~ubuntu-branches/ubuntu/precise/xen/precise-security : changes

~ubuntu-branches/ubuntu/precise/xen/precise-security » Changes from revision 36

From Revision 36 to 17

Rev	Summary	Authors	Tags	Date
36	* Applying Xen Security Advisories * Applying Xen Security Advisories - CVE-2013-2194, CVE-2013-2195, CVE-2013-2196 / XSA55 * libelf: abolish libelf-relocate.c * libxc: introduce xc_dom_seg_to_ptr_pages * libxc: Fix range checking in xc_dom_pfn_to_ptr etc. * libelf: abolish elf_sval and elf_access_signed * libelf/xc_dom_load_elf_symtab: Do not use "syms" uninitialised * libelf: introduce macros for memory access and pointer handling * tools/xcutils/readnotes: adjust print_l1_mfn_valid_note * libelf: check nul-terminated strings properly * libelf: check all pointer accesses * libelf: Check pointer references in elf_is_elfbinary * libelf: Make all callers call elf_check_broken * libelf: use C99 bool for booleans * libelf: use only unsigned integers * libxc: Introduce xc_bitops.h * libelf: check loops for running away * libelf: abolish obsolete macros * libxc: Add range checking to xc_dom_binloader * libxc: check failure of xc_dom__to_ptr, xc_map_foreign_range libxc: check return values from malloc * libxc: range checks in xc_dom_p2m_host and _guest * libxc: check blob size before proceeding in xc_dom_check_gzip - CVE-XXXX-XXXX / XSA57 * libxl: Restrict permissions on PV console device xenstore nodes	Stefan Bader	4.1.2-2ubuntu2.10	10 years ago
35	* Applying Xen Security Advisories: * Applying Xen Security Advisories: - CVE-2013-1918 / XSA-45 * x86: make vcpu_destroy_pagetables() preemptible * x86: make new_guest_cr3() preemptible * x86: make MMUEXT_NEW_USER_BASEPTR preemptible * x86: make vcpu_reset() preemptible * x86: make arch_set_info_guest() preemptible * x86: make page table unpinning preemptible * x86: make page table handling error paths preemptible - CVE-2013-1952 / XSA-49 * VT-d: don't permit SVT_NO_VERIFY entries for known device types - CVE-2013-1964 / XSA-50 * Fix rcu domain locking for transitive grants - CVE-2013-2076 / XSA-52 * x86/xsave: fix information leak on AMD CPUs - CVE-2013-2077 / XSA-53 * x86/xsave: recover from faults on XRSTOR - CVE-2013-2078 / XSA-54 * x86/xsave: properly check guest input to XSETBV - CVE-2013-2072 / XSA-56 * libxc: limit cpu values when setting vcpu affinity	Stefan Bader	4.1.2-2ubuntu2.9	10 years ago
34	* Applying Xen Security Advisories: * Applying Xen Security Advisories: - CVE-2013-1917 / XSA-44 x86: clear EFLAGS.NT in SYSENTER entry path - CVE-2013-1919 / XSA-46 x86: fix various issues with handling guest IRQs - CVE-2013-1920 / XSA-47 defer event channel bucket pointer store until after XSM checks	Stefan Bader	4.1.2-2ubuntu2.8	11 years ago
33	* Applying Xen Security Advisories: * Applying Xen Security Advisories: - ACPI: acpi_table_parse() should return handler's error code CVE-2013-0153 / XSA-36 - oxenstored incorrect handling of certain Xenbus ring states CVE-2013-0215 / XSA-38 * xen-introduce-xzalloc.patch Cherry-picked from upstream xen stable-4.1 as prerequisite for XSA-36 * xen-backport-per-device-vector-map.patch Cherry-picked from upstream xen stable-4.1 as prerequisite for XSA-36 Also fixes issues on AMD systems which could cause Dom0 to loose disks under heavy I/O (because PCI-E devices could use the same IOAPIC vector as the SMBus).	Stefan Bader	4.1.2-2ubuntu2.6	11 years ago
32	* Applying Xen Security Advisory: * Applying Xen Security Advisory: - VT-d: fix interrupt remapping source validation for devices behind legacy bridges CVE-2012-5634 * Applying qemu security fixes: - e1000: Discard packets that are too long if !SBP and !LPE CVE-2012-6075 - Discard packets longer than 16384 when !SBP to match the hardware behavior. CVE-2012-6075	Stefan Bader	4.1.2-2ubuntu2.5	11 years ago
31	* SECURITY UPDATE: denial of service via MMIO regions * SECURITY UPDATE: denial of service via MMIO regions - debian/patches/CVE-2012-3432.patch: don't leave emulator in an inconsistent state in xen/arch/x86/hvm/io.c. - CVE-2012-3432 * SECURITY UPDATE: denial of service via excessive shared page search time during the p2m teardown - debian/patches/CVE-2012-3433.patch: only check for shared pages while any exist on teardown in xen/arch/x86/mm/p2m.c. - CVE-2012-3433 * SECURITY UPDATE: denial of service via DR7 reserved bits - debian/patches/CVE-2012-3494.patch: write upper 32 bits as zeros in xen/include/asm-x86/debugreg.h. - CVE-2012-3494 * SECURITY UPDATE: denial of service and possible privilege escalation via physdev_get_free_pirq hypercall. - debian/patches/CVE-2012-3495.patch: handle out-of-pirq condition correctly in xen/arch/x86/physdev.c. - CVE-2012-3495 * SECURITY UPDATE: denial of service via via invalid flags - debian/patches/CVE-2012-3496.patch: Don't BUG_ON() PoD operations on a non-translated guest in xen/arch/x86/mm/p2m.c. - CVE-2012-3496 * SECURITY UPDATE: denial of service and possibly hypervisor memory disclosure via PHYSDEVOP_map_pirq - debian/patches/CVE-2012-3498.patch: add validation before using in xen/arch/x86/physdev.c. - CVE-2012-3498 * SECURITY UPDATE: privilege escalation via crafted escape VT100 sequence - debian/patches/CVE-2012-3515.patch: bounds check whenever changing the cursor due to an escape code in qemu/console.c. - CVE-2012-3515 * SECURITY UPDATE: host info disclosure via qemu monitor - debian/patches/CVE-2012-4411.patch: disable qemu monitor by default in qemu/vl.c. - CVE-2012-4411	Marc Deslauriers	4.1.2-2ubuntu2.4	11 years ago
30	* Applying Xen Security fixes (LP: #1086801, #1086875) * Applying Xen Security fixes (LP: #1086801, #1086875) - VCPU/timers: Prevent overflow in calculations, leading to DoS vulnerability CVE-2012-4535 - x86/physdev: Range check pirq parameter from guests CVE-2012-4536 - x86/physmap: Prevent incorrect updates of m2p mappings CVE-2012-4537 - xen/mm/shadow: check toplevel pagetables are present before unhooking them CVE-2012-4538 - compat/gnttab: Prevent infinite loop in compat code CVE-2012-4539 - libxc: builder: limit maximum size of kernel/ramdisk CVE-2012-4544 - gnttab: fix releasing of memory upon switches between versions CVE-2012-5510 - hvm: Limit the size of large HVM op batches CVE-2012-5511 - x86/HVM: range check xen_hvm_set_mem_access.hvmmem_access before use CVE-2012-5512 - xen: add missing guest address range checks to XENMEM_exchange handlers CVE-2012-5513 - xen: fix error handling of guest_physmap_mark_populate_on_demand() CVE-2012-5514 - memop: limit guest specified extent order CVE-2012-5515	Stefan Bader	4.1.2-2ubuntu2.3	11 years ago
29	* x86-64: detect processors subject to AMD erratum #121 and ... * x86-64: detect processors subject to AMD erratum #121 and refuse to boot CVE-2006-0744 * x86_64: Do not execute sysret with a non-canonical return address CVE-2012-0218 * x86-64: fix #GP generation in assembly code CVE-2012-0217	Stefan Bader	4.1.2-2ubuntu2.1	11 years ago
28	etherboot: Change the config back to include the 8086100e.ro... etherboot: Change the config back to include the 8086100e.rom (LP: #948333)	Stefan Bader	4.1.2-2ubuntu2	12 years ago
27	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - libxenstore3.0: Conflict and replaces libxen3. - libxen-dev: Conflict and replaces libxen3-dev. - xenstore-utils: Conflict and replaces libxen3. - xen-utils-4.1: Conflict and replaces libxen3, python-xen-3.3, and xen-utils-4.1. - Make sure the LDFLAGS value passed is suitable for use by ld rather than gcc. - Dropped: - debian/patches/upstream-23044:d4ca456c0c25 - debian/patches/upstream-23104:1976adbf2b80 - debian/patches/upstream-changeset-23146.patch - debian/patches/upstream-changeset-23147.patch - debian/patches/xen-pirq-resubmit-irq.patch	Chuck Short	4.1.2-2ubuntu1	12 years ago
26	* Merge from Debian testing. Remaining changes: * Merge from Debian testing. Remaining changes: - libxenstore3.0: Conflict and replaces libxen3. - libxen-dev: Conflict and replaces libxen3-dev. - xenstore-utils: Conflict and replaces libxen3. - xen-utils-4.1: Conflict and replaces libxen3, python-xen-3.3, and xen-utils-4.1. - Make sure the LDFLAGS value passed is suitable for use by ld rather than gcc. - debian/patches/upstream-changeset-23146.patch, debian/patches/upstream-changeset-23147.patch: Fix booting with hvm domU. (LP: #832207) - debian/patches/xen-pirq-resubmit-irq.patch: Retrigger pirq events when asserted while processing. (LP: #854829)	Chuck Short	4.1.1-3ubuntu1	12 years ago
25	debian/patches/xen-pirq-resubmit-irq.patch: Retrigger debian/patches/xen-pirq-resubmit-irq.patch: Retrigger pirq events when asserted while processing. Thanks to Stefan Bader (LP: #854829)	Chuck Short	4.1.1-2ubuntu4.1	12 years ago
24	Rebuild to drop build records on armel and powerpc. LP: #823... Rebuild to drop build records on armel and powerpc. LP: #823714.	Matthias Klose	4.1.1-2ubuntu4	12 years ago
23	Rebuild to drop build records on armel and powerpc. LP: #823... Rebuild to drop build records on armel and powerpc. LP: #823714.	Matthias Klose	4.1.1-2ubuntu3	12 years ago
22	* Clean up patches. * Clean up patches. * debian/patches/upstream-changeset-23146.patch, debian/patches/upstream-changeset-23147.patch: Fix booting with hvm domU. (LP: #832207)	Chuck Short	4.1.1-2ubuntu2	12 years ago
21	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: - libxenstore3.0: Conflict and replaces libxen3. - libxen-dev: Conflict and replaces libxen3-dev. - xenstore-utils: Conflict and replaces libxen3. - xen-utils-4.1: Conflict and replaces libxen3, python-xen-3.3, and xen-utils-4.1. + Make sure the LDFLAGS value passed is suitable for use by ld rather than gcc.	Chuck Short	4.1.1-2ubuntu1	12 years ago
20	* Merge from debian unstable. Remaining changes: * Merge from debian unstable. Remaining changes: + Xen 3.3 -> Xen 4.1 migration: - libxenstore3.0: Conflict and replaces libxen3. - libxen-dev: Conflict and replaces libxen3-dev. - xenstore-utils: Conflict and replaces libxen3. - xen-utils-4.1: Conflict and replaces libxen3, python-xen-3.3, and xen-utils-4.1. + Make sure the LDFLAGS value passed is suitable for use by ld rather than gcc. + Dropped upstream patches: - debian/patches/disable-unused-but-not-set-error.patch: Applied upstream. - debian/patches/xc-dom-restore-set-but-not-used.patch: Applied upstream. - debian/patches/xc-dom-restore-set-but-not-used.patch: Applied upstream.	Chuck Short	4.1.1-1ubuntu1	12 years ago
19	Fix xen 3.3 -> xen 4.1 migration. Fix xen 3.3 -> xen 4.1 migration.	Chuck Short	4.1.0-3ubuntu4	12 years ago
18	debian/control: Use python2.7 as a build dependency. debian/control: Use python2.7 as a build dependency.	Chuck Short	4.1.0-3ubuntu3	12 years ago
17	* debian/control: * debian/control: + Move to python 2.7. + Xen 3.3 -> Xen4.1 migration: - libxenstore3.0: Conflict and replaces libxen3. - libxen-dev: Conflict and replaces libxen3-dev. - xenstore-tuils: Conflict and replaces libxen3 - xen-utils-4.1: Confflict and replaces libxen3, python-xen3.3, and xen-utils-3.3	Chuck Short	4.1.0-3ubuntu2	12 years ago

Older »