ubuntu/+source/xen:applied/ubuntu/yakkety-security

Last commit made on 2017-07-18
Get this branch:
git clone -b applied/ubuntu/yakkety-security https://git.launchpad.net/ubuntu/+source/xen
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
applied/ubuntu/yakkety-security
Repository:
lp:ubuntu/+source/xen

Recent commits

d5aba6d... by Stefan Bader on 2017-07-03

Import patches-applied version 4.7.2-0ubuntu1.3 to applied/ubuntu/yakkety-security

Imported using git-ubuntu import.

Changelog parent: f5c37a764c0b46ecc017c684e05d9011d276f42c
Unapplied parent: bd13e44d0cdfc4dfcf5fe8a770b084b60302bb5c

New changelog entries:
  * Applying Xen Security Advisories:
    - XSA-217
      - x86/mm: disallow page stealing from HVM domains
    - XSA-218
      - IOMMU: handle IOMMU mapping and unmapping failures
      - gnttab: fix unmap pin accounting race
      - gnttab: Avoid potential double-put of maptrack entry
      - gnttab: correct maptrack table accesses
    - XSA-219
      - 86/shadow: Hold references for the duration of emulated writes
    - XSA-220
      - x86: avoid leaking PKRU and BND* between vCPU-s
    - XSA-221
      - evtchn: avoid NULL derefs
    - XSA-222
      - xen/memory: Fix return value handing of guest_remove_page()
      - guest_physmap_remove_page() needs its return value checked
    - XSA-223
      - arm: vgic: Don't update the LR when the IRQ is not enabled
    - XSA-224
      - gnttab: Fix handling of dev_bus_addr during unmap
      - gnttab: never create host mapping unless asked to
      - gnttab: correct logic to get page references during map requests
      - gnttab: __gnttab_unmap_common_complete() is all-or-nothing
    - XSA-225
      - xen/arm: vgic: Sanitize target mask used to send SGI

bd13e44... by Stefan Bader on 2017-07-03

[PATCH] xen/arm: vgic: Sanitize target mask used to send SGI

Gbp-Pq: xsa225.patch.

ed7bedd... by Stefan Bader on 2017-07-03

[PATCH 4/4] gnttab: __gnttab_unmap_common_complete() is

Gbp-Pq: xsa224-4.7-0004-gnttab-__gnttab_unmap_common_complete-is-all-or-noth.patch.

743747d... by Stefan Bader on 2017-07-03

[PATCH 3/4] gnttab: correct logic to get page references during map

Gbp-Pq: xsa224-4.7-0003-gnttab-correct-logic-to-get-page-references-during-m.patch.

436244b... by Stefan Bader on 2017-07-03

[PATCH 2/4] gnttab: never create host mapping unless asked to

Gbp-Pq: xsa224-4.7-0002-gnttab-never-create-host-mapping-unless-asked-to.patch.

87d276b... by Stefan Bader on 2017-07-03

[PATCH 1/4] gnttab: Fix handling of dev_bus_addr during unmap

Gbp-Pq: xsa224-4.7-0001-gnttab-Fix-handling-of-dev_bus_addr-during-unmap.patch.

7ee7e89... by Stefan Bader on 2017-07-03

arm: vgic: Don't update the LR when the IRQ is not enabled

Gbp-Pq: xsa223.patch.

b52fce7... by Stefan Bader on 2017-07-03

guest_physmap_remove_page() needs its return value checked

Gbp-Pq: xsa222-2-4.7.patch.

5868822... by Stefan Bader on 2017-07-03

xen/memory: Fix return value handing of guest_remove_page()

Gbp-Pq: xsa222-1-4.7.patch.

c14620d... by Stefan Bader on 2017-07-03

evtchn: avoid NULL derefs

Gbp-Pq: xsa221.patch.