# changelog

author: Gerd Hoffmann <kraxel@redhat.com> - 20230301gitf80f052277c8-2
changelog:
  - add StandaloneMM and ArmVirtQemuKernel builds.
  - add json files for qcow2 images.
  - update dbx files to 2023-03.


author: Wim Taymans <wtaymans@redhat.com> - 0.3.72-1
changelog:
  - Update version to 0.3.72
  - The jack libraries and ld.so override were split so that jack can
    be installed together with the pipewire-jack libraries and pw-jack.


author: Wim Taymans <wtaymans@redhat.com> - 0.3.73-1
changelog:
  - Update version to 0.3.73
  - Fixes rhbz#2156003 Split out lv2 and sofa filter-chain packages.
  - Split out vulkan plugin and roc module


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.0-3
changelog:
  - HEAD @ 1792d1723b7fb45a
    x86/x2apic: introduce a mixed physical/cluster mode-Tue 12 Dec 2023 05:45
  - XSA-447
    0017-xen-arm-page-Avoid-pointer-overflow-on-cache-clean-in.diff:This is XSA-447 / CVE-2023-46837.
  - xen kconfig (d/xen_4.18_amd64.config): rebase as 7b120ef0b9ab3866059d0afc2d112
  - qemu*: tag qemu versions with i0


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.0-4
changelog:
  - HEAD @ b1fdd7d0e47e0831ac
    x86/ucode: Fix stability of the raw CPU Policy rescan-Thu 1 Feb 2024 09:02
  - XSA-450
    0020-VT-d-Fix-else-vs-endif-misplacement.diff:This is XSA-450 / CVE-2023-46840.
  - XSA-449
    0019-pci-fail-device-assignment-if-phantom-functions-canno.diff:This is XSA-449 / CVE-2023-46839
  - xenperf hypervisor included, config updated for xen-4.18


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.0-5
changelog:
  - HEAD @ 498b3624d0ecc126777
    xen/arm: Fix UBSAN failure in start_xen()-Wed 28 Feb 2024 14:43
  - XSA-451
    0042-x86-account-for-shadow-stack-in-exception-from-stub-r.patch:This is CVE-2023-46841 / XSA-451.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.0-6
changelog:
  - HEAD @ 4da8ca9cb9cfdb92c9
    x86: protect conditional lock taking from speculative execution-Tue 12 Mar 2024 09:00
  - XSA-452
    0060-x86-vmx-Perform-VERW-flushing-later-in-the-VMExit-pat.diff:This is part of XSA-452 / CVE-2023-28746.
    0061-x86-spec-ctrl-Perform-VERW-flushing-later-in-exit-pat.diff:This is part of XSA-452 / CVE-2023-28746.
    0062-x86-spec-ctrl-Rename-VERW-related-options.diff:This is part of XSA-452 / CVE-2023-28746.
    0063-x86-spec-ctrl-VERW-handling-adjustments.diff:This is part of XSA-452 / CVE-2023-28746.
    0064-x86-spec-ctrl-Mitigation-Register-File-Data-Sampling.diff:This is part of XSA-452 / CVE-2023-28746.
  - XSA-453
    0066-x86-spinlock-introduce-support-for-blocking-speculati.diff:This is part of XSA-453 / CVE-2024-2193
    0067-rwlock-introduce-support-for-blocking-speculation-int.diff:This is part of XSA-453 / CVE-2024-2193
    0068-percpu-rwlock-introduce-support-for-blocking-speculat.diff:This is part of XSA-453 / CVE-2024-2193
    0069-locking-attempt-to-ensure-lock-wrappers-are-always-in.diff:This is part of XSA-453 / CVE-2024-2193
    0070-x86-mm-add-speculation-barriers-to-open-coded-locks.diff:This is part of XSA-453 / CVE-2024-2193
    0071-x86-protect-conditional-lock-taking-from-speculative-.diff:This is part of XSA-453 / CVE-2024-2193


author: Mark Pryor <pryorm09@gmail.com> - 1:4.18.2-2
changelog:
  - HEAD @ 01f7a3c792241d348a4e4
    update Xen version to 4.18.3-pre-Tue 21 May 2024 02:52
  - XSA-454
    0015-x86-HVM-clear-upper-halves-of-GPRs-upon-entry-from-32.diff:This is part of XSA-454 / CVE-2023-46842.
    0016-hypercall_xlat_continuation-Replace-BUG_ON-with-domai.diff:This is part of XSA-454 / CVE-2023-46842.
  - XSA-455
    0017-x86-spec-ctrl-Fix-BTC-SRSO-mitigations.diff:This is XSA-455 / CVE-2024-31142.
    0038-x86-spec-ctrl-Rename-spec_ctrl_flags-to-scf.diff:XSA-455 was ultimately caused by having fields with too-similar names.
    0046-x86-Use-indirect-calls-in-reset-stack-infrastructure.diff:Luckily due to XSA-348, all C target functions of reset_stack_and_jump_ind()
  - XSA-456
    0046-x86-Use-indirect-calls-in-reset-stack-infrastructure.diff:This is part of XSA-456 / CVE-2024-2201.
    0047-x86-Drop-INDIRECT_JMP.diff:This is part of XSA-456 / CVE-2024-2201.
    0048-x86-tsx-Expose-RTM_ALWAYS_ABORT-to-guests.diff:This is part of XSA-456 / CVE-2024-2201.
    0049-x86-spec-ctrl-Support-BHI_DIS_S-in-order-to-mitigate-.diff:This is part of XSA-456 / CVE-2024-2201.
    0050-x86-spec-ctrl-Software-BHB-clearing-sequences.diff:This is part of XSA-456 / CVE-2024-2201.
    0051-x86-spec-ctrl-Wire-up-the-Native-BHI-software-sequenc.diff:This is part of XSA-456 / CVE-2024-2201.
    0052-x86-spec-ctrl-Support-the-long-BHB-loop-sequence.diff:This is part of XSA-456 / CVE-2024-2201.


author: Mark Pryor <pryorm09@gmail.com> - 1:4.18.3-1
changelog:
  - HEAD @ bd51e573a730efc569646
    update Xen version to 4.18.3-Wed 14 Aug 2024 06:45:06
  - initial build of 4.18.3
  - XSA-458
    0053-x86-IRQ-avoid-double-unlock-in-map_domain_pirq.patch:This is CVE-2024-31143 / XSA-458.
  - XSA-460
    0065-x86-IOMMU-move-tracking-in-iommu_identity_mapping.patch:This is XSA-460 / CVE-2024-31145.
  - XSA-461
    0066-x86-pass-through-documents-as-security-unsupported-w.patch:This is XSA-461 / CVE-2024-31146.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.3-2
changelog:
  - HEAD @ 2c5f888204d988110
    xen/ucode: Fix buffer under-run when parsing AMD containers-Tue 24 Sep 2024 06:01
  - XSA-462
    0004-x86-vLAPIC-prevent-undue-recursion-of-vlapic_error.diff:This is XSA-462 / CVE-2024-45817.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.3-3
changelog:
  - HEAD @ 1cbeb625a3551ad7
    xen/x86: prevent addition of .note.gnu.property if livepatch is enabled-Tue 12 Nov 2024 04:54
  - full build with stubdom


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.3-3
changelog:
  - HEAD @ 1cbeb625a3551ad7
    xen/x86: prevent addition of .note.gnu.property if livepatch is enabled-Tue 12 Nov 2024 04:54
  - full build with stubdom
  - XSA-463
    0045-x86-HVM-drop-stdvga-s-cache-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0046-x86-HVM-drop-stdvga-s-stdvga-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0047-x86-HVM-remove-unused-MMIO-handling-code.diff:This is part of XSA-463 / CVE-2024-45818
    0048-x86-HVM-drop-stdvga-s-gr-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0049-x86-HVM-drop-stdvga-s-sr-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0050-x86-HVM-drop-stdvga-s-g-s-r_index-struct-members.diff:This is part of XSA-463 / CVE-2024-45818
    0051-x86-HVM-drop-stdvga-s-vram_page-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0052-x86-HVM-drop-stdvga-s-lock-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
  - XSA-464
    0054-libxl-Use-zero-ed-memory-for-PVH-acpi-tables.diff:This is XSA-464 / CVE-2024-45819.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.18.4-1
changelog:
  - HEAD @ 77d95386a783273ded28e
    xen/events: fix race with set_global_virq_handler-Tue 21 Jan 2025 00:30
  - qemuu: v8.0.5


author: Mark Pryor <pryorm09@gmail.com> - 1:4.19~rc2-1
changelog:
  - HEAD @ c4ebeb79d10a25e8d4
    CI: Refresh the Coverity Github Action configuration-Mon 8 Jul 2024 10:36


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19~rc2-3
changelog:
  - HEAD @ 2d7b6170cc69f8a1a
    hotplug: Restore block-tap phy compatibility, again-Wed 24 Jul 2024 02:53
  - XSA-458
    0025-x86-IRQ-avoid-double-unlock-in-map_domain_pirq.patch:This is CVE-2024-31143 / XSA-458


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-2
changelog:
  - HEAD @ 0918434e0fbee48c9
    automation: use expect to run QEMU-Fri 16 Aug 2024 15:20
  - XSA-460
    0011-x86-IOMMU-move-tracking-in-iommu_identity_mapping.diff:This is XSA-460 / CVE-2024-31145.
  - XSA-461
    0012-x86-pass-through-documents-as-security-unsupported-wh.diff:This is XSA-461 / CVE-2024-31146
  - XSA-462
    0015-x86-vLAPIC-prevent-undue-recursion-of-vlapic_error.patch:This is XSA-462 / CVE-2024-45817


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-3
changelog:
  - @HEAD 2c61ab407172682e13
    xen/ucode: Fix buffer under-run when parsing AMD containers-Tue 24 Sep 2024 05:44


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-4
changelog:
  - HEAD @ fadbc7e32e42f1a4199b
    x86/boot: Fix XSM module handling during PVH boot-Tue 29 Oct 2024 08:31


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-5
changelog:
  - HEAD @ 251a9496485a86f3
    xen/x86: prevent addition of .note.gnu.property if livepatch is enabled-Tue 12 Nov 2024 04:43
  - stubdom: use internal targets, stop using dist-stubdom


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-1
changelog:
  - initial release 4.19.1
  - HEAD @ ccf400846780289ae779
    update Xen version to 4.19.1-Tue 3 Dec 2024 23:52
  - qemuu: v8.0.5


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-2
changelog:
  - HEAD @ 8dd897e691194929
    MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade-Tue 17 Dec 2024 14:01
  - qemuu: v9.1.0, from staging


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-3
changelog:
  - HEAD @ 77d95386a783273ded28e
    xen/events: fix race with set_global_virq_handler-Tue 21 Jan 2025 00:30


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-6
changelog:
  - HEAD @ ce591a92ca50d2b88
    xen/arinc653: call xfree with local IRQ enabled-Thu 20 Mar 2025 05:21
  - XSA-467
    0035-IOMMU-x86-the-bus-to-bridge-lock-needs-to-be-acquired.diff:This is XSA-467 / CVE-2025-1713.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-7
changelog:
  - HEAD @ edf9509e4d2b0f15be
    Arm/domctl: correct XEN_DOMCTL_vuart_op error return value-Thu 27 Mar 2025 07:06


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-1.el9
changelog:
  - HEAD @ f3362182e028119e
    update Xen version to 4.19.2-Fri 4 Apr 2025 03:47
  - initial build of 4.19.2


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-2.el9
changelog:
  - HEAD @ 465ccf84e382d36783
    x86/ucode: Extend AMD digest checks to cover Zen5 CPUs-Fri 11 Apr 2025 06:12


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-3.el9
changelog:
  - HEAD @ 92ba71bf8be9645f
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:43
  - XSA-471
    0087-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0088-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0089-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
  - XSA-470
    0069-x86-emul-Fix-extable-registration-in-invoke_stub.diff:This is XSA-470 / CVE-2025-27465
  - XSA-469
    0048-x86-guest-Remove-use-of-the-Xen-hypercall_page.diff:This is part of XSA-469 / CVE-2024-28956
    0049-x86-thunk-Mis-align-__x86_indirect_thunk_-to-mitigate.diff:This is part of XSA-469 / CVE-2024-28956
    0050-x86-thunk-Mis-align-the-RETs-in-clear_bhb_loops-to-mi.diff:This is part of XSA-469 / CVE-2024-28956
    0051-x86-stubs-Introduce-place_ret-to-abstract-away-raw-0x.diff:This is part of XSA-469 / CVE-2024-28956
    0052-x86-thunk-Build-Xen-with-Return-Thunks.diff:This is part of XSA-469 / CVE-2024-28956
    0053-x86-spec-ctrl-Synthesise-ITS_NO-to-guests-on-unaffect.diff:This is part of XSA-469 / CVE-2024-28956


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-3.el9
changelog:
  - HEAD @ 92ba71bf8be9645f
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:43

  - XSA-471
    0087-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0088-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0089-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
  - XSA-470
    0069-x86-emul-Fix-extable-registration-in-invoke_stub.diff:This is XSA-470 / CVE-2025-27465
  - XSA-469
    0048-x86-guest-Remove-use-of-the-Xen-hypercall_page.diff:This is part of XSA-469 / CVE-2024-28956
    0049-x86-thunk-Mis-align-__x86_indirect_thunk_-to-mitigate.diff:This is part of XSA-469 / CVE-2024-28956
    0050-x86-thunk-Mis-align-the-RETs-in-clear_bhb_loops-to-mi.diff:This is part of XSA-469 / CVE-2024-28956
    0051-x86-stubs-Introduce-place_ret-to-abstract-away-raw-0x.diff:This is part of XSA-469 / CVE-2024-28956
    0052-x86-thunk-Build-Xen-with-Return-Thunks.diff:This is part of XSA-469 / CVE-2024-28956
    0053-x86-spec-ctrl-Synthesise-ITS_NO-to-guests-on-unaffect.diff:This is part of XSA-469 / CVE-2024-28956


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.3-1.el9
changelog:
  - HEAD @ 077419f04a3125c58dc
    update Xen version to 4.19.3-Mon 4 Aug 2025 08:20
  - initial build of 4.19.3
  - rebase: reuse-stubdom-4j.tar.xz
  - qemuu-guest-agent: new package for domU client


