# changelog

author: Mark Pryor <pryorm09@gmail.com> - 3:4.19~rc2-3
changelog:
  - HEAD @ 2d7b6170cc69f8a1a
    hotplug: Restore block-tap phy compatibility, again-Wed 24 Jul 2024 02:53
  - XSA-458
    0025-x86-IRQ-avoid-double-unlock-in-map_domain_pirq.patch:This is CVE-2024-31143 / XSA-458


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-2
changelog:
  - HEAD @ 0918434e0fbee48c9
    automation: use expect to run QEMU-Fri 16 Aug 2024 15:20
  - XSA-460
    0011-x86-IOMMU-move-tracking-in-iommu_identity_mapping.diff:This is XSA-460 / CVE-2024-31145.
  - XSA-461
    0012-x86-pass-through-documents-as-security-unsupported-wh.diff:This is XSA-461 / CVE-2024-31146
  - XSA-462
    0015-x86-vLAPIC-prevent-undue-recursion-of-vlapic_error.patch:This is XSA-462 / CVE-2024-45817


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-3
changelog:
  - @HEAD 2c61ab407172682e13
    xen/ucode: Fix buffer under-run when parsing AMD containers-Tue 24 Sep 2024 05:44


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-4
changelog:
  - HEAD @ fadbc7e32e42f1a4199b
    x86/boot: Fix XSM module handling during PVH boot-Tue 29 Oct 2024 08:31


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.0-5
changelog:
  - HEAD @ 251a9496485a86f3
    xen/x86: prevent addition of .note.gnu.property if livepatch is enabled-Tue 12 Nov 2024 04:43
  - stubdom: use internal targets, stop using dist-stubdom


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-1
changelog:
  - initial release 4.19.1
  - HEAD @ ccf400846780289ae779
    update Xen version to 4.19.1-Tue 3 Dec 2024 23:52
  - qemuu: v8.0.5


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-2
changelog:
  - HEAD @ 8dd897e691194929
    MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade-Tue 17 Dec 2024 14:01
  - qemuu: v9.1.0, from staging


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-3
changelog:
  - HEAD @ 77d95386a783273ded28e
    xen/events: fix race with set_global_virq_handler-Tue 21 Jan 2025 00:30


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-6
changelog:
  - HEAD @ ce591a92ca50d2b88
    xen/arinc653: call xfree with local IRQ enabled-Thu 20 Mar 2025 05:21
  - XSA-467
    0035-IOMMU-x86-the-bus-to-bridge-lock-needs-to-be-acquired.diff:This is XSA-467 / CVE-2025-1713.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-7
changelog:
  - HEAD @ edf9509e4d2b0f15be
    Arm/domctl: correct XEN_DOMCTL_vuart_op error return value-Thu 27 Mar 2025 07:06


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-1.el9
changelog:
  - HEAD @ f3362182e028119e
    update Xen version to 4.19.2-Fri 4 Apr 2025 03:47
  - initial build of 4.19.2


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-2.el9
changelog:
  - HEAD @ 465ccf84e382d36783
    x86/ucode: Extend AMD digest checks to cover Zen5 CPUs-Fri 11 Apr 2025 06:12


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.2-3.el9
changelog:
  - HEAD @ 92ba71bf8be9645f
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:43

  - XSA-471
    0087-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0088-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0089-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
  - XSA-470
    0069-x86-emul-Fix-extable-registration-in-invoke_stub.diff:This is XSA-470 / CVE-2025-27465
  - XSA-469
    0048-x86-guest-Remove-use-of-the-Xen-hypercall_page.diff:This is part of XSA-469 / CVE-2024-28956
    0049-x86-thunk-Mis-align-__x86_indirect_thunk_-to-mitigate.diff:This is part of XSA-469 / CVE-2024-28956
    0050-x86-thunk-Mis-align-the-RETs-in-clear_bhb_loops-to-mi.diff:This is part of XSA-469 / CVE-2024-28956
    0051-x86-stubs-Introduce-place_ret-to-abstract-away-raw-0x.diff:This is part of XSA-469 / CVE-2024-28956
    0052-x86-thunk-Build-Xen-with-Return-Thunks.diff:This is part of XSA-469 / CVE-2024-28956
    0053-x86-spec-ctrl-Synthesise-ITS_NO-to-guests-on-unaffect.diff:This is part of XSA-469 / CVE-2024-28956


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.3-1.el9
changelog:
  - HEAD @ 077419f04a3125c58dc
    update Xen version to 4.19.3-Mon 4 Aug 2025 08:20
  - initial build of 4.19.3
  - rebase: reuse-stubdom-4j.tar.xz
  - qemuu-guest-agent: new package for domU client


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.4-1.el9
changelog:
  - HEAD @ bb897593b7a73926f453
    x86/amd: Fix race editing DE_CFG-Wed 3 Dec 2025 02:44
  - XSA-471
    0087-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0088-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0089-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357
  - XSA-472
    0014-x86-viridian-avoid-NULL-pointer-dereference-in-update.diff:This is CVE-2025-27466 / part of XSA-472.
    0015-x86-viridian-avoid-NULL-pointer-dereference-in-viridi.diff:This is CVE-2025-58142 / part of XSA-472.
    0016-x86-viridian-protect-concurrent-modification-of-the-r.diff:This is CVE-2025-58143 / part of XSA-472.
  - XSA-473
    0017-Arm-foreign-page-handling-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58144 / part of XSA-473.
    0018-Arm-adjust-locking-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58145 / part of XSA-473.
  - XSA-475
    0030-x86-viridian-Enforce-bounds-check-in-vpmask_set.diff:This is XSA-475 / CVE-2025-58147.
    0031-x86-viridian-Enforce-bounds-check-in-send_ipi.diff:This is XSA-475 / CVE-2025-58148.
  - XSA-476
    0033-tools-libs-light-fix-BAR-memory-address-truncation.diff:This is XSA-476 / CVE-2025-58149.


