summaryrefslogtreecommitdiffstats
path: root/main/xen
Commit message (Collapse)AuthorAgeFilesLines
* [all autotools packages]: normalize ./configureTimo Teräs2013-07-301-1/+4
|
* main/xen: pkgrel bumpWilliam Pitcock2013-07-021-1/+1
|
* main/xen: enable qemu-xen to stream isos with curlWilliam Pitcock2013-07-021-1/+1
|
* main/xen: enable TLS over websockets (and require it) if X509 is enabledWilliam Pitcock2013-07-012-1/+119
|
* main/xen: fix plaintext websockets supportWilliam Pitcock2013-07-012-9/+21
|
* main/xen: splice in websockets support on qemu-xen device-modelWilliam Pitcock2013-07-013-2/+926
|
* main/xen: fix xsa45 and xsa58 (CVE-2013-1918,CVE-2013-1432)Natanael Copa2013-07-013-1/+1271
| | | | ref #2123
* main/xen: fix xsa57 (CVE-2013-2211)Natanael Copa2013-06-262-1/+338
| | | | | ref #2117 fixes #2122
* main/xen: security fix (CVE-2013-2194,CVE-2013-2195,CVE-2013-2196)Natanael Copa2013-06-212-1/+3436
| | | | fixes #2115
* main/xen: add spice supportNatanael Copa2013-06-101-2/+3
| | | | It seems to be linked in
* main/xen: security fixes (CVE-2013-2076,CVE-2013-2077,CVE-2013-2078)Natanael Copa2013-06-044-1/+140
| | | | | | ref #2044 ref #2049 ref #2054
* main/xen: rebase pod2man patch properlyWilliam Pitcock2013-06-012-14/+3
|
* main/xen: more pod2man fixesWilliam Pitcock2013-06-012-3/+64
|
* main/xen: fix more pod2man breakageWilliam Pitcock2013-06-012-3/+14
|
* main/xen: fix pod2man chokingWilliam Pitcock2013-06-012-0/+16
|
* main/xen: unset LANG/LC_ALLWilliam Pitcock2013-06-011-0/+2
|
* main/xen: remove obsolete XSA patches.William Pitcock2013-06-018-872/+0
|
* main/xen: upgrade to 4.2.2William Pitcock2013-06-011-40/+8
|
* main/xen: security fix (CVE-2013-2072)Natanael Copa2013-05-202-1/+55
| | | | ref #1900
* main/xen: add perl as depNatanael Copa2013-05-171-2/+2
| | | | | | | | | Currently it will not start domU at all unless perl is there. There are only few lines of perl that probably easily could be ported to C or Lua or something, but until that happens we need perl :-( fixes #1524
* main/xen: misc fixes for xendomains init.d scriptNatanael Copa2013-05-172-7/+10
| | | | | - we need create the parent dirs for SCREENDIR - sync the need/after deps with gentoo
* main/xen: sleep a bit when starting up xen domainsNatanael Copa2013-05-163-7/+24
| | | | fixes #1850
* main/xen: security fixes ↵Roger Pau Monne2013-04-196-1/+638
| | | | | | | | | | | (CVE-2013-1917,CVE-2013-1919,CVE-2013-1920,CVE-2013-1922) CVE-2013-1917 / XSA-44 CVE-2013-1919 / XSA-46 CVE-2013-1920 / XSA-47 CVE-2013-1922 / XSA-48 Signed-off-by: Natanael Copa <ncopa@alpinelinux.org>
* xen: XSA-36 and XSA-38Roger Pau Monne2013-02-063-1/+401
|
* xen: XSA-34 and XSA-35Roger Pau Monne2013-01-233-1/+59
| | | | | Security fixes for nested virtualization. This only apply to Xen 4.2.x, only edge and 2.5.x Alpine Linux systems are affected.
* xen: XSA-41 remaining patchesRoger Pau Monne2013-01-183-1/+111
| | | | | | | Some patches where not included in the original XSA, this are the remaining ones (so far). To be applied to edge and 2.5
* xen: XSA-41Roger Pau Monne2013-01-172-1/+75
|
* xen: add XSA-33 patchRoger Pau Monne2013-01-142-1/+24
|
* main/xen: disable on eglibcCarlo Landmeter2013-01-051-0/+2
|
* main/xen: add iproute2 to dependsNatanael Copa2012-12-251-2/+2
| | | | ref #1529
* xen: update to 4.2.1Roger Pau Monne2012-12-1813-1130/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Excerpt from release notes: This fixes the following critical vulnerabilities: * CVE-2012-4535 / XSA-20: Timer overflow DoS vulnerability * CVE-2012-4537 / XSA-22: Memory mapping failure DoS vulnerability * CVE-2012-4538 / XSA-23: Unhooking empty PAE entries DoS vulnerability * CVE-2012-4539 / XSA-24: Grant table hypercall infinite loop DoS vulnerability * CVE-2012-4544,CVE-2012-2625 / XSA-25: Xen domain builder Out-of-memory due to malicious kernel/ramdisk * CVE-2012-5510 / XSA-26: Grant table version switch list corruption vulnerability * CVE-2012-5511 / XSA-27: several HVM operations do not validate the range of their inputs * CVE-2012-5513 / XSA-29: XENMEM_exchange may overwrite hypervisor memory * CVE-2012-5514 / XSA-30: Broken error handling in guest_physmap_mark_populate_on_demand() * CVE-2012-5515 / XSA-31: Several memory hypercall operations allow invalid extent order values * CVE-2012-5525 / XSA-32: several hypercalls do not validate input GFNs We recommend all users of the 4.2.0 code base to update to this point release. Among many bug fixes and improvements (around 100 since Xen 4.2.0): * A fix for a long standing time management issue * Bug fixes for S3 (suspend to RAM) handling * Bug fixes for other low level system state handling * Bug fixes and improvements to the libxl tool stack * Bug fixes to nested virtualization
* xen: security fixesRoger Pau Monne2012-12-047-1/+431
| | | | | | | | | | | This covers: XSA-26 (CVE-2012-5510) XSA-27 (CVE-2012-5511) XSA-29 (CVE-2012-5513) XSA-30 (CVE-2012-5514) XSA-31 (CVE-2012-5515) XSA-32 (CVE-2012-5525)
* xen: add screen as a run time dependencyRoger Pau Monne2012-12-041-2/+2
| | | | screen is needed by xendomains init script. Also bump pkgrel.
* xen: fix xendomains init scriptRoger Pau Monne2012-12-042-4/+4
|
* xen: prevent xenstore from being restaredRoger Pau Monne2012-11-212-6/+7
| | | | | | xenstore should not be restarted. If it is restarted watches are lost, and several key components like kernel backend drivers will cease to work.
* xen: bump pkgrelRoger Pau Monne2012-11-191-1/+1
|
* xen: fix misuse of einfo in xenstore.initdRoger Pau Monne2012-11-192-2/+2
| | | | Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
* xen: add a bunch of security fixesRoger Pau Monne2012-11-195-0/+144
| | | | | | | | | | This covers: XSA-20 XSA-22 XSA-23 XSA-24 Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>
* xen: prevent qemu daemon from screwing the consoleRoger Pau Monne2012-11-192-2/+5
| | | | | | | Qemu when launched with -nographic and -monitor screws the console badly. Use nohup to prevent that. Signed-off-by: Roger Pau Monné <roger.pau@citrix.com>
* xen: fix init scriptsRoger Pau Monné2012-11-021-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | On 02/11/12 12:05, Leonardo Arena wrote: > On Fri, 2012-11-02 at 11:49 +0100, Roger Pau Monne wrote: >> Xen init scripts doesn't need to depend on 'net' >> --- >> Please update APK checksum >> --- >> main/xen/xend.initd | 2 +- >> main/xen/xenstored.initd | 1 - >> 2 files changed, 1 insertions(+), 2 deletions(-) >> >> diff --git a/main/xen/xend.initd b/main/xen/xend.initd >> index 1c667e8..bd5550b 100644 >> --- a/main/xen/xend.initd >> +++ b/main/xen/xend.initd >> @@ -4,7 +4,7 @@ >> # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xend.initd-r2,v 1.2 2011/09/10 17:22:46 alexxy Exp $ >> >> depend() { >> - need net xenconsoled xenstored >> + need xenconsoled xenstored >> after firewall >> before xendomains sshd >> } >> diff --git a/main/xen/xenstored.initd b/main/xen/xenstored.initd >> index f2c22cc..6187c02 100644 >> --- a/main/xen/xenstored.initd >> +++ b/main/xen/xenstored.initd >> @@ -4,7 +4,6 @@ >> # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen-tools/files/xenstored.initd,v 1.2 2011/04/05 21:25:03 alexxy Exp $ >> >> depend() { >> - need net >> before xendomains xend sshd ntp-client ntpd nfs nfsmount rsyncd portmap dhcp >> } >> > > Applied both patches. On the rush I forgot to increase pkgrel, can you commit this please: Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/xen: update checksumLeonardo Arena2012-11-021-2/+3
|
* xen: fix init scriptsRoger Pau Monne2012-11-022-2/+1
| | | | | | Xen init scripts doesn't need to depend on 'net' Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* xen: add CVE-2012-4544 fixRoger Pau Monne2012-11-022-0/+366
| | | | Signed-off-by: Leonardo Arena <rnalrd@alpinelinux.org>
* main/xen: rebuild against nss-3.14Natanael Copa2012-10-301-1/+1
|
* xen: update to 4.2.0Roger Pau Monne2012-09-173-11/+10
|
* xen: update to 4.2.0-rc4Roger Pau Monne2012-09-1413-229/+319
| | | | | | Next version (4.2) is scheduled to be released very soon if everything goes ok. This is a very close rc, which we can start testing until 4.2 comes out.
* main/xen: upgrade to 4.1.3Natanael Copa2012-08-136-452/+3
|
* main/xen: use default screendir locationNatanael Copa2012-06-223-4/+9
| | | | Otherwise screen -x will not work without manually setting screen dir
* main/xen: fix xendomains init script to wait for screenNatanael Copa2012-06-212-2/+17
| | | | | | | We need wait til the detatched screen has created the connection sockets before trying to set the opts to it. ref #1181
* main/xen: CVE-2012-0217, CVE-2012-0218, CVE-2012-2934Roger Pau Monne2012-06-123-2/+174
| | | | | | This should be backported to stable. Signed-off-by: Roger Pau Monne <roger.pau@citrix.com>