xen 4.4.2-0ubuntu0.14.04.11 source package in Ubuntu

Changelog

xen (4.4.2-0ubuntu0.14.04.11) trusty-security; urgency=low

  * Applying Xen Security Advisories:
    - XSA-206
      * xenstored: apply a write transaction rate limit
      * xenstored: Log when the write transaction rate limit bites
      * oxenstored: exempt dom0 from domU node quotas
      * oxenstored: perform a 3-way merge of the quota after a transaction
      * oxenstored: catch the error when a connection is already deleted
      * oxenstored: use hash table to store socket connections
      * oxenstored: enable domain connection indexing based on eventchn port
      * oxenstored: only process domain connections that notify us by events
      * oxenstored: add a safe net mechanism for existing ill-behaved clients
      * oxenstored: refactor putting response on wire
      * oxenstored: remove some unused parameters
      * oxenstored: refactor request processing
      * oxenstored: keep track of each transaction's operations
      * oxenstored: move functions that process simple operations
      * oxenstored: replay transaction upon conflict
      * oxenstored: log request and response during transaction replay
      * oxenstored: allow compilation prior to OCaml 3.12.0
      * oxenstored: comments explaining some variables
      * oxenstored: handling of domain conflict-credit
      * oxenstored: ignore domains with no conflict-credit
      * oxenstored: add transaction info relevant to history-tracking
      * oxenstored: support commit history tracking
      * oxenstored: only record operations with side-effects in history
      * oxenstored: discard old commit-history on txn end
      * oxenstored: track commit history
      * oxenstored: blame the connection that caused a transaction conflict
      * oxenstored: allow self-conflicts
      * oxenstored: do not commit read-only transactions
      * oxenstored: don't wake to issue no conflict-credit
      * oxenstored transaction conflicts: improve logging
      * oxenstored: trim history in the frequent_ops function
    - XSA-207
      * IOMMU: always call teardown callback
    - CVE-2017-2615 / XSA-208
      * CVE-2014-8106: cirrus: fix blit region check
      * cirrus: fix oob access issue (CVE-2017-2615)
    - CVE-2017-2620 / XSA-209
      * cirrus: add blit_is_unsafe call to cirrus_bitblt_cputovideo
    - CVE-2016-9603 / XSA-211
      * cirrus/vnc: zap drop bitblit support from console code.
    - CVE-2017-7228 / XSA-212
      * memory: properly check guest memory ranges in XENMEM_exchange handling
    - XSA-213
      * multicall: deal with early exit conditions
    - XSA-214
      * x86: discard type information when stealing pages
    - XSA-215
      * x86: correct create_bounce_frame

 -- Stefan Bader <email address hidden>  Tue, 09 May 2017 10:13:50 +0200

Upload details

Uploaded by:
Stefan Bader
Sponsored by:
Marc Deslauriers
Uploaded to:
Trusty
Original maintainer:
Ubuntu Developers
Architectures:
amd64 i386 armhf arm64 all
Section:
kernel
Urgency:
Low Urgency

See full publishing history Publishing

Series Pocket Published Component Section

Downloads

File Size SHA-256 Checksum
xen_4.4.2.orig-qemu.tar.xz 2.5 MiB e65d7a6fbd25bd7844c03e94af898e99a3edfe8f3e58511e856f32e9a6701140
xen_4.4.2.orig.tar.xz 3.6 MiB a13efa2acfacdc6a12b472c06925fc33dc2693bd8791bde3b9e1e42a027245a1
xen_4.4.2-0ubuntu0.14.04.11.debian.tar.gz 246.0 KiB edabb7f75df5a62da4f3b02ad6f090bb4b6224034ea71bf6c03a4bf689cfc103
xen_4.4.2-0ubuntu0.14.04.11.dsc 3.4 KiB 7ee397f232f468c5b69ccb101740371ba89f5a6e7bfd0e693732d77eb604a00c

View changes file

Binary packages built by this source

libxen-4.4: Public libs for Xen

 This package contains the shared libraries for Xen.

libxen-4.4-dbgsym: debug symbols for package libxen-4.4

 This package contains the shared libraries for Xen.

libxen-dev: Public headers and libs for Xen

 This package contains the public headers and static libraries for Xen.

libxen-ocaml: OCaml libraries for controlling Xen

 This package contains the runtime libraries required for the ocaml
 bindings to the Xen control libraries.

libxen-ocaml-dbgsym: debug symbols for package libxen-ocaml

 This package contains the runtime libraries required for the ocaml
 bindings to the Xen control libraries.

libxen-ocaml-dev: OCaml libraries for controlling Xen (devel package)

 This package contains the ocaml findlib packages for compiling
 applications that are designed to control the Xen hypervisor.

libxenstore3.0: Xenstore communications library for Xen

 This package contains the public libxenstore.

libxenstore3.0-dbgsym: debug symbols for package libxenstore3.0

 This package contains the public libxenstore.

xen-hypervisor-4.1-amd64: Transitional package for upgrade
xen-hypervisor-4.3-amd64: Transitional package for upgrade
xen-hypervisor-4.3-armhf: Transitional package for upgrade
xen-hypervisor-4.4-amd64: Xen Hypervisor on AMD64

 The hypervisor is the "core" for XEN itself. It gets booted by the boot
 loader and controls cpu and memory, sharing them between your
 administrative domain (Domain 0) and the virtual guest systems.
 .
 In order to boot a XEN system along with this package you also need a
 kernel specifically crafted to work as the Domain 0, mediating hardware
 access for XEN itself.

xen-hypervisor-4.4-arm64: Xen Hypervisor on Arm64

 The hypervisor is the "core" for XEN itself. It gets booted by the boot
 loader and controls cpu and memory, sharing them between your
 administrative domain (Domain 0) and the virtual guest systems.
 .
 In order to boot a XEN system along with this package you also need a
 kernel specifically crafted to work as the Domain 0, mediating hardware
 access for XEN itself.

xen-hypervisor-4.4-armhf: Xen Hypervisor on Arm v7/v8

 The hypervisor is the "core" for XEN itself. It gets booted by the boot
 loader and controls cpu and memory, sharing them between your
 administrative domain (Domain 0) and the virtual guest systems.
 .
 In order to boot a XEN system along with this package you also need a
 kernel specifically crafted to work as the Domain 0, mediating hardware
 access for XEN itself.

xen-system-amd64: Xen System on AMD64 (meta-package)

 This package depends on the latest Xen hypervisor for use on AMD64 and the
 Xen utils.

xen-system-arm64: Xen System on Arm64 (meta-package)

 This package depends on the latest Xen hypervisor for use on armhf and the
 Xen utils.

xen-system-armhf: Xen System on Arm v7/v8 (meta-package)

 This package depends on the latest Xen hypervisor for use on armhf and the
 Xen utils.

xen-utils-4.4: XEN administrative tools

 The userspace tools to manage a system virtualized through the XEN virtual
 machine monitor.

xen-utils-4.4-dbgsym: debug symbols for package xen-utils-4.4

 The userspace tools to manage a system virtualized through the XEN virtual
 machine monitor.

xen-utils-common: Xen administrative tools - common files

 The userspace tools to manage a system virtualized through the Xen virtual
 machine monitor.

xenstore-utils: Xenstore utilities for Xen

 This package contains the Xenstore utilities.

xenstore-utils-dbgsym: debug symbols for package xenstore-utils

 This package contains the Xenstore utilities.