From f44fd8a1b1c59c63c03a7bfb1ec0b0d47bf8f506 Mon Sep 17 00:00:00 2001 From: Reg Tiangha Date: Mon, 24 Apr 2017 23:02:30 -0600 Subject: [PATCH] Add in relevant XSA 157 security patches --- ...xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch | 0 ...xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch | 0 ...xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch | 0 rel | 2 +- series.conf | 4 ++++ 5 files changed, 5 insertions(+), 1 deletion(-) create mode 100644 patches.xen/xsa157-0003-xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch create mode 100644 patches.xen/xsa157-0004-xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch create mode 100644 patches.xen/xsa157-0005-xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch diff --git a/patches.xen/xsa157-0003-xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch b/patches.xen/xsa157-0003-xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch new file mode 100644 index 0000000..e69de29 diff --git a/patches.xen/xsa157-0004-xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch b/patches.xen/xsa157-0004-xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch new file mode 100644 index 0000000..e69de29 diff --git a/patches.xen/xsa157-0005-xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch b/patches.xen/xsa157-0005-xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch new file mode 100644 index 0000000..e69de29 diff --git a/rel b/rel index b1bd38b..8351c19 100644 --- a/rel +++ b/rel @@ -1 +1 @@ -13 +14 diff --git a/series.conf b/series.conf index 0950b46..4feb7f0 100644 --- a/series.conf +++ b/series.conf @@ -19,6 +19,10 @@ patches.xen/xsa155-linux44-0010-xen-netfront-do-not-use-data-already-exposed-to- patches.xen/xsa155-linux-0011-xen-netfront-add-range-check-for-Tx-response-id.patch patches.xen/xsa155-linux312-0012-xen-blkfront-make-local-copy-of-response-before-usin.patch patches.xen/xsa155-linux44-0013-xen-blkfront-prepare-request-locally-only-then-put-i.patch +patches.xen/xsa157-0003-xen-pciback-Do-not-install-an-IRQ-handler-for-MSI-in.patch +patches.xen/xsa157-0004-xen-pciback-For-XEN_PCI_OP_disable_msi-x-only-disabl.patch +patches.xen/xsa157-0005-xen-pciback-Don-t-allow-MSI-X-ops-if-PCI_COMMAND_MEM.patch + # MSI-X enabled device passthrough fix (#1734) patches.xen/pci_op-cleanup.patch