preparations for 4.9.1 and 4.7.4

preparations for 4.9.1 and 4.7.4

[Jan Beulich]

All,

with the goal of releasing around the end of the month, please point
out backport candidates you find missing from the respective staging
branches, but which you consider relevant. Note that commits

1c2ea5ee05 x86/hvm/dmop: fix EFAULT condition
4e383df865 x86/PV: fix/generalize guest nul selector handling

are already on my list.

Jan


_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Andrew Cooper]

On 06/10/17 14:33, Jan Beulich wrote:
> All,
>
> with the goal of releasing around the end of the month, please point
> out backport candidates you find missing from the respective staging
> branches, but which you consider relevant. Note that commits
>
> 1c2ea5ee05 x86/hvm/dmop: fix EFAULT condition
> 4e383df865 x86/PV: fix/generalize guest nul selector handling

dbc4b6e13a5 x86/msr: Correct the definition of MSR_IA32_APICBASE_BASE
3164f2f9db1 x86/svm: Fix a livelock when trying to run shadowed unpaged
guests

(I will eventually get my XTF pagewalk test working on all hardware!)

~Andrew

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Lars Kurth]

I will try and run the XSA scripts this week and get back to you
Lars

On 06/10/2017, 14:33, "Jan Beulich" <JBeulich@suse.com> wrote:

    All,
    
    with the goal of releasing around the end of the month, please point
    out backport candidates you find missing from the respective staging
    branches, but which you consider relevant. Note that commits
    
    1c2ea5ee05 x86/hvm/dmop: fix EFAULT condition
    4e383df865 x86/PV: fix/generalize guest nul selector handling
    
    are already on my list.
    
    Jan
    
    

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Lars Kurth]

[-- Attachment #1: Type: text/plain, Size: 2701 bytes --]

Hi all,

for 4.9.1 the XSA status is

XSA 226 : Some patches not applied => check
There is an extra chunk in the tree: see xsa226.png

XSA 227 : All patches found (no need to check)
XSA 228 : All patches found (no need to check)

XSA 229 : No patch found => check
Linux only => no issue

XSA 230 : All patches found (no need to check)
XSA 231 : All patches found (no need to check)
XSA 232 : All patches found (no need to check)
XSA 233 : All patches found (no need to check)
XSA 234 : All patches found (no need to check)
XSA 235 : All patches found (no need to check)

XSA 237 : No patch found => check
XSA 238 : No patch found => check
XSA 239 : No patch found => check
XSA 240 : No patch found => check
XSA 241 : No patch found => check
XSA 242 : No patch found => check
XSA 243 : No patch found => check
XSA 244 : No patch found => check
These have only been released today and have not yet been applied

XSA 245 : Some patches not applied => check
This is a minor change to a comment at check-in => no issue

For 4.7.4 the XSA status is

XSA 226 : Some patches not applied => check
There is an extra chunk in the tree: see xsa226.png

XSA 227 : All patches found (no need to check)
XSA 228 : All patches found (no need to check)

XSA 229 : No patch found => check
XSA 229 : No patch found => check
Linux only => no issue

XSA 230 : All patches found (no need to check)
XSA 231 : All patches found (no need to check)
XSA 232 : All patches found (no need to check)
XSA 233 : All patches found (no need to check)

XSA 234 : No patch found => check
ISSUE: This is genuinely missing (aka xsa234-4.8.patch)

XSA 235 : All patches found (no need to check)

XSA 237 : No patch found => check
XSA 238 : No patch found => check
XSA 239 : No patch found => check
XSA 240 : No patch found => check
XSA 241 : No patch found => check
XSA 242 : No patch found => check
XSA 243 : No patch found => check
XSA 244 : No patch found => check
These have only been released today and have not yet been applied

XSA 245 : Some patches not applied => check
This is missing xsa245/0002-xen-arm-Correctly-report-the-memory-region-in-the-du.patch

Best Regards
Lars

On 06/10/2017, 14:33, "Jan Beulich" <JBeulich@suse.com> wrote:

    All,
    
    with the goal of releasing around the end of the month, please point
    out backport candidates you find missing from the respective staging
    branches, but which you consider relevant. Note that commits
    
    1c2ea5ee05 x86/hvm/dmop: fix EFAULT condition
    4e383df865 x86/PV: fix/generalize guest nul selector handling
    
    are already on my list.
    
    Jan
    
    


[-- Attachment #2: xsa226.png --]
[-- Type: image/png, Size: 104768 bytes --]

[-- Attachment #3: Type: text/plain, Size: 127 bytes --]

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Christopher Clark]

On Fri, Oct 6, 2017 at 6:54 AM, Andrew Cooper <andrew.cooper3@citrix.com> wrote:
> On 06/10/17 14:33, Jan Beulich wrote:
>> All,
>>
>> with the goal of releasing around the end of the month, please point
>> out backport candidates you find missing from the respective staging
>> branches, but which you consider relevant. Note that commits
>>
>> 1c2ea5ee05 x86/hvm/dmop: fix EFAULT condition
>> 4e383df865 x86/PV: fix/generalize guest nul selector handling
>
> dbc4b6e13a5 x86/msr: Correct the definition of MSR_IA32_APICBASE_BASE
> 3164f2f9db1 x86/svm: Fix a livelock when trying to run shadowed unpaged
> guests

88bfbf90e3 tools/libxc/xc_dom_arm: add missing variable initialization

thanks

Christopher

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Jan Beulich]

>>> On 12.10.17 at 19:08, <lars.kurth@citrix.com> wrote:
> for 4.9.1 the XSA status is
> 
> XSA 226 : Some patches not applied => check
> There is an extra chunk in the tree: see xsa226.png

I see there are outdated patches for this XSA still in xsa.git,
which I've now removed.

I can't seem to be able to confirm the difference your attached
image indicates - both xen.git and xsa.git have that change. I
could understand the tool spotting a difference in there being a
seemingly extra hunk changing xen/common/compat/grant_table.c
in xsa.git - this change was applied incrementally to the various
xen.git branches, as the issue was found (by osstest iirc) only
after the original patches had already gone in.

> XSA 237 : No patch found => check
> XSA 238 : No patch found => check
> XSA 239 : No patch found => check
> XSA 240 : No patch found => check
> XSA 241 : No patch found => check
> XSA 242 : No patch found => check
> XSA 243 : No patch found => check
> XSA 244 : No patch found => check
> These have only been released today and have not yet been applied

By the time you had sent the message, these had been applied for
several hours. But of course I don't know when you ran the script.

> For 4.7.4 the XSA status is
> 
> XSA 226 : Some patches not applied => check
> There is an extra chunk in the tree: see xsa226.png

Same as for 4.9.

> XSA 234 : No patch found => check
> ISSUE: This is genuinely missing (aka xsa234-4.8.patch)

Commit c7783d9c26fc191862d9883da22387340b1fab18.

> XSA 245 : Some patches not applied => check
> This is missing 
> xsa245/0002-xen-arm-Correctly-report-the-memory-region-in-the-du.patch

Commit d6aad635097d901b96df650e87f04687c9fb7bd2.

Jan


_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel

Re: preparations for 4.9.1 and 4.7.4

[Lars Kurth]

Jan,

I had sent the mail an hour after I ran the scripts (had a meeting in between). 

I will look into the issue with XSA 226
On commits c7783d9c26fc191862d9883da22387340b1fab18 & d6aad635097d901b96df650e87f04687c9fb7bd2: I have to look into why these didn’t get picked up.
Maybe there is a bug in the tool

Lars

On 13/10/2017, 08:13, "Jan Beulich" <JBeulich@suse.com> wrote:

    >>> On 12.10.17 at 19:08, <lars.kurth@citrix.com> wrote:
    > for 4.9.1 the XSA status is
    > 
    > XSA 226 : Some patches not applied => check
    > There is an extra chunk in the tree: see xsa226.png
    
    I see there are outdated patches for this XSA still in xsa.git,
    which I've now removed.
    
    I can't seem to be able to confirm the difference your attached
    image indicates - both xen.git and xsa.git have that change. I
    could understand the tool spotting a difference in there being a
    seemingly extra hunk changing xen/common/compat/grant_table.c
    in xsa.git - this change was applied incrementally to the various
    xen.git branches, as the issue was found (by osstest iirc) only
    after the original patches had already gone in.
    
    > XSA 237 : No patch found => check
    > XSA 238 : No patch found => check
    > XSA 239 : No patch found => check
    > XSA 240 : No patch found => check
    > XSA 241 : No patch found => check
    > XSA 242 : No patch found => check
    > XSA 243 : No patch found => check
    > XSA 244 : No patch found => check
    > These have only been released today and have not yet been applied
    
    By the time you had sent the message, these had been applied for
    several hours. But of course I don't know when you ran the script.
    
    > For 4.7.4 the XSA status is
    > 
    > XSA 226 : Some patches not applied => check
    > There is an extra chunk in the tree: see xsa226.png
    
    Same as for 4.9.
    
    > XSA 234 : No patch found => check
    > ISSUE: This is genuinely missing (aka xsa234-4.8.patch)
    
    Commit c7783d9c26fc191862d9883da22387340b1fab18.
    
    > XSA 245 : Some patches not applied => check
    > This is missing 
    > xsa245/0002-xen-arm-Correctly-report-the-memory-region-in-the-du.patch
    
    Commit d6aad635097d901b96df650e87f04687c9fb7bd2.
    
    Jan
    
    

_______________________________________________
Xen-devel mailing list
Xen-devel@lists.xen.org
https://lists.xen.org/xen-devel