# changelog

author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-5
changelog:
  - QEMU heap overflow flaw while processing certain ATAPI commands.
  	[XSA-138, CVE-2015-5154] (#1247142)
  - try again to fix xen-qemu-dom0-disk-backend.service (#1242246)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-6
changelog:
  - Use after free in QEMU/Xen block unplug protocol [XSA-139, CVE-2015-5166]
  	(#1249757)
  - QEMU leak of uninitialized heap memory in rtl8139 device model
  	[XSA-140, CVE-2015-5165] (#1249756)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-8
changelog:
  - libxl fails to honour readonly flag on disks with qemu-xen
  	[XSA-142, CVE-2015-7311] (#1257893) (final patch version)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-9
changelog:
  - ui/vnc: limit client_cut_text msg payload size [CVE-2015-5239] (#1259504)
  - e1000: Avoid infinite loop in processing transmit descriptor
  	[CVE-2015-6815] (#1260224)
  - net: add checks to validate ring buffer pointers [CVE-2015-5279] (#1263278)
  - net: avoid infinite loop when receiving packets [CVE-2015-5278] (#1263281)
  - qemu buffer overflow in virtio-serial [CVE-2015-5745] (#1251354)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-11
changelog:
  - create a symbolic link so libvirt VMs from xen 4.0 to 4.4 can still
  	find qemu-dm (#1268176), (#1248843)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.0-1
changelog:
  - update to xen-4.6.0
    xen-dumpdir.patch no longer needed
    adjust xen.use.fedora.ipxe.patch and xen.fedora.systemd.patch
    remove upstream patches
    add build fix for blktap2 to gcc5 fixes
    udev rules have now gone as have xen-syms in /boot
    package extra files 
      /etc/rc.d/init.d/xendriverdomain
      /usr/bin/xenalyze
      /usr/sbin/xentrace
      /usr/sbin/xentrace_setsize
      /usr/share/pkgconfig/*.pc
  - renumber patches
  - add build-requires for pandoc and discount to improve docs


author: unman <unman@thirdeyesecurity.org> - a383802
changelog:
  - Create configuration files in Debian Package. Also make requirement for passwordless sudo explicit


author: Marek Marczykowski-Górecki <marmarek@invisiblethingslab.com> - f209138
changelog:
  - rpm: use 
    CFLAGS="${CFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CFLAGS ; 
    CXXFLAGS="${CXXFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic}" ; export CXXFLAGS ; 
    FFLAGS="${FFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FFLAGS ; 
    FCFLAGS="${FCFLAGS:--O2 -g -pipe -Wall -Wp,-D_FORTIFY_SOURCE=2 -fexceptions -fstack-protector-strong --param=ssp-buffer-size=4 -grecord-gcc-switches   -m64 -mtune=generic -I/usr/lib64/gfortran/modules}" ; export FCFLAGS ; 
    LDFLAGS="${LDFLAGS:--Wl,-z,relro }" ; export LDFLAGS macro only when present


