# changelog

author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-1
changelog:
  - initial release 4.19.1
  - HEAD @ ccf400846780289ae779
    update Xen version to 4.19.1-Tue 3 Dec 2024 23:52
  - qemuu: v8.0.5


author: Mark Pryor <pryorm09@gmail.com> - 3:4.19.1-2
changelog:
  - HEAD @ 8dd897e691194929
    MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade-Tue 17 Dec 2024 14:01
  - qemuu: v9.1.0, from staging


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20~rc2-1.el9
changelog:
  - HEAD @ c3f5d1bb40b57d467
    automation/cirrus-ci: introduce FreeBSD randconfig builds-Fri 17 Jan 2025 07:00


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-1.el9
changelog:
  - HEAD @ 3ad5d648cda5add395f
    Update to Xen 4.20-Tue 4 Mar 2025 08:41
  - XSA-467
    0557-IOMMU-x86-the-bus-to-bridge-lock-needs-to-be-acquired.diff:This is XSA-467 / CVE-2025-1713.
  - initial build 4.20
  - ocaml: disable plugin interface, build env depends


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-3.el9
changelog:
  - HEAD @ 3ccbe66d30f09
    xen/percpu: dont initialize percpu on resume-Wed 2 Apr 2025 05:26
  - ocaml: only the devel package has the plug-in


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-4.el9
changelog:
  - HEAD @ b1eeea44cd129ca5e
    cpufreq: dont leave stale statistics pointer-Tue 13 May 2025 04:56
  - XSA-469
    0100-x86-guest-Remove-use-of-the-Xen-hypercall_page.diff:This is part of XSA-469 / CVE-2024-28956
    0101-x86-thunk-Mis-align-__x86_indirect_thunk_-to-mitigate.diff:This is part of XSA-469 / CVE-2024-28956
    0102-x86-thunk-Mis-align-the-RETs-in-clear_bhb_loops-to-mi.diff:This is part of XSA-469 / CVE-2024-28956
    0103-x86-stubs-Introduce-place_ret-to-abstract-away-raw-0x.diff:This is part of XSA-469 / CVE-2024-28956
    0104-x86-thunk-Build-Xen-with-Return-Thunks.diff:This is part of XSA-469 / CVE-2024-28956
    0105-x86-spec-ctrl-Synthesise-ITS_NO-to-guests-on-unaffect.diff:This is part of XSA-469 / CVE-2024-28956


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-5
changelog:
  - HEAD @ ddec00769cd80a44
    x86/emul: Fix emulation of RDSEED with older toolchains-Fri 16 May 2025 13:34
  - xen_perf_fix, adjust for latest kconfig


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-7.el9
changelog:
  - XSA-470
  - HEAD @ 9e1309b0f037a6
    x86/emul: Fix extable registration in invoke_stub-Tue 1 Jul 2025 04:57
    all *efi blobs to usr/lib64/efi, not ESP


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-8.el9
changelog:
  - HEAD @ 138d403e0737da0c
    x86/spec-ctrl: Mitigate Transitive Scheduler Attacks-Tue 8 Jul 2025 07:00
  - XSA-471
    0138-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0139-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0140-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.1-1.el9
changelog:
  - HEAD @ 08f043965a7b1047a
    update Xen version to 4.20.1-Wed 9 Jul 2025 06:57
  - initial build of 4.20.1


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.1-2.el9
changelog:
  - HEAD @ 69568ab30622ba09a398
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:42


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.2-1.el9
changelog:
  - HEAD @ 03299bb3ec817f47
    update Xen version to 4.20.2-Thu 13 Nov 2025 01:51
  - XSA-472
    0035-x86-viridian-avoid-NULL-pointer-dereference-in-update.diff:This is CVE-2025-27466 / part of XSA-472.
    0036-x86-viridian-avoid-NULL-pointer-dereference-in-viridi.diff:This is CVE-2025-58142 / part of XSA-472.
    0037-x86-viridian-protect-concurrent-modification-of-the-r.diff:This is CVE-2025-58143 / part of XSA-472.
  - XSA-473
    0038-Arm-foreign-page-handling-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58144 / part of XSA-473.
    0039-Arm-adjust-locking-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58145 / part of XSA-473.
  - XSA-475
    0050-x86-viridian-Enforce-bounds-check-in-vpmask_set.diff:This is XSA-475 / CVE-2025-58147.
    0051-x86-viridian-Enforce-bounds-check-in-send_ipi.diff:This is XSA-475 / CVE-2025-58148.
  - XSA-476
    0053-tools-libs-light-fix-BAR-memory-address-truncation.diff:This is XSA-476 / CVE-2025-58149.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.2-3.el9
changelog:
  - HEAD @ 75013fc5c523b8a969
    x86/amd: Fold another DE_CFG edit into amd_init_de_cfg-Thu 29 Jan 2026 04:45
  - XSA-477
    0021-x86-shadow-don-t-overrun-trace_emul_write_val.diff:This is XSA-477 / CVE-2025-58150.
  - XSA-479
    0022-x86-spec-ctrl-Fix-incomplete-IBPB-flushing-during-con.diff:This is XSA-479 / CVE-2026-23553.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.3-1.el9
changelog:
  - HEAD @ 14274673cbb499472f63
    update Xen version to 4.20.3-Thu 26 Mar 2026 06:04
  - XSA-480
    0052-x86-p2m-issue-a-sync-flush-before-freeing-paging-page.diff:This is XSA-480 / CVE-2026-23554
  - XSA-481
    0053-tools-xenstored-fix-canonicalize-error-testing.diff:This is XSA-481/CVE-2026-23555
  - initial build
  - qemuu: v8.2.0 supports vnc in pv domU


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.3-2
changelog:
  - 5f7054258c6937b74ae
    Revert libacpi: Pass missing --dm_version to mk_dsdt-Mon 20 Apr 2026 08:31
  - XSA-488
    0001-x86-amd-Mitigate-AMD-SN-7053-FP-DSS.diff:This is XSA-488 / CVE-2025-54505


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.3-3
changelog:
  - HEAD @ 6cf9b61548a174f862
    x86/pv32: Fix bogus CR2 in pagefault for gate emulation-Wed 3 Jun 2026 02:40
  - XSA-483
    0026-tools-oxenstored-Reset-quota-when-resetting-permissio.patch:This is XSA-483 / CVE-2026-23556.
  - XSA-484
    0027-tools-xenstored-make-conn_delete_all_transactions-ide.patch:This is XSA-484 / CVE-2026-23557.
  - XSA-486
    0028-gnttab-split-gnttab_map_frame.patch:This is XSA-486 / CVE-2026-23558.
  - XSA-490
    0029-x86-amd-Mitigate-AMD-SN-7052.patch:This is XSA-490 / CVE-2025-54518.


