aboutsummaryrefslogtreecommitdiffstats
path: root/main/xen
Commit message (Collapse)AuthorAgeFilesLines
* main/xen: security fixes (xsa237 - xsa244)Daniel Sabogal2017-10-2314-1/+1328
| | | | | | | | | | | CVE-2017-15590 XSA-237 XSA-238 CVE-2017-15589 XSA-239 CVE-2017-15595 XSA-240 CVE-2017-15588 XSA-241 CVE-2017-15593 XSA-242 CVE-2017-15592 XSA-243 CVE-2017-15594 XSA-244
* main/xen: security fix for xsa245Daniel Sabogal2017-10-203-1/+128
|
* main/xen,community/rng-tools: remove unicode whitespace from APKBUILDsAndy Chu2017-10-191-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Fix bugs in 2 packages by removing Unicode whitespace. I found these problems by parsing all APKBUILD scripts with my shell (http://www.oilshell.org/). The problem only occurs if 'make' fails. Here is an excerpt: $ od -c unicode-space.sh 0000000 m a k e | | 302 240 r e t u r n 0000020 1 \n 0000022 \302 \204 is a utf-8 whitespace. No shells accept this -- it's parsed as part of the 'return' word, which makes it an invalid command. $ busybox ash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: line 1:  return: not found $ bash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: line 1:  return: command not found $ dash unicode-space.sh make: *** No targets specified and no makefile found. Stop. unicode-space.sh: 1: unicode-space.sh:  return: not found Remove '|| return 1' from lines that contained unicode whitespace. abuild now runs with 'set -e'.
* main/xen: security fixes (XSA-231, XSA-232, XSA-233, XSA-234)Daniel Sabogal2017-09-135-1/+389
| | | | | | | CVE-2017-14316 XSA-231 CVE-2017-14318 XSA-232 CVE-2017-14317 XSA-233 CVE-2017-14319 XSA-234
* main/xen: enable on aarch64Daniel Sabogal2017-09-062-4/+19
|
* main/xen: security fixes (XSA-226 and XSA-235)Daniel Sabogal2017-09-063-2/+70
| | | | | | | Update patch for XSA-226 (fixes a regression). http://openwall.com/lists/oss-security/2017/08/29/2 Include fix for XSA-235.
* main/xen: security fixesDaniel Sabogal2017-08-246-1/+719
| | | | | | | | | fixes #7732 CVE-2017-12135 XSA-226 CVE-2017-12137 XSA-227 CVE-2017-12136 XSA-228 CVE-2017-12855 XSA-230
* main/xen: upgrade to 4.9.0Daniel Sabogal2017-08-226-263/+35
| | | | | | | | fixes #7502 Security fixes for all applicable XSAs up to (and including) XSA-225 The kernel side of XSA-216 was fixed in 4.9.35 Included modified xattr_size_max.patch from main/qemu 2.8
* main/xen: fix secfixes commentNatanael Copa2017-07-201-4/+4
| | | | replace tabs with spaces
* main/xen: fix tmux optionWilliam Johansson2017-06-302-3/+3
| | | | | | Tmux has renamed the set-remain-on-exit option to simply remain-on-exit since tmux 2.4. The functionality is needed to make sure console logs are kept if a domain dies.
* main/xen: add xen-bridge subpackageNatanael Copa2017-05-232-4/+30
| | | | helper config for setting up a simple xenbr0 with dnsmasq
* main/xen: add missing patchesCarlo Landmeter2017-05-222-0/+218
|
* main/xen: sec fixes XSA-213 XSA-214Carlo Landmeter2017-05-221-1/+9
| | | | fixes #7288
* main/xen: fix ifunc usage on qemu-xen domain modelWilliam Pitcock2017-05-182-1/+15
|
* main/xen: clean up unused fileNatanael Copa2017-04-151-456/+0
|
* main/xen: upgrade to 4.8.1Natanael Copa2017-04-1216-1361/+49
|
* main/xen: upgrade to 4.7.2 and fix xsa210 and xsa211Natanael Copa2017-04-1128-1862/+595
|
* main/xen: sec fixes fro xsa-207 - xsa-209Natanael Copa2017-02-277-128/+346
| | | | | | | | | | | added perl-dev as makedepends due to man2pod moved to there. - XSA-207 - CVE-2017-2615 XSA-208 - CVE-2017-2620 XSA-209 - XSA-210 fixes #6915
* main/xen: security fixesNatanael Copa2016-12-224-1/+180
| | | | | | | | XSA-204 CVE-2016-10013 x86: Mishandling of SYSCALL singlestep during emulation XSA-203 CVE-2016-10025 x86: missing NULL pointer check in VMFUNC emulation XSA-202 CVE-2016-10024 x86 PV guests may be able to mask interrupts fixes #6570
* main/xen: actually build with patches from previous commitLeonardo Arena2016-12-201-2/+22
|
* main/xen: security fixes. Fixes #6540Leonardo Arena2016-12-206-1/+525
| | | | | | | | CVE-2016-9932 CVE-2016-9815 CVE-2016-9816 CVE-2016-9817 CVE-2016-9818
* main/xen: fix various security issuesNatanael Copa2016-11-2511-1/+853
| | | | | | | | | | | | | | | | | | | | | | | | | | | | - XSA-198 CVE-2016-9379 CVE-2016-9380 delimiter injection vulnerabilities in pygrub - XSA-197 CVE-2016-9381 qemu incautious about shared ring processing - XSA-196 CVE-2016-9377 CVE-2016-9378 x86 software interrupt injection mis-handled - XSA-195 CVE-2016-9383 x86 64-bit bit test instruction emulation broken - XSA-194 CVE-2016-9384 guest 32-bit ELF symbol table load leaking host data - XSA-193 CVE-2016-9385 x86 segment base write emulation lacking canonical address checks - XSA-192 CVE-2016-9382 x86 task switch to VM86 mode mis-handled - XSA-191 CVE-2016-9386 x86 null segments not always treated as unusable fixes #6495
* main/xen: upgrade to 4.7.1Natanael Copa2016-11-1511-816/+5
|
* [various] rename dependency python-dev to python2-devJakub Jirutka2016-10-261-1/+1
|
* main/xen: security fix for CVE-2016-7777Natanael Copa2016-10-192-1/+180
|
* main/xen: Fixes for missing transaction in xenstore_client.c.Linus Swälas2016-10-193-1/+606
| | | | | | Recent kernel updates makes xenstore-read return ESRCH due to not having a transaction in progress when talking to xenbus, this makes sure that a transaction is always in place.
* main/xen: rebuild against libresslNatanael Copa2016-10-101-2/+2
|
* main/xen: fix build on armhfJakub Jirutka2016-10-061-1/+7
|
* main/xen: disable on armhf for nowCarlo Landmeter2016-10-061-1/+1
| | | | | | | | | | | | | | | gcc: error: unrecognized argument in option '-mcpu=generic' gcc: note: valid arguments to '-mcpu=' are: arm1020e arm1020t arm1022e arm1026ej-s arm10e arm10tdmi arm1136j-s arm1136jf-s arm1156t2-s arm1156t2f-s arm1176jz-s arm1176jzf-s arm2 arm250 arm3 arm6 arm60 arm600 arm610 arm620 arm7 arm70 arm700 arm700i arm710 arm7100 arm710c arm710t arm720 arm720t arm740t arm7500 arm7500fe arm7d arm7di arm7dm arm7dmi arm7m arm7tdmi arm7tdmi-s arm8 arm810 arm9 arm920 arm920t arm922t arm926ej-s arm940t arm946e-s arm966e-s arm968e-s arm9e arm9tdmi cortex-a12 cortex-a15 cortex-a15.cortex-a7 cortex-a17 cortex-a17.cortex-a7 cortex-a32 cortex-a35 cortex-a5 cortex-a53 cortex-a57 cortex-a57.cortex-a53 cortex-a7 cortex-a72 cortex-a72.cortex-a53 cortex-a8 cortex-a9 cortex-m0 cortex-m0.small-multiply cortex-m0plus cortex-m0plus.small-multiply cortex-m1 cortex-m1.small-multiply cortex-m3 cortex-m4 cortex-m7 cortex-r4 cortex-r4f cortex-r5 cortex-r7 cortex-r8 ep9312 exynos-m1 fa526 fa606te fa626 fa626te fa726te fmp626 generic-armv7-a iwmmxt iwmmxt2 marvell-pj4 mpcore mpcorenovfp native qdf24xx strongarm strongarm110 strongarm1100 strongarm1110 xgene1 xscale gcc: error: unrecognized argument in option '-mcpu=generic' gcc: note: valid arguments to '-mcpu=' are: arm1020e arm1020t arm1022e arm1026ej-s arm10e arm10tdmi arm1136j-s arm1136jf-s arm1156t2-s arm1156t2f-s arm1176jz-s arm1176jzf-s arm2 arm250 arm3 arm6 arm60 arm600 arm610 arm620 arm7 arm70 arm700 arm700i arm710 arm7100 arm710c arm710t arm720 arm720t arm740t arm7500 arm7500fe arm7d arm7di arm7dm arm7dmi arm7m arm7tdmi arm7tdmi-s arm8 arm810 arm9 arm920 arm920t arm922t arm926ej-s arm940t arm946e-s arm966e-s arm968e-s arm9e arm9tdmi cortex-a12 cortex-a15 cortex-a15.cortex-a7 cortex-a17 cortex-a17.cortex-a7 cortex-a32 cortex-a35 cortex-a5 cortex-a53 cortex-a57 cortex-a57.cortex-a53 cortex-a7 cortex-a72 cortex-a72.cortex-a53 cortex-a8 cortex-a9 cortex-m0 cortex-m0.small-multiply cortex-m0plus cortex-m0plus.small-multiply cortex-m1 cortex-m1.small-multiply cortex-m3 cortex-m4 cortex-m7 cortex-r4 cortex-r4f cortex-r5 cortex-r7 cortex-r8 ep9312 exynos-m1 fa526 fa606te fa626 fa626te fa726te fmp626 generic-armv7-a iwmmxt iwmmxt2 marvell-pj4 mpcore mpcorenovfp native qdf24xx strongarm strongarm110 strongarm1100 strongarm1110 xgene1 xscale gcc: error: unrecognized command line option '-mgeneral-regs-only' gcc: error: unrecognized command line option '-mgeneral-regs-only' make[3]: *** [Makefile:103: asm-offsets.s] Error 1 make[3]: Leaving directory '/home/buildozer/aports/main/xen/src/xen-4.7.0/xen/arch/arm' make[2]: *** [Makefile:133: /home/buildozer/aports/main/xen/src/xen-4.7.0/xen/xen] Error 2 make[2]: Leaving directory '/home/buildozer/aports/main/xen/src/xen-4.7.0/xen' make[1]: *** [Makefile:45: install] Error 2 make[1]: Leaving directory '/home/buildozer/aports/main/xen/src/xen-4.7.0/xen'
* main/xen: dont build -dbg on armhfNatanael Copa2016-10-031-1/+5
|
* main/xen: enable -dbgNatanael Copa2016-10-031-2/+2
| | | | apparently xenstore-read segfaults
* main/xen: sec fixes (CVE-2016-7092, CVE-2016-7093, CVE-2016-7094)Natanael Copa2016-09-146-1/+359
| | | | | | | | | fixes: XSA-185 (CVE-2016-7092) XSA-186 (CVE-2016-7093) XSA-187 (CVE-2016-7094) fixes #6151
* main/xen: upgrade to 4.7.0 and add secfixesNatanael Copa2016-08-1517-123/+797
| | | | | | | fixes for: - CVE-2016-6258 - CVE-2016-6259 - CVE-2016-5403
* Revert "main/xen: security fixes (CVE-2016-6258, CVE-2016-6259, CVE-2016-5403)"Leonardo Arena2016-08-155-280/+0
| | | | This reverts commit 4138843cb6988b29e88e93a4eb1a87fd2e75cace.
* main/xen: security fixes (CVE-2016-6258, CVE-2016-6259, CVE-2016-5403)Natanael Copa2016-08-155-0/+280
| | | | | | fixes #6016 (cherry picked from commit d0a7fcca4e82f4ff531083fa762975ee6b0ec9f4)
* main/xen: enable build for armNatanael Copa2016-06-231-8/+27
|
* main/xen: security upgrade to 4.6.3Natanael Copa2016-06-238-935/+5
| | | | | | | | | | | | | | | | | | | | | | | XSA-181 CVE-2016-5242 arm: Host crash caused by VMID exhaustion XSA-180 CVE-2014-3672 Unrestricted qemu logging XSA-179 CVE-2016-3710 CVE-2016-3712 QEMU: Banked access to VGA memory (VBE) uses inconsistent bounds checks XSA-178 CVE-2016-4963 Unsanitised driver domain input in libxl device handling XSA-176 CVE-2016-4480 x86 software guest page walk PS bit handling flaw XSA-175 CVE-2016-4962 Unsanitised guest input in libxl device handling code XSA-174 CVE-2016-3961 hugetlbfs use may crash PV Linux guests
* main/xen: fix xorg segfaul in linux hvmNatanael Copa2016-06-062-1/+46
| | | | ref #5679
* main/xen: security fixes (CVE-2016-3158, CVE-2016-3159, CVE-2016-3960). ↵Leonardo Arena2016-05-093-1/+292
| | | | Fixes #5489
* main/xen: upgrade to 4.6.1Natanael Copa2016-02-2918-1099/+19
|
* main/xen: security fix multiple vulnerabilties. Fixes #5159Leonardo Arena2016-02-2413-1/+1027
| | | | | | | | | | | | (CVE-2016-2270, XSA-154) (CVE-2015-8550, XSA-155) (CVE-2015-8339, CVE-2015-8340, XSA-159) (CVE-2015-8341, XSA-160) (CVE-2015-8555, XSA-165) (CVE-2016-1570, XSA-167) (CVE-2016-1571, XSA 168) (CVE-2015-8615, XSA-169) (CVE-2016-2271, XSA-170)
* main/xen: rebuild against fixed ncurses widechar onlyNatanael Copa2015-12-181-1/+1
|
* main/xen: rebuild against ncurses wide charNatanael Copa2015-12-171-1/+1
|
* main/xen: security fixes (CVE-2015-5307, CVE-2015-8104)Leonardo Arena2015-11-102-1/+132
|
* main/xen: fix install location of init-xenstore-domainNatanael Copa2015-10-292-5/+5
|
* main/xen: upgrade to 4.6.0 and fix sec issuesNatanael Copa2015-10-2917-768/+514
|
* main/xen: rebuild against ncurses-6.0Natanael Copa2015-10-161-1/+1
|
* main/xen: security fixes (CVE-2015-3259,CVE-2015-5154)Natanael Copa2015-07-317-1/+579
| | | | ref #4493
* main/xen: enable libnl3Natanael Copa2015-07-011-2/+2
|
* main/xen: fix build with gcc5 and cleanupNatanael Copa2015-07-013-2/+133
|