- Add upstream patch to fix vfb/vkb initialization in libxl

26369-libxl-devid.patch

- fate##313584: pass bios information to XEN HVM guest
  26554-hvm-firmware-passthrough.patch
  26555-hvm-firmware-passthrough.patch
  26556-hvm-firmware-passthrough.patch

- Upstream patches from Jan
  26516-ACPI-parse-table-retval.patch (Replaces CVE-2013-0153-xsa36.patch)
  26517-AMD-IOMMU-clear-irtes.patch (Replaces CVE-2013-0153-xsa36.patch)
  26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch (Replaces CVE-2013-0153-xsa36.patch)
  26519-AMD-IOMMU-perdev-intremap-default.patch (Replaces CVE-2013-0153-xsa36.patch)
  26526-pvdrv-no-devinit.patch
  26529-gcc48-build-fix.patch
  26531-AMD-IOMMU-IVHD-special-missing.patch (Replaces CVE-2013-0153-xsa36.patch)
  26532-AMD-IOMMU-phantom-MSI.patch
  26536-xenoprof-div-by-0.patch
  26576-x86-APICV-migration.patch
  26577-x86-APICV-x2APIC.patch
  26578-AMD-IOMMU-replace-BUG_ON.patch

- bnc#797014 - no way to control live migrations
  26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch
  26548-tools-xc_handle_tty_output_differently_in_stdiostream_progress.patch
  26549-tools-xc_turn_XCFLAGS_*_into_shifts.patch
  26550-tools-xc_restore_logging_in_xc_save.patch
  26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch

- PVonHVM: __devinit was removed in linux-3.8

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=229

xen.spec

@@ -15,6 +15,8 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
+# needssslcertforbuild
+
 Name:           xen
 ExclusiveArch:  %ix86 x86_64
 %define xvers 4.2
@@ -114,7 +116,7 @@ BuildRequires:  kernel-syms
 BuildRequires:  module-init-tools
 BuildRequires:  xorg-x11
 %endif
-Version:        4.2.1_04
+Version:        4.2.1_06
 Release:        0
 PreReq:         %insserv_prereq %fillup_prereq
 Summary:        Xen Virtualization: Hypervisor (aka VMM aka Microkernel)
@@ -206,6 +208,7 @@ Patch26255:     26255-VMX-nested-ia32e-mode.patch
 Patch26258:     26258-VMX-nested-intr-delivery.patch
 Patch26262:     26262-x86-EFI-secure-shim.patch
 Patch26266:     26266-sched-ratelimit-check.patch
+Patch26287:     26287-sched-credit-pick-idle.patch
 Patch26294:     26294-x86-AMD-Fam15-way-access-filter.patch
 Patch26320:     26320-IOMMU-domctl-assign-seg.patch
 Patch26324:     26324-IOMMU-assign-params.patch
@@ -218,16 +221,47 @@ Patch26330:     26330-VT-d-phantom-MSI.patch
 Patch26331:     26331-IOMMU-phantom-dev-quirk.patch
 Patch26332:     26332-x86-compat-show-guest-stack-mfn.patch
 Patch26333:     26333-x86-get_page_type-assert.patch
+Patch26340:     26340-VT-d-intremap-verify-legacy-bridge.patch
 Patch26341:     26341-hvm-firmware-passthrough.patch
 Patch26342:     26342-hvm-firmware-passthrough.patch
 Patch26343:     26343-hvm-firmware-passthrough.patch
 Patch26344:     26344-hvm-firmware-passthrough.patch
+Patch26369:     26369-libxl-devid.patch
+Patch26370:     26370-libxc-x86-initial-mapping-fit.patch
 Patch26372:     26372-tools-paths.patch
+Patch26395:     26395-x86-FPU-context-conditional.patch
+Patch26404:     26404-x86-forward-both-NMI-kinds.patch
+Patch26418:     26418-x86-trampoline-consider-multiboot.patch
+Patch26427:     26427-x86-AMD-enable-WC+.patch
+Patch26428:     26428-x86-HVM-RTC-update.patch
+Patch26440:     26440-x86-forward-SERR.patch
+Patch26443:     26443-ACPI-zap-DMAR.patch
+Patch26444:     26444-x86-nHVM-no-self-enable.patch
 Patch26468:     26468-libxl-race.patch
 Patch26469:     26469-libxl-race.patch
-Patch33:        CVE-2012-5634-xsa33.patch
+Patch26501:     26501-VMX-simplify-CR0-update.patch
+Patch26502:     26502-VMX-disable-SMEP-when-not-paging.patch
+Patch26516:     26516-ACPI-parse-table-retval.patch
+Patch26517:     26517-AMD-IOMMU-clear-irtes.patch
+Patch26518:     26518-AMD-IOMMU-disable-if-SATA-combined-mode.patch
+Patch26519:     26519-AMD-IOMMU-perdev-intremap-default.patch
+Patch26526:     26526-pvdrv-no-devinit.patch
+Patch26529:     26529-gcc48-build-fix.patch
+Patch26531:     26531-AMD-IOMMU-IVHD-special-missing.patch
+Patch26532:     26532-AMD-IOMMU-phantom-MSI.patch
+Patch26536:     26536-xenoprof-div-by-0.patch
+Patch26547:     26547-tools-xc_fix_logic_error_in_stdiostream_progress.patch
+Patch26548:     26548-tools-xc_handle_tty_output_differently_in_stdiostream_progress.patch
+Patch26549:     26549-tools-xc_turn_XCFLAGS_*_into_shifts.patch
+Patch26550:     26550-tools-xc_restore_logging_in_xc_save.patch
+Patch26551:     26551-tools-xc_log_pid_in_xc_save-xc_restore_output.patch
+Patch26554:     26554-hvm-firmware-passthrough.patch
+Patch26555:     26555-hvm-firmware-passthrough.patch
+Patch26556:     26556-hvm-firmware-passthrough.patch
+Patch26576:     26576-x86-APICV-migration.patch
+Patch26577:     26577-x86-APICV-x2APIC.patch
+Patch26578:     26578-AMD-IOMMU-replace-BUG_ON.patch
 Patch34:        CVE-2013-0151-xsa34.patch
-Patch35:        CVE-2013-0152-xsa35.patch
 Patch41:        CVE-2012-6075-xsa41.patch
 # Upstream qemu patches
 Patch100:       VNC-Support-for-ExtendedKeyEvent-client-message.patch
@@ -324,6 +358,7 @@ Patch460:       blktap-disable-debug-printf.patch
 Patch461:       xen-glibc217.patch
 Patch462:       xen-migration-bridge-check.patch
 Patch463:       pygrub-netware-xnloader.patch
+Patch464:       xen-managed-pci-device.patch
 # Jim's domain lock patch
 Patch480:       xend-domain-lock.patch
 Patch481:       xend-domain-lock-sfex.patch
@@ -339,7 +374,6 @@ Patch507:       blktap-pv-cdrom.patch
 Patch511:       supported_module.diff
 Patch512:       magic_ioport_compat.patch
 Patch513:       xen.sles11sp1.fate311487.xen_platform_pci.dmistring.patch
-Patch514:       x86-fpu-context-conditional.patch
 Patch650:       disable_emulated_device.diff
 Patch651:       ioemu-disable-scsi.patch
 Patch652:       ioemu-disable-emulated-ide-if-pv.patch
@@ -726,6 +760,7 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch26258 -p1
 %patch26262 -p1
 %patch26266 -p1
+%patch26287 -p1
 %patch26294 -p1
 %patch26320 -p1
 %patch26324 -p1
@@ -738,16 +773,47 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch26331 -p1
 %patch26332 -p1
 %patch26333 -p1
+%patch26340 -p1
 %patch26341 -p1
 %patch26342 -p1
 %patch26343 -p1
 %patch26344 -p1
+%patch26369 -p1
+%patch26370 -p1
 %patch26372 -p1
+%patch26395 -p1
+%patch26404 -p1
+%patch26418 -p1
+%patch26427 -p1
+%patch26428 -p1
+%patch26440 -p1
+%patch26443 -p1
+%patch34 -p1
+%patch26444 -p1
 %patch26468 -p1
 %patch26469 -p1
-%patch33 -p1
-%patch34 -p1
-%patch35 -p1
+%patch26501 -p1
+%patch26502 -p1
+%patch26516 -p1
+%patch26517 -p1
+%patch26518 -p1
+%patch26519 -p1
+%patch26526 -p1
+%patch26529 -p1
+%patch26531 -p1
+%patch26532 -p1
+%patch26536 -p1
+%patch26547 -p1
+%patch26548 -p1
+%patch26549 -p1
+%patch26550 -p1
+%patch26551 -p1
+%patch26554 -p1
+%patch26555 -p1
+%patch26556 -p1
+%patch26576 -p1
+%patch26577 -p1
+%patch26578 -p1
 %patch41 -p1
 # Qemu
 %patch100 -p1
@@ -841,6 +907,7 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch461 -p1
 %patch462 -p1
 %patch463 -p1
+%patch464 -p1
 %patch480 -p1
 %patch481 -p1
 %patch500 -p1
@@ -854,7 +921,6 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch511 -p1
 %patch512 -p1
 %patch513 -p1
-%patch514 -p1
 %patch650 -p1
 %patch651 -p1
 %patch652 -p1
@@ -981,6 +1047,7 @@ make -C tools/misc/serial-split install \
 %if %{?with_kmp}0
 export INSTALL_MOD_PATH=$RPM_BUILD_ROOT
 export INSTALL_MOD_DIR=updates
+export BRP_PESIGN_FILES="*.ko /lib/firmware"
 mkdir -p $RPM_BUILD_ROOT/etc/modprobe.d
 for flavor in %flavors_to_build; do
     make -C /usr/src/linux-obj/%_target_cpu/$flavor modules_install \