xen (4.22.0-1+deb14u3.1) forky; urgency=medium

  * HEAD @ d45d5687f1441495
    Update to Xen 4.22-Wed 29 Jul 2026 11:59
  - initial build, ported from 4.21.2
  - m0 -> 4.22.0

 -- Mark Pryor <pryorm09@gmail.com>  Sat, 01 Aug 2026 19:44:01 -0700

xen (4.21.2-1+deb14u3.1) forky; urgency=medium

  * HEAD @ 78c2a59f9edba7ee
    update Xen version to 4.21.2-Wed 29 Jul 2026 07:46
  * qemuu: v9.1.0
  - XSA-491
    0048-x86-HVM-add-locking-to-I-O-port-translation-list-trav.diff:This is XSA-491 / CVE-2026-42487.
  - XSA-492
    0049-sched-use-sequence-counter-to-enlighten-vcpu_runstate.diff:This is part of XSA-492.
    0050-domctl-handle-XEN_DOMCTL_getdomaininfo-without-acquir.diff:This is part of XSA-492.
    0051-domctl-protect-locking-for-get_domain_state.diff:This is part of XSA-492.
    0052-domctl-handle-XEN_DOMCTL_get_domain_state-without-acq.diff:This is part of XSA-492.
    0053-domain-locking-for-iomem_caps-accesses.diff:This is part of XSA-492.
    0054-x86-domain-locking-for-ioport_caps-accesses.diff:This is part of XSA-492.
    0055-domain-locking-for-irq_caps-accesses.diff:This is part of XSA-492.
    0056-XSM-Flask-split-the-.iomem_mapping-hook.diff:This is part of XSA-492.
    0057-domctl-handle-XEN_DOMCTL_memory_mapping-without-acqui.diff:This is part of XSA-492.
    0058-domctl-handle-XEN_DOMCTL_ioport_mapping-without-acqui.diff:This is part of XSA-492.
    0059-domctl-handle-XEN_DOMCTL_-un-bind_pt_irq-without-acqu.diff:This is part of XSA-492.
    0060-domctl-handle-XEN_DOMCTL_io-mem-port-_permission-with.diff:This is part of XSA-492.
    0061-domctl-handle-XEN_DOMCTL_-irq-gsi-_permission-without.diff:This is part of XSA-492.
    0062-domctl-XSM-drop-vm_event_control-hook.diff:This is part of XSA-492.
    0063-domctl-XSM-pass-full-struct-xen_domctl-to-xsm_domctl.diff:This is part of XSA-492.
    0064-domctl-XSM-drop-scheduler_op-hook.diff:This is part of XSA-492.
    0065-domctl-XSM-drop-shadow_control_op-hook.diff:This is part of XSA-492.
    0066-domctl-handle-XEN_DOMCTL_get_device_group-without-acq.diff:This is part of XSA-492.
    0067-domctl-XSM-drop-de-assign_-dt-device-hooks.diff:This is part of XSA-492.
    0068-domctl-handle-XEN_DOMCTL_set_target-without-acquiring.diff:This is part of XSA-492.
  - XSA-493
    0073-xen-arm-Mitigate-TLBI-errata-on-various-Arm-CPUs.diff:This is XSA-493 / CVE-2025-10263.
  - XSA-494
    0074-x86-mm-accurately-track-which-vCPU-page-tables-are-lo.diff:This is CVE-2026-42488 / XSA-494.
  - XSA-495
    0125-x86-SHADOW_PAGING-is-deprecated.diff:This is CVE-2026-42493 / XSA-495.
  - XSA-496
    0126-evtchn-evtchn_bind_virq-error-path-unconditionally-ca.diff:This is CVE-2026-42492 / XSA-496.
  - XSA-497
    0127-libfsimage-iso9660-harden-Rock-Ridge-SUSP-parsing-aga.diff:This is XSA-497.
  - XSA-499
    0128-platform-op-XSM-move-resource-un-plug-core-checks.diff:This is CVE-2026-62427 / part of XSA-499.
    0129-sysctl-XSM-pass-full-struct-xen_sysctl-to-xsm_sysctl.diff:This is part of CVE-2026-62426 / XSA-499.
    0130-sysctl-XSM-drop-.scheduler_op-hook.diff:This is part of CVE-2026-62426 / XSA-499.
    0131-sysctl-Flask-add-preliminary-check-for-XEN_SYSCTL_get.diff:This is part of CVE-2026-62426 / XSA-499.
    0132-sysctl-XSM-drop-.readconsole-hook.diff:This is part of CVE-2026-62426 / XSA-499.
    0133-sysctl-XSM-drop-.resource_-un-plug_core-hooks.diff:This is part of CVE-2026-62426 / XSA-499.
    0134-sysctl-XSM-drop-.page_offline-hook.diff:This is part of CVE-2026-62426 / XSA-499.
  - XSA-500
    0135-gnttab-check-values-against-active-entry-when-copying.diff:This is CVE-2026-62428 / XSA-500.
  - XSA-501
    0136-gnttab-cope-with-version-changes-racing-other-operati.diff:Everything together is XSA-501.
  - XSA-502
    0137-vNUMA-close-race-window-in-domain-cleanup.diff:This is CVE-2026-62429 / XSA-502.
  - XSA-503
    0138-x86-vrtc-fix-race-in-CMOS-index-checking.diff:This is XSA-503 / CVE-2026-62430.
  - XSA-504
    0139-x86-viridian-ensure-count-is-always-set-when-starting.diff:This is XSA-504 / CVE-2026-62431.
  - XSA-505
    0140-xen-evtchn-fix-race-between-FIFO-expand-and-reset-ope.diff:This is XSA-505 / CVE-2026-62432.
  - XSA-506
    0141-xen-dmop-check-number-of-input-buffers.diff:This is XSA-506 / CVE-2026-62433.
  - XSA-507
    0142-x86-pod-do-not-reclaim-special-pages-for-PoD-cache.diff:This is XSA-507 / CVE-2026-62434.
  - XSA-508
    0143-pygrub-security-supported-only-when-run-de-privileged.diff:This is XSA-508.

 -- Mark Pryor <pryorm09@gmail.com>  Sat, 01 Aug 2026 13:54:56 -0700

xen (4.21.1-1+deb14u3.3) forky; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 16e9e6245c974717
    tools/libxl: Fix libxl_nocpuid.c build with json-c-Tue 19 May 2026 04:57
  - XSA-483
    0024-tools-oxenstored-Reset-quota-when-resetting-permissio.diff:This is XSA-483 / CVE-2026-23556.
  - XSA-484
    0025-tools-xenstored-make-conn_delete_all_transactions-ide.diff:This is XSA-484 / CVE-2026-23557.
  - XSA-486
    0026-gnttab-split-gnttab_map_frame.diff:This is XSA-486 / CVE-2026-23558.
  - XSA-490
    0027-x86-amd-Mitigate-AMD-SN-7052.diff:This is XSA-490 / CVE-2025-54518.

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 22 May 2026 16:11:29 +0000

xen (4.21.1-1+deb14u3.2) forky; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 17a78430548b577aed026
    x86/mkelf32: Actually pad load segment to 2 MiB boundary-Mon 20 Apr 2026 03:29
  - XSA-488
    0001-x86-amd-Mitigate-AMD-SN-7053-FP-DSS.diff:This is XSA-488 / CVE-2025-54505

 -- Mark Pryor <pryorm09@gmail.com>  Mon, 27 Apr 2026 13:40:21 -0700

xen (4.21.1-1+deb14u3.1) forky; urgency=medium

  * HEAD @ f1a1e629d0cc4729
    update Xen version to 4.21.1-Thu 26 Mar 2026 08:28
  - XSA-480
    0062-x86-p2m-issue-a-sync-flush-before-freeing-paging-page.diff:This is XSA-480 / CVE-2026-23554
  - XSA-481
    0063-tools-xenstored-fix-canonicalize-error-testing.diff:This is XSA-481/CVE-2026-23555
  - initial build

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 09 Apr 2026 12:02:14 -0700

xen (4.21.0-1+deb14u3.2) forky; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 75013fc5c523b8a969
    x86/amd: Fold another DE_CFG edit into amd_init_de_cfg-Thu 29 Jan 2026 04:45
  - XSA-477
    0021-x86-shadow-don-t-overrun-trace_emul_write_val.diff:This is XSA-477 / CVE-2025-58150.
  - XSA-479
    0022-x86-spec-ctrl-Fix-incomplete-IBPB-flushing-during-con.diff:This is XSA-479 / CVE-2026-23553.

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 10 Feb 2026 16:54:54 -0800

xen (4.21.0-1+deb14u3.1) forky; urgency=medium

  * HEAD @ c692a6786b1c40b3b4818
    x86: fix incorrect return value for has_if_pschange_mc-Tue 13 Jan 2026 06:42
  - initial build forward port from trixie
  - FTBFS, xenstore-utils & xen-utils-4.21, add: dh_shlibdeps -Llibxenmisc4.21

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 22 Jan 2026 11:56:56 -0800

xen (4.21.0-1+deb13u3.3) trixie; urgency=medium

  * Non-maintainer upload.
  * qemuu, added 3 subprojects:
    keycodemapdb, berkeleysoft*, berkeleytest*

 -- Mark Pryor <pryorm09@gmail.com>  Mon, 08 Dec 2025 12:01:52 -0800

xen (4.21.0-1+deb13u3.2) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 16e22efbded42b56d0
    x86/amd: Fix race editing DE_CFG-Wed 3 Dec 2025 02:41
  * qemuu: removed virglrenderer, spice-server (no llvm libs)
  * build for trixie 13.2

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 05 Dec 2025 13:39:31 -0800

xen (4.21.0-1+deb13u3.1) trixie; urgency=medium

  * HEAD @ 06af9ef22996ce
    Update to Xen 4.21-Tue 18 Nov 2025 10:02
  - d/xen_4.21_amd64.config: rebase hypervisor kconfig
  - xenperf: activate rules & control

 -- Mark Pryor <pryorm09@gmail.com>  Wed, 19 Nov 2025 12:05:44 -0800

xen (4.21~rc1-1+deb13u3.2) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 421432b822184f9
    tools/libs/light: fix BAR memory address truncation-Fri 24 Oct 2025 05:21
  * XSA-475
    0017-x86-viridian-Enforce-bounds-check-in-vpmask_set.diff:This is XSA-475 / CVE-2025-58147.
    0018-x86-viridian-Enforce-bounds-check-in-send_ipi.diff:This is XSA-475 / CVE-2025-58148.
  * XSA-476
    0027-tools-libs-light-fix-BAR-memory-address-truncation.diff:This is XSA-476 / CVE-2025-58149.

 -- Mark Pryor <pryorm09@gmail.com>  Sat, 25 Oct 2025 09:30:00 -0700

xen (4.21~rc1-1+deb13u3.1) trixie; urgency=medium

  * HEAD @ d1478321eacbfca57c3
    Update Xen version to 4.21.0-rc1-Tue 7 Oct 2025 07:13
  * initial build of rc1, ported from bookworm
  * removed: qemu-xen-traditional
  * d/control: prefer libjson-c over yajl
  * tools/libacpi/Makefile: mk_dsdt, add --dm-version

 -- Mark Pryor <pryorm09@gmail.com>  Wed, 08 Oct 2025 17:02:57 -0700

xen (4.20.1-1+deb13u3.6) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ ae992e68d3ed7a177
    CI: Create initrd fragments explicitly as root-Wed 10 Sep 2025 09:19
  * XSA-472
    0035-x86-viridian-avoid-NULL-pointer-dereference-in-update.diff:This is CVE-2025-27466 / part of XSA-472.
    0036-x86-viridian-avoid-NULL-pointer-dereference-in-viridi.diff:This is CVE-2025-58142 / part of XSA-472.
    0037-x86-viridian-protect-concurrent-modification-of-the-r.diff:This is CVE-2025-58143 / part of XSA-472.
  * XSA-473
    0038-Arm-foreign-page-handling-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58144 / part of XSA-473.
    0039-Arm-adjust-locking-in-p2m_get_page_from_gfn.diff:This is CVE-2025-58145 / part of XSA-473.
  * rebuild for 13.1

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 02 Oct 2025 12:40:07 -0700

xen (4.20.1-1+deb13u3.5) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ c59a69ae9ebdebb83-x86/gen
    cpuid: Fix debugging for cycle detection-Wed 3 Sep 2025 04:59

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 04 Sep 2025 14:57:41 -0700

xen (4.20.1-1+deb13u3.4) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ ea5025554e982bd377f
    xenalyze: correct symbol name length fscanf specifier-Mon 4 Aug 2025 06:22
  * rebuild for new stable

 -- Mark Pryor <pryorm09@gmail.com>  Sun, 17 Aug 2025 10:32:43 -0700

xen (4.20.1-1+deb13u3.3) trixie; urgency=medium

  * Non-maintainer upload.
  * rebuild for latest trixie source

 -- Mark Pryor <pryorm09@gmail.com>  Wed, 30 Jul 2025 10:02:26 -0700

xen (4.20.1-1+deb13u3.2) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 69568ab30622ba09a398
    x86/S3: dont lose previously collected CPU data (AMD extra)-Tue 22 Jul 2025 03:42

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 22 Jul 2025 09:09:15 -0700

xen (4.20.1-1+deb13u3.1) trixie; urgency=medium

  * HEAD @ 08f043965a7b1047a
    update Xen version to 4.20.1-Wed 9 Jul 2025 06:57
  * initial build of 4.20.1
  * tarball additions from git: qemu-xen 9.1.0, mini-os, qemu-xen-traditional

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 10 Jul 2025 08:45:12 -0700

xen (4.20.0-1+deb13u3.11) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 138d403e0737da0c
    x86/spec-ctrl: Mitigate Transitive Scheduler Attacks-Tue 8 Jul 2025 07:00
  * XSA-471
    0138-x86-ucode-Digests-for-TSA-microcode.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0139-x86-idle-Rearrange-VERW-and-MONITOR-in-mwait_idle_wit.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.
    0140-x86-spec-ctrl-Mitigate-Transitive-Scheduler-Attacks.diff:This is part of XSA-471 / CVE-2024-36350 / CVE-2024-36357.

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 08 Jul 2025 08:22:18 -0700

xen (4.20.0-1+deb13u3.10) trixie; urgency=medium

  * Non-maintainer upload.
  * XSA-470
  * HEAD @ 9e1309b0f037a6
    x86/emul: Fix extable registration in invoke_stub-Tue 1 Jul 2025 04:57
  * all *efi blobs to usr/lib/efi, not ESP

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 03 Jul 2025 09:56:45 -0700

xen (4.20.0-1+deb13u3.9) trixie; urgency=medium

  * Non-maintainer upload.
  * fix 3.8 double install of perf hypervisor

 -- Mark Pryor <pryorm09@gmail.com>  Sun, 29 Jun 2025 00:55:24 -0700

xen (4.20.0-1+deb13u3.8) trixie; urgency=medium

  * Non-maintainer upload.
  * d/control: xen-perf-hypervisor, new package

 -- Mark Pryor <pryorm09@gmail.com>  Sun, 22 Jun 2025 20:54:47 -0700

xen (4.20.0-1+deb13u3.7) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ ddec00769cd80a44
    x86/emul: Fix emulation of RDSEED with older toolchains-Fri 16 May 2025 13:34

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 23 May 2025 11:58:04 -0700

xen (4.20.0-1+deb13u3.6) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ b1eeea44cd129ca5e
    cpufreq: dont leave stale statistics pointer-Tue 13 May 2025 04:56
  * d/scripts: repair py3 shebang

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 13 May 2025 08:37:38 -0700

xen (4.20.0-1+deb13u3.5) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 45056fe5c5bf866208bf8
    x86/spec-ctrl: Synthesise ITS_NO to guests on unaffected hardware-Mon 12 May 2025 09:27
  * XSA-469
    0100-x86-guest-Remove-use-of-the-Xen-hypercall_page.diff:This is part of XSA-469 / CVE-2024-28956
    0101-x86-thunk-Mis-align-__x86_indirect_thunk_-to-mitigate.diff:This is part of XSA-469 / CVE-2024-28956
    0102-x86-thunk-Mis-align-the-RETs-in-clear_bhb_loops-to-mi.diff:This is part of XSA-469 / CVE-2024-28956
    0103-x86-stubs-Introduce-place_ret-to-abstract-away-raw-0x.diff:This is part of XSA-469 / CVE-2024-28956
    0104-x86-thunk-Build-Xen-with-Return-Thunks.diff:This is part of XSA-469 / CVE-2024-28956
    0105-x86-spec-ctrl-Synthesise-ITS_NO-to-guests-on-unaffect.diff:This is part of XSA-469 / CVE-2024-28956

 -- Mark Pryor <pryorm09@gmail.com>  Mon, 12 May 2025 18:53:17 -0700

xen (4.20.0-1+deb13u3.4) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 35cb38b2220b15e122
    x86: constrain sub-page access length in mmio_ro_emulated_write-Tue 29 Apr 2025 11:47

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 29 Apr 2025 13:07:46 -0700

xen (4.20.0-1+deb13u3.3) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ e071b233944deee
    CI: Add yet another HW runner-Fri 4 Apr 2025 03:32
  * d/rules: libxenmisc4.20, all *.so.* must be versioned

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 04 Apr 2025 14:08:02 -0700

xen (4.20.0-1+deb13u3.2) trixie; urgency=medium

  * Non-maintainer upload.
  * HEAD @ c607822b5ae946cfc2
    x86/setup: correct off-by-1 in module mapping-Thu 20 Mar 2025 04:55
  * rules: binary-arch goes first, not binary-indep
    new in trixie the binary flag, not build is on debian/rules

 -- Mark Pryor <pryorm09@gmail.com>  Sat, 22 Mar 2025 10:45:54 -0700

xen (4.20.0-1+deb13u3.1) trixie; urgency=medium

  * HEAD @ 3ad5d648cda5add395f
    Update to Xen 4.20-Tue 4 Mar 2025 08:41
  * initial trixie build of 4.20.0, ported from bookworm
  * qemuu v9.1.0

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 07 Mar 2025 10:43:58 -0800

xen (4.20.0-1+deb12u3.1) bookworm; urgency=medium

  * HEAD @ 3ad5d648cda5add395f
    Update to Xen 4.20-Tue 4 Mar 2025 08:41
  * initial build of 4.20.0
  * XSA-467
    0557-IOMMU-x86-the-bus-to-bridge-lock-needs-to-be-acquired.diff:This is XSA-467 / CVE-2025-1713.

 -- Mark Pryor <pryorm09@gmail.com>  Tue, 04 Mar 2025 14:24:30 -0800

xen (4.20~rc5-1+deb12u3.1) bookworm; urgency=medium

  * HEAD @ ac8198c532f4e39659d5e5
    Switch to release builds by default-Fri 21 Feb 2025 06:58

 -- Mark Pryor <pryorm09@gmail.com>  Sat, 22 Feb 2025 13:09:43 -0800

xen (4.20~rc2-1+deb12u3.2) bookworm; urgency=medium

  * Non-maintainer upload.
  * HEAD @ 39c45caef271bc2b
    xen/arm: ffa: fix bind/unbind notification-Mon 3 Feb 2025 14:48
  * debug is off

 -- Mark Pryor <pryorm09@gmail.com>  Mon, 03 Feb 2025 20:20:34 -0800

xen (4.20~rc2-1+deb12u3.1) bookworm; urgency=medium

  * HEAD @ c3f5d1bb40b57d467
    automation/cirrus-ci: introduce FreeBSD randconfig builds-Fri 17 Jan 2025 07:00
  * qemuu: patch xen4k-0996* fix meson introspection

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 30 Jan 2025 15:32:27 -0800

xen (4.20~rc1-1+deb12u3.1) bookworm; urgency=medium

  * HEAD @ 19730dbb3fd8078743d5
    Update Xen version to 4.20-rc-Fri 10 Jan 2025 07:26
  * initial build of 4.20
  * qemuu: v9.1.0, add git depends

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 16 Jan 2025 11:22:04 -0800

xen (4.19.1-1+deb12u4.2) bookworm; urgency=medium

  * qemuu: v9.1.0, from staging
    test build for next gen qemu
  * HEAD @ 8dd897e691194929
    MISRA: Unmark Rules 1.1 and 2.1 as clean following Eclair upgrade-Tue 17 Dec 2024 14:01

 -- Mark Pryor <pryorm09@gmail.com>  Fri, 27 Dec 2024 18:42:23 -0800

xen (4.19.1-1+deb12u3.1) bookworm; urgency=medium

  * HEAD @ ccf400846780289ae779
    update Xen version to 4.19.1-Tue 3 Dec 2024 23:52
  * qemuu: v8.0.5
  * XSA-463
    0070-x86-HVM-drop-stdvga-s-cache-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0071-x86-HVM-drop-stdvga-s-stdvga-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0072-x86-HVM-remove-unused-MMIO-handling-code.diff:This is part of XSA-463 / CVE-2024-45818
    0073-x86-HVM-drop-stdvga-s-gr-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0074-x86-HVM-drop-stdvga-s-sr-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0075-x86-HVM-drop-stdvga-s-g-s-r_index-struct-members.diff:This is part of XSA-463 / CVE-2024-45818
    0076-x86-HVM-drop-stdvga-s-vram_page-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
    0077-x86-HVM-drop-stdvga-s-lock-struct-member.diff:This is part of XSA-463 / CVE-2024-45818
  * XSA-464
    0079-libxl-Use-zero-ed-memory-for-PVH-acpi-tables.diff:This is XSA-464 / CVE-2024-45819.

 -- Mark Pryor <pryorm09@gmail.com>  Thu, 05 Dec 2024 18:21:34 -0800
