CVS commit: pkgsrc/sysutils/xenkernel41

["Manuel Bouyer" <bouyer%netbsd.org@localhost>]

Module Name:    pkgsrc
Committed By:   bouyer
Date:           Thu Nov 27 15:36:02 UTC 2014

Modified Files:
        pkgsrc/sysutils/xenkernel41: Makefile distinfo
Added Files:
        pkgsrc/sysutils/xenkernel41/patches: patch-CVE-2014-7188
            patch-CVE-2014-8594 patch-CVE-2014-8595 patch-CVE-2014-8866
            patch-CVE-2014-8867 patch-CVE-2014-9030

Log Message:
backport patches from Xen advisory:
CVE-2014-7188/XSA-108:
x86/HVM: properly bound x2APIC MSR range, fixing:
A buggy or malicious HVM guest can crash the host or read data
relating to other guests or the hypervisor itself.

CVE-2014-8594/XSA-109:
x86: don't allow page table updates on non-PV page tables in do_mmu_update(),
fixing:
Malicious or buggy stub domain kernels or tool stacks otherwise living
outside of Domain0 can mount a denial of service attack which, if
successful, can affect the whole system.

CVE-2014-8595/XSA-110:
x86emul: enforce privilege level restrictions when loading CS, fixing:
Malicious HVM guest user mode code may be able to elevate its
privileges to guest supervisor mode, or to crash the guest.

CVE-2014-8866/XSA-111:
x86: limit checks in hypercall_xlat_continuation() to actual arguments, fixing:
A buggy or malicious HVM guest can crash the host.

CVE-2014-8867/XSA-112:
x86/HVM: confine internally handled MMIO to solitary regions, fixing:
A buggy or malicious HVM guest can crash the host.

CVE-2014-9030/XSA-113:
x86/mm: fix a reference counting error in MMU_MACHPHYS_UPDATE, fixing:
Malicious or buggy stub domain kernels or tool stacks otherwise living
outside of Domain0 can mount a denial of service attack which, if
successful, can affect the whole system.


To generate a diff of this commit:
cvs rdiff -u -r1.40 -r1.41 pkgsrc/sysutils/xenkernel41/Makefile
cvs rdiff -u -r1.31 -r1.32 pkgsrc/sysutils/xenkernel41/distinfo
cvs rdiff -u -r0 -r1.1 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-7188 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-8594 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-8595 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-8866 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-8867 \
    pkgsrc/sysutils/xenkernel41/patches/patch-CVE-2014-9030

Please note that diffs are not public domain; they are subject to the
copyright notices on the relevant files.