBhaGVhZCBvZiBzY3J1YmJpbmc6 IGVuc3VyZSBubyBQViBkb21haW4gaGFzIGEgc3RhbGUgVExCIGVudHJ5LiAq LworICAgIGlmICggbmVlZF90bGJmbHVzaCApCisgICAgICAgIGZpbHRlcmVk X2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7CisKICAgICBp ZiAoIGZpcnN0X2RpcnR5ICE9IElOVkFMSURfRElSVFlfSURYIHx8CiAgICAg ICAgICAoc2NydWJfZGVidWcgJiYgIShtZW1mbGFncyAmIE1FTUZfbm9fc2Ny dWIpKSApCiAgICAgewpAQCAtMTA3MSw5ICsxMDczLDYgQEAgc3RhdGljIHN0 cnVjdCBwYWdlX2luZm8gKmFsbG9jX2hlYXBfcGFnZXMoCiAgICAgICAgIH0K ICAgICB9CiAKLSAgICBpZiAoIG5lZWRfdGxiZmx1c2ggKQotICAgICAgICBm aWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90aW1lc3RhbXApOwot CiAgICAgLyoKICAgICAgKiBFbnN1cmUgY2FjaGUgYW5kIFJBTSBhcmUgY29u c2lzdGVudCBmb3IgcGxhdGZvcm1zIHdoZXJlIHRoZSBndWVzdAogICAgICAq IGNhbiBjb250cm9sIGl0cyBvd24gdmlzaWJpbGl0eSBvZi90aHJvdWdoIHRo ZSBjYWNoZS4KQEAgLTEzMjAsNiArMTMxOSwxMyBAQCBib29sIHNjcnViX2Zy ZWVfcGFnZXModm9pZCkKICAgICAgICAgICAgICAgICB7CiAgICAgICAgICAg ICAgICAgICAgIGlmICggdGVzdF9iaXQoX1BHQ19uZWVkX3NjcnViLCAmcGdb aV0uY291bnRfaW5mbykgKQogICAgICAgICAgICAgICAgICAgICB7CisgICAg ICAgICAgICAgICAgICAgICAgICBib29sIG5lZWRfdGxiZmx1c2ggPSBmYWxz ZTsKKyAgICAgICAgICAgICAgICAgICAgICAgIHVpbnQzMl90IHRsYmZsdXNo X3RzID0gMDsKKworICAgICAgICAgICAgICAgICAgICAgICAgYWNjdW11bGF0 ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ldLCAmdGxiZmx1c2hf dHMpOworICAgICAgICAgICAgICAgICAgICAgICAgaWYgKCBuZWVkX3RsYmZs dXNoICkKKyAgICAgICAgICAgICAgICAgICAgICAgICAgICBmaWx0ZXJlZF9m bHVzaF90bGJfbWFzayh0bGJmbHVzaF90cyk7CisKICAgICAgICAgICAgICAg ICAgICAgICAgIHNjcnViX29uZV9wYWdlKCZwZ1tpXSk7CiAgICAgICAgICAg ICAgICAgICAgICAgICAvKgogICAgICAgICAgICAgICAgICAgICAgICAgICog V2UgY2FuIG1vZGlmeSBjb3VudF9pbmZvIHdpdGhvdXQgaG9sZGluZyBoZWFw CkBAIC0yNzk2LDkgKzI4MDIsNyBAQCBzdGF0aWMgYm9vbCBwcmVwYXJlX3N0 YXRpY21lbV9wYWdlcyhzdHJ1Y3QgcGFnZV9pbmZvICpwZywgdW5zaWduZWQg bG9uZyBucl9tZm5zLAogICAgICAgICAgICAgZ290byBvdXRfZXJyOwogICAg ICAgICB9CiAKLSAgICAgICAgaWYgKCAhKG1lbWZsYWdzICYgTUVNRl9ub190 bGJmbHVzaCkgKQotICAgICAgICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgm bmVlZF90bGJmbHVzaCwgJnBnW2ldLAotICAgICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAmdGxiZmx1c2hfdGltZXN0YW1wKTsKKyAgICAgICAgYWNj dW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ldLCAmdGxi Zmx1c2hfdGltZXN0YW1wKTsKIAogICAgICAgICAvKgogICAgICAgICAgKiBQ cmVzZXJ2ZSBmbGFnIFBHQ19zdGF0aWMgYW5kIGNoYW5nZSBwYWdlIHN0YXRl CmRpZmYgLS1naXQgYS94ZW4vaW5jbHVkZS94ZW4vbW0uaCBiL3hlbi9pbmNs dWRlL3hlbi9tbS5oCmluZGV4IDc1NjEyOTdhNzU1My4uY2M3ODUyNjYyYTQ4 IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVkZS94ZW4vbW0uaAorKysgYi94ZW4v aW5jbHVkZS94ZW4vbW0uaApAQCAtMjAwLDggKzIwMCw2IEBAIHN0cnVjdCBu cGZlYyB7CiAjZGVmaW5lICBNRU1GX2V4YWN0X25vZGUgICgxVTw8X01FTUZf ZXhhY3Rfbm9kZSkKICNkZWZpbmUgX01FTUZfbm9fb3duZXIgICAgNQogI2Rl ZmluZSAgTUVNRl9ub19vd25lciAgICAoMVU8PF9NRU1GX25vX293bmVyKQot I2RlZmluZSBfTUVNRl9ub190bGJmbHVzaCA2Ci0jZGVmaW5lICBNRU1GX25v X3RsYmZsdXNoICgxVTw8X01FTUZfbm9fdGxiZmx1c2gpCiAjZGVmaW5lIF9N RU1GX25vX2ljYWNoZV9mbHVzaCA3CiAjZGVmaW5lICBNRU1GX25vX2ljYWNo ZV9mbHVzaCAoMVU8PF9NRU1GX25vX2ljYWNoZV9mbHVzaCkKICNkZWZpbmUg X01FTUZfbm9fc2NydWIgICAgOAotLSAKMi41My4wCgo= --=separator Content-Type: application/octet-stream; name="xsa511-4.20.patch" Content-Disposition: attachment; filename="xsa511-4.20.patch" Content-Transfer-Encoding: base64 RnJvbSA3NDFlZTVhYjczMDMyMDAwOTgzMjJmZjVlODczMmQ0MDlmMzU2OTgx IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBUdWUsIDQgQXVnIDIw MjYgMTI6MjM6MTkgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW4vcGFnZV9h bGxvYzogZW5zdXJlIFRMQiBmbHVzaCBpcyBkb25lIGFoZWFkIG9mIHBhZ2UK IHNjcnViYmluZwpNSU1FLVZlcnNpb246IDEuMApDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNv ZGluZzogOGJpdAoKVGhlIGN1cnJlbnQgd2F5IGluIHdoaWNoIGlkbGUgVExC IGZsdXNoIGFuZCBUTEIgZmx1c2hpbmcgd2hlbiBhbGxvY2F0aW5nIGEKcGFn ZSBhcmUgZG9uZSBhbGxvd3MgZm9yIHRoZSBzY3J1YmJpbmcgdG8gYmUgZG9u ZSBhaGVhZCBvZiB0aGUgVExCIGZsdXNoLgpBIFBWIGRvbWFpbiBjYW4gc3Rp bGwgaGF2ZSBhIFRMQiBlbnRyeSBmb3IgdGhlIHBhZ2UgYWZ0ZXIgc2NydWJi aW5nLCBhbmQKaGVuY2UgaXQgbWF5IGJlIGFibGUgdG8gbW9kaWZ5IGl0LiAg U3VjaCB1bmludGVuZGVkIHBhZ2UgYWNjZXNzaW5nIGFsbG93cwpkb21haW5z IHRvIHBvc3NpYmx5IGV4Y2hhbmdlIGluZm9ybWF0aW9uIGV2ZW4gd2hlbiBg eHNtPXNpbG8gc2NydWItZG9taGVhcGAKYXJlIGluIGVmZmVjdC4KClJlbW92 ZSB0aGUgTUVNRl9ub190bGJmbHVzaCBtZW1vcnkgYWxsb2NhdGlvbiBmbGFn LCBhbmQgcmVvcmRlciB0aGUKZmx1c2hpbmcgc28gaXQncyBhbHdheXMgZG9u ZSBhaGVhZCBvZiB0aGUgc2NydWJiaW5nIGluCmFsbG9jX3ssY29sb3JffWhl YXBfcGFnZXMoKS4gIFRoZSBzb2xlIHVzZXIgb2YgTUVNRl9ub190bGJmbHVz aCBpcwpwb3B1bGF0ZV9waHlzbWFwKCksIGFuZCBnaXZlbiB0aGUgY29uc3Ry YWlucyBhYm92ZSBpdCdzIG5vIGxvbmdlciBzYWZlCnRvIGRlZmVyIHRoZSBm bHVzaCwgaGVuY2UgdGhlIGZsYWcgcmVtb3ZhbCBhbmQgdGhlIGZvbGRpbmcg b2YgdGhlIGZsdXNoIGluCnRoZSBhbGxvY2F0b3IgZnVuY3Rpb24gaXRzZWxm LgoKVGhpcyBpcyBYU0EtNTExIC8gQ1ZFLTIwMjYtNzk2MDMuCgpGaXhlczog MjRmMWE1OGQxOTU0ICgibW06IG9wdGlvbiB0byBfYWx3YXlzXyBzY3J1YiBm cmVlZCBkb21oZWFwIHBhZ2VzIikKU2lnbmVkLW9mZi1ieTogUm9nZXIgUGF1 IE1vbm7DqSA8cm9nZXJAeGVucHJvamVjdC5vcmc+ClJldmlld2VkLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQogeGVuL2NvbW1v bi9tZW1vcnkuYyAgICAgfCAyMSAtLS0tLS0tLS0tLS0tLS0tLS0tLS0KIHhl bi9jb21tb24vcGFnZV9hbGxvYy5jIHwgMzQgKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLQogeGVuL2luY2x1ZGUveGVuL21tLmggICAgfCAg MiAtLQogMyBmaWxlcyBjaGFuZ2VkLCAxOSBpbnNlcnRpb25zKCspLCAzOCBk ZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5j IGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCA3YTAwYmY5NWRkY2YuLjU0 ZDJkNjBmY2M1ZiAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYwor KysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC0xNjMsOCArMTYzLDYgQEAg c3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJn cyAqYSkKICAgICB1bnNpZ25lZCBpbnQgaSwgajsKICAgICB4ZW5fcGZuX3Qg Z3BmbjsKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gYS0+ZG9tYWluLCAqY3Vy cl9kID0gY3VycmVudC0+ZG9tYWluOwotICAgIGJvb2wgbmVlZF90bGJmbHVz aCA9IGZhbHNlOwotICAgIHVpbnQzMl90IHRsYmZsdXNoX3RpbWVzdGFtcCA9 IDA7CiAKICAgICBpZiAoICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShh LT5leHRlbnRfbGlzdCwgYS0+bnJfZG9uZSwKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBhLT5ucl9leHRlbnRzLTEpICkKQEAgLTE3 NiwxNSArMTc0LDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChz dHJ1Y3QgbWVtb3BfYXJncyAqYSkKIAogICAgIGlmICggdW5saWtlbHkoIWQt PmNyZWF0aW9uX2ZpbmlzaGVkKSApCiAgICAgewotICAgICAgICAvKgotICAg ICAgICAgKiBXaXRoIE1FTUZfbm9fdGxiZmx1c2ggc2V0LCBhbGxvY19oZWFw X3BhZ2VzKCkgd2lsbCBpZ25vcmUKLSAgICAgICAgICogVExCLWZsdXNoZXMu IEFmdGVyIFZNIGNyZWF0aW9uLCB0aGlzIGlzIGEgc2VjdXJpdHkgaXNzdWUg KGl0IGNhbgotICAgICAgICAgKiBtYWtlIHBhZ2VzIGFjY2Vzc2libGUgdG8g Z3Vlc3QgQiwgd2hlbiBndWVzdCBBIG1heSBzdGlsbCBoYXZlIGEKLSAgICAg ICAgICogY2FjaGVkIG1hcHBpbmcgdG8gdGhlbSkuIFNvIHdlIGRvIHRoaXMg b25seSBkdXJpbmcgZG9tYWluIGNyZWF0aW9uLAotICAgICAgICAgKiB3aGVu IHRoZSBkb21haW4gaXRzZWxmIGhhcyBub3QgeWV0IGJlZW4gdW5wYXVzZWQg Zm9yIHRoZSBmaXJzdAotICAgICAgICAgKiB0aW1lLgotICAgICAgICAgKi8K LSAgICAgICAgYS0+bWVtZmxhZ3MgfD0gTUVNRl9ub190bGJmbHVzaDsKICAg ICAgICAgLyoKICAgICAgICAgICogV2l0aCBNRU1GX25vX2ljYWNoZV9mbHVz aCwgYWxsb2NfaGVhcF9wYWdlcygpIHdpbGwgc2tpcAogICAgICAgICAgKiBw ZXJmb3JtaW5nIGljYWNoZSBmbHVzaGVzLiBXZSBkbyBpdCBvbmx5IGJlZm9y ZSBkb21haW4KQEAgLTI4NCwxMyArMjczLDYgQEAgc3RhdGljIHZvaWQgcG9w dWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICAgICAg ICAgICAgICAgICAgZ290byBvdXQ7CiAgICAgICAgICAgICAgICAgfQogCi0g ICAgICAgICAgICAgICAgaWYgKCB1bmxpa2VseShhLT5tZW1mbGFncyAmIE1F TUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAg ICAgICAgICAgICAgIGZvciAoIGogPSAwOyBqIDwgKDFVIDw8IGEtPmV4dGVu dF9vcmRlcik7IGorKyApCi0gICAgICAgICAgICAgICAgICAgICAgICBhY2N1 bXVsYXRlX3RsYmZsdXNoKCZuZWVkX3RsYmZsdXNoLCAmcGFnZVtqXSwKLSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJnRs YmZsdXNoX3RpbWVzdGFtcCk7Ci0gICAgICAgICAgICAgICAgfQotCiAgICAg ICAgICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAg ICAgICB9CiAKQEAgLTMwNSw5ICsyODcsNiBAQCBzdGF0aWMgdm9pZCBwb3B1 bGF0ZV9waHlzbWFwKHN0cnVjdCBtZW1vcF9hcmdzICphKQogICAgIH0KIAog b3V0OgotICAgIGlmICggbmVlZF90bGJmbHVzaCApCi0gICAgICAgIGZpbHRl cmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7Ci0KICAg ICBpZiAoIGEtPm1lbWZsYWdzICYgTUVNRl9ub19pY2FjaGVfZmx1c2ggKQog ICAgICAgICBpbnZhbGlkYXRlX2ljYWNoZSgpOwogCmRpZmYgLS1naXQgYS94 ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxv Yy5jCmluZGV4IDBhMGViYzE1OTgxYi4uMjY4MmZmZjljY2JjIDEwMDY0NAot LS0gYS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYwpAQCAtMTA2OCwxNSArMTA2OCwxNyBAQCBzdGF0aWMg c3RydWN0IHBhZ2VfaW5mbyAqYWxsb2NfaGVhcF9wYWdlcygKICAgICAgICAg LyogUHJlc2VydmUgUEdDX25lZWRfc2NydWIgc28gd2UgY2FuIGNoZWNrIGl0 IGFmdGVyIGxvY2sgaXMgZHJvcHBlZC4gKi8KICAgICAgICAgcGdbaV0uY291 bnRfaW5mbyA9IFBHQ19zdGF0ZV9pbnVzZSB8IChwZ1tpXS5jb3VudF9pbmZv ICYgUEdDX25lZWRfc2NydWIpOwogCi0gICAgICAgIGlmICggIShtZW1mbGFn cyAmIE1FTUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgICAgIGFjY3VtdWxh dGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwKLSAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVzdGFtcCk7 CisgICAgICAgIGFjY3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gs ICZwZ1tpXSwgJnRsYmZsdXNoX3RpbWVzdGFtcCk7CiAKICAgICAgICAgaW5p dF9mcmVlX3BhZ2VfZmllbGRzKCZwZ1tpXSk7CiAgICAgfQogCiAgICAgc3Bp bl91bmxvY2soJmhlYXBfbG9jayk7CiAKKyAgICAvKiBGbHVzaCBhaGVhZCBv ZiBzY3J1YmJpbmc6IGVuc3VyZSBubyBQViBkb21haW4gaGFzIGEgc3RhbGUg VExCIGVudHJ5LiAqLworICAgIGlmICggbmVlZF90bGJmbHVzaCApCisgICAg ICAgIGZpbHRlcmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFt cCk7CisKICAgICBpZiAoIGZpcnN0X2RpcnR5ICE9IElOVkFMSURfRElSVFlf SURYIHx8CiAgICAgICAgICAoc2NydWJfZGVidWcgJiYgIShtZW1mbGFncyAm IE1FTUZfbm9fc2NydWIpKSApCiAgICAgewpAQCAtMTEwMSw5ICsxMTAzLDYg QEAgc3RhdGljIHN0cnVjdCBwYWdlX2luZm8gKmFsbG9jX2hlYXBfcGFnZXMo CiAgICAgICAgIH0KICAgICB9CiAKLSAgICBpZiAoIG5lZWRfdGxiZmx1c2gg KQotICAgICAgICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90 aW1lc3RhbXApOwotCiAgICAgLyoKICAgICAgKiBFbnN1cmUgY2FjaGUgYW5k IFJBTSBhcmUgY29uc2lzdGVudCBmb3IgcGxhdGZvcm1zIHdoZXJlIHRoZSBn dWVzdAogICAgICAqIGNhbiBjb250cm9sIGl0cyBvd24gdmlzaWJpbGl0eSBv Zi90aHJvdWdoIHRoZSBjYWNoZS4KQEAgLTEzNTcsNiArMTM1NiwxMyBAQCBi b29sIHNjcnViX2ZyZWVfcGFnZXModm9pZCkKICAgICAgICAgICAgICAgICB7 CiAgICAgICAgICAgICAgICAgICAgIGlmICggdGVzdF9iaXQoX1BHQ19uZWVk X3NjcnViLCAmcGdbaV0uY291bnRfaW5mbykgKQogICAgICAgICAgICAgICAg ICAgICB7CisgICAgICAgICAgICAgICAgICAgICAgICBib29sIG5lZWRfdGxi Zmx1c2ggPSBmYWxzZTsKKyAgICAgICAgICAgICAgICAgICAgICAgIHVpbnQz Ml90IHRsYmZsdXNoX3RzID0gMDsKKworICAgICAgICAgICAgICAgICAgICAg ICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ld LCAmdGxiZmx1c2hfdHMpOworICAgICAgICAgICAgICAgICAgICAgICAgaWYg KCBuZWVkX3RsYmZsdXNoICkKKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90cyk7CisKICAg ICAgICAgICAgICAgICAgICAgICAgIHNjcnViX29uZV9wYWdlKCZwZ1tpXSk7 CiAgICAgICAgICAgICAgICAgICAgICAgICAvKgogICAgICAgICAgICAgICAg ICAgICAgICAgICogV2UgY2FuIG1vZGlmeSBjb3VudF9pbmZvIHdpdGhvdXQg aG9sZGluZyBoZWFwCkBAIC0yMDQwLDcgKzIwNDYsNyBAQCBzdGF0aWMgc3Ry dWN0IHBhZ2VfaW5mbyAqYWxsb2NfY29sb3JfaGVhcF9wYWdlKHVuc2lnbmVk IGludCBtZW1mbGFncywKICAgICB1aW50MzJfdCB0bGJmbHVzaF90aW1lc3Rh bXAgPSAwOwogICAgIGJvb2wgbmVlZF9zY3J1YjsKIAotICAgIGlmICggbWVt ZmxhZ3MgJiB+KE1FTUZfbm9fcmVmY291bnQgfCBNRU1GX25vX293bmVyIHwg TUVNRl9ub190bGJmbHVzaCB8CisgICAgaWYgKCBtZW1mbGFncyAmIH4oTUVN Rl9ub19yZWZjb3VudCB8IE1FTUZfbm9fb3duZXIgfAogICAgICAgICAgICAg ICAgICAgICAgIE1FTUZfbm9faWNhY2hlX2ZsdXNoIHwgTUVNRl9ub19zY3J1 YikgKQogICAgICAgICByZXR1cm4gTlVMTDsKIApAQCAtMjA2OSwxMyArMjA3 NSwxNiBAQCBzdGF0aWMgc3RydWN0IHBhZ2VfaW5mbyAqYWxsb2NfY29sb3Jf aGVhcF9wYWdlKHVuc2lnbmVkIGludCBtZW1mbGFncywKICAgICBmcmVlX2Nv bG9yZWRfcGFnZXNbY29sb3JdLS07CiAgICAgcGFnZV9saXN0X2RlbChwZywg Y29sb3JfaGVhcChjb2xvcikpOwogCi0gICAgaWYgKCAhKG1lbWZsYWdzICYg TUVNRl9ub190bGJmbHVzaCkgKQotICAgICAgICBhY2N1bXVsYXRlX3RsYmZs dXNoKCZuZWVkX3RsYmZsdXNoLCBwZywgJnRsYmZsdXNoX3RpbWVzdGFtcCk7 CisgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgcGcs ICZ0bGJmbHVzaF90aW1lc3RhbXApOwogCiAgICAgaW5pdF9mcmVlX3BhZ2Vf ZmllbGRzKHBnKTsKIAogICAgIHNwaW5fdW5sb2NrKCZoZWFwX2xvY2spOwog CisgICAgLyogRmx1c2ggYWhlYWQgb2Ygc2NydWJiaW5nOiBlbnN1cmUgbm8g UFYgZG9tYWluIGhhcyBhIHN0YWxlIFRMQiBlbnRyeS4gKi8KKyAgICBpZiAo IG5lZWRfdGxiZmx1c2ggKQorICAgICAgICBmaWx0ZXJlZF9mbHVzaF90bGJf bWFzayh0bGJmbHVzaF90aW1lc3RhbXApOworCiAgICAgaWYgKCAhKG1lbWZs YWdzICYgTUVNRl9ub19zY3J1YikgKQogICAgIHsKICAgICAgICAgaWYgKCBu ZWVkX3NjcnViICkKQEAgLTIwODQsOSArMjA5Myw2IEBAIHN0YXRpYyBzdHJ1 Y3QgcGFnZV9pbmZvICphbGxvY19jb2xvcl9oZWFwX3BhZ2UodW5zaWduZWQg aW50IG1lbWZsYWdzLAogICAgICAgICAgICAgY2hlY2tfb25lX3BhZ2UocGcp OwogICAgIH0KIAotICAgIGlmICggbmVlZF90bGJmbHVzaCApCi0gICAgICAg IGZpbHRlcmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7 Ci0KICAgICBmbHVzaF9wYWdlX3RvX3JhbShtZm5feChwYWdlX3RvX21mbihw ZykpLAogICAgICAgICAgICAgICAgICAgICAgICEobWVtZmxhZ3MgJiBNRU1G X25vX2ljYWNoZV9mbHVzaCkpOwogCkBAIC0yOTk5LDkgKzMwMDUsNyBAQCBz dGF0aWMgYm9vbCBwcmVwYXJlX3N0YXRpY21lbV9wYWdlcyhzdHJ1Y3QgcGFn ZV9pbmZvICpwZywgdW5zaWduZWQgbG9uZyBucl9tZm5zLAogICAgICAgICAg ICAgZ290byBvdXRfZXJyOwogICAgICAgICB9CiAKLSAgICAgICAgaWYgKCAh KG1lbWZsYWdzICYgTUVNRl9ub190bGJmbHVzaCkgKQotICAgICAgICAgICAg YWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ldLAot ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAmdGxiZmx1c2hfdGlt ZXN0YW1wKTsKKyAgICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90 bGJmbHVzaCwgJnBnW2ldLCAmdGxiZmx1c2hfdGltZXN0YW1wKTsKIAogICAg ICAgICAvKgogICAgICAgICAgKiBQcmVzZXJ2ZSBmbGFnIFBHQ19zdGF0aWMg YW5kIGNoYW5nZSBwYWdlIHN0YXRlCmRpZmYgLS1naXQgYS94ZW4vaW5jbHVk ZS94ZW4vbW0uaCBiL3hlbi9pbmNsdWRlL3hlbi9tbS5oCmluZGV4IDE2Zjcz MzI4MWFmMy4uZDEyODU0MWUyY2Y4IDEwMDY0NAotLS0gYS94ZW4vaW5jbHVk ZS94ZW4vbW0uaAorKysgYi94ZW4vaW5jbHVkZS94ZW4vbW0uaApAQCAtMjAy LDggKzIwMiw2IEBAIHN0cnVjdCBucGZlYyB7CiAjZGVmaW5lICBNRU1GX2V4 YWN0X25vZGUgICgxVTw8X01FTUZfZXhhY3Rfbm9kZSkKICNkZWZpbmUgX01F TUZfbm9fb3duZXIgICAgNQogI2RlZmluZSAgTUVNRl9ub19vd25lciAgICAo MVU8PF9NRU1GX25vX293bmVyKQotI2RlZmluZSBfTUVNRl9ub190bGJmbHVz aCA2Ci0jZGVmaW5lICBNRU1GX25vX3RsYmZsdXNoICgxVTw8X01FTUZfbm9f dGxiZmx1c2gpCiAjZGVmaW5lIF9NRU1GX25vX2ljYWNoZV9mbHVzaCA3CiAj ZGVmaW5lICBNRU1GX25vX2ljYWNoZV9mbHVzaCAoMVU8PF9NRU1GX25vX2lj YWNoZV9mbHVzaCkKICNkZWZpbmUgX01FTUZfbm9fc2NydWIgICAgOAotLSAK Mi41My4wCgo= --=separator Content-Type: application/octet-stream; name="xsa511-4.21.patch" Content-Disposition: attachment; filename="xsa511-4.21.patch" Content-Transfer-Encoding: base64 RnJvbSA3MGUyODE0MjJhZDFlZTVlOGY5Y2IyZGJhYWQ0MThkYjA4ZGM1YmRh IE1vbiBTZXAgMTcgMDA6MDA6MDAgMjAwMQpGcm9tOiBSb2dlciBQYXUgTW9u bmUgPHJvZ2VyQHhlbnByb2plY3Qub3JnPgpEYXRlOiBUdWUsIDQgQXVnIDIw MjYgMTI6MjM6MTkgKzAyMDAKU3ViamVjdDogW1BBVENIXSB4ZW4vcGFnZV9h bGxvYzogZW5zdXJlIFRMQiBmbHVzaCBpcyBkb25lIGFoZWFkIG9mIHBhZ2UK IHNjcnViYmluZwpNSU1FLVZlcnNpb246IDEuMApDb250ZW50LVR5cGU6IHRl eHQvcGxhaW47IGNoYXJzZXQ9VVRGLTgKQ29udGVudC1UcmFuc2Zlci1FbmNv ZGluZzogOGJpdAoKVGhlIGN1cnJlbnQgd2F5IGluIHdoaWNoIGlkbGUgVExC IGZsdXNoIGFuZCBUTEIgZmx1c2hpbmcgd2hlbiBhbGxvY2F0aW5nIGEKcGFn ZSBhcmUgZG9uZSBhbGxvd3MgZm9yIHRoZSBzY3J1YmJpbmcgdG8gYmUgZG9u ZSBhaGVhZCBvZiB0aGUgVExCIGZsdXNoLgpBIFBWIGRvbWFpbiBjYW4gc3Rp bGwgaGF2ZSBhIFRMQiBlbnRyeSBmb3IgdGhlIHBhZ2UgYWZ0ZXIgc2NydWJi aW5nLCBhbmQKaGVuY2UgaXQgbWF5IGJlIGFibGUgdG8gbW9kaWZ5IGl0LiAg U3VjaCB1bmludGVuZGVkIHBhZ2UgYWNjZXNzaW5nIGFsbG93cwpkb21haW5z IHRvIHBvc3NpYmx5IGV4Y2hhbmdlIGluZm9ybWF0aW9uIGV2ZW4gd2hlbiBg eHNtPXNpbG8gc2NydWItZG9taGVhcGAKYXJlIGluIGVmZmVjdC4KClJlbW92 ZSB0aGUgTUVNRl9ub190bGJmbHVzaCBtZW1vcnkgYWxsb2NhdGlvbiBmbGFn LCBhbmQgcmVvcmRlciB0aGUKZmx1c2hpbmcgc28gaXQncyBhbHdheXMgZG9u ZSBhaGVhZCBvZiB0aGUgc2NydWJiaW5nIGluCmFsbG9jX3ssY29sb3JffWhl YXBfcGFnZXMoKS4gIFRoZSBzb2xlIHVzZXIgb2YgTUVNRl9ub190bGJmbHVz aCBpcwpwb3B1bGF0ZV9waHlzbWFwKCksIGFuZCBnaXZlbiB0aGUgY29uc3Ry YWlucyBhYm92ZSBpdCdzIG5vIGxvbmdlciBzYWZlCnRvIGRlZmVyIHRoZSBm bHVzaCwgaGVuY2UgdGhlIGZsYWcgcmVtb3ZhbCBhbmQgdGhlIGZvbGRpbmcg b2YgdGhlIGZsdXNoIGluCnRoZSBhbGxvY2F0b3IgZnVuY3Rpb24gaXRzZWxm LgoKVGhpcyBpcyBYU0EtNTExIC8gQ1ZFLTIwMjYtNzk2MDMuCgpGaXhlczog MjRmMWE1OGQxOTU0ICgibW06IG9wdGlvbiB0byBfYWx3YXlzXyBzY3J1YiBm cmVlZCBkb21oZWFwIHBhZ2VzIikKU2lnbmVkLW9mZi1ieTogUm9nZXIgUGF1 IE1vbm7DqSA8cm9nZXJAeGVucHJvamVjdC5vcmc+ClJldmlld2VkLWJ5OiBK YW4gQmV1bGljaCA8amJldWxpY2hAc3VzZS5jb20+Ci0tLQogeGVuL2NvbW1v bi9tZW1vcnkuYyAgICAgfCAyMSAtLS0tLS0tLS0tLS0tLS0tLS0tLS0KIHhl bi9jb21tb24vcGFnZV9hbGxvYy5jIHwgMzQgKysrKysrKysrKysrKysrKysr Ky0tLS0tLS0tLS0tLS0tLQogeGVuL2luY2x1ZGUveGVuL21tLmggICAgfCAg MiAtLQogMyBmaWxlcyBjaGFuZ2VkLCAxOSBpbnNlcnRpb25zKCspLCAzOCBk ZWxldGlvbnMoLSkKCmRpZmYgLS1naXQgYS94ZW4vY29tbW9uL21lbW9yeS5j IGIveGVuL2NvbW1vbi9tZW1vcnkuYwppbmRleCA3NmExYmYxYjExNTkuLjZj MWVhNmFhZTI3MyAxMDA2NDQKLS0tIGEveGVuL2NvbW1vbi9tZW1vcnkuYwor KysgYi94ZW4vY29tbW9uL21lbW9yeS5jCkBAIC0xNjUsOCArMTY1LDYgQEAg c3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJn cyAqYSkKICAgICB1bnNpZ25lZCBpbnQgaSwgajsKICAgICB4ZW5fcGZuX3Qg Z3BmbjsKICAgICBzdHJ1Y3QgZG9tYWluICpkID0gYS0+ZG9tYWluLCAqY3Vy cl9kID0gY3VycmVudC0+ZG9tYWluOwotICAgIGJvb2wgbmVlZF90bGJmbHVz aCA9IGZhbHNlOwotICAgIHVpbnQzMl90IHRsYmZsdXNoX3RpbWVzdGFtcCA9 IDA7CiAKICAgICBpZiAoICFndWVzdF9oYW5kbGVfc3VicmFuZ2Vfb2theShh LT5leHRlbnRfbGlzdCwgYS0+bnJfZG9uZSwKICAgICAgICAgICAgICAgICAg ICAgICAgICAgICAgICAgICAgICBhLT5ucl9leHRlbnRzLTEpICkKQEAgLTE3 OCwxNSArMTc2LDYgQEAgc3RhdGljIHZvaWQgcG9wdWxhdGVfcGh5c21hcChz dHJ1Y3QgbWVtb3BfYXJncyAqYSkKIAogICAgIGlmICggdW5saWtlbHkoIWQt PmNyZWF0aW9uX2ZpbmlzaGVkKSApCiAgICAgewotICAgICAgICAvKgotICAg ICAgICAgKiBXaXRoIE1FTUZfbm9fdGxiZmx1c2ggc2V0LCBhbGxvY19oZWFw X3BhZ2VzKCkgd2lsbCBpZ25vcmUKLSAgICAgICAgICogVExCLWZsdXNoZXMu IEFmdGVyIFZNIGNyZWF0aW9uLCB0aGlzIGlzIGEgc2VjdXJpdHkgaXNzdWUg KGl0IGNhbgotICAgICAgICAgKiBtYWtlIHBhZ2VzIGFjY2Vzc2libGUgdG8g Z3Vlc3QgQiwgd2hlbiBndWVzdCBBIG1heSBzdGlsbCBoYXZlIGEKLSAgICAg ICAgICogY2FjaGVkIG1hcHBpbmcgdG8gdGhlbSkuIFNvIHdlIGRvIHRoaXMg b25seSBkdXJpbmcgZG9tYWluIGNyZWF0aW9uLAotICAgICAgICAgKiB3aGVu IHRoZSBkb21haW4gaXRzZWxmIGhhcyBub3QgeWV0IGJlZW4gdW5wYXVzZWQg Zm9yIHRoZSBmaXJzdAotICAgICAgICAgKiB0aW1lLgotICAgICAgICAgKi8K LSAgICAgICAgYS0+bWVtZmxhZ3MgfD0gTUVNRl9ub190bGJmbHVzaDsKICAg ICAgICAgLyoKICAgICAgICAgICogV2l0aCBNRU1GX25vX2ljYWNoZV9mbHVz aCwgYWxsb2NfaGVhcF9wYWdlcygpIHdpbGwgc2tpcAogICAgICAgICAgKiBw ZXJmb3JtaW5nIGljYWNoZSBmbHVzaGVzLiBXZSBkbyBpdCBvbmx5IGJlZm9y ZSBkb21haW4KQEAgLTI4NiwxMyArMjc1LDYgQEAgc3RhdGljIHZvaWQgcG9w dWxhdGVfcGh5c21hcChzdHJ1Y3QgbWVtb3BfYXJncyAqYSkKICAgICAgICAg ICAgICAgICAgICAgZ290byBvdXQ7CiAgICAgICAgICAgICAgICAgfQogCi0g ICAgICAgICAgICAgICAgaWYgKCB1bmxpa2VseShhLT5tZW1mbGFncyAmIE1F TUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgICAgICAgICB7Ci0gICAgICAg ICAgICAgICAgICAgIGZvciAoIGogPSAwOyBqIDwgKDFVIDw8IGEtPmV4dGVu dF9vcmRlcik7IGorKyApCi0gICAgICAgICAgICAgICAgICAgICAgICBhY2N1 bXVsYXRlX3RsYmZsdXNoKCZuZWVkX3RsYmZsdXNoLCAmcGFnZVtqXSwKLSAg ICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgJnRs YmZsdXNoX3RpbWVzdGFtcCk7Ci0gICAgICAgICAgICAgICAgfQotCiAgICAg ICAgICAgICAgICAgbWZuID0gcGFnZV90b19tZm4ocGFnZSk7CiAgICAgICAg ICAgICB9CiAKQEAgLTMwNyw5ICsyODksNiBAQCBzdGF0aWMgdm9pZCBwb3B1 bGF0ZV9waHlzbWFwKHN0cnVjdCBtZW1vcF9hcmdzICphKQogICAgIH0KIAog b3V0OgotICAgIGlmICggbmVlZF90bGJmbHVzaCApCi0gICAgICAgIGZpbHRl cmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFtcCk7Ci0KICAg ICBpZiAoIGEtPm1lbWZsYWdzICYgTUVNRl9ub19pY2FjaGVfZmx1c2ggKQog ICAgICAgICBpbnZhbGlkYXRlX2ljYWNoZSgpOwogCmRpZmYgLS1naXQgYS94 ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYyBiL3hlbi9jb21tb24vcGFnZV9hbGxv Yy5jCmluZGV4IGE3YjNiMDRhNGQwMS4uYzRhOGY4YmM3NjdlIDEwMDY0NAot LS0gYS94ZW4vY29tbW9uL3BhZ2VfYWxsb2MuYworKysgYi94ZW4vY29tbW9u L3BhZ2VfYWxsb2MuYwpAQCAtMTA5NiwxNSArMTA5NiwxNyBAQCBzdGF0aWMg c3RydWN0IHBhZ2VfaW5mbyAqYWxsb2NfaGVhcF9wYWdlcygKICAgICAgICAg LyogUHJlc2VydmUgUEdDX25lZWRfc2NydWIgc28gd2UgY2FuIGNoZWNrIGl0 IGFmdGVyIGxvY2sgaXMgZHJvcHBlZC4gKi8KICAgICAgICAgcGdbaV0uY291 bnRfaW5mbyA9IFBHQ19zdGF0ZV9pbnVzZSB8IChwZ1tpXS5jb3VudF9pbmZv ICYgUEdDX25lZWRfc2NydWIpOwogCi0gICAgICAgIGlmICggIShtZW1mbGFn cyAmIE1FTUZfbm9fdGxiZmx1c2gpICkKLSAgICAgICAgICAgIGFjY3VtdWxh dGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gsICZwZ1tpXSwKLSAgICAgICAg ICAgICAgICAgICAgICAgICAgICAgICAgJnRsYmZsdXNoX3RpbWVzdGFtcCk7 CisgICAgICAgIGFjY3VtdWxhdGVfdGxiZmx1c2goJm5lZWRfdGxiZmx1c2gs ICZwZ1tpXSwgJnRsYmZsdXNoX3RpbWVzdGFtcCk7CiAKICAgICAgICAgaW5p dF9mcmVlX3BhZ2VfZmllbGRzKCZwZ1tpXSk7CiAgICAgfQogCiAgICAgc3Bp bl91bmxvY2soJmhlYXBfbG9jayk7CiAKKyAgICAvKiBGbHVzaCBhaGVhZCBv ZiBzY3J1YmJpbmc6IGVuc3VyZSBubyBQViBkb21haW4gaGFzIGEgc3RhbGUg VExCIGVudHJ5LiAqLworICAgIGlmICggbmVlZF90bGJmbHVzaCApCisgICAg ICAgIGZpbHRlcmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVzdGFt cCk7CisKICAgICBpZiAoIGZpcnN0X2RpcnR5ICE9IElOVkFMSURfRElSVFlf SURYIHx8CiAgICAgICAgICAoc2NydWJfZGVidWcgJiYgIShtZW1mbGFncyAm IE1FTUZfbm9fc2NydWIpKSApCiAgICAgewpAQCAtMTEzMSw5ICsxMTMzLDYg QEAgc3RhdGljIHN0cnVjdCBwYWdlX2luZm8gKmFsbG9jX2hlYXBfcGFnZXMo CiAgICAgICAgIH0KICAgICB9CiAKLSAgICBpZiAoIG5lZWRfdGxiZmx1c2gg KQotICAgICAgICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90 aW1lc3RhbXApOwotCiAgICAgLyoKICAgICAgKiBFbnN1cmUgY2FjaGUgYW5k IFJBTSBhcmUgY29uc2lzdGVudCBmb3IgcGxhdGZvcm1zIHdoZXJlIHRoZSBn dWVzdAogICAgICAqIGNhbiBjb250cm9sIGl0cyBvd24gdmlzaWJpbGl0eSBv Zi90aHJvdWdoIHRoZSBjYWNoZS4KQEAgLTEzODcsNiArMTM4NiwxMyBAQCBi b29sIHNjcnViX2ZyZWVfcGFnZXModm9pZCkKICAgICAgICAgICAgICAgICB7 CiAgICAgICAgICAgICAgICAgICAgIGlmICggdGVzdF9iaXQoX1BHQ19uZWVk X3NjcnViLCAmcGdbaV0uY291bnRfaW5mbykgKQogICAgICAgICAgICAgICAg ICAgICB7CisgICAgICAgICAgICAgICAgICAgICAgICBib29sIG5lZWRfdGxi Zmx1c2ggPSBmYWxzZTsKKyAgICAgICAgICAgICAgICAgICAgICAgIHVpbnQz Ml90IHRsYmZsdXNoX3RzID0gMDsKKworICAgICAgICAgICAgICAgICAgICAg ICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBnW2ld LCAmdGxiZmx1c2hfdHMpOworICAgICAgICAgICAgICAgICAgICAgICAgaWYg KCBuZWVkX3RsYmZsdXNoICkKKyAgICAgICAgICAgICAgICAgICAgICAgICAg ICBmaWx0ZXJlZF9mbHVzaF90bGJfbWFzayh0bGJmbHVzaF90cyk7CisKICAg ICAgICAgICAgICAgICAgICAgICAgIHNjcnViX29uZV9wYWdlKCZwZ1tpXSwg dHJ1ZSk7CiAgICAgICAgICAgICAgICAgICAgICAgICAvKgogICAgICAgICAg ICAgICAgICAgICAgICAgICogV2UgY2FuIG1vZGlmeSBjb3VudF9pbmZvIHdp dGhvdXQgaG9sZGluZyBoZWFwCkBAIC0yMDU0LDcgKzIwNjAsNyBAQCBzdGF0 aWMgc3RydWN0IHBhZ2VfaW5mbyAqYWxsb2NfY29sb3JfaGVhcF9wYWdlKHVu c2lnbmVkIGludCBtZW1mbGFncywKICAgICB1aW50MzJfdCB0bGJmbHVzaF90 aW1lc3RhbXAgPSAwOwogICAgIGJvb2wgbmVlZF9zY3J1YjsKIAotICAgIGlm ICggbWVtZmxhZ3MgJiB+KE1FTUZfbm9fcmVmY291bnQgfCBNRU1GX25vX293 bmVyIHwgTUVNRl9ub190bGJmbHVzaCB8CisgICAgaWYgKCBtZW1mbGFncyAm IH4oTUVNRl9ub19yZWZjb3VudCB8IE1FTUZfbm9fb3duZXIgfAogICAgICAg ICAgICAgICAgICAgICAgIE1FTUZfbm9faWNhY2hlX2ZsdXNoIHwgTUVNRl9u b19zY3J1YikgKQogICAgICAgICByZXR1cm4gTlVMTDsKIApAQCAtMjA4Mywx MyArMjA4OSwxNiBAQCBzdGF0aWMgc3RydWN0IHBhZ2VfaW5mbyAqYWxsb2Nf Y29sb3JfaGVhcF9wYWdlKHVuc2lnbmVkIGludCBtZW1mbGFncywKICAgICBm cmVlX2NvbG9yZWRfcGFnZXNbY29sb3JdLS07CiAgICAgcGFnZV9saXN0X2Rl bChwZywgY29sb3JfaGVhcChjb2xvcikpOwogCi0gICAgaWYgKCAhKG1lbWZs YWdzICYgTUVNRl9ub190bGJmbHVzaCkgKQotICAgICAgICBhY2N1bXVsYXRl X3RsYmZsdXNoKCZuZWVkX3RsYmZsdXNoLCBwZywgJnRsYmZsdXNoX3RpbWVz dGFtcCk7CisgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVz aCwgcGcsICZ0bGJmbHVzaF90aW1lc3RhbXApOwogCiAgICAgaW5pdF9mcmVl X3BhZ2VfZmllbGRzKHBnKTsKIAogICAgIHNwaW5fdW5sb2NrKCZoZWFwX2xv Y2spOwogCisgICAgLyogRmx1c2ggYWhlYWQgb2Ygc2NydWJiaW5nOiBlbnN1 cmUgbm8gUFYgZG9tYWluIGhhcyBhIHN0YWxlIFRMQiBlbnRyeS4gKi8KKyAg ICBpZiAoIG5lZWRfdGxiZmx1c2ggKQorICAgICAgICBmaWx0ZXJlZF9mbHVz aF90bGJfbWFzayh0bGJmbHVzaF90aW1lc3RhbXApOworCiAgICAgaWYgKCAh KG1lbWZsYWdzICYgTUVNRl9ub19zY3J1YikgKQogICAgIHsKICAgICAgICAg aWYgKCBuZWVkX3NjcnViICkKQEAgLTIwOTgsOSArMjEwNyw2IEBAIHN0YXRp YyBzdHJ1Y3QgcGFnZV9pbmZvICphbGxvY19jb2xvcl9oZWFwX3BhZ2UodW5z aWduZWQgaW50IG1lbWZsYWdzLAogICAgICAgICAgICAgY2hlY2tfb25lX3Bh Z2UocGcpOwogICAgIH0KIAotICAgIGlmICggbmVlZF90bGJmbHVzaCApCi0g ICAgICAgIGZpbHRlcmVkX2ZsdXNoX3RsYl9tYXNrKHRsYmZsdXNoX3RpbWVz dGFtcCk7Ci0KICAgICBmbHVzaF9wYWdlX3RvX3JhbShtZm5feChwYWdlX3Rv X21mbihwZykpLAogICAgICAgICAgICAgICAgICAgICAgICEobWVtZmxhZ3Mg JiBNRU1GX25vX2ljYWNoZV9mbHVzaCkpOwogCkBAIC0zMDA2LDkgKzMwMTIs NyBAQCBzdGF0aWMgYm9vbCBwcmVwYXJlX3N0YXRpY21lbV9wYWdlcyhzdHJ1 Y3QgcGFnZV9pbmZvICpwZywgdW5zaWduZWQgbG9uZyBucl9tZm5zLAogICAg ICAgICAgICAgZ290byBvdXRfZXJyOwogICAgICAgICB9CiAKLSAgICAgICAg aWYgKCAhKG1lbWZsYWdzICYgTUVNRl9ub190bGJmbHVzaCkgKQotICAgICAg ICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgmbmVlZF90bGJmbHVzaCwgJnBn W2ldLAotICAgICAgICAgICAgICAgICAgICAgICAgICAgICAgICAmdGxiZmx1 c2hfdGltZXN0YW1wKTsKKyAgICAgICAgYWNjdW11bGF0ZV90bGJmbHVzaCgm bmVlZF90bGJmbHVzaCwgJnBnW2ldLCAmdGxiZmx1c2hfdGltZXN0YW1wKTsK IAogICAgICAgICAvKgogICAgICAgICAgKiBQcmVzZXJ2ZSBmbGFnIFBHQ19z dGF0aWMgYW5kIGNoYW5nZSBwYWdlIHN0YXRlCmRpZmYgLS1naXQgYS94ZW4v aW5jbHVkZS94ZW4vbW0uaCBiL3hlbi9pbmNsdWRlL3hlbi9tbS5oCmluZGV4 IGI5NjhmNDdiODdlMC4uNTg0MTBhMzY3YTM5IDEwMDY0NAotLS0gYS94ZW4v aW5jbHVkZS94ZW4vbW0uaAorKysgYi94ZW4vaW5jbHVkZS94ZW4vbW0uaApA QCAtMjA0LDggKzIwNCw2IEBAIHN0cnVjdCBucGZlYyB7CiAjZGVmaW5lICBN RU1GX2V4YWN0X25vZGUgICgxVTw8X01FTUZfZXhhY3Rfbm9kZSkKICNkZWZp bmUgX01FTUZfbm9fb3duZXIgICAgNQogI2RlZmluZSAgTUVNRl9ub19vd25l ciAgICAoMVU8PF9NRU1GX25vX293bmVyKQotI2RlZmluZSBfTUVNRl9ub190 bGJmbHVzaCA2Ci0jZGVmaW5lICBNRU1GX25vX3RsYmZsdXNoICgxVTw8X01F TUZfbm9fdGxiZmx1c2gpCiAjZGVmaW5lIF9NRU1GX25vX2ljYWNoZV9mbHVz aCA3CiAjZGVmaW5lICBNRU1GX25vX2ljYWNoZV9mbHVzaCAoMVU8PF9NRU1G X25vX2ljYWNoZV9mbHVzaCkKICNkZWZpbmUgX01FTUZfbm9fc2NydWIgICAg OAotLSAKMi41My4wCgo= --=separator-- From xen-users-bounces@lists.xenproject.org Tue Sep 08 12:01:25 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Tue, 08 Sep 2026 12:01:25 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1411342.1642157 (Exim 4.92) (envelope-from ) id 1x3uVc-0007pN-QT; Tue, 08 Sep 2026 12:01:04 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1411342.1642157; Tue, 08 Sep 2026 12:01:04 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVc-0007kI-8s; Tue, 08 Sep 2026 12:01:04 +0000 Received: by outflank-mailman (input) for mailman id 1411342; Tue, 08 Sep 2026 12:01:01 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x3uVY-0006bj-7D; Tue, 08 Sep 2026 12:01:00 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x3uVW-004OAf-UC; Tue, 08 Sep 2026 14:00:58 +0200 Received: from [10.42.69.11] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6a9ff8f2-e002-0a2a0a5209dd-0a2a450b9730-30 for ; Tue, 08 Sep 2026 14:00:58 +0200 Received: from [104.130.215.37] (helo=mail.xenproject.org) by tlsNG-42698a.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6a9ff8f9-b7e8-0a2a450b0019-6882d7258fae-3 for ; Tue, 08 Sep 2026 14:00:58 +0200 Received: from xenbits.xenproject.org ([104.239.192.120]) by mail.xenproject.org with esmtp (Exim 4.96) (envelope-from ) id 1x3uVQ-004n5e-3D; Tue, 08 Sep 2026 12:00:53 +0000 Received: from andrewcoop by xenbits.xenproject.org with local (Exim 4.96) (envelope-from ) id 1x3uVR-00Gl8b-0v; Tue, 08 Sep 2026 12:00:53 +0000 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; none Content-Type: multipart/mixed; boundary="=separator"; charset="utf-8" Content-Transfer-Encoding: binary MIME-Version: 1.0 X-Mailer: MIME-tools 5.510 (Entity 5.510) To: xen-announce@lists.xen.org, xen-devel@lists.xen.org, xen-users@lists.xen.org, oss-security@lists.openwall.com From: Xen.org security team CC: Xen.org security team Subject: Xen Security Advisory 513 v3 (CVE-2026-79605,CVE-2026-79606) - Out-of-bounds accesses in Tapdisk Message-Id: Date: Tue, 08 Sep 2026 12:00:53 +0000 X-purgate-ID: tlsNG-42698a/1788868858-186CA9EA-4D68BDF9/0/0 X-purgate-type: clean X-purgate-size: 13168 --=separator Content-Type: text/plain; charset="utf-8" Content-Disposition: inline Content-Transfer-Encoding: 7bit -----BEGIN PGP SIGNED MESSAGE----- Hash: SHA256 Xen Security Advisory CVE-2026-79605,CVE-2026-79606 / XSA-513 version 3 Out-of-bounds accesses in Tapdisk UPDATES IN VERSION 3 ==================== Public release. ISSUE DESCRIPTION ================= Tapdisk is a userspace xen-blkback implementation used by the XAPI toolstack. Several bounds checks have been found to be incorrect. * There is no upper bounds check for blkif->last_sect. Passing a value larger than 7 will result in a read or write beyond the mapped grant. This is CVE-2026-79605. * The gcopy_segs[] object has incorrect bounds checks on it. Passing nr_segments between 12 and 32 will corrupt adjacent memory. This is CVE-2026-79606. IMPACT ====== A malicious guest can obtain code execution within the tapdisk process running in dom0. Tapdisk normally runs as root. VULNERABLE SYSTEMS ================== All versions of tapdisk are vulnerable. MITIGATION ========== There are no mitigations. CREDITS ======= Found by Jihwan Yoon of NAVER Cloud, and reported via XenServer. RESOLUTION ========== Applying the appropriate attached patchs resolves this issue. xsa513-?.patch blktap master $ sha256sum xsa513* 41e5f1929a7acbe83820ee0b359f9558120222d32442ea4fb5a6eee0bf937bf1 xsa513-1.patch a5af5a73d2ede5124735213e4974f1aeff7f8118dfbacd52fbb03168fe96c6af xsa513-2.patch $ DEPLOYMENT DURING EMBARGO ========================= Deployment of the patches and/or mitigations described above (or others which are substantially similar) is permitted during the embargo, even on public-facing systems with untrusted guest users and administrators. But: Distribution of updated software is prohibited (except to other members of the predisclosure list). Predisclosure list members who wish to deploy significantly different patches and/or mitigations, please contact the Xen Project Security Team. (Note: this during-embargo deployment notice is retained in post-embargo publicly released Xen Project advisories, even though it is then no longer applicable. This is to enable the community to have oversight of the Xen Project Security Team's decisionmaking.) For more information about permissible uses of embargoed information, consult the Xen Project community's agreed Security Policy: http://www.xenproject.org/security-policy.html -----BEGIN PGP SIGNATURE----- iQFABAEBCAAqFiEEI+MiLBRfRHX6gGCng/4UyVfoK9kFAmqf98kMHHBncEB4ZW4u b3JnAAoJEIP+FMlX6CvZiuMIAIaNhPYKG/UeGc1JV70GEcyqS4d6NNlNBY0qtuGl qVQ8LRVBReqRk0aS0hNDI7txFRsZ18ENteBKG/JaXD4mj5rylpnKdl7y8suTFrGi QuFk1EyYBrud5gtpwW8sq4GKQLf5hoAIIUDGX4qmEC+blRuHTagUIHNwehrkRB+d 38UxmWQR2ppgBSsCJlclMJKSm1nWo04Qx/Nm3Aoc0og0hv+/UkdkDShTGrP/nutb /r4yywz6LaqdCl7Te1ULx6sRVl1MIxtDqcvsRajqKc9nV56RAgrj3moIJRXRusW9 YqZxuUw8HJkhpisOlj6A/N16f+G7bxZwb3FEZBKuNGvM6lQ= =oXUQ -----END PGP SIGNATURE----- --=separator Content-Type: application/octet-stream; name="xsa513-1.patch" Content-Disposition: attachment; filename="xsa513-1.patch" Content-Transfer-Encoding: base64 RnJvbTogTWFyayBTeW1zIDxtYXJrLnN5bXNAY2l0cml4LmNvbT4KU3ViamVj dDogVmFsaWRhdGUgZ3Vlc3QgYmxraWYgcmVxdWVzdCBzZWdtZW50IGJvdW5k cwoKZmlyc3Rfc2VjdC9sYXN0X3NlY3QgaW4gYSBibGtpZiByZXF1ZXN0IHNl Z21lbnQgYXJlIGd1ZXN0LWNvbnRyb2xsZWQgOC1iaXQKdmFsdWVzLCBidXQg ZWFjaCBzZWdtZW50IGFkZHJlc3NlcyBhdCBtb3N0IGEgc2luZ2xlIHBhZ2Ug KDggc2VjdG9ycykuCnRhcGRpc2tfeGVuYmxraWZfcGFyc2VfcmVxdWVzdCgp IG9ubHkgY2hlY2tlZCBsYXN0X3NlY3QgPj0gZmlyc3Rfc2VjdCwgc28gYQpz ZWdtZW50IHdpdGggbGFzdF9zZWN0ID4gNyB5aWVsZGVkIGFuIG92ZXJzaXpl ZCB0cmFuc2ZlciBsZW5ndGguIFRoYXQgZHJpdmVzCm91dC1vZi1ib3VuZHMg cG9pbnRlciBhcml0aG1ldGljIGFnYWluc3QgdGhlIHBlci1yZXF1ZXN0IGJ1 ZmZlciBhbmQgb3ZlcmZsb3dzCnRoZSB1aW50MTZfdCBnbnRkZXYgZ3JhbnQt Y29weSBsZW5ndGggaW4gZ3Vlc3RfY29weTIoKSAoZS5nLiA2OEtCIHRydW5j YXRlcyB0bwo0S0IsIHNvIHN0YWxlIGJ1ZmZlciBjb250ZW50cyBhcmUgdHJh bnNmZXJyZWQpLgoKUmVqZWN0IGFueSBzZWdtZW50IHdob3NlIHNlY3RvcnMg ZmFsbCBvdXRzaWRlIHRoZSBwYWdlLCByZXBsYWNpbmcgdGhlCmxvbmctc3Rh bmRpbmcgVE9ETyBhdCB0aGUgdmVjdG9yaXNhdGlvbiBsb29wLgoKVGhpcyBp cyBDVkUtMjAyNi03OTYwNSwgcGFydCBvZiBYU0EtNTEzLgoKU2lnbmVkLW9m Zi1ieTogTWFyayBTeW1zIDxtYXJrLnN5bXNAY2l0cml4LmNvbT4KQ28tQXV0 aG9yZWQtQnk6IENsYXVkZSBPcHVzIDQuOCA8bm9yZXBseUBhbnRocm9waWMu Y29tPgpSZXZpZXdlZC1ieTogVGltIFNtaXRoIDx0aW0uc21pdGhAY2l0cml4 LmNvbT4KCmRpZmYgLS1naXQgYS9kcml2ZXJzL3RkLXJlcS5jIGIvZHJpdmVy cy90ZC1yZXEuYwppbmRleCAyYTNmYjA1ZjRhZDAuLjY5YTk0N2Y1NzBlYyAx MDA2NDQKLS0tIGEvZHJpdmVycy90ZC1yZXEuYworKysgYi9kcml2ZXJzL3Rk LXJlcS5jCkBAIC02NDQsOCArNjQ0LDE2IEBAIHRhcGRpc2tfeGVuYmxraWZf cGFyc2VfcmVxdWVzdChzdHJ1Y3QgdGRfeGVuYmxraWYgKiBjb25zdCBibGtp ZiwKICAgICAgICAgLyoKICAgICAgICAgICogTm90ZSB0aGF0IGZpcnN0IGFu ZCBsYXN0IG1heSBiZSBlcXVhbCwgd2hpY2ggbWVhbnMgb25seSBvbmUgc2Vj dG9yCiAgICAgICAgICAqIG11c3QgYmUgdHJhbnNmZXJyZWQuCisgICAgICAg ICAqCisgICAgICAgICAqIGZpcnN0X3NlY3QvbGFzdF9zZWN0IGFyZSBndWVz dC1jb250cm9sbGVkIDgtYml0IHZhbHVlcywgYnV0IGVhY2gKKyAgICAgICAg ICogc2VnbWVudCBhZGRyZXNzZXMgYXQgbW9zdCBhIHNpbmdsZSBwYWdlLiBS ZWplY3QgYW55IHNlZ21lbnQgd2hvc2UKKyAgICAgICAgICogc2VjdG9ycyBm YWxsIG91dHNpZGUgdGhlIHBhZ2U6IGFuIG91dC1vZi1yYW5nZSBsYXN0X3Nl Y3Qgd291bGQKKyAgICAgICAgICogcHJvZHVjZSBhbiBvdmVyc2l6ZWQgdHJh bnNmZXIgbGVuZ3RoICh3aGljaCBhbHNvIG92ZXJmbG93cyB0aGUKKyAgICAg ICAgICogdWludDE2X3QgZ250ZGV2IGdyYW50LWNvcHkgbGVuZ3RoKSBhbmQg ZHJpdmUgb3V0LW9mLWJvdW5kcyBhY2Nlc3NlcworICAgICAgICAgKiB0byB0 aGUgcGVyLXJlcXVlc3QgYnVmZmVyLgogICAgICAgICAgKi8KLSAgICAgICAg aWYgKHNlZy0+bGFzdF9zZWN0IDwgc2VnLT5maXJzdF9zZWN0KSB7CisgICAg ICAgIGlmIChzZWctPmxhc3Rfc2VjdCA8IHNlZy0+Zmlyc3Rfc2VjdCB8fAor ICAgICAgICAgICAgc2VnLT5sYXN0X3NlY3QgPj0gKFBBR0VfU0laRSA+PiBT RUNUT1JfU0hJRlQpKSB7CiAgICAgICAgICAgICBSSU5HX0VSUihibGtpZiwg InJlcSAlbHU6IGludmFsaWQgc2VjdG9ycyAlZC0lZFxuIiwKICAgICAgICAg ICAgICAgICAgICAgcmVxLT5tc2cuaWQsIHNlZy0+Zmlyc3Rfc2VjdCwgc2Vn LT5sYXN0X3NlY3QpOwogICAgICAgICAgICAgZXJyID0gRUlOVkFMOwpAQCAt NjcwLDcgKzY3OCw3IEBAIHRhcGRpc2tfeGVuYmxraWZfcGFyc2VfcmVxdWVz dChzdHJ1Y3QgdGRfeGVuYmxraWYgKiBjb25zdCBibGtpZiwKICAgICAgICAg c3RydWN0IGJsa2lmX3JlcXVlc3Rfc2VnbWVudCAqc2VnID0gJnJlcS0+bXNn LnNlZ1tpXTsKICAgICAgICAgc2l6ZV90IHNpemU7CiAKLSAgICAgICAgLyog VE9ETyBjaGVjayB0aGF0IGZpcnN0X3NlY3QvbGFzdF9zZWN0IGFyZSB3aXRo aW4gcGFnZSAqLworICAgICAgICAvKiBmaXJzdF9zZWN0L2xhc3Rfc2VjdCBh cmUgYWxyZWFkeSB2YWxpZGF0ZWQsIGFib3ZlICovCiAKICAgICAgICAgbmV4 dCA9IHBhZ2UgKyAoc2VnLT5maXJzdF9zZWN0IDw8IFNFQ1RPUl9TSElGVCk7 CiAgICAgICAgIHNpemUgPSBzZWctPmxhc3Rfc2VjdCAtIHNlZy0+Zmlyc3Rf c2VjdCArIDE7Cg== --=separator Content-Type: application/octet-stream; name="xsa513-2.patch" Content-Disposition: attachment; filename="xsa513-2.patch" Content-Transfer-Encoding: base64 RnJvbTogTWFyayBTeW1zIDxtYXJrLnN5bXNAY2l0cml4LmNvbT4KU3ViamVj dDogQm91bmQgbnJfc2VnbWVudHMgYnkgc2VnW10gY2FwYWNpdHkgYW5kIHJp Z2h0LXNpemUgYnVmZmVyCgpUd28gY29uc3RhbnRzIHdlcmUgaW4gcGxheSBm b3IgdGhlIG51bWJlciBvZiBzZWdtZW50cyBpbiBhIHJlcXVlc3Q6CgogLSBC TEtJRl9NQVhfU0VHTUVOVFNfUEVSX1JFUVVFU1QgKDExKSwgdGhlIFhlbiBB QkkgbGltaXQgYW5kIHRoZSBzaXplIG9mIHRoZQogICByaW5nIGRlc2NyaXB0 b3IncyBibGtpZl9yZXF1ZXN0LnNlZ1tdIGFycmF5OyBhbmQKIC0gQkxLSUZf TUFYX0JVRkZFUl9TRUdNRU5UU19QRVJfUkVRVUVTVCAoMzIpLCBhIGJsa3Rh cC1sb2NhbCB2YWx1ZSBpbnRyb2R1Y2VkCiAgIHdoZW4gbXVsdGktcGFnZSBy aW5ncyB3ZXJlIGVuYWJsZWQgKGRkNjA5NWMpLgoKTXVsdGktcGFnZSByaW5n cyBlbmxhcmdlIHRoZSByaW5nIChtb3JlIHJlcXVlc3Qgc2xvdHMpLCBub3Qg dGhlIG51bWJlciBvZgpzZWdtZW50cyBwZXIgcmVxdWVzdCwgc28gc2l6aW5n IHRoZSBwZXItcmVxdWVzdCBzdHJ1Y3R1cmVzIGJ5IDMyIHdhcyBib3RoCnVu bmVjZXNzYXJ5IGFuZCB1bnNhZmU6CgogLSB0YXBkaXNrX3hlbmJsa2lmX21h a2VfdmJkX3JlcXVlc3QoKSB2YWxpZGF0ZWQgbnJfc2VnbWVudHMgYWdhaW5z dCAzMiwgYnV0CiAgIG5yX3NlZ21lbnRzIGlzIGEgZ3Vlc3QtY29udHJvbGxl ZCB1aW50OF90IGFuZCBtc2cuc2VnW10gb25seSBob2xkcyAxMQogICBlbnRy aWVzLiBBIHJlcXVlc3Qgd2l0aCBucl9zZWdtZW50cyBpbiAoMTEsIDMyXSBw YXNzZWQgdmFsaWRhdGlvbiBhbmQgdGhlbgogICBkcm92ZSBvdXQtb2YtYm91 bmRzIHJlYWRzIG9mIG1zZy5zZWdbXSBpbiB0YXBkaXNrX3hlbmJsa2lmX3Bh cnNlX3JlcXVlc3QoKQogICBhbmQgZ3Vlc3RfY29weTIoKSwgd2hvc2Ugc3Rh bGUgYnl0ZXMgd2VyZSB1c2VkIGFzIGdyZWYvZmlyc3Rfc2VjdC9sYXN0X3Nl Y3QuCiAtIFRoZSBwZXItcmVxdWVzdCBidWZmZXIgYW5kIHRoZSBpb3ZbXS9n cmVmW10gYXJyYXlzIHdlcmUgb3Zlci1hbGxvY2F0ZWQgdG8gMzIKICAgcGFn ZXMvZW50cmllcyB3aGVyZSBvbmx5IDExIGFyZSByZWFjaGFibGUgKGdjb3B5 X3NlZ3NbXSB3YXMgYWxyZWFkeSAxMSkuCgpCb3VuZCBucl9zZWdtZW50cyBi eSBCTEtJRl9NQVhfU0VHTUVOVFNfUEVSX1JFUVVFU1QgYW5kIHNpemUgdGhl IHBlci1yZXF1ZXN0CmJ1ZmZlciAoVERfUkVRX0JVRkZFUl9TSVpFKSBhbmQg dGhlIGlvdltdL2dyZWZbXSBhcnJheXMgYnkgdGhlIHNhbWUgY29uc3RhbnQs CnNvIHRoZSB2YWxpZGF0aW9uIGJvdW5kLCB0aGUgc2VnbWVudCBhcnJheXMs IGFuZCB0aGUgcmluZyBkZXNjcmlwdG9yJ3Mgc2VnW10KYWxsIGFncmVlLiBi bG9jay1sY2FjaGUuYyBpbmhlcml0cyB0aGUgY29ycmVjdGVkIGJ1ZmZlciBz aXplIHZpYQpURF9SRVFfQlVGRkVSX1NJWkUuIEFsc28gZGVyaXZlIHRoZSBi dWZjYWNoZSBtdW5tYXAgc2l6ZSBmcm9tIFREX1JFUV9CVUZGRVJfU0laRQpz byB0aGUgbWFwIGFuZCB1bm1hcCBzaXplcyBzaGFyZSBvbmUgZGVmaW5pdGlv bi4KClRoZSBsZWdhY3kgYmxrdGFwMiBrZXJuZWwtbW1hcCBtYWNyb3MgaW4g YmxrdGFwbGliLmggKE1NQVBfUEFHRVMgLyBNTUFQX1ZBRERSKQphcmUgYSBz ZXBhcmF0ZSwga2VybmVsLXNoYXJlZCBsYXlvdXQgYW5kIGFyZSBpbnRlbnRp b25hbGx5IGxlZnQgdW50b3VjaGVkLgoKVGhpcyBpcyBDVkUtMjAyNi03OTYw NiwgcGFydCBvZiBYU0EtNTEzLgoKU2lnbmVkLW9mZi1ieTogTWFyayBTeW1z IDxtYXJrLnN5bXNAY2l0cml4LmNvbT4KQ28tQXV0aG9yZWQtQnk6IENsYXVk ZSBPcHVzIDQuOCA8bm9yZXBseUBhbnRocm9waWMuY29tPgpSZXZpZXdlZC1i eTogVGltIFNtaXRoIDx0aW0uc21pdGhAY2l0cml4LmNvbT4KCmRpZmYgLS1n aXQgYS9kcml2ZXJzL3RkLXJlcS5jIGIvZHJpdmVycy90ZC1yZXEuYwppbmRl eCA1YjliMzNmMTVjNWQuLmY0Njc5YWYxMWMzOSAxMDA2NDQKLS0tIGEvZHJp dmVycy90ZC1yZXEuYworKysgYi9kcml2ZXJzL3RkLXJlcS5jCkBAIC0xMjEs NyArMTIxLDcgQEAgdGRfeGVuYmxraWZfYnVmY2FjaGVfZnJlZShzdHJ1Y3Qg dGRfeGVuYmxraWYgKiBjb25zdCBibGtpZikKIAogICAgIHdoaWxlIChibGtp Zi0+bl9yZXFzX2J1ZmNhY2hlX2ZyZWUgPiBURF9SRVFTX0JVRkNBQ0hFX01J Til7CiAgICAgICAgIG11bm1hcChibGtpZi0+cmVxc19idWZjYWNoZVstLWJs a2lmLT5uX3JlcXNfYnVmY2FjaGVfZnJlZV0sCi0gICAgICAgICAgICAgICAo c2l6ZV90KUJMS0lGX01BWF9CVUZGRVJfU0VHTUVOVFNfUEVSX1JFUVVFU1Qg PDwgUEFHRV9TSElGVCk7CisgICAgICAgICAgICAgICAoc2l6ZV90KVREX1JF UV9CVUZGRVJfU0laRSk7CiAgICAgfQogfQogCkBAIC03ODYsMTEgKzc4Niwx NCBAQCB0YXBkaXNrX3hlbmJsa2lmX21ha2VfdmJkX3JlcXVlc3Qoc3RydWN0 IHRkX3hlbmJsa2lmICogY29uc3QgYmxraWYsCiAgICAgZ2V0dGltZW9mZGF5 KCZ0YXByZXEtPnRzLCBOVUxMKTsKIAogICAgIC8qCi0gICAgICogQ2hlY2sg dGhhdCB0aGUgbnVtYmVyIG9mIHNlZ21lbnRzIGlzIHNhbmUuCisgICAgICog Q2hlY2sgdGhhdCB0aGUgbnVtYmVyIG9mIHNlZ21lbnRzIGlzIHNhbmUuIG5y X3NlZ21lbnRzIGlzIGd1ZXN0LQorICAgICAqIGNvbnRyb2xsZWQ7IHRoZSBi bGtpZiBwcm90b2NvbCBwZXJtaXRzIGF0IG1vc3QKKyAgICAgKiBCTEtJRl9N QVhfU0VHTUVOVFNfUEVSX1JFUVVFU1Qgc2VnbWVudHMgcGVyIHJlcXVlc3Qs IHdoaWNoIGlzIGhvdyB0aGUKKyAgICAgKiByaW5nIGRlc2NyaXB0b3IgYW5k IG91ciBwZXItcmVxdWVzdCBidWZmZXJzIGFyZSBzaXplZC4KICAgICAgKi8K ICAgICBpZiAodW5saWtlbHkoKHRhcHJlcS0+bXNnLm5yX3NlZ21lbnRzID09 IDAgJiYKICAgICAgICAgICAgICAgICB0YXByZXEtPm1zZy5vcGVyYXRpb24g IT0gQkxLSUZfT1BfV1JJVEVfQkFSUklFUikgfHwKLSAgICAgICAgICAgIHRh cHJlcS0+bXNnLm5yX3NlZ21lbnRzID4gQkxLSUZfTUFYX0JVRkZFUl9TRUdN RU5UU19QRVJfUkVRVUVTVCkpIHsKKyAgICAgICAgICAgIHRhcHJlcS0+bXNn Lm5yX3NlZ21lbnRzID4gQkxLSUZfTUFYX1NFR01FTlRTX1BFUl9SRVFVRVNU KSkgewogICAgICAgICBSSU5HX0VSUihibGtpZiwgInJlcSAlbHU6IGJhZCBu dW1iZXIgb2Ygc2VnbWVudHMgaW4gcmVxdWVzdCAoJWQpXG4iLAogICAgICAg ICAgICAgICAgIHRhcHJlcS0+bXNnLmlkLCB0YXByZXEtPm1zZy5ucl9zZWdt ZW50cyk7CiAgICAgICAgIGVyciA9IEVJTlZBTDsKZGlmZiAtLWdpdCBhL2Ry aXZlcnMvdGQtcmVxLmggYi9kcml2ZXJzL3RkLXJlcS5oCmluZGV4IGRhZDQw ZjI5NDYyOC4uNzI3OWE5MzVhNmI1IDEwMDY0NAotLS0gYS9kcml2ZXJzL3Rk LXJlcS5oCisrKyBiL2RyaXZlcnMvdGQtcmVxLmgKQEAgLTM4LDcgKzM4LDE0 IEBACiAjaW5jbHVkZSA8eGVuL2dudGRldi5oPgogI2luY2x1ZGUgInRkLWJs a2lmLmgiCiAKLSNkZWZpbmUgVERfUkVRX0JVRkZFUl9TSVpFIChCTEtJRl9N QVhfQlVGRkVSX1NFR01FTlRTX1BFUl9SRVFVRVNUIDw8IFBBR0VfU0hJRlQp CisvKgorICogQSByaW5nIHJlcXVlc3QgZGVzY3JpcHRvciAoYmxraWZfcmVx dWVzdF90KSBjYXJyaWVzIGF0IG1vc3QKKyAqIEJMS0lGX01BWF9TRUdNRU5U U19QRVJfUkVRVUVTVCBzZWdtZW50cywgZWFjaCBtYXBwaW5nIGEgc2luZ2xl IHBhZ2UsIHNvIHRoZQorICogcGVyLXJlcXVlc3QgZGF0YSBidWZmZXIgYW5k IHRoZSB2ZWN0b3Jpc2VkIHNlZ21lbnQgYXJyYXlzIGJlbG93IG9ubHkgZXZl cgorICogbmVlZCB0aGF0IG1hbnkgZW50cmllcy4gKFRoaXMgYmFja2VuZCBk b2VzIG5vdCBpbXBsZW1lbnQgQkxLSUZfT1BfSU5ESVJFQ1QsCisgKiB3aGlj aCBpcyB0aGUgb25seSBtZWNoYW5pc20gdGhhdCB3b3VsZCByYWlzZSB0aGUg cGVyLXJlcXVlc3Qgc2VnbWVudCBjb3VudC4pCisgKi8KKyNkZWZpbmUgVERf UkVRX0JVRkZFUl9TSVpFIChCTEtJRl9NQVhfU0VHTUVOVFNfUEVSX1JFUVVF U1QgPDwgUEFHRV9TSElGVCkKIAogLyoqCiAgKiBSZXByZXNlbnRhdGlvbiBv ZiB0aGUgaW50ZXJtZWRpYXRlIHJlcXVlc3QgdXNlZCB0byByZXRyaWV2ZSBh IHJlcXVlc3QgZnJvbQpAQCAtODAsOSArODcsOSBAQCBzdHJ1Y3QgdGRfeGVu YmxraWZfcmVxIHsKICAgICAvKioKICAgICAgKiBUaGUgc2NhdHRlci9nYXRo ZXIgbGlzdCB0ZF92YmRfcmVxdWVzdF90LmlvdiBwb2ludHMgdG8uCiAgICAg ICovCi0gICAgc3RydWN0IHRkX2lvdmVjIGlvdltCTEtJRl9NQVhfQlVGRkVS X1NFR01FTlRTX1BFUl9SRVFVRVNUXTsKKyAgICBzdHJ1Y3QgdGRfaW92ZWMg aW92W0JMS0lGX01BWF9TRUdNRU5UU19QRVJfUkVRVUVTVF07CiAKLSAgICBn cmFudF9yZWZfdCBncmVmW0JMS0lGX01BWF9CVUZGRVJfU0VHTUVOVFNfUEVS X1JFUVVFU1RdOworICAgIGdyYW50X3JlZl90IGdyZWZbQkxLSUZfTUFYX1NF R01FTlRTX1BFUl9SRVFVRVNUXTsKICAgICBpbnQgcHJvdDsKIAogCXN0cnVj dCBnbnRkZXZfZ3JhbnRfY29weV9zZWdtZW50Cg== --=separator-- From xen-users-bounces@lists.xenproject.org Thu Sep 17 23:19:46 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Thu, 17 Sep 2026 23:19:46 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1424528.1648927 (Exim 4.92) (envelope-from ) id 1x7LNS-0003Ts-04; Thu, 17 Sep 2026 23:18:50 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1424528.1648927; Thu, 17 Sep 2026 23:18:49 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7LNR-0003Tl-Qa; Thu, 17 Sep 2026 23:18:49 +0000 Received: by outflank-mailman (input) for mailman id 1424528; Thu, 17 Sep 2026 23:18:49 +0000 Received: from mx.expurgate.net ([195.190.135.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7LNR-0003Te-Fd for xen-users@lists.xenproject.org; Thu, 17 Sep 2026 23:18:49 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x7LNQ-00EzH7-CO for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 01:18:48 +0200 Received: from [10.42.69.6] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6aac74f8-2eae-0a2a0a5409dd-0a2a45069dd2-32 for ; Fri, 18 Sep 2026 01:18:47 +0200 Received: from [74.6.129.124] (helo=sonic309-14.consmr.mail.bf2.yahoo.com) by tlsNG-16d1c6.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6aac7556-195a-0a2a45060019-4a06817cac05-3 for ; Fri, 18 Sep 2026 01:18:47 +0200 Received: from sonic.gate.mail.ne1.yahoo.com by sonic309.consmr.mail.bf2.yahoo.com with HTTP; Thu, 17 Sep 2026 23:18:46 +0000 Received: by hermes--production-ne1-6dbcb84f44-b4hwn (Yahoo Inc. Hermes SMTP Server) with ESMTPA ID 48bd3b52ec18f114d75a504f29c0a402; Thu, 17 Sep 2026 23:18:42 +0000 (UTC) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=a2048 header.d=verizon.net header.i="@verizon.net" header.h="Date:To:From:Subject:References" DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=verizon.net; s=a2048; t=1789687126; bh=1clZ4lcVMyZlBh17eh/9m7/kAE/P0zYc5T9KwXVJKO0=; h=Date:To:From:Subject:References:From:Subject:Reply-To; b=NpBEkB7scRenUp2e5LOQr0Mljqj/lpurrxoGX1tt/u6KldEa40Loo0Tdjpoo4YlJ3W5pFtfLV7o9r+sdAMd6sClNswDNF2juVq7C1r2r2c8wMrsbeDvBja7uuV3mxLQRJ9sgqs+IctXWJ4XBdQbqVUj4TBQWAT/YkbxW77VeC5jxftW+Cnb/MvHLKoOy4y1EGAaA05aa08U1j3tyaM80ez0FfPyQJZx0R2v3i4jkLVCImG/45EY3eoD3nEcl3A+20hkiBMiBGKcC3LSmyUuE6q0bQ41D6EDJdwJOhBMZ+HEoGT7jV7NDYGEUKdVMmmQlCANGfIhT1z9/6a0vABPItQ== X-SONIC-DKIM-SIGN: v=1; a=rsa-sha256; c=relaxed/relaxed; d=yahoo.com; s=s2048; t=1789687126; bh=Z1Unw9iVFlNICIp8GJjSLRQaLgDuY5whnBZQeAYRCcK=; h=X-Sonic-MF:Date:To:From:Subject:From:Subject; b=iBwQNjJOuhg8JpcP8eydFCFWIW14IgvKwdXJk7KM2ih89LUSJpwXge6KEtAC+OMflX9CEfS6X1mAqk5zs6ei15WT9KgeKxIir+69Rz9vvyHmBLuQ7luWbIYjRmyNHWFvEzd0JM4bwIG1kV2S+ZkFMVxT6DYNx4Do8P2A283uvFvIGmnraTUIGUStC9Vb6zhVS9/SX0BJDSNSvIaBr471b6/BGCc/H727LaVTHE8u8u56Ruv1+DMSkAekVaK8jIdsYUtk7Q6RJ6Fbkr8+rlus+i5Lww9HtNGQt5hGkcHCB1C41mvCf4vWmjIlEeFWlZl3ZAtLH8232tGjT3NQuV1Uvg== X-YMail-OSG: LK4PXxoVM1n4FIOp5b7P4gV8btTmZV8oAEweZQYPKVpFzELZtKePiI8YpflZoJP aE4451LZrmMgpEfn6n6MekcvXHyqoDPM1CHdJrOkHJU29acFDTnNFe9yy3pgWEuHAINr_4IEFaYn Z0oALmMPajADK.m7AH39dsHhhPlmlD_Vv9zFmYpQyKjP9a43_FCh2hl.nz3KCkxUSaFi3rYjQkBj gdESTkM81u9d7LA8604YGAA3CZLv1XXrlXjTgMkFM9E9cNSmAo8P94SjVI.ztvXdEskZNiZC6lUc mmlwovhria0NGEMuMtsxxO3r.vBGe4OXYRQN3o8Z5bjwBhrQMRmht_zZh1xb3FOKf2sC2tikjuNf IJeoioI4ll.jsjHOZrhfOcVpMjqblZQhFZ8lwqrjUgpJYleX9Jh17YojNOgG2Qe0HMLWLK.wgUjJ FKqQHocxjqwgzaGTwiplKBSLZpLgnCTPGD61WT2Aye8bTL1y2aNwoBXeOib78M4n2yjzvjTsqI09 SJw0ttid7MAjqPvqoz0aFgCmo8sCfAGytE9hUGsORsx4laXZBgtngNSWCdww.GZtJN6rc.F31Met sjdPOUg5832zBEGMs__deoWZlRn8fmJeuOIT93mAgZ.kKUOJiw44y_UsGa66q0BPByyD_6D3VER7 62G6OxaWfI6gaB9tULylCUledUZo8YZ1d2.yWE9WlyoWRrBVT00KNryxArTw_Mq3eljag2.G8xY4 YvIs1whT3hJ6LJHGHRDqy.qRIC1VlEpK2UgkhvIhr5G_T5w2U3Uap7_UnE5SnIoK92Db8ldR3OOU shm7iMjUul151t4POltFipddTwvvKR.3pU7L6Coj.yXjLsuKYD_pszsMrBPLyCrZEZdeiovJBkrW 1MdjECFSmt3SjQk9Ar1Iv2TIgjz8Clod7gYsXORNMjVE_cRq_qfB2zeWJenPJao9BeIhJj5Zizcq un9HRqM5A1Kr3TQCCyPz.3FWD53sxSv_oGav.IRqkD.qgQ4OysH8JL_RKjSfuAww7EUlKMeuE5xg n0lBWpeQ2LPI1CVuSSUlWPaYX04GS5I2eLmlFeIW42FYrkbytqlAfth3Gs.sLOtvmZJgyhD2RiaX d4z3W4pkmxiV57tgl6K1q_BIQlKXjEP4HXrV_pspO7XK3Prq_nNjV1QvzK2luAEvqddz9S.Iq9X6 9qTyw5edGRhqwXd1h.qVTcebV8erC3qfbwTKbkxZ_S4uPpaQrwrdqdbIOlttJ65ER1PPKRq1ii00 UZOFcLqPoUcG7y6_HsJg3kUgeaeTlV7Xa.w1YkqHwaU8CES9BVRSbhhSOnCPE47QLfq.6OGPDDf5 y5CBTQTvq6qGbNfvvzvc4pGC127I6dSWQ4ixj17NnkkF0MB_BEK.CPVy5SKBdfE0ErwkKTxXcR4U Y1M9GTXYal_nJ3IPaDqDf1zGL752KGAyrCtJ1uqzNpYNdd0mT70Qd4YJ3NDC1BtdypSjKzVrs4Us yi2i9zZfdlEqlWDnoPr2rK6sfCDVbA2bcdBxm77n0S9_HOhbGycbTW.2xTrX2P2RoYHYrZKK5JNZ M_AJeMXRhZPeapptQFxrm0qWnvk7GORp66kHb0ijsKGIs93erWUgP3Cr6XUDGVUC.SLTayP.WnuZ PHEmNU7yOshXFTXAIu8Yh9agNZr7zQGju6AhqknxZ2bzP7EyiFH7w5HYM8VuYTlFCkTDUw1Ic50k VrwupkLFjwo9Dr4Yr6DemTIOUxSJLwsy1Ya2CMknStM4kN9Ub5Hmmj81WoHEQ2a1zlaNUfBxs1Iw wWHLBsSxSJQXX1C2zVTcaq8rB9IYSvOfmUxlCz_mnhGjQawWX.e_UnGJajvqrCJykrxbC7AoDQOr gOLWtQgmqVOz1HNF1fv5ExDRo7P9RmjZyrk1fPcl6DDGWHPObGXrhmfr9BkdepSug3QWK89T21jw nVK1QRLUQ7587DGlZWUxb8eL.zai3KUGbzrv__Mkh4XWP6p3BVgeJPpFT0A4KP1w4j9gIC26e79b gRi2S35cCm2OjO4CBpoc.6Q1sC9ZezFHhfDHEEaXwXxyfUNudO4e3SHvZUBzCm_Qyd03MDMXDGBl 7kmKQMNMLgqSXN7zdIjmBGhMDvmR5UajHbVMAKBjoDRIt3z0NREVpPbhWErWKD6L2NPWz0h3oyNt nhCNgy9PGwQh_v6ft33jatreBGQYU51dH5mtuzAKzpD89lzOYP0PluJEKBil6pgodeL2blr7Fc2d ZXMgAU8CfSz.kQ4MwxqQ4fKYE53Gni2JQO0q0Gk36ZfoHXucbH0KEhpxyi9em6QnL4EcyZ5cfSZL QCVm9KmVIVw-- X-Sonic-MF: X-Sonic-ID: 543b1cd1-a72c-4e2e-86e3-0a72c7084691 Message-ID: <0b24f9a5-30e4-4a42-9079-e41e2d7071de@verizon.net> Date: Thu, 17 Sep 2026 18:18:41 -0500 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Content-Language: en-US To: xen-users@lists.xenproject.org From: Leroy Tennison Subject: xen confusion Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit References: <0b24f9a5-30e4-4a42-9079-e41e2d7071de.ref@verizon.net> X-Mailer: WebService/1.1.26541 mail.backend.jedi.jws.acl:role.jedi.acl.token.atz.jws.hermes.aol Content-Length: 313 X-purgate-ID: tlsNG-16d1c6/1789687127-FD20877B-10641228/0/0 X-purgate-type: clean X-purgate-size: 318 In my research concerning the xen hypervisor I not only find the xen project but xenserver (Citrix?), xcp-ng, xenbits and other references.  I installed the3 xen-system-amd64 from Debian Trixie which I'm assum,ing is the xen project.  What is the difference in all these variants?  Thanks for your help. From xen-users-bounces@lists.xenproject.org Fri Sep 18 08:22:36 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 18 Sep 2026 08:22:36 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1424910.1649123 (Exim 4.92) (envelope-from ) id 1x7Tqr-0006zr-Bo; Fri, 18 Sep 2026 08:21:45 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1424910.1649123; Fri, 18 Sep 2026 08:21:45 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7Tqr-0006zk-98; Fri, 18 Sep 2026 08:21:45 +0000 Received: by outflank-mailman (input) for mailman id 1424910; Fri, 18 Sep 2026 08:21:44 +0000 Received: from mx.expurgate.net ([194.145.224.20]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7Tqp-0006ze-FU for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 08:21:44 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x7Tqo-00AYHk-C9 for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 10:21:42 +0200 Received: from [10.42.69.1] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6aacf492-bab6-0a2a0a5309dd-0a2a4501ac4c-10 for ; Fri, 18 Sep 2026 10:21:41 +0200 Received: from [62.146.89.62] (helo=mail.syndicat.com) by tlsNG-d62444.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6aacf494-5984-0a2a45010019-3e92593ef5b4-3 for ; Fri, 18 Sep 2026 10:21:40 +0200 Received: from localhost.syndicat.com ([127.0.0.1]:62901 helo=localhost) by mail.syndicat.com with esmtp (Syndicat PostHamster 12.1 4.98) (envelope-from ) id 1x7Tqm-000000004er-2qr7 for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 10:21:40 +0200 Received: from mail.syndicat.com ([127.0.0.1]) by localhost (mail.syndicat.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id dKKD1ZcdgAud for ; Fri, 18 Sep 2026 10:21:40 +0200 (CEST) Received: from p200300c7e7425d73f8120dd8e7b2d753.dip0.t-ipconnect.de ([2003:c7:e742:5d73:f812:dd8:e7b2:d753]:58108 helo=gongov.localnet) by mail.syndicat.com with esmtpsa (TLS1.3) tls TLS_AES_256_GCM_SHA384 (Syndicat PostHamster 12.1 4.98) (envelope-from ) id 1x7Tqm-000000000lY-1Chc for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 10:21:40 +0200 X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=x2025 header.d=syndicat.com header.i="@syndicat.com" header.h="Content-Type:Content-Transfer-Encoding:MIME-Version:References:In-Reply-To:Message-ID:Date:Subject:To:From" DKIM-Signature: v=1; a=rsa-sha256; q=dns/txt; c=relaxed/relaxed; d=syndicat.com; s=x2025; h=Content-Type:Content-Transfer-Encoding: MIME-Version:References:In-Reply-To:Message-ID:Date:Subject:To:From:Sender: Reply-To:Cc:Content-ID:Content-Description:Resent-Date:Resent-From: Resent-Sender:Resent-To:Resent-Cc:Resent-Message-ID:List-Id:List-Help: List-Unsubscribe:List-Subscribe:List-Post:List-Owner:List-Archive; bh=af7NlG4w+73ErjtGEQk5ZGguGwcqAh+O3eo14DBbFgw=; b=VgTGjyXSw03dq17ZseiDf68ZXj ZvLTBVe8fEt1E9b41H4kIXBMztAVDQ2e5l0cKI2q7V2WIMgbbQSPogwzHDv7FP427SHZv6j3fzY0z jDnl9gpfJ5GxZ5BQJw4aM1fagkcp0z0Mqm5dmhwbnc+DjqNtrR830OrfaWWMQqoouF16zFZ7P3qUq rhGNjmr29jCcEHBRiJE9HcbclZnBS/opellntytB+N3tJWKpgbgWzTpHcoeN6+YPhZFIigLZboeYc twlV2D4s5H3Lu4nzI4xe0hzGOV9I4Rj7OWq9xjMmi0LMdpOUsh1KBD7mCxGAxgANRGf0x/pKeH7jK XRajjsfg==; X-Virus-Scanned: amavisd-new at syndicat.com From: Niels Dettenbach To: xen-users@lists.xenproject.org Subject: Re: xen confusion Date: Fri, 18 Sep 2026 10:21:36 +0200 Message-ID: Organization: Syndicat IT&Internet Disposition-Notification-To: Niels Dettenbach In-Reply-To: <0b24f9a5-30e4-4a42-9079-e41e2d7071de@verizon.net> References: <0b24f9a5-30e4-4a42-9079-e41e2d7071de.ref@verizon.net> <0b24f9a5-30e4-4a42-9079-e41e2d7071de@verizon.net> MIME-Version: 1.0 Content-Transfer-Encoding: 7Bit Content-Type: text/plain; charset="utf-8" X-Report-Abuse-To: abuse@syndicat.com (see https://www.syndicat.com/kontakt/kontakte/) X-AntiAbuse: This header was added to track abuse, please include it with any abuse report X-AntiAbuse: Primary Hostname - mail.syndicat.com X-AntiAbuse: Original Domain - lists.xenproject.org X-AntiAbuse: Sender Address Domain - syndicat.com X-purgate-ID: tlsNG-d62444/1789719701-BF063757-2460429B/0/0 X-purgate-type: clean X-purgate-size: 875 Am Freitag, 18. September 2026, 01:18:41 UTC+00:00:01 schrieb Leroy Tennison: > In my research concerning the xen hypervisor I not only find the xen > project but xenserver (Citrix?), xcp-ng, xenbits and other references. > I installed the3 xen-system-amd64 from Debian Trixie which I'm assum,ing > is the xen project. What is the difference in all these variants? xen-system-amd is the XEN hypervisor as a debian package. It allows you to boot / build a xen environment with debian dom0, but you have to do most of the configuration byself. xenserver is a complete "plug and play" xen environment / virtualization platform xcp-ng is another virtualization / "cloud platform" based on xen hth, niels. -- --- Niels Dettenbach Syndicat IT & Internet https://www.syndicat.com PGP: https://syndicat.com/pub_key.asc --- From xen-users-bounces@lists.xenproject.org Fri Sep 18 13:28:27 2026 Return-path: Envelope-to: archives@lists.xen.org Delivery-date: Fri, 18 Sep 2026 13:28:27 +0000 Received: from list by lists.xenproject.org with outflank-mailman.1425333.1649358 (Exim 4.92) (envelope-from ) id 1x7Ycv-0000UN-SB; Fri, 18 Sep 2026 13:27:41 +0000 X-Outflank-Mailman: Message body and most headers restored to incoming version Received: by outflank-mailman (output) from mailman id 1425333.1649358; Fri, 18 Sep 2026 13:27:41 +0000 Received: from localhost ([127.0.0.1] helo=lists.xenproject.org) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7Ycv-0000UG-PV; Fri, 18 Sep 2026 13:27:41 +0000 Received: by outflank-mailman (input) for mailman id 1425333; Fri, 18 Sep 2026 13:27:40 +0000 Received: from mx.expurgate.net ([195.190.135.10]) by lists.xenproject.org with esmtp (Exim 4.92) (envelope-from ) id 1x7Ycu-0000UA-FV for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 13:27:40 +0000 Received: from mx.expurgate.net (helo=localhost) by mx.expurgate.net with esmtp id 1x7Yct-004rCJ-39 for xen-users@lists.xenproject.org; Fri, 18 Sep 2026 15:27:39 +0200 Received: from [10.42.69.7] (helo=localhost) by localhost with ESMTP (eXpurgate MTA 0.9.1) (envelope-from ) id 6aad3c46-e002-0a2a0a5209dd-0a2a450797b6-6 for ; Fri, 18 Sep 2026 15:27:39 +0200 Received: from [85.215.255.24] (helo=mo4-p00-ob.smtp.rzone.de) by tlsNG-ef75cf.mxtls.expurgate.net with ESMTPS (eXpurgate 4.57.1) (envelope-from ) id 6aad3c4a-b4ea-0a2a45070019-55d7ff188fe7-3 for ; Fri, 18 Sep 2026 15:27:38 +0200 Received: from mail.onlineschubla.de by smtp.strato.de (RZmta 55.6.2 AUTH) with ESMTPSA id eb8f7c28IDRcOm8 (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256 bits)) (Client did not present a certificate) for ; Fri, 18 Sep 2026 15:27:38 +0200 (CEST) Received: from localhost (localhost [127.0.0.1]) by mail.onlineschubla.de (Postfix) with ESMTP id 3A09B231AD for ; Fri, 18 Sep 2026 15:27:38 +0200 (CEST) Received: from mail.onlineschubla.de ([127.0.0.1]) by localhost (mail.onlineschubla.de [127.0.0.1]) (amavis, port 10024) with ESMTP id 53pRnlL3w62c for ; Fri, 18 Sep 2026 15:27:37 +0200 (CEST) Received: from [IPV6:fd00::dacb:8aff:fec3:1863] (unknown [IPv6:fd00::dacb:8aff:fec3:1863]) by mail.onlineschubla.de (Postfix) with ESMTPA id 3AD5020E5C for ; Fri, 18 Sep 2026 15:27:37 +0200 (CEST) X-BeenThere: xen-users@lists.xenproject.org List-Id: Xen user discussion List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Errors-To: xen-users-bounces@lists.xenproject.org Precedence: list Sender: "Xen-users" Authentication-Results: eu.smtp.expurgate.cloud; dkim=pass header.s=strato-dkim-0002 header.d=onlineschubla.de header.i="@onlineschubla.de" header.h="In-Reply-To:From:References:To:Subject:Date:Message-ID"; dkim=permerror header.s=strato-dkim-0003 header.d=onlineschubla.de header.i="@onlineschubla.de" ARC-Seal: i=1; a=rsa-sha256; t=1789738058; cv=none; d=strato.com; s=strato-dkim-0002; b=IttNzHC/qYRXwlxrfzxpyxk01QfU0VIMqoSP1pJ53jVzHV32qAZcncQxjw8So6zfA7 B/Gmo+Xqt78Zp3HZSRfJt39gUZUrkGvOUrV4PtlIdH6290Mdv88wbT4QJTRr7sSOaD1U +FiFespp2N35Li2PZePKhKYeY40ADwwYoeLlT/muYETq/jlFxOSpGcSku+3mbqADn06L 3EuZpvCl1UIexekksoH9ydPLUYX5m1ILCx+ZmROILQseYf9/2hUAXfYO8ofrTTh6s31a eC0PsFsBkyMkpNlXpS2oI/lNp8OWNIUWhJLCi792IfGn10lnyvnVTWFVkoSLW3wgsMTB CQEg== ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; t=1789738058; s=strato-dkim-0002; d=strato.com; h=In-Reply-To:From:References:To:Subject:Date:Message-ID:Cc:Date:From: Subject:Sender; bh=78LSpvdH+MzGTGWdABLdsKhzZVAXnTNNrrq6ikZ4838=; b=VFxbPY2TPN+P5qD7fqyfcIgTzphsznEkTHx10bbqfLka9JiHmL20dD4Rv91pTMiDey jW7rhInecpVL1Fi0jZsg9t+yAzPyWUNiifH5V/ya/ygfqRmIiQMg646NIrC1xribaOuD GnNUyxxTDOvv9bhpo3EXJRV+bokFjmRnrlM/RnpG3eHlplGhpKE6uRVSgUWooVtV4qOQ m808+91R/A2A0kaU7z4Cq1OQm2kgAROz9iBxdgg3l7j7lbDHi70gsB8atC7E/QvdHRYl 7pUS1zLzqMTIhm3V4PLCvRXYezT6YOf7sl0Q1cLqVkZI/gJwNnUgiQ4zDSKdi9/7bWvr rTyQ== ARC-Authentication-Results: i=1; strato.com; arc=none; dkim=none X-RZG-CLASS-ID: mo00 DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; t=1789738058; s=strato-dkim-0002; d=onlineschubla.de; h=In-Reply-To:From:References:To:Subject:Date:Message-ID:Cc:Date:From: Subject:Sender; bh=78LSpvdH+MzGTGWdABLdsKhzZVAXnTNNrrq6ikZ4838=; b=kRudkkJlp7NvXSTWJxUcfr40S0mdX8fE/T38hZt0p09Ay3lefI7Lz+msP7aHCHwbYe CZwqflIgxJOXUfPOtzhv0scF4Pq3TG0ewFpp6farhIgi4gAkIXoZgtg0q8xSLijXXEDo gQAnaoB5DAge7XyLAct2m7vZKZoQDEQkPFa+jAZPMahZoe0mDRy3qDCgtGYIfhrzHqc8 lH0mG9fAg45dzY8un4DnWgnw66M+faQqmPvQayrnjuzq6F7ROITUaUdg1xnS/sBdCmsp m7Sw2ito0vk/Oj+OlFvLDS+L6q8MhC2NDGjI1dSYgN75aKJIQo3Jobpo/Bm/TD8q8IVi MiWw== DKIM-Signature: v=1; a=ed25519-sha256; c=relaxed/relaxed; t=1789738058; s=strato-dkim-0003; d=onlineschubla.de; h=In-Reply-To:From:References:To:Subject:Date:Message-ID:Cc:Date:From: Subject:Sender; bh=78LSpvdH+MzGTGWdABLdsKhzZVAXnTNNrrq6ikZ4838=; b=xdglOqbB/BG7mbBUAjsr/URNzuSxJ0Wx1090ii2nWz3m/pWlFmuOaJ9pERZHXizWYu z7RJOsBxIqariNx0d7Aw== X-RZG-AUTH: ":PG0ReWCndfO3rCSML4AvNaDxJ7WJyilEI/NMX3IPpS4dskMFCImCETb1V6T+vc8GMjO9Ncz/iTX994mX6dCK+ZCZZQlc82+ol/Q=" X-Virus-Scanned: Debian amavis at onlineschubla.de Message-ID: <6cc62696-4448-45fb-a644-c2b24ea20f1c@onlineschubla.de> Date: Fri, 18 Sep 2026 15:27:30 +0200 MIME-Version: 1.0 User-Agent: Mozilla Thunderbird Subject: Re: xen confusion To: xen-users@lists.xenproject.org References: <0b24f9a5-30e4-4a42-9079-e41e2d7071de.ref@verizon.net> <0b24f9a5-30e4-4a42-9079-e41e2d7071de@verizon.net> Content-Language: en-US From: Paul Leiber In-Reply-To: <0b24f9a5-30e4-4a42-9079-e41e2d7071de@verizon.net> Content-Type: text/plain; charset=UTF-8; format=flowed Content-Transfer-Encoding: 8bit X-purgate-ID: tlsNG-ef75cf/1789738059-344CBAE4-08798D94/0/0 X-purgate-type: clean X-purgate-size: 2801 Am 18.09.26 um 01:18 schrieb Leroy Tennison: > In my research concerning the xen hypervisor I not only find the xen project but xenserver (Citrix?), xcp-ng, xenbits and other references.  I installed the3 xen-system-amd64 from Debian Trixie which I'm assum,ing is the xen project.  What is the difference in all these variants?  Thanks for your help. > Hi Leroy, Welcome to the Xen world! Here's my understanding. First of all, Xenbits stands out from your list because it is not a software, but a part of the official Xen homepage. It lists other sites and repositories related to Xen. Understanding that you are looking for a hypervisor software solution, I am not going into more detail on Xenbits. Xen is an open source hypervisor. Xen is the basis for all the virtualization solutions you have mentioned. Xen needs a toolstack (i.e. management tools) to tell it what to do. There are different toolstacks available. (Vanilla) Xen uses xl, a command line interface, as its management tool. It can do everything you need and then more, but it takes some time to get familiar with. It is what I have been using for many years now. Xen is available on many distributions, e. g. through the Debian package you have mentioned. Xen including the toolstack is completely open source. Xenserver is a commercial hypervisor solution from Citrix, based on the Xen hypervisor, but using a different toolstack with a GUI. I have never used it. There are some things Xenserver can do out of the box which Xen doesn't (yet), e. g. boot a guest (or DomU, as guest VMs are called in Xen terminology) which requires TPM support. Parts of Xenserver are closed source. I think there is a free version of Xenserver available which is restricted somehow. XCP-ng is another toolstack based on Xen, also with a GUI for hypervisor management. It is part of a complete linux distribution with the purpose of running and managing VMs. It is also open source. Commercial support is available for XCP-ng. I have never used it. I think that it is important to give Xen newbies a good welcome, that's why I wrote this answer. However, I want to point out to you that all this information is rather easy to find, e. g. by reading the Wikipedia sites [1][2] or the official Xenserver homepage [3]. I suggest to spend some time reading these and also some articles on the official Xen wiki. Specifically, I still find that the official Xen wiki howto [4] is a good starting point for learning how to use vanilla Xen with Debian as a Dom0, even if some information in the wiki is outdated. Have fun! Paul [1] https://en.wikipedia.org/wiki/Xen [2] https://en.wikipedia.org/wiki/XCP-ng [3] https://www.xenserver.com/story [4] https://wiki.xenproject.org/wiki/Xen_Project_Beginners_Guide