# changelog

author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-5.el10
changelog:
  - HEAD @ ddec00769cd80a44
    x86/emul: Fix emulation of RDSEED with older toolchains-Fri 16 May 2025 13:34


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-6.el10
changelog:
  - XSA-470
  - HEAD @ 9e1309b0f037a6
    x86/emul: Fix extable registration in invoke_stub-Tue 1 Jul 2025 04:57
  - all *efi blobs to usr/lib/efi, not ESP


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.0-7.el10
changelog:
  - rebuilt for x86_64_v2
  - HEAD @ 0c70d444537b6a690b
    x86/cpu-policy: Fix handling of leaf 0x80000021-Mon 7 Jul 2025 02:33


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.1-1.el10
changelog:
  - HEAD @ 08f043965a7b1047a
    update Xen version to 4.20.1-Wed 9 Jul 2025 06:57
  - initial build of 4.20.1
  - XSA-471
    0138-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0139-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0140-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.


author: Mark Pryor <pryorm09@gmail.com> - 3:4.20.1-2
changelog:
  - HEAD @ 69568ab30622ba09a398
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:42


author: Mark Pryor <pryorm09@gmail.com> - 3:4.21~rc1-2.el10
changelog:
  - HEAD @ eff32008be0d2718d32
    Update Xen version to 4.21.0-rc2-Wed 22 Oct 2025 04:01:
  - qemut: removed, use --without tumeq
  - json-c instead of yajl-dev


author: Mark Pryor <pryorm09@gmail.com> - 3:4.21.0-1.el10
changelog:
  - HEAD @ 06af9ef22996ce
    Update to Xen 4.21-Tue 18 Nov 2025 10:02
  - d/xen_4.21_amd64.config: rebase hypervisor kconfig
  - xenperf: activate rules & control
  - XSA-472
    0035-x86-viridian-avoid-NULL-pointer-dereference-in-update.diff:This is CVE-2025-27466 / part of XSA-472.
    0036-x86-viridian-avoid-NULL-pointer-dereference-in-viridi.diff:This is CVE-2025-58142 / part of XSA-472.
    0037-x86-viridian-protect-concurrent-modification-of-the-r.diff:This is CVE-2025-58143 / part of XSA-472.
  - XSA-473
    0038-Arm-foreign-page-handling-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58144 / part of XSA-473.
    0039-Arm-adjust-locking-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58145 / part of XSA-473.
  - XSA-475
    0017-x86-viridian-Enforce-bounds-check-in-vpmask_set.diff:This is XSA-475 / CVE-2025-58147.
    0018-x86-viridian-Enforce-bounds-check-in-send_ipi.diff:This is XSA-475 / CVE-2025-58148.
  - XSA-476
    0027-tools-libs-light-fix-BAR-memory-address-truncation.diff:This is XSA-476 / CVE-2025-58149.
  - tools/libacpi/Makefile: mk_dsdt, add --dm-version


