- bnc#777628 - guest "disappears" after live migration

Updated block-dmmd script

- fate#310510 - fix xenpaging
  restore changes to integrate paging into xm/xend
  xenpaging.autostart.patch
  xenpaging.doc.patch

- bnc#787163 - VUL-0: CVE-2012-4544: xen: Domain builder Out-of-
  memory due to malicious kernel/ramdisk (XSA 25)
  CVE-2012-4544-xsa25.patch
- bnc#779212 - VUL-0: CVE-2012-4411: XEN / qemu: guest
  administrator can access qemu monitor console (XSA-19)
  CVE-2012-4411-xsa19.patch

- bnc#786516 - VUL-0: CVE-2012-4535: xen: Timer overflow DoS
  vulnerability
  CVE-2012-4535-xsa20.patch
- bnc#786518 - VUL-0: CVE-2012-4536: xen: pirq range check DoS
  vulnerability
  CVE-2012-4536-xsa21.patch
- bnc#786517 - VUL-0: CVE-2012-4537: xen: Memory mapping failure
  DoS vulnerability
  CVE-2012-4537-xsa22.patch
- bnc#786519 - VUL-0: CVE-2012-4538: xen: Unhooking empty PAE
  entries DoS vulnerability
  CVE-2012-4538-xsa23.patch
- bnc#786520 - VUL-0: CVE-2012-4539: xen: Grant table hypercall
  infinite loop DoS vulnerability
  CVE-2012-4539-xsa24.patch

OBS-URL: https://build.opensuse.org/package/show/Virtualization/xen?expand=0&rev=212

xen.spec

@@ -15,7 +15,6 @@
 # Please submit bugfixes or comments via http://bugs.opensuse.org/
 #
 
-
 Name:           xen
 ExclusiveArch:  %ix86 x86_64
 %define xvers 4.2
@@ -186,15 +185,23 @@ Patch25866:     25866-sercon-ns16550-pci-irq.patch
 Patch25867:     25867-sercon-ns16550-parse.patch
 Patch25874:     25874-x86-EFI-chain-cfg.patch
 Patch25909:     25909-xenpm-consistent.patch
+Patch25920:     25920-x86-APICV-enable.patch
+Patch25921:     25921-x86-APICV-delivery.patch
+Patch25922:     25922-x86-APICV-x2APIC.patch
 Patch25927:     25927-x86-domctl-ioport-mapping-range.patch
 Patch25929:     25929-tmem-restore-pool-version.patch
 Patch25931:     25931-x86-domctl-iomem-mapping-checks.patch
 Patch25940:     25940-x86-S3-flush-cache.patch
 Patch25941:     25941-pygrub_always_append_--args.patch
 Patch25952:     25952-x86-MMIO-remap-permissions.patch
+Patch25957:     25957-x86-TSC-adjust-HVM.patch
+Patch25958:     25958-x86-TSC-adjust-sr.patch
+Patch25959:     25959-x86-TSC-adjust-expose.patch
 Patch25961:     25961-x86-HPET-interrupts.patch
 Patch25962:     25962-x86-assign-irq-vector-old.patch
 Patch25965:     25965-x86-ucode-Intel-resume.patch
+Patch25975:     25975-x86-IvyBridge.patch
+Patch25984:     25984-SVM-nested-paging-mode.patch
 Patch26006:     26006-hotplug-Linux_Remove_tracing_bash_-x_from_network-nat_script.patch
 Patch26007:     26007-xenballoond.init_remove_4_from_default_runlevel.patch
 Patch26008:     26008-xend-pvscsi_fix_passing_of_SCSI_control_LUNs.patch
@@ -202,7 +209,36 @@ Patch26009:     26009-xend-pvscsi_fix_usage_of_persistant_device_names_for_SCSI_
 Patch26010:     26010-xend-pvscsi_update_sysfs_parser_for_Linux_3.0.patch
 Patch26011:     26011-stubdom_fix_parallel_build_by_expanding_CROSS_MAKE.patch
 Patch26018:     26018-pygrub_correct_typo_in_--args_assignment.patch
+Patch26054:     26054-x86-AMD-perf-ctr-init.patch
+Patch26055:     26055-x86-oprof-hvm-mode.patch
+Patch26056:     26056-page-alloc-flush-filter.patch
+Patch26061:     26061-x86-oprof-counter-range.patch
+Patch26062:     26062-ACPI-ERST-move-data.patch
+Patch26063:     26063-x86-HPET-affinity-lock.patch
+Patch26077:     26077-stubdom_fix_compile_errors_in_grub.patch
+Patch26078:     26078-hotplug-Linux_remove_hotplug_support_rely_on_udev_instead.patch
+Patch26079:     26079-hotplug-Linux_close_lockfd_after_lock_attempt.patch
+Patch26081:     26081-stubdom_fix_rpmlint_warning_spurious-executable-perm.patch
+Patch26082:     26082-blktap2-libvhd_fix_rpmlint_warning_spurious-executable-perm.patch
+Patch26083:     26083-blktap_fix_rpmlint_warning_spurious-executable-perm.patch
+Patch26084:     26084-hotplug_install_hotplugpath.sh_as_data_file.patch
+Patch26085:     26085-stubdom_install_stubdompath.sh_as_data_file.patch
+Patch26086:     26086-hotplug-Linux_correct_sysconfig_tag_in_xendomains.patch
+Patch26087:     26087-hotplug-Linux_install_sysconfig_files_as_data_files.patch
+Patch26088:     26088-tools_xend_fix_wrong_condition_check_for_xml_file.patch
+Patch26093:     26093-HVM-PoD-grant-mem-type.patch
+Patch26095:     26095-SVM-nested-leak.patch
+Patch26096:     26096-SVM-nested-vmexit-emul.patch
+Patch26098:     26098-perfc-build.patch
+Patch26102:     26102-x86-IOAPIC-legacy-not-first.patch
+Patch26114:     26114-pygrub-list-entries.patch
+Patch20:        CVE-2012-4535-xsa20.patch
+Patch22:        CVE-2012-4537-xsa22.patch
+Patch23:        CVE-2012-4538-xsa23.patch
+Patch24:        CVE-2012-4539-xsa24.patch
+Patch25:        CVE-2012-4544-xsa25.patch
 # Upstream qemu patches
+Patch100:       VNC-Support-for-ExtendedKeyEvent-client-message.patch
 # Our patches
 Patch301:       xend-config.diff
 Patch302:       xen-destdir.diff
@@ -314,6 +350,8 @@ Patch650:       disable_emulated_device.diff
 Patch651:       ioemu-disable-scsi.patch
 Patch652:       ioemu-disable-emulated-ide-if-pv.patch
 Patch700:       hv_extid_compatibility.patch
+Patch800:       xenpaging.autostart.patch
+Patch801:       xenpaging.doc.patch
 # Build patch
 Patch99998:     tmp-initscript-modprobe.patch
 Patch99999:     tmp_build.patch
@@ -441,8 +479,8 @@ Requires:       python-pam
 Requires:       python-xml
 Requires:       xen-libs = %{version}
 # subpackage existed in 10.3
-Provides:       xen-tools-ioemu = 3.2
-Obsoletes:      xen-tools-ioemu <= 3.2
+Provides:       xen-tools-ioemu = %{version}
+Obsoletes:      xen-tools-ioemu < %{version}
 
 %description tools
 Xen is a virtual machine monitor for x86 that supports execution of
@@ -643,7 +681,7 @@ xpdf/kpdf/gpdf/gv/... to read the files in
 
 
 
-Authors:
+Authors
 --------
     Ian Pratt <ian.pratt@cl.cam.ac.uk>
 %endif
@@ -674,15 +712,23 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch25867 -p1
 %patch25874 -p1
 %patch25909 -p1
+%patch25920 -p1
+%patch25921 -p1
+%patch25922 -p1
 %patch25927 -p1
 %patch25929 -p1
 %patch25931 -p1
 %patch25940 -p1
 %patch25941 -p1
 %patch25952 -p1
+%patch25957 -p1
+%patch25958 -p1
+%patch25959 -p1
 %patch25961 -p1
 %patch25962 -p1
 %patch25965 -p1
+%patch25975 -p1
+%patch25984 -p1
 %patch26006 -p1
 %patch26007 -p1
 %patch26008 -p1
@@ -690,7 +736,36 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch26010 -p1
 %patch26011 -p1
 %patch26018 -p1
+%patch26054 -p1
+%patch26055 -p1
+%patch26056 -p1
+%patch26061 -p1
+%patch26062 -p1
+%patch26063 -p1
+%patch26077 -p1
+%patch26078 -p1
+%patch26079 -p1
+%patch26081 -p1
+%patch26082 -p1
+%patch26083 -p1
+%patch26084 -p1
+%patch26085 -p1
+%patch26086 -p1
+%patch26087 -p1
+%patch26088 -p1
+%patch26093 -p1
+%patch26095 -p1
+%patch26096 -p1
+%patch26098 -p1
+%patch26102 -p1
+%patch26114 -p1
+%patch20 -p1
+%patch22 -p1
+%patch23 -p1
+%patch24 -p1
+%patch25 -p1
 # Qemu
+%patch100 -p1
 # Our patches
 %patch301 -p1
 %patch302 -p1
@@ -799,6 +874,8 @@ tar xfj %{SOURCE6} -C $RPM_BUILD_DIR/%{xen_build_dir}/tools
 %patch651 -p1
 %patch652 -p1
 %patch700 -p1
+%patch800 -p1
+%patch801 -p1
 %patch99998 -p1
 %patch99999 -p1
 # tools/qemu-xen-traditional-dir-remote/configure ./tools/qemu-xen-dir-remote/configure use