- xen (4.14.0+88-g1d1d1f5391-2+rpi1) bullseye-staging; urgency=medium
++xen (4.14.1+11-gb0b734a8b3-1+rpi1) bullseye-staging; urgency=medium
+
+ [changes brought forward from 4.4.1-9+rpi1 by Peter Michael Green <plugwash@raspbian.org> at Sun, 30 Aug 2015 15:43:16 +0000]
+ * replace "dmb" with "mcr p15, #0, r0, c7, c10, #5" for armv6
+
+ [changes introduced in 4.6.0-1+rpi1 by Peter Michael Green]
+ * Use kernel 3.18 for now as I haven't dealt with 4.x yet.
+
+ [changes introduced in 4.11.1+26-g87f51bf366-3+rpi1 by Peter Michael Green]
+ * Do not fail on files that are not installed.
+
- -- Raspbian forward porter <root@raspbian.org> Fri, 18 Dec 2020 18:13:06 +0000
++ -- Raspbian forward porter <root@raspbian.org> Fri, 12 Mar 2021 01:52:30 +0000
++
+ xen (4.14.1+11-gb0b734a8b3-1) unstable; urgency=medium
+
+ * Update to new upstream version 4.14.1+11-gb0b734a8b3, which also contains
+ security fixes for the following issues:
+ - IRQ vector leak on x86
+ XSA-360 CVE-2021-3308 (Closes: #981052)
+ - arm: The cache may not be cleaned for newly allocated scrubbed pages
+ XSA-364 CVE-2021-26933
+ * Drop separate patches for XSAs up to 359 that are now included in the
+ upstream stable branch.
+
+ Packaging bugfixes and improvements [Elliott Mitchell]:
+ * debian/rules: Set CC/LD to enable cross-building
+ * d/shuffle-binaries: Fix binary shuffling script for cross-building
+ * Rework "debian/rules: Do not try to move EFI binaries on armhf"
+ * debian/scripts: Optimize runtime scripts
+ * debian/xen-utils-common.examples: Remove xm examples
+ * d/shuffle-boot-files: make it POSIX compliant [Hans van Kranenburg, based
+ on a patch by Elliott Mitchell]
+ * d/shuffle-binaries: Switch loop from for to while
+ * d/shuffle-binaries: Switch to POSIX shell, instead of Bash
+ * d/shuffle-boot-files: Switch to POSIX shell, instead of Bash
+ * debian/xendomains.init: Pipe xen-init-list instead of tmp file
+
+ Make the package build reproducibly [Maximilian Engelhardt]:
+ * debian/salsa-ci.yml: enable salsa-ci
+ * debian/salsa-ci.yml: enable diffoscope in reprotest
+ * debian/rules: use SOURCE_DATE_EPOCH for xen build dates
+ * debian/rules: don't include build path in binaries
+ * debian/rules: reproducibly build oxenstored
+ * Pick the following upstream commits:
+ - 5816d327e4 ("xen: don't have timestamp inserted in config.gz")
+ - ee41b5c450 ("x86/EFI: don't insert timestamp when SOURCE_DATE_EPOCH is
+ defined")
+ - e18dadc5b7 ("docs: use predictable ordering in generated documentation")
+ * Include upstream patch that is not committed yet, but needed:
+ - docs: set date to SOURCE_DATE_EPOCH if available
+ * debian/salsa-ci.yml: don't allow reprotest to fail
+
+ Packaging bugfixes and improvements:
+ * d/shuffle-boot-files: Document more inner workings
+
+ -- Hans van Kranenburg <hans@knorrie.org> Sun, 28 Feb 2021 19:49:45 +0100
xen (4.14.0+88-g1d1d1f5391-2) unstable; urgency=high
0034-xen-arm-acpi-add-BAD_MADT_GICC_ENTRY-macro.patch
0035-xen-arm-traps-Don-t-panic-when-receiving-an-unknown-.patch
0036-fix-spelling-errors.patch
- 0037-tools-ocaml-xenstored-do-permission-checks-on-xensto.patch
- 0038-tools-xenstore-allow-removing-child-of-a-node-exceed.patch
- 0039-tools-xenstore-ignore-transaction-id-for-un-watch.patch
- 0040-tools-xenstore-fix-node-accounting-after-failed-node.patch
- 0041-tools-xenstore-simplify-and-rename-check_event_node.patch
- 0042-tools-xenstore-check-privilege-for-XS_IS_DOMAIN_INTR.patch
- 0043-tools-xenstore-rework-node-removal.patch
- 0044-tools-xenstore-fire-watches-only-when-removing-a-spe.patch
- 0045-tools-xenstore-introduce-node_perms-structure.patch
- 0046-tools-xenstore-allow-special-watches-for-privileged-.patch
- 0047-tools-xenstore-avoid-watch-events-for-nodes-without-.patch
- 0048-tools-ocaml-xenstored-ignore-transaction-id-for-un-w.patch
- 0049-tools-ocaml-xenstored-check-privilege-for-XS_IS_DOMA.patch
- 0050-tools-ocaml-xenstored-unify-watch-firing.patch
- 0051-tools-ocaml-xenstored-introduce-permissions-for-spec.patch
- 0052-tools-ocaml-xenstored-avoid-watch-events-for-nodes-w.patch
- 0053-tools-ocaml-xenstored-add-xenstored.conf-flag-to-tur.patch
- 0054-tools-xenstore-revoke-access-rights-for-removed-doma.patch
- 0055-tools-ocaml-xenstored-clean-up-permissions-for-dead-.patch
- 0056-tools-ocaml-xenstored-Fix-path-length-validation.patch
- 0057-tools-xenstore-drop-watch-event-messages-exceeding-m.patch
- 0058-tools-xenstore-Preserve-bad-client-until-they-are-de.patch
- 0059-tools-ocaml-xenstored-delete-watch-from-trie-too-whe.patch
- 0060-tools-ocaml-xenstored-only-Dom0-can-change-node-owne.patch
- 0061-x86-replace-reset_stack_and_jump_nolp.patch
- 0062-x86-fold-guest_idle_loop-into-idle_loop.patch
- 0063-x86-avoid-calling-svm-vmx-_do_resume.patch
- 0064-x86-irq-fix-infinite-loop-in-irq_move_cleanup_interr.patch
- 0065-evtchn-FIFO-re-order-and-synchronize-with-map_contro.patch
- 0066-evtchn-FIFO-add-2nd-smp_rmb-to-evtchn_fifo_word_from.patch
+ 0037-xen-don-t-have-timestamp-inserted-in-config.gz.patch
+ 0038-x86-EFI-don-t-insert-timestamp-when-SOURCE_DATE_EPOC.patch
+ 0039-docs-use-predictable-ordering-in-generated-documenta.patch
+ 0040-docs-set-date-to-SOURCE_DATE_EPOCH-if-available.patch
+armv6.diff