Commit graph

7 commits

Author SHA1 Message Date
bouyer
e0e59dddc8 Update Xen 4.8 packages to 4.8.5. Changes since 4.8.3:
- security patch up to and including XSA-282
- others bug fixes, code cleanup and minor improvements

Note that this includes a patch to xen/arch/x86/mm.c which removes
a new ASSERT() firing when shutting down a 64bit NetBSD guest.
2019-08-30 13:23:09 +00:00
bouyer
a22bf64f8d Update xen 4.8 packages to 4.8.3. Changes since 4.8.2: include patches from
all security advisory up to and including XSA254.

While there pass XEN_VENDORVERSION=nb${PKGREVISION} to make so that
'xl info' shows the NetBSD PKGREVISION. If PKGREVISION is not available,
define this as 'nb0'.
2018-01-24 23:29:32 +00:00
bouyer
e43adb8e07 Add patches from upstream, from xsa254/README.pti :
> This README gives references for one of three mitigation strategies
> for Meltdown.

> This series is a first-class migitation pagetable isolation series for
> Xen.  It is available for Xen 4.6 to Xen 4.10 and later.

bump PKGREVISION
2018-01-18 10:28:13 +00:00
bouyer
f73734a7f4 Apply patches from upstream, fixing security issues XSA246 up to XSA251.
Also update patch-XSA240 from upstream, fixing issues in linear page table
handling introduced by the original XSA240 patch.
Bump PKGREVISION
2017-12-15 14:00:44 +00:00
bouyer
17b19337bc Update xentools48 and xenkernel48 to 4.8.2, and apply security patches up
to XSA244. Keep PKGREVISION to 1 to account for the fact that it's
not a stock Xen 4.8.2.

Note that, unlike upstream, pv-linear-pt defaults to true, so that
NetBSD PV guests (including dom0) will continue to boot without changes
to boot.cfg
2017-10-17 08:42:30 +00:00
spz
eb10b3a907 adding patch for XSA-212 from upstream
(http://xenbits.xen.org/xsa/advisory-212.html)
2017-04-08 12:30:42 +00:00
bouyer
85b996c375 Add xenkerne48 and xentools48, version 4.8.0.
This includes stub domains support, but it should be considered
experimental at this time. Stub domains hangs with serial ports,
or more more than one virual disk (multiple virtual ethernet have not been
tested).
2017-03-30 09:15:09 +00:00