All of lore.kernel.org
 help / color / mirror / Atom feed
From: Peter Korsgaard <peter@korsgaard.com>
To: buildroot@buildroot.org
Cc: Alistair Francis <alistair@alistair23.me>,
	Matt Weber <matthew.weber@collins.com>
Subject: [Buildroot] [PATCH] package/xen: security bump to version 4.14.4
Date: Sat,  5 Feb 2022 14:51:30 +0100	[thread overview]
Message-ID: <20220205135132.3007-1-peter@korsgaard.com> (raw)

Includes a number of bugfixes and the security fixes up to xsa-395:
https://xenproject.org/downloads/xen-project-archives/xen-project-4-14-series/xen-project-4-14-4/

Drop the now upstream xsa38* patches.

Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
 package/xen/xen.hash | 11 +----------
 package/xen/xen.mk   | 19 +------------------
 2 files changed, 2 insertions(+), 28 deletions(-)

diff --git a/package/xen/xen.hash b/package/xen/xen.hash
index 10a778053a..a81d05e3f7 100644
--- a/package/xen/xen.hash
+++ b/package/xen/xen.hash
@@ -1,12 +1,3 @@
 # Locally computed
-sha256  a3dad76a772393a1875e8f44a6059a95fea4bde40f97b800966969ac6f3a498d  xen-4.14.3.tar.gz
+sha256  e76d56dfcdabf5d80aa06819f44472de49526a518dbb483eb08e7ff9aec2c669  xen-4.14.4.tar.gz
 sha256  ecca9538e9d3f7e3c2bff827502f4495e2ef9e22c451298696ea08886b176c2c  COPYING
-# https://xenbits.xenproject.org/xsa/advisory-385.html
-sha256  831e86c3adfec532b1a48a0b967b7c58c37db3733aee8d78216eb9d535b34f12  xsa385-4.15.patch
-# https://xenbits.xenproject.org/xsa/advisory-386.html
-sha256  f2f83c825e249bba9454437b48bbd8307fe7a224f56484388a67af124dfd279b  xsa386.patch
-# https://xenbits.xenproject.org/xsa/advisory-388.html
-sha256  6917267482101a3f8f1d13905e14994344a0af81370c7a2b92275fb176b321a0  xsa388-4.14-1.patch
-sha256  d5886e046c69f34f98f7e1fc6ffcc36d92f8fc79242b9dc88412c39aa79b4ac3  xsa388-4.14-2.patch
-# https://xenbits.xenproject.org/xsa/advisory-389.html
-sha256  b243284679b32ab8c817a2e41562d8694d9781fa8096c268bb41b0cd91684baa  xsa389-4.14.patch
diff --git a/package/xen/xen.mk b/package/xen/xen.mk
index cfc166dc4c..03341d4275 100644
--- a/package/xen/xen.mk
+++ b/package/xen/xen.mk
@@ -4,30 +4,13 @@
 #
 ################################################################################
 
-XEN_VERSION = 4.14.3
+XEN_VERSION = 4.14.4
 XEN_SITE = https://downloads.xenproject.org/release/xen/$(XEN_VERSION)
 XEN_LICENSE = GPL-2.0
 XEN_LICENSE_FILES = COPYING
 XEN_CPE_ID_VENDOR = xen
 XEN_CPE_ID_PREFIX = cpe:2.3:o
 XEN_DEPENDENCIES = host-acpica host-python3
-XEN_PATCH = \
-	https://xenbits.xenproject.org/xsa/xsa385-4.15.patch \
-	https://xenbits.xenproject.org/xsa/xsa386.patch \
-	https://xenbits.xenproject.org/xsa/xsa388-4.14-1.patch \
-	https://xenbits.xenproject.org/xsa/xsa388-4.14-2.patch \
-	https://xenbits.xenproject.org/xsa/xsa389-4.14.patch
-
-# xsa385-4.15.patch
-XEN_IGNORE_CVES += CVE-2021-28706
-# xsa386.patch
-XEN_IGNORE_CVES += CVE-2021-28702
-# xsa388-4.14-1.patch
-XEN_IGNORE_CVES += CVE-2021-28704 CVE-2021-28707
-# xsa388-4.14-2.patch
-XEN_IGNORE_CVES += CVE-2021-28708
-# xsa389-4.14.patch
-XEN_IGNORE_CVES += CVE-2021-28705 CVE-2021-28709
 
 # Calculate XEN_ARCH
 ifeq ($(ARCH),aarch64)
-- 
2.20.1

_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot

             reply	other threads:[~2022-02-05 14:00 UTC|newest]

Thread overview: 3+ messages / expand[flat|nested]  mbox.gz  Atom feed  top
2022-02-05 13:51 Peter Korsgaard [this message]
2022-02-06  9:26 ` [Buildroot] [PATCH] package/xen: security bump to version 4.14.4 Thomas Petazzoni via buildroot
2022-02-16 22:23 ` Peter Korsgaard

Reply instructions:

You may reply publicly to this message via plain-text email
using any one of the following methods:

* Save the following mbox file, import it into your mail client,
  and reply-to-all from there: mbox

  Avoid top-posting and favor interleaved quoting:
  https://en.wikipedia.org/wiki/Posting_style#Interleaved_style

* Reply using the --to, --cc, and --in-reply-to
  switches of git-send-email(1):

  git send-email \
    --in-reply-to=20220205135132.3007-1-peter@korsgaard.com \
    --to=peter@korsgaard.com \
    --cc=alistair@alistair23.me \
    --cc=buildroot@buildroot.org \
    --cc=matthew.weber@collins.com \
    /path/to/YOUR_REPLY

  https://kernel.org/pub/software/scm/git/docs/git-send-email.html

* If your mail client supports setting the In-Reply-To header
  via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line before the message body. 
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.