* [Buildroot] [PATCH] package/xen: security bump to version 4.14.4
@ 2022-02-05 13:51 Peter Korsgaard
2022-02-06 9:26 ` Thomas Petazzoni via buildroot
2022-02-16 22:23 ` Peter Korsgaard
0 siblings, 2 replies; 3+ messages in thread
From: Peter Korsgaard @ 2022-02-05 13:51 UTC (permalink / raw)
To: buildroot; +Cc: Alistair Francis, Matt Weber
Includes a number of bugfixes and the security fixes up to xsa-395:
https://xenproject.org/downloads/xen-project-archives/xen-project-4-14-series/xen-project-4-14-4/
Drop the now upstream xsa38* patches.
Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
---
package/xen/xen.hash | 11 +----------
package/xen/xen.mk | 19 +------------------
2 files changed, 2 insertions(+), 28 deletions(-)
diff --git a/package/xen/xen.hash b/package/xen/xen.hash
index 10a778053a..a81d05e3f7 100644
--- a/package/xen/xen.hash
+++ b/package/xen/xen.hash
@@ -1,12 +1,3 @@
# Locally computed
-sha256 a3dad76a772393a1875e8f44a6059a95fea4bde40f97b800966969ac6f3a498d xen-4.14.3.tar.gz
+sha256 e76d56dfcdabf5d80aa06819f44472de49526a518dbb483eb08e7ff9aec2c669 xen-4.14.4.tar.gz
sha256 ecca9538e9d3f7e3c2bff827502f4495e2ef9e22c451298696ea08886b176c2c COPYING
-# https://xenbits.xenproject.org/xsa/advisory-385.html
-sha256 831e86c3adfec532b1a48a0b967b7c58c37db3733aee8d78216eb9d535b34f12 xsa385-4.15.patch
-# https://xenbits.xenproject.org/xsa/advisory-386.html
-sha256 f2f83c825e249bba9454437b48bbd8307fe7a224f56484388a67af124dfd279b xsa386.patch
-# https://xenbits.xenproject.org/xsa/advisory-388.html
-sha256 6917267482101a3f8f1d13905e14994344a0af81370c7a2b92275fb176b321a0 xsa388-4.14-1.patch
-sha256 d5886e046c69f34f98f7e1fc6ffcc36d92f8fc79242b9dc88412c39aa79b4ac3 xsa388-4.14-2.patch
-# https://xenbits.xenproject.org/xsa/advisory-389.html
-sha256 b243284679b32ab8c817a2e41562d8694d9781fa8096c268bb41b0cd91684baa xsa389-4.14.patch
diff --git a/package/xen/xen.mk b/package/xen/xen.mk
index cfc166dc4c..03341d4275 100644
--- a/package/xen/xen.mk
+++ b/package/xen/xen.mk
@@ -4,30 +4,13 @@
#
################################################################################
-XEN_VERSION = 4.14.3
+XEN_VERSION = 4.14.4
XEN_SITE = https://downloads.xenproject.org/release/xen/$(XEN_VERSION)
XEN_LICENSE = GPL-2.0
XEN_LICENSE_FILES = COPYING
XEN_CPE_ID_VENDOR = xen
XEN_CPE_ID_PREFIX = cpe:2.3:o
XEN_DEPENDENCIES = host-acpica host-python3
-XEN_PATCH = \
- https://xenbits.xenproject.org/xsa/xsa385-4.15.patch \
- https://xenbits.xenproject.org/xsa/xsa386.patch \
- https://xenbits.xenproject.org/xsa/xsa388-4.14-1.patch \
- https://xenbits.xenproject.org/xsa/xsa388-4.14-2.patch \
- https://xenbits.xenproject.org/xsa/xsa389-4.14.patch
-
-# xsa385-4.15.patch
-XEN_IGNORE_CVES += CVE-2021-28706
-# xsa386.patch
-XEN_IGNORE_CVES += CVE-2021-28702
-# xsa388-4.14-1.patch
-XEN_IGNORE_CVES += CVE-2021-28704 CVE-2021-28707
-# xsa388-4.14-2.patch
-XEN_IGNORE_CVES += CVE-2021-28708
-# xsa389-4.14.patch
-XEN_IGNORE_CVES += CVE-2021-28705 CVE-2021-28709
# Calculate XEN_ARCH
ifeq ($(ARCH),aarch64)
--
2.20.1
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply related [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH] package/xen: security bump to version 4.14.4
2022-02-05 13:51 [Buildroot] [PATCH] package/xen: security bump to version 4.14.4 Peter Korsgaard
@ 2022-02-06 9:26 ` Thomas Petazzoni via buildroot
2022-02-16 22:23 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Thomas Petazzoni via buildroot @ 2022-02-06 9:26 UTC (permalink / raw)
To: Peter Korsgaard; +Cc: Alistair Francis, Matt Weber, buildroot
On Sat, 5 Feb 2022 14:51:30 +0100
Peter Korsgaard <peter@korsgaard.com> wrote:
> Includes a number of bugfixes and the security fixes up to xsa-395:
> https://xenproject.org/downloads/xen-project-archives/xen-project-4-14-series/xen-project-4-14-4/
>
> Drop the now upstream xsa38* patches.
>
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
> ---
> package/xen/xen.hash | 11 +----------
> package/xen/xen.mk | 19 +------------------
> 2 files changed, 2 insertions(+), 28 deletions(-)
Applied to master, thanks.
Thomas
--
Thomas Petazzoni, CTO, Bootlin
Embedded Linux and Kernel engineering
https://bootlin.com
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
* Re: [Buildroot] [PATCH] package/xen: security bump to version 4.14.4
2022-02-05 13:51 [Buildroot] [PATCH] package/xen: security bump to version 4.14.4 Peter Korsgaard
2022-02-06 9:26 ` Thomas Petazzoni via buildroot
@ 2022-02-16 22:23 ` Peter Korsgaard
1 sibling, 0 replies; 3+ messages in thread
From: Peter Korsgaard @ 2022-02-16 22:23 UTC (permalink / raw)
To: buildroot; +Cc: Alistair Francis, Matt Weber
>>>>> "Peter" == Peter Korsgaard <peter@korsgaard.com> writes:
> Includes a number of bugfixes and the security fixes up to xsa-395:
> https://xenproject.org/downloads/xen-project-archives/xen-project-4-14-series/xen-project-4-14-4/
> Drop the now upstream xsa38* patches.
> Signed-off-by: Peter Korsgaard <peter@korsgaard.com>
Committed to 2021.02.x and 2021.11.x, thanks.
--
Bye, Peter Korsgaard
_______________________________________________
buildroot mailing list
buildroot@buildroot.org
https://lists.buildroot.org/mailman/listinfo/buildroot
^ permalink raw reply [flat|nested] 3+ messages in thread
end of thread, other threads:[~2022-02-16 22:23 UTC | newest]
Thread overview: 3+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2022-02-05 13:51 [Buildroot] [PATCH] package/xen: security bump to version 4.14.4 Peter Korsgaard
2022-02-06 9:26 ` Thomas Petazzoni via buildroot
2022-02-16 22:23 ` Peter Korsgaard
This is a public inbox, see mirroring instructions
for how to clone and mirror all data and code used for this inbox