xen-doc-html-4.16.3_02-150400.4.19.1 >
A c'p9|+Z+*J8i p: y~ vaxT?} (s
-wU0/8 g9& yzt.\Q~bO\ ݵ|썕w=˵! v G$sW\zk~*ph~g9uw[f\= Ylpb/+ଡ0؋I8-iT i8\6ѯf;&ଉ碮TطSfcb6f16f7750845d95811d96b99ce5f45dbb86bc 74dc7ee4484155fbcd55a007a2d1bfa06157bca80d864221a2793abc9adf8240 c'p9|?beL⊚N Aq iWFR*TL쓅#Ϋ#SqN:)Љ-7˳UFF7.BPs\Iq'䐂;W;-ŀEA`GXZ} th{7d7ޘ~_$2M?fa
W86}NoXƾTI30gNKQP@ )btp:\&%bZAڷI~ywF=C zDet
߆KTu#ɔ
1 > p ; ht ? hd d ' N ! 4 d j t M M B M
M M M
, M ` M M b M s ( 8 9 $ : A F Y G Z M H [D M I \x M X \ Y \ \ ] M ] ^4 M ^ b b d c ea d e e e f e l e u e M v g0 z h h h h h` C xen-doc-html 4.16.3_02 150400.4.19.1 Xen Virtualization: HTML documentation Xen is a virtual machine monitor for x86 that supports execution of
multiple guest operating systems with unprecedented levels of
performance and resource isolation.
xen-doc-html contains the online documentation in HTML format. Point
your browser at file:/usr/share/doc/packages/xen/html/
Authors:
--------
Ian Pratt c&ibs-arm-5 SUSE Linux Enterprise 15 SUSE LLC GPL-2.0-only https://www.suse.com/ Documentation/HTML http://www.cl.cam.ac.uk/Research/SRG/netos/xen/ linux aarch64 o 9 D D f f 6 @ ! 7 : %% B , W u ` x e
, 7 4 j b < 3
" z ? 6:
~ _,AAAA큤A큤A큤A큤A큤A큤A큤A큤 c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c&c& e171864f5cfbf7c7b3fecd9b9fbeb3da9e87f63a7284ee52eeed093f8ad303ec f53beaf653f26eae12ff7ced3bf0735dbedad0d8baf45d31e32d33e0b868bfa9 54e980d65bcde307bad2efeab9640ef5c720b4ebc78ac8cc1eb48bd6134a5280 b3422df9c1ad850ce9b456e83713da51f123c2286cf1f9fd4eb97f57c3eca9ad 4d5655b848478d12c6c2c5d36245ca8fe70185be7b6fff72a79386f6109c19d9 7db3487e1712e6e91cf2e83301c4afb4d10c4ab23843e483f9d9211b8a0e0f92 f62b4090098e5d648e9a3e615874b2e5957a93990f652eefc831d37779ba9106 9dbe69397d6c3d3c6d88c564032ba62cb41a6b8260a73fd9d6513c186d64199f 078f07651ae04fc86183bc953a94d4437042b3a3e5182bfd03e899ed64ce4bbd f80257ef0688b6b53ccd52a4bbd9279568b22b31211e95cb4c6e86b81614a381 a55797477d608095a2cbf4526e7ef4c158dcba9980487a77aab8d5a84aefbd59 552220026e67bd430e5b304d7a0cc6f68daf49e69ccd67dbd6513900157988d1 57a3c97dd9b5d0e15039a54492006ac3ed1356e8683bbdf46ce2b8479b5f73d1 a7e48587d2f183661b88e81f10a4e0405088d3803c77e653b2940738a1c12f16 571ae7f9be57ee6a2d9d78cf833fd5e08a8360a1f44ab3ba460e9937ae61c6fd a1561fc2c8e9f678a6d82f32e41a48eeb6fcaaa0a775dbb9b48288c0f74d4434 70d0a0d37169adb67569317d91415a0bcdeaf0c7870a806bb55b70092e120039 13a9c456e1d8e004ff68d58686ccc8dbb0ef298481c2dadcbf30c638c625218d e466c9be077fa0ef0ced23a246e92d14cc0cc8fd757931079cf928689b544b32 6b03382516373fc9221dc98277ed58043f0d5b49a8cf0913e57e5e47220c2c96 bc7abdb1f733000c2cd91b519cbf7c55d096115abfef000da14ac794739fe8f0 32667fb9cbbac74a5f570403138c3e4d867ea77c6fc95e70ba4fdff2ef750540 ded3add1a44dd1298e13dbe706f9a303f3b2169e18eb7d8afa43d0464f4ace15 b741678581ac645da37fa4cdfa4c3c602c351dc47c9c0fa8b07fc10142cf6aff 375a71ad5eb7dde68bb773a606662abad08fa2a2f3860227eec1b2407a9b2264 93148ffe03119920c64f63da6aa53ef03dd33f917366e9143ff5554de63efe30 51c10cae0185f7c5bea5a20e99e40969df3726bbdd77db25c1c26361dcc8b5ef ab9514ece856bbb81ac352d4e6b5305c483da5f79a6c3640cfd952a71c0d6231 df5076c347e7cad2371f3dc0bc10c6877c8f5251a5a57ddc6c79e1f9b532f89f 9b3fc4dd2d139ace9382e594c2c73439a9d4f100fc61c4e4f9294d4239776620 fbf590c80aef40b7e6ab58cefe9e4351ef6afaa6bcaf4e55d7809df6392fdb96 aadfa0507b89d930b9500c7a95869685253e2082a4d704ad9ab9a720307e4e19 1989687616e164c363919761520b4ec298040923ba0e81e80e2a109ebcd8493a 99bed13b5892956fe3e089f71165b3f1d0bab1933377ae18d5aac741b675cc97 ec2154a382909b7652464c29ad603492e27c76bd7d0de3b5198d0867fe0a75eb d93bafe2e73cf681a88dca3217d79376c353ff4e1e5ecee8c41c70e11b8c9e2d 035fb0e8e9f548dc627762cbef894c8883cd591b04e950657fd7c6331d08588b 976728897864907825a5a2538c25cd0aa407ba15e58bed9f42232379103f1ee4 6160242648729b430f01c57403535a4cd52e480fa8aeba2b6662bf636d14522c d4115f30ef64ca379480cc3f7942064bc9ae61a0571b678a53a15101377c29bf 91b95599c26b803f2c8bfb407d7ea7de55a783c40780dcb7f993af187e4d4200 a7cd1ffaf63b68eb2cc3c3d663847edfeeeed22d3b1039b423ec94b5198ad7da ba0315ada992171ac097279a5924539c83bc431e243edc9efd772f673fd5301b 140fc1f3662a9f28dad3d46c6109d50dda8ab7e3af59058d2f3345e4a088beb1 3a9b4163966919de58c0d14d493b5d7c6826e43bd61f2eda3c2a4a33fd26f285 982fb97cc7b4730fc7c1c5289c87cc4d1dfe6184c7908079cfb34de8b6d4d200 2727defb43b8e75f2a55e2f65c93740ed4fa79a0d9c3d12d34d17b9e0ea1415a 9037f947f713649a84322888eb75d9dad867249c4c135787affea14ee1cf2c50 b4403362cc91e5249e9a32270b77e1d08f1217206215cbdcbd7b4f179b7787b0 f3c8f4ff267024ce34b71a94cd25cd12cad0101afc7b5f32169f1301620f4c6f b1f10e378ccf028b0040d857506d6a2f9f9f7202547fb83347ebc6cf52cf4d32 e5ce0ba02ee2e02e5a32250506538b1c7a8382c80e04075e83b251b9c40cb689 1f086e043731368850e313269ca98ab91c156529ac3b961a67f54a522ef09396 d1032374e126552c4666ac09f0cf1d3bd1687064fa9694c6eabf9bbda392e9fb e9845d2b4b1163c8f2f71b3f232161df132b103360ee3fb48495eabd71c2be87 437b2d33715486da3e3443c567a5b9cb6b8f54c07b3fac562cc7f7d20c570e6d f66605f996aa6d38f8234276f2b8fa5c54a10903b7fa29d49d6dbdae30ef984b 372a6dbe9c2786b09c1d722ffa63f7cff6848a3b35a68d4fbd7770dfee8c9157 c4151eb9d4bb2e16e25f710099b13ab6c7b0dec076e76d504e091cf2642a805f a1cef3daed932a283854dfa6885376356cdae55f1a25058434b7dc802799580d 949dfa9ba419d8ae6c787a68f50810c5cc2d2904163f6ca5ff803d9d396b4181 ba0315ada992171ac097279a5924539c83bc431e243edc9efd772f673fd5301b e9845d2b4b1163c8f2f71b3f232161df132b103360ee3fb48495eabd71c2be87 7ddd78c09fea51a9bd902b99b0a12a9449ff469ac582d0c7a9a9f39fc339d09e 372a6dbe9c2786b09c1d722ffa63f7cff6848a3b35a68d4fbd7770dfee8c9157 b2709c08b7242f635c9bb1cda97d7ceef1e463cc266af4211cbecc3c3a22e635 root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root root xen-4.16.3_02-150400.4.19.1.src.rpm xen-doc-html xen-doc-html(aarch-64)
rpmlib(CompressedFileNames) rpmlib(FileDigests) rpmlib(PartialHardlinkSets) rpmlib(PayloadFilesHavePrefix) rpmlib(PayloadIsXz) 3.0.4-1 4.6.0-1 4.0.4-1 4.0-1 5.2-1 4.14.3 ccR@clc[@cWcOcOc47@c @c@b)bz@bγbγbb@b@b@b@bzSbV@bP#bJb/.@b b
D@a@aaq@aa6a@aaca@@a7T@a,@a Ga
$@a
@`@` @`@`E` @``
@`!@`@````}p`\{@`KW`F`B @`8`4@`.V`#`>` l___@_H@__إ@_إ@_S_$_______ @_"__E@_i@_h_d@_cO_[f_X_O@_N7_*@_'@_@_{_^)@^^@^3^ϧ^x^@^@^^^{G^r
@^j$@^g@^_@^Nt^K^=Q@^:@^0"@^ @^@]]]N@]@]ʞ])]c@] @]@]@]]fl]fl]M`@]B@]/
],j] ]@]@] ] ]
#]]@\\ޢ@\ڭ\\@\@\@\,@\7\\N\@\\+@\\M\M\\\@\}@\k\X)@\J@\I\A\? \=@\9\73\4\$\l@[H[k@[@[^[^[ā@[@[@[9@[v[W[CN@[<[6 @[0@[0@['[!@[5@Z@ZnZ @ZZZ@ZmZԐ@ZZZ@ZZ}@Z}@Z}@Z}@Zz@Zz@Zo Zk@ZV @ZS]@ZOhZ:PZ1@Z.s@Z&@Z OZ OZ Z Z Z@Z@Z
}ZC@ZYYY Y|Y@Y{Y*@Y5YA@Y4YYYbY Y@Y3Y@YJYJY@YYV@Y@Ym@Yw2Yp@YlYh@Yh@YS@YJ_YI@Y5GY0Y-^Y(Y"Y Y ;@YY Y@YtY.X@XQ@X@XۡXg@X@X@X@X @X@X@X@X @XXX@XXXwoXs{@XlXWXRXQ4@XEVX43@X.@X*X lX&X@XX@W@W֘W֘W^@WiW:Wt@W.@W9WW@Wk@Wi,@WbWZWZWZWYZ@WV@WEWBW=W;W3 W1@W1@W,@W(W(W(W(W(W#LWVbV(@V3V@V@V'@VV2V͛@VŲ@V`VwVVV=@VV@VHV@VvV%@VV<@V@VS@VV@V^VwVqR@Vn@VXEVUVTQ@VMVMVMVA@V;DV9@V7P@V0V*!@V V @V CVVVf@VqV@UYU@U @UUݪ@U @UnU4@UUK@UU@UU>U>Ux&Un@U\w@U[%UUUPUKSU>$U6;U%@U U@UUU .@TgT-@TT@TZ@TZ@T@T T@T5T@TLTLT~@Tl@Ti@Ta@TJ?@T?@T=@jbeulich@suse.com carnold@suse.com carnold@suse.com carnold@suse.com jbeulich@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com jbeulich@suse.com carnold@suse.com schubi@suse.com jbeulich@suse.com jbeulich@suse.com dmueller@suse.com carnold@suse.com jbeulich@suse.com carnold@suse.com jbeulich@suse.com carnold@suse.com jbeulich@suse.com carnold@suse.com carnold@suse.com carnold@suse.com jbeulich@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de jbeulich@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de jbeulich@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com jbeulich@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com guillaume.gardet@opensuse.org callumjfarmer13@gmail.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com callumjfarmer13@gmail.com carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com dimstar@opensuse.org carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com mcepl@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com jfehlig@suse.com ohering@suse.de mliska@suse.cz ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com jengelh@inai.de guillaume.gardet@opensuse.org guillaume.gardet@opensuse.org bwiedemann@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de bwiedemann@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com trenn@suse.de carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de jfehlig@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de rbrown@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com jfehlig@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com jfehlig@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de jfehlig@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com ohering@suse.de jfehlig@suse.com carnold@suse.com jfehlig@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com mlatimer@suse.com carnold@suse.com cyliu@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com jfehlig@suse.com carnold@suse.com carnold@suse.com ohering@suse.de carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com ohering@suse.de rguenther@suse.com carnold@suse.com carnold@suse.com carnold@suse.com rguenther@suse.com carnold@suse.com meissner@suse.com carnold@suse.com ohering@suse.de carnold@suse.com carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de carnold@suse.com ohering@suse.de ohering@suse.de ohering@suse.de ohering@suse.de carnold@suse.com carnold@suse.com carnold@suse.com carnold@suse.com - Upstream bug fixes (bsc#1027519)
63a03e28-x86-high-freq-TSC-overflow.patch - Update to Xen 4.16.3 bug fix release (bsc#1027519)
xen-4.16.3-testing-src.tar.bz2
* No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch
6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
631b5ba6-gnttab-acquire-resource-vaddrs.patch
63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
63455fe4-x86-HAP-monitor-table-error-handling.patch
63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
6345601d-x86-tolerate-shadow_prealloc-failure.patch
6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
63456075-x86-P2M-free-paging-pool-preemptively.patch
63456090-x86-p2m_teardown-preemption.patch
63456175-libxl-per-arch-extra-default-paging-memory.patch
63456177-Arm-construct-P2M-pool-for-guests.patch
6345617a-Arm-XEN_DOMCTL_shadow_op.patch
6345617c-Arm-take-P2M-pages-P2M-pool.patch
634561aa-gnttab-locking-on-transitive-copy-error-path.patch
634561f1-x86emul-respect-NSCB.patch
6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
6351095c-Arm-rework-p2m_init.patch
6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
635665fb-sched-fix-restore_vcpu_affinity.patch
63569723-x86-shadow-replace-bogus-assertions.patch
636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch
xsa326-01.patch
xsa326-02.patch
xsa326-03.patch
xsa326-04.patch
xsa326-05.patch
xsa326-06.patch
xsa326-07.patch
xsa326-08.patch
xsa326-09.patch
xsa326-10.patch
xsa326-11.patch
xsa326-12.patch
xsa326-13.patch
xsa326-14.patch
xsa326-15.patch
xsa326-16.patch
xsa412.patch
xsa414.patch
xsa415.patch
xsa416.patch
xsa417.patch
xsa418-01.patch
xsa418-02.patch
xsa418-03.patch
xsa418-04.patch
xsa418-05.patch
xsa418-06.patch
xsa418-07.patch
xsa419-01.patch
xsa419-02.patch
xsa419-03.patch
xsa421-01.patch
xsa421-02.patch - bsc#1205209 - VUL-0: CVE-2022-23824: xen: x86: Multiple
speculative security issues (XSA-422)
636a9130-x86-spec-ctrl-Enumeration-for-IBPB_RET.patch
636a9130-x86-spec-ctrl-Mitigate-IBPB-not-flushing-the-RSB-RAS.patch - bsc#1193923 - VUL-1: xen: Frontends vulnerable to backends
(XSA-376)
61dd5f64-limit-support-statement-for-Linux-and-Windows-frontends.patch - bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
take excessively long (XSA-410)
63455f82-Arm-P2M-prevent-adding-mapping-when-dying.patch
63455fa8-Arm-P2M-preempt-when-freeing-intermediate.patch
63455fc3-x86-p2m_teardown-allow-skip-root-pt-removal.patch
63455fe4-x86-HAP-monitor-table-error-handling.patch
63456000-x86-tolerate-sh_set_toplevel_shadow-failure.patch
6345601d-x86-tolerate-shadow_prealloc-failure.patch
6345603a-x86-P2M-refuse-new-alloc-for-dying.patch
63456057-x86-P2M-truly-free-paging-pool-for-dying.patch
63456075-x86-P2M-free-paging-pool-preemptively.patch
63456090-x86-p2m_teardown-preemption.patch
- bcs#1203804 - VUL-0: CVE-2022-33747: xen: unbounded memory consumption
for 2nd-level page tables on ARM systems (XSA-409)
63456175-libxl-per-arch-extra-default-paging-memory.patch
63456177-Arm-construct-P2M-pool-for-guests.patch
6345617a-Arm-XEN_DOMCTL_shadow_op.patch
6345617c-Arm-take-P2M-pages-P2M-pool.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
transitive grant copy handling (XSA-411)
634561aa-gnttab-locking-on-transitive-copy-error-path.patch
- Upstream bug fixes (bsc#1027519)
6306185f-x86-XSTATE-CPUID-subleaf-1-EBX.patch
631b5ba6-gnttab-acquire-resource-vaddrs.patch
634561f1-x86emul-respect-NSCB.patch
6346e404-VMX-correct-error-handling-in-vmx_create_vmcs.patch
6351095c-Arm-rework-p2m_init.patch
6351096a-Arm-P2M-populate-pages-for-GICv2-mapping.patch
635274c0-EFI-dont-convert-runtime-mem-to-RAM.patch
635665fb-sched-fix-restore_vcpu_affinity.patch
63569723-x86-shadow-replace-bogus-assertions.patch
- Drop patches replaced by upstream versions:
xsa410-01.patch
xsa410-02.patch
xsa410-03.patch
xsa410-04.patch
xsa410-05.patch
xsa410-06.patch
xsa410-07.patch
xsa410-08.patch
xsa410-09.patch
xsa410-10.patch
xsa411.patch - bsc#1204482 - VUL-0: CVE-2022-42311, CVE-2022-42312,
CVE-2022-42313, CVE-2022-42314, CVE-2022-42315, CVE-2022-42316,
CVE-2022-42317, CVE-2022-42318: xen: Xenstore: Guests can let
xenstored run out of memory (XSA-326)
xsa326-01.patch
xsa326-02.patch
xsa326-03.patch
xsa326-04.patch
xsa326-05.patch
xsa326-06.patch
xsa326-07.patch
xsa326-08.patch
xsa326-09.patch
xsa326-10.patch
xsa326-11.patch
xsa326-12.patch
xsa326-13.patch
xsa326-14.patch
xsa326-15.patch
xsa326-16.patch
- bsc#1204485 - VUL-0: CVE-2022-42309: xen: Xenstore: Guests can
crash xenstored (XSA-414)
xsa414.patch
- bsc#1204487 - VUL-0: CVE-2022-42310: xen: Xenstore: Guests can
create orphaned Xenstore nodes (XSA-415)
xsa415.patch
- bsc#1204488 - VUL-0: CVE-2022-42319: xen: Xenstore: Guests can
cause Xenstore to not free temporary memory (XSA-416)
xsa416.patch
- bsc#1204489 - VUL-0: CVE-2022-42320: xen: Xenstore: Guests can
get access to Xenstore nodes of deleted domains (XSA-417)
xsa417.patch
- bsc#1204490 - VUL-0: CVE-2022-42321: xen: Xenstore: Guests can
crash xenstored via exhausting the stack (XSA-418)
xsa418-01.patch
xsa418-02.patch
xsa418-03.patch
xsa418-04.patch
xsa418-05.patch
xsa418-06.patch
xsa418-07.patch
- bsc#1204494 - VUL-0: CVE-2022-42322,CVE-2022-42323: xen:
Xenstore: cooperating guests can create arbitrary numbers of
nodes (XSA-419)
xsa419-01.patch
xsa419-02.patch
xsa419-03.patch
- bsc#1204496 - VUL-0: CVE-2022-42325,CVE-2022-42326: xen:
Xenstore: Guests can create arbitray number of nodes via
transactions (XSA-421)
xsa421-01.patch
xsa421-02.patch - bsc#1204483 - VUL-0: CVE-2022-42327: xen: x86: unintended memory
sharing between guests (XSA-412)
xsa412.patch - bsc#1203806 - VUL-0: CVE-2022-33746: xen: P2M pool freeing may
take excessively long (XSA-410)
xsa410-01.patch
xsa410-02.patch
xsa410-03.patch
xsa410-04.patch
xsa410-05.patch
xsa410-06.patch
xsa410-07.patch
xsa410-08.patch
xsa410-09.patch
xsa410-10.patch
- bsc#1203807 - VUL-0: CVE-2022-33748: xen: lock order inversion in
transitive grant copy handling (XSA-411)
xsa411.patch - bsc#1201994 - Xen DomU unable to emulate audio device
62fde97e-tools-libxl-Replace-deprecated-soundhw-on-QEMU-command-line.patch - Things are compiling fine now with gcc12.
Drop gcc12-fixes.patch - Update to Xen 4.16.2 bug fix release (bsc#1027519)
xen-4.16.2-testing-src.tar.bz2
* No upstream changelog found in sources or webpage
- Drop patches contained in new tarball
625fca42-VT-d-reserved-CAP-ND.patch
626f7ee8-x86-MSR-handle-P5-MC-reads.patch
627549d6-IO-shutdown-race.patch
62a1e594-x86-clean-up-_get_page_type.patch
62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
62a1e649-x86-track-and-flush-non-coherent.patch
62a99614-IOMMU-x86-gcc12.patch
62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
62c56cc0-libxc-fix-compilation-error-with-gcc13.patch
62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
62cc31ee-cmdline-extend-parse_boolean.patch
62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
62cd91d0-x86-spec-ctrl-rework-context-switching.patch
62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
62cd91d5-x86-cpuid-BTC_NO-enum.patch
62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
xsa408.patch - bsc#1167608, bsc#1201631 - fix built-in default of max_event_channels
A previous change to the built-in default had a logic error,
effectively restoring the upstream limit of 1023 channels per domU.
Fix the logic to calculate the default based on the number of vcpus.
adjust libxl.max_event_channels.patch - Added --disable-pvshim when running configure in xen.spec.
We have never shipped the shim and don't need to build it. - bsc#1199965 - VUL-0: CVE-2022-26362: xen: Race condition
in typeref acquisition
62a1e594-x86-clean-up-_get_page_type.patch
62a1e5b0-x86-ABAC-race-in-_get_page_type.patch
- bsc#1199966 - VUL-0: CVE-2022-26363,CVE-2022-26364: xen:
Insufficient care with non-coherent mappings
62a1e5d2-x86-introduce-_PAGE_-for-mem-types.patch
62a1e5f0-x86-dont-change-cacheability-of-directmap.patch
62a1e60e-x86-split-cache_flush-out-of-cache_writeback.patch
62a1e62b-x86-AMD-work-around-CLFLUSH-ordering.patch
62a1e649-x86-track-and-flush-non-coherent.patch
- bsc#1200549 VUL-0: CVE-2022-21123,CVE-2022-21125,CVE-2022-21166:
xen: x86: MMIO Stale Data vulnerabilities (XSA-404)
62ab0fab-x86-spec-ctrl-VERW-flushing-runtime-cond.patch
62ab0fac-x86-spec-ctrl-enum-for-MMIO-Stale-Data.patch
62ab0fad-x86-spec-ctrl-add-unpriv-mmio.patch
- bsc#1201469 - VUL-0: CVE-2022-23816,CVE-2022-23825,CVE-2022-29900:
xen: retbleed - arbitrary speculative code execution with return
instructions (XSA-407)
62cc31ed-x86-honour-spec-ctrl-0-for-unpriv-mmio.patch
62cc31ee-cmdline-extend-parse_boolean.patch
62cc31ef-x86-spec-ctrl-fine-grained-cmdline-subopts.patch
62cd91d0-x86-spec-ctrl-rework-context-switching.patch
62cd91d1-x86-spec-ctrl-rename-SCF_ist_wrmsr.patch
62cd91d2-x86-spec-ctrl-rename-opt_ibpb.patch
62cd91d3-x86-spec-ctrl-rework-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
62cd91d4-x86-spec-ctrl-IBPB-on-entry.patch
62cd91d5-x86-cpuid-BTC_NO-enum.patch
62cd91d6-x86-spec-ctrl-enable-Zen2-chickenbit.patch
62cd91d7-x86-spec-ctrl-mitigate-Branch-Type-Confusion.patch
- Upstream bug fixes (bsc#1027519)
62a99614-IOMMU-x86-gcc12.patch
62bdd840-x86-spec-ctrl-only-adjust-idle-with-legacy-IBRS.patch
62bdd841-x86-spec-ctrl-knobs-for-STIBP-and-PSFD.patch
- Drop patches replaced by upstream versions
xsa401-1.patch
xsa401-2.patch
xsa402-1.patch
xsa402-2.patch
xsa402-3.patch
xsa402-4.patch
xsa402-5.patch - bsc#1201394 - VUL-0: CVE-2022-33745: xen: insufficient TLB flush
for x86 PV guests in shadow mode (XSA-408)
xsa408.patch
- Fix gcc13 compilation error
62c56cc0-libxc-fix-compilation-error-with-gcc13.patch - Moved logrotate files from user specific directory /etc/logrotate.d
to vendor specific directory /usr/etc/logrotate.d. - bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen:
Insufficient care with non-coherent mappings
fix xsa402-5.patch - Upstream bug fixes (bsc#1027519)
625fca42-VT-d-reserved-CAP-ND.patch
626f7ee8-x86-MSR-handle-P5-MC-reads.patch
627549d6-IO-shutdown-race.patch
- bsc#1199965 - VUL-0: EMBARGOED: CVE-2022-26362: xen: Race condition
in typeref acquisition
xsa401-1.patch
xsa401-2.patch
- bsc#1199966 - VUL-0: EMBARGOED: CVE-2022-26363,CVE-2022-26364: xen:
Insufficient care with non-coherent mappings
xsa402-1.patch
xsa402-2.patch
xsa402-3.patch
xsa402-4.patch
xsa402-5.patch - fix python3 >= 3.10 version detection - Update to Xen 4.16.1 bug fix release (bsc#1027519)
xen-4.16.1-testing-src.tar.bz2
- Drop patches contained in new tarball
61b31d5c-x86-restrict-all-but-self-IPI.patch
61b88e78-x86-CPUID-TSXLDTRK-definition.patch
61bc429f-revert-hvmloader-PA-range-should-be-UC.patch
61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch
61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch
61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch
61e0296a-x86-time-calibration-relative-counts.patch
61e029c8-x86-time-TSC-freq-calibration-accuracy.patch
61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch
61e98e88-x86-introduce-get-set-reg-infra.patch
61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch
61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch
61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch
61eaaa23-x86-get-set-reg-infra-build.patch
61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch
61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch
61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch
61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch
61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch
61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch
61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch
61f933a4-x86-cpuid-advertise-SSB_NO.patch
61f933a5-x86-drop-use_spec_ctrl-boolean.patch
61f933a6-x86-new-has_spec_ctrl-boolean.patch
61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch
61f933a8-x86-SPEC_CTRL-record-last-write.patch
61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch
61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch
61f933ab-x86-AMD-SPEC_CTRL-infra.patch
61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch
61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch
6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch
6202afa4-x86-TSX-move-has_rtm_always_abort.patch
6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch
6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch
6202afa8-x86-Intel-PSFD-for-guests.patch
62278667-Arm-introduce-new-processors.patch
62278668-Arm-move-errata-CSV2-check-earlier.patch
62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch
6227866a-Arm-Spectre-BHB-handling.patch
6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch
6227866c-x86-AMD-cease-using-thunk-lfence.patch
6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch
624ebcef-VT-d-dont-needlessly-look-up-DID.patch
624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch
624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch
xsa397.patch
xsa399.patch
xsa400-01.patch
xsa400-02.patch
xsa400-03.patch
xsa400-04.patch
xsa400-05.patch
xsa400-06.patch
xsa400-07.patch
xsa400-08.patch
xsa400-09.patch
xsa400-10.patch
xsa400-11.patch
xsa400-12.patch - bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359,
CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity
map (AMD-Vi) handling issues (XSA-400)
624ebcef-VT-d-dont-needlessly-look-up-DID.patch
624ebd3b-VT-d-avoid-NULL-deref-on-dcmo-error-paths.patch
624ebd74-VT-d-avoid-infinite-recursion-on-dcmo-error-path.patch - bsc#1197423 - VUL-0: CVE-2022-26356: xen: Racy interactions
between dirty vram tracking and paging log dirty hypercalls
(XSA-397)
xsa397.patch
- bsc#1197425 - VUL-0: CVE-2022-26357: xen: race in VT-d domain ID
cleanup (XSA-399)
xsa399.patch
- bsc#1197426 - VUL-0: CVE-2022-26358,CVE-2022-26359,
CVE-2022-26360,CVE-2022-26361: xen: IOMMU: RMRR (VT-d) and unity
map (AMD-Vi) handling issues (XSA-400)
xsa400-01.patch
xsa400-02.patch
xsa400-03.patch
xsa400-04.patch
xsa400-05.patch
xsa400-06.patch
xsa400-07.patch
xsa400-08.patch
xsa400-09.patch
xsa400-10.patch
xsa400-11.patch
xsa400-12.patch
- Additional upstream bug fixes for XSA-400 (bsc#1027519)
61d6ea2d-VT-d-split-domid-map-cleanup-check-into-a-function.patch
61d6ea7b-VT-d-dont-leak-domid-mapping-on-error-path.patch
6229ba46-VT-d-drop-undue-address-of-from-check_cleanup_domid_map.patch - bsc#1196915 - VUL-0: CVE-2022-0001, CVE-2022-0002,CVE-2021-26401:
xen: BHB speculation issues (XSA-398)
62278667-Arm-introduce-new-processors.patch
62278668-Arm-move-errata-CSV2-check-earlier.patch
62278669-Arm-add-ECBHB-and-CLEARBHB-ID-fields.patch
6227866a-Arm-Spectre-BHB-handling.patch
6227866b-Arm-allow-SMCCC_ARCH_WORKAROUND_3-use.patch
6227866c-x86-AMD-cease-using-thunk-lfence.patch - bsc#1196545 - GCC 12: xen package fails
gcc12-fixes.patch - Upstream bug fixes (bsc#1027519)
61e0296a-x86-time-calibration-relative-counts.patch
61e029c8-x86-time-TSC-freq-calibration-accuracy.patch
61e02a1c-libxl-PCI-PV-hotplug-stubdom-coldplug.patch
61e98e88-x86-introduce-get-set-reg-infra.patch
61e98e89-x86-MSR-split-SPEC_CTRL-handling.patch
61e98e8a-x86-spec-ctrl-drop-ENTRY-EXIT-HVM.patch
61e98e8b-VT-x-SPEC_CTRL-NMI-race-condition.patch
61eaaa23-x86-get-set-reg-infra-build.patch
61efec1d-Arm-P2M-always-clear-entry-on-mapping-removal.patch
61efec4d-gnttab-only-decrement-refcounter-on-final-unmap.patch
61efec96-IOMMU-x86-stop-pirq-iteration-immediately-on-error.patch
61f2d886-x86-CPUID-disentangle-new-leaves-logic.patch
61f2d887-x86-CPUID-leaf-7-1-EBX-infra.patch
61f2dd76-x86-SPEC_CTRL-migration-compatibility.patch
61f7b2af-libxl-dont-touch-nr_vcpus_out-if-listing.patch
61f933a4-x86-cpuid-advertise-SSB_NO.patch
61f933a5-x86-drop-use_spec_ctrl-boolean.patch
61f933a6-x86-new-has_spec_ctrl-boolean.patch
61f933a7-x86-dont-use-spec_ctrl-enter-exit-for-S3.patch
61f933a8-x86-SPEC_CTRL-record-last-write.patch
61f933a9-x86-SPEC_CTRL-use-common-logic-for-AMD.patch
61f933aa-SVM-SPEC_CTRL-entry-exit-logic.patch
61f933ab-x86-AMD-SPEC_CTRL-infra.patch
61f933ac-SVM-enable-MSR_SPEC_CTRL-for-guests.patch
61f946a2-VMX-drop-SPEC_CTRL-load-on-VMEntry.patch
6202afa3-x86-clean-up-MSR_MCU_OPT_CTRL-handling.patch
6202afa4-x86-TSX-move-has_rtm_always_abort.patch
6202afa5-x86-TSX-cope-with-deprecation-on-WHL-R-CFL-R.patch
6202afa7-x86-CPUID-leaf-7-2-EDX-infra.patch
6202afa8-x86-Intel-PSFD-for-guests.patch
- Drop patches replaced by the above:
xsa393.patch
xsa394.patch
xsa395.patch
libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch
libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch
libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch - bsc#1194576 - VUL-0: CVE-2022-23033: xen: arm:
guest_physmap_remove_page not removing the p2m mappings (XSA-393)
xsa393.patch
- bsc#1194581 - VUL-0: CVE-2022-23034: xen: a PV guest could DoS
Xen while unmapping a grant (XSA-394)
xsa394.patch
- bsc#1194588 - VUL-0: CVE-2022-23035: xen: insufficient cleanup of
passed-through device IRQs (XSA-395)
xsa395.patch - bsc#1191668 - L3: issue around xl and virsh operation - virsh
list not giving any output
libxl-dont-try-to-free-a-NULL-list-of-vcpus.patch
libxl-dont-touch-nr_vcpus_out-if-listing-vcpus-and-returning-NULL.patch - bsc#1193307 - pci backend does not exist when attach a vf to a pv
guest
libxl-Fix-PV-hotplug-and-stubdom-coldplug.patch
Drop libxl-PCI-defer-backend-wait.patch - bsc#1193447 - Slow execution of hvmloader+ovmf when VM contains
an sriov device
61bc429f-revert-hvmloader-PA-range-should-be-UC.patch
- Upstream bug fixes (bsc#1027519)
61b31d5c-x86-restrict-all-but-self-IPI.patch
61b88e78-x86-CPUID-TSXLDTRK-definition.patch
61d5687a-x86-spec-ctrl-opt_srb_lock-default.patch - Collect active VM config files in the supportconfig plugin
xen-supportconfig - Now that the ovmf package has been updated, reset the configure
script to use ovmf-x86_64-xen-4m.bin from ovmf-x86_64-ms.bin
References bsc#1194105, bsc#1193274
xen.spec - bsc#1193307 - pci backend does not exist when attach a vf to a pv
guest
libxl-PCI-defer-backend-wait.patch - Update to Xen 4.16.0 FCS release
xen-4.16.0-testing-src.tar.bz2
* Miscellaneous fixes to the TPM manager software in preparation
for TPM 2.0 support.
* Increased reliance on the PV shim as 32-bit PV guests will only
be supported in shim mode going forward. This change reduces
the attack surface in the hypervisor.
* Increased hardware support by allowing Xen to boot on Intel
devices that lack a Programmable Interval Timer.
* Cleanup of legacy components by no longer building QEMU
Traditional or PV-Grub by default. Note both projects have
upstream Xen support merged now, so it is no longer recommended
to use the Xen specific forks.
* Initial support for guest virtualized Performance Monitor
Counters on Arm.
* Improved support for dom0less mode by allowing the usage on
Arm 64bit hardware with EFI firmware.
* Improved support for Arm 64-bit heterogeneous systems by
leveling the CPU features across all to improve big.LITTLE
support.
- bsc#1193274 - [Build67.2][Xen][uefi] xen fullvirt uefi guest can
not be created with default 'type=plash' in virt-manager
xen.spec - Update to Xen 4.16.0 RC4 release (jsc#SLE-18467)
xen-4.16.0-testing-src.tar.bz2
* Xen can now export Intel Processor Trace (IPT) data from guests to tools in dom0.
* Xen now supports Viridian enlightenments for guests with more than 64 vcpus.
* Xenstored and oxenstored both now support LiveUpdate (tech preview).
* Unified boot images
* Switched x86 MSR accesses to deny by default policy.
* Named PCI devices for xl/libxl and improved documentation for xl PCI configuration format.
* Support for zstd-compressed dom0 (x86) and domU kernels.
* Reduce ACPI verbosity by default.
* Add ucode=allow-same option to test late microcode loading path.
* Library improvements from NetBSD ports upstreamed.
* x86: Allow domains to use AVX-VNNI instructions.
* Added XEN_SCRIPT_DIR configuration option to specify location for Xen scripts.
* xennet: Documented a way for the backend (or toolstack) to specify MTU to the frontend.
* On detecting a host crash, some debug key handlers can automatically triggered to aid in debugging.
* Increase the maximum number of guests which can share a single IRQ from 7 to 16, and make this configurable with irq-max-guests.
- Drop iPXE sources and patches. iPXE is only used by QEMU
traditional which has never shipped with SLE15.
ipxe.tar.bz2
ipxe-enable-nics.patch
ipxe-no-error-logical-not-parentheses.patch
ipxe-use-rpm-opt-flags.patch
- Drop building ocaml xenstored in the spec file. There are no
plans or need to support this version.
- Drop patches contained in new tarball or no longer required
5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch
5ffc58c4-ACPI-reduce-verbosity-by-default.patch
602ffae9-tools-libs-light-fix-xl-save--c-handling.patch
608676f2-VT-d-register-based-invalidation-optional.patch
60a27288-x86emul-gas-2-36-test-harness-build.patch
60af933d-x86-gcc11-hypervisor-build.patch
60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch
60afe617-x86-TSX-minor-cleanup-and-improvements.patch
60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch
60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch
60be0e24-credit2-pick-runnable-unit.patch
60be0e42-credit2-per-entity-load-tracking-when-continuing.patch
60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch
60bf9e19-Arm-create-dom0less-domUs-earlier.patch
60bf9e1a-Arm-boot-modules-scrubbing.patch
60bf9e1b-VT-d-size-qinval-queue-dynamically.patch
60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch
60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch
60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch
60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch
60bfa904-AMD-IOMMU-wait-for-command-slot.patch
60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch
60c0bf86-x86-TSX-cope-with-deprecation.patch
60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch
60c8de6e-osdep_xenforeignmemory_map-prototype.patch
60d49689-VT-d-undo-device-mappings-upon-error.patch
60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch
60d496d6-VT-d-clear_fault_bits-should-clear-all.patch
60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch
60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch
61001231-x86-work-around-GNU-ld-2-37-issue.patch
61122ac6-credit2-avoid-spuriously-picking-idle.patch
611a7e38-x86-CET-shstk-WARN-manipulation.patch
611cba4e-VT-d-Tylersburg-errata-more-steppings.patch
611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch
6126339d-AMD-IOMMU-global-ER-extending.patch
6126344f-AMD-IOMMU-unity-map-handling.patch
61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch
6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch
6126349a-AMD-IOMMU-rearrange-reassignment.patch
612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch
612634c3-x86-p2m-introduce-p2m_is_special.patch
612634dc-x86-p2m-guard-identity-mappings.patch
612634f4-x86-mm-widen-locked-region-in-xatp1.patch
6126350a-gnttab-release-mappings-preemption.patch
6126351f-gnttab-replace-mapkind.patch
6126353d-gnttab-get-status-frames-array-capacity.patch
61263553-Arm-restrict-maxmem-for-dom0less.patch
6128a856-gnttab-radix-tree-node-init.patch
init.xen_loop
libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch
libxc-bitmap-longs.patch
libxc.migrate_tracking.patch
libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch
libxc-sr-add-xc_is_known_page_type.patch
libxc-sr-arrays.patch
libxc-sr-batch_pfns.patch
libxc-sr-page_type_has_stream_data.patch
libxc.sr.superpage.patch
libxc-sr-use-xc_is_known_page_type.patch
libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch
libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch
libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch
libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch
libxl-85760c03d664400368a3f76ae0225307c25049a7.patch
libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch
libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch
libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch
libxl.fix-libacpi-dependency.patch
libxl-qemu6-scsi.patch
libxl-qemu6-vnc-password.patch
libxl.set-migration-constraints-from-cmdline.patch
reproducible.patch
stubdom-have-iovec.patch
x86-cpufreq-report.patch
xenstore-launch.patch
xenwatchdogd-options.patch
xsa384.patch - bsc#1189632 - VUL-0: CVE-2021-28701: xen: Another race in
XENMAPSPACE_grant_table handling (XSA-384)
xsa384.patch
- Upstream bug fixes (bsc#1027519)
61001231-x86-work-around-GNU-ld-2-37-issue.patch
611a7e38-x86-CET-shstk-WARN-manipulation.patch
611cba4e-VT-d-Tylersburg-errata-more-steppings.patch
611f844b-AMD-IOMMU-dont-leave-pt-mapped.patch
6128a856-gnttab-radix-tree-node-init.patch
61122ac6-credit2-avoid-spuriously-picking-idle.patch (Replaces
credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch)
6126339d-AMD-IOMMU-global-ER-extending.patch (Replaces xsa378-1.patch)
6126344f-AMD-IOMMU-unity-map-handling.patch (Replaces xsa378-2.patch)
61263464-IOMMU-pass-access-to-p2m_get_iommu_flags.patch (Replaces xsa378-3.patch)
6126347d-IOMMU-generalize-VT-d-mapped-RMRR-tracking.patch (Replaces xsa378-4.patch)
6126349a-AMD-IOMMU-rearrange-reassignment.patch (Replaces xsa378-5.patch)
612634ae-AMD-IOMMU-rearrange-ER-UM-recording.patch (Replaces xsa378-6.patch)
612634c3-x86-p2m-introduce-p2m_is_special.patch (Replaces xsa378-7.patch)
612634dc-x86-p2m-guard-identity-mappings.patch (Replaces xsa378-8.patch)
612634f4-x86-mm-widen-locked-region-in-xatp1.patch (Replaces xsa379.patch)
6126350a-gnttab-release-mappings-preemption.patch (Replaces xsa380-1.patch
6126351f-gnttab-replace-mapkind.patch (Replaces xsa380-2.patch)
6126353d-gnttab-get-status-frames-array-capacity.patch (Replaces xsa382.patch)
61263553-Arm-restrict-maxmem-for-dom0less.patch (Replaces xsa383.patch) - bsc#1189882 - refresh libxc.sr.superpage.patch
prevent superpage allocation in the LAPIC and ACPI_INFO range - bsc#1189373 - VUL-0: CVE-2021-28694,CVE-2021-28695,
CVE-2021-28696: xen: IOMMU page mapping issues on x86 (XSA-378)
xsa378-1.patch
xsa378-2.patch
xsa378-3.patch
xsa378-4.patch
xsa378-5.patch
xsa378-6.patch
xsa378-7.patch
xsa378-8.patch
- bsc#1189376 - VUL-0: CVE-2021-28697: xen: grant table v2 status
pages may remain accessible after de-allocation. (XSA-379)
xsa379.patch
- bsc#1189378 - VUL-0: CVE-2021-28698: xen: long running loops in
grant table handling. (XSA-380)
xsa380-1.patch
xsa380-2.patch
- bsc#1189380 - VUL-0: CVE-2021-28699: xen: inadequate grant-v2
status frames array bounds check. (XSA-382)
xsa382.patch
- bsc#1189381 - VUL-0: CVE-2021-28700: xen: xen/arm: No memory
limit for dom0less domUs. (XSA-383)
xsa383.patch - bsc#1188050 - L3: Xen guest yval1a80 SLES11SP4 hangs on cluster
See also bsc#1179246.
credit2-avoid-picking-a-spurious-idle-unit-when-caps-are-used.patch - Drop aarch64-maybe-uninitialized.patch as the fix is in tarball. - refresh the migration patches to state v20210713
removed libxc-sr-add-xc_is_known_page_type.patch
removed libxc-sr-arrays.patch
removed libxc-sr-batch_pfns.patch
removed libxc-sr-page_type_has_stream_data.patch
removed libxc-sr-use-xc_is_known_page_type.patch
removed libxc.migrate_tracking.patch
removed libxc.sr.superpage.patch
removed libxl.set-migration-constraints-from-cmdline.patch
added libxc-sr-383b41974d5543b62f3181d216070fe3691fb130.patch
added libxc-sr-5588ebcfca774477cf823949e5703b0ac48818cc.patch
added libxc-sr-9e59d9f8ee3808acde9833192211da25f66d8cc2.patch
added libxc-sr-LIBXL_HAVE_DOMAIN_SUSPEND_PROPS.patch
added libxc-sr-abort_if_busy.patch
added libxc-sr-f17a73b3c0264c62dd6b5dae01ed621c051c3038.patch
added libxc-sr-max_iters.patch
added libxc-sr-min_remaining.patch
added libxc-sr-number-of-iterations.patch
added libxc-sr-precopy_policy.patch
added libxc-sr-restore-hvm-legacy-superpage.patch
added libxc-sr-track-migration-time.patch
added libxc-sr-xg_sr_bitmap-populated_pfns.patch
added libxc-sr-xg_sr_bitmap.patch
added libxc-sr-xl-migration-debug.patch - bsc#1176189 - xl monitoring process exits during xl save -p|-c
keep the monitoring process running to cleanup the domU during shutdown
xl-save-pc.patch - bsc#1179246 - Dom0 hangs when pinning CPUs for dom0 with HVM guest
60be0e24-credit2-pick-runnable-unit.patch
60be0e42-credit2-per-entity-load-tracking-when-continuing.patch
- Upstream bug fixes (bsc#1027519)
60bf9e19-Arm-create-dom0less-domUs-earlier.patch (Replaces xsa372-1.patch)
60bf9e1a-Arm-boot-modules-scrubbing.patch (Replaces xsa372-2.patch)
60bf9e1b-VT-d-size-qinval-queue-dynamically.patch (Replaces xsa373-1.patch)
60bf9e1c-AMD-IOMMU-size-command-buffer-dynamically.patch (Replaces xsa373-2.patch)
60bf9e1d-VT-d-eliminate-flush-related-timeouts.patch (Replaces xsa373-2.patch)
60bf9e1e-x86-spec-ctrl-protect-against-SCSB.patch (Replaces xsa375.patch)
60bf9e1f-x86-spec-ctrl-mitigate-TAA-after-S3.patch (Replaces xsa377.patch)
60bfa904-AMD-IOMMU-wait-for-command-slot.patch (Replaces xsa373-4.patch)
60bfa906-AMD-IOMMU-drop-command-completion-timeout.patch (Replaces xsa373-5.patch)
60afe617-x86-TSX-minor-cleanup-and-improvements.patch
60afe618-x86-TSX-deprecate-vpmu=rtm-abort.patch
60be3097-x86-CPUID-fix-HLE-and-RTM-handling-again.patch
60c0bf86-x86-TSX-cope-with-deprecation.patch
60c8a7ac-x86-vpt-fully-init-timers-before-enlisting.patch
60c8de6e-osdep_xenforeignmemory_map-prototype.patch
60d49689-VT-d-undo-device-mappings-upon-error.patch
60d496b9-VT-d-adjust-domid-map-updating-on-unmap.patch
60d496d6-VT-d-clear_fault_bits-should-clear-all.patch
60d496ee-VT-d-dont-lose-errors-on-multi-IOMMU-flush.patch
60d5c6df-IOMMU-PCI-dont-let-domain-cleanup-continue.patch
- Dropped gcc11-fixes.patch - bsc#1183243 - L3: Core cannot be opened when using xl dump-core
of VM with PTF
60ba695e-tools-libs-ctrl-fix-xc_core_arch_map_p2m-to-support.patch - bsc#1180350 - some long deprecated commands were finally removed
in qemu6. Adjust libxl to use supported commands.
libxl-d5f54009dba11d04bfe2a28eee47b994de66b84a.patch
libxl-f3f778c81769075ac0eb93b98d4b2803e7936453.patch
libxl-4e217db45e83fc3173382306c8b03da86099a25d.patch
libxl-85760c03d664400368a3f76ae0225307c25049a7.patch
libxl-0ff26a3225d69ffec76fe5aca8296852fa951204.patch
libxl-7c313e8365eb663311a0cf39f77b4f5880244765.patch
libxl-0c0b3a7e4a2d65fd252b89b46bdcdb048bb24b6c.patch
libxl-fe6630ddc4e8a8fbf8dd28a1bc58e3881393f9c1.patch
libxl-qemu6-vnc-password.patch
libxl-qemu6-scsi.patch - Update logrotate.conf, move global options into per-file sections
to prevent globbering of global state (bsc#1187406) - Fix shell macro expansion in xen.spec, so that ExecStart=
in xendomains-wait-disks.service is created correctly (bsc#1183877) - bsc#1186428 - VUL-0: CVE-2021-28693: xen: xen/arm: Boot modules
are not scrubbed (XSA-372)
xsa372-1.patch
xsa372-2.patch
- bsc#1186429 - VUL-0: CVE-2021-28692: xen: inappropriate x86 IOMMU
timeout detection / handling (XSA-373)
xsa373-1.patch
xsa373-2.patch
xsa373-3.patch
xsa373-4.patch
xsa373-5.patch
- bsc#1186433 - VUL-0: CVE-2021-0089: xen: Speculative Code Store
Bypass (XSA-375)
xsa375.patch
- bsc#1186434 - VUL-0: CVE-2021-28690: xen: x86: TSX Async Abort
protections not restored after S3 (XSA-377)
xsa377.patch
- Upstream bug fixes (bsc#1027519)
60a27288-x86emul-gas-2-36-test-harness-build.patch
60af933d-x86-gcc11-hypervisor-build.patch
60afe616-x86-CPUID-rework-HLE-and-RTM-handling.patch - Upstream bug fix (bsc#1027519)
608676f2-VT-d-register-based-invalidation-optional.patch - Add xen.sysconfig-fillup.patch to make sure xencommons is in a
format as expected by fillup. (bsc#1185682)
Each comment needs to be followed by an enabled key. Otherwise
fillup will remove manually enabled key=value pairs, along with
everything that looks like a stale comment, during next pkg update - Refresh xenstore-launch.patch to cover also daemon case - Update to Xen 4.14.2 bug fix release (bsc#1027519)
xen-4.14.2-testing-src.tar.bz2
- Drop patches contained in new tarball
5fedf9f4-x86-hpet_setup-fix-retval.patch
5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch
5ff71655-x86-dpci-EOI-regardless-of-masking.patch
5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch
600999ad-x86-dpci-do-not-remove-pirqs-from.patch
600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch
6011bbc7-x86-timer-fix-boot-without-PIT.patch
6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch
6013e546-x86-HVM-reorder-domain-init-error-path.patch
601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch
602bd768-page_alloc-only-flush-after-scrubbing.patch
602cfe3d-IOMMU-check-if-initialized-before-teardown.patch
602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch
602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch
6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch
60410127-gcc11-adjust-rijndaelEncrypt.patch
60422428-x86-shadow-avoid-fast-fault-path.patch
604b9070-VT-d-disable-QI-IR-before-init.patch
60535c11-libxl-domain-soft-reset.patch
60700077-x86-vpt-avoid-pt_migrate-rwlock.patch
60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch
60787714-x86-HPET-avoid-legacy-replacement-mode.patch - bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!"
60787714-x86-HPET-avoid-legacy-replacement-mode.patch
60787714-x86-HPET-factor-legacy-replacement-mode-enabling.patch
- Upstream bug fixes (bsc#1027519)
60410127-gcc11-adjust-rijndaelEncrypt.patch
60422428-x86-shadow-avoid-fast-fault-path.patch
604b9070-VT-d-disable-QI-IR-before-init.patch
60535c11-libxl-domain-soft-reset.patch (Replaces xsa368.patch)
60700077-x86-vpt-avoid-pt_migrate-rwlock.patch - bsc#1137251 - Restore changes for xen-dom0-modules.service which
were silently removed on 2019-10-17 - bsc#1177112 - Fix libxc.sr.superpage.patch
The receiving side did detect holes in a to-be-allocated superpage,
but allocated a superpage anyway. This resulted to over-allocation. - bsc#1167608 - adjust limit for max_event_channels
A previous change allowed an unbound number of event channels
to make sure even large domUs can start of of the box.
This may have a bad side effect in the light of XSA-344.
Adjust the built-in limit based on the number of vcpus.
In case this is not enough, max_event_channels=/maxEventChannels=
has to be used to set the limit as needed for large domUs
adjust libxl.max_event_channels.patch - bsc#1183072 - VUL-0: CVE-2021-28687: xen: HVM soft-reset crashes
toolstack (XSA-368). Also resolves,
bsc#1179148 - kdump of HVM fails, soft-reset not handled by libxl
bsc#1181989 - openQA job causes libvirtd to dump core when
running kdump inside domain
xsa368.patch - bsc#1177204 - L3-Question: conring size for XEN HV's with huge
memory to small. Inital Xen logs cut
5ffc58c4-ACPI-reduce-verbosity-by-default.patch
- Upstream bug fixes (bsc#1027519)
601d4396-x86-EFI-suppress-ld-2-36-debug-info.patch
602bd768-page_alloc-only-flush-after-scrubbing.patch
602cfe3d-IOMMU-check-if-initialized-before-teardown.patch
602e5a8c-gnttab-never-permit-mapping-transitive-grants.patch
602e5abb-gnttab-bypass-IOMMU-when-mapping-own-grant.patch
6037b02e-x86-EFI-suppress-ld-2-36-base-relocs.patch
- bsc#1181921 - GCC 11: xen package fails
gcc11-fixes.patch - bsc#1182576 - L3: XEN domU crashed on resume when using the xl
unpause command
602ffae9-tools-libs-light-fix-xl-save--c-handling.patch - Start using the %autosetup macro to simplify patch management
xen.spec - bsc#1181921 - GCC 11: xen package fails
gcc11-fixes.patch
- Drop gcc10-fixes.patch - Upstream bug fixes (bsc#1027519)
5fedf9f4-x86-hpet_setup-fix-retval.patch
5ff458f2-x86-vPCI-tolerate-disabled-MSI-X-entry.patch
5ff71655-x86-dpci-EOI-regardless-of-masking.patch
5ffc58e8-x86-ACPI-dont-overwrite-FADT.patch
600999ad-x86-dpci-do-not-remove-pirqs-from.patch (Replaces xsa360.patch)
600ab341-x86-vioapic-EOI-check-IRR-before-inject.patch
6013e4bd-memory-bail-from-page-scrub-when-CPU-offline.patch
6013e546-x86-HVM-reorder-domain-init-error-path.patch
- bsc#1180491 - "Panic on CPU 0: IO-APIC + timer doesn't work!"
6011bbc7-x86-timer-fix-boot-without-PIT.patch - bsc#1181254 - VUL-0: xen: IRQ vector leak on x86 (XSA-360)
xsa360.patch - bsc#1180794 - bogus qemu binary path used when creating fv guest
under xen
xen.spec - bsc#1180690 - L3-Question: xen: no needsreboot flag set
Add Provides: installhint(reboot-needed) in xen.spec for libzypp - Update libxl.set-migration-constraints-from-cmdline.patch
Remove code which handled --max_factor. The total amount of
transferred data is no indicator to trigger the final stop+copy.
This should have been removed during upgrade to Xen 4.7.
Fix off-by-one in --max_iters, it caused one additional copy cycle.
Reduce default value of --max_iters from 5 to 2.
The workload within domU will continue to produce dirty pages.
It is unreasonable to expect any slowdown during migration.
Now there is one initial copy of all memory, one instead of four
iteration for dirty memory, and a final copy iteration prior move. - Update to Xen 4.14.1 bug fix release (bsc#1027519)
xen-4.14.1-testing-src.tar.bz2
Contains the following recent security fixes
bsc#1179516 XSA-359 - CVE-2020-29571
bsc#1179514 XSA-358 - CVE-2020-29570
bsc#1179513 XSA-356 - CVE-2020-29567
bsc#1178963 XSA-355 - CVE-2020-29040
bsc#1178591 XSA-351 - CVE-2020-28368
bsc#1179506 XSA-348 - CVE-2020-29566
bsc#1179502 XSA-325 - CVE-2020-29483
bsc#1179501 XSA-324 - CVE-2020-29484
bsc#1179498 XSA-322 - CVE-2020-29481
bsc#1179496 XSA-115 - CVE-2020-29480
- Dropped patches contained in new tarball
5f1a9916-x86-S3-put-data-sregs-into-known-state.patch
5f21b9fd-x86-cpuid-APIC-bit-clearing.patch
5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch
5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch
5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch
5f560c42-x86-PV-64bit-segbase-consistency.patch
5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch
5f5b6b7a-hypfs-fix-custom-param-writes.patch
5f607915-x86-HVM-more-consistent-IO-completion.patch
5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch
5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch
5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch
5f6a008e-x86-MSI-drop-read_msi_msg.patch
5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch
5f6a00c4-evtchn-relax-port_is_valid.patch
5f6a00df-x86-PV-avoid-double-exception-injection.patch
5f6a00f4-evtchn-add-missing-barriers.patch
5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch
5f6a013f-evtchn_reset-shouldnt-succeed-with.patch
5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch
5f6a0178-evtchn-address-races-with-evtchn_reset.patch
5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch
5f6a01c6-evtchn-preempt-in-evtchn_reset.patch
5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch
5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch
5f71a21e-x86-S3-fix-shadow-stack-resume.patch
5f76ca65-evtchn-Flask-prealloc-for-send.patch
5f76caaf-evtchn-FIFO-use-stable-fields.patch
5f897c25-x86-traps-fix-read_registers-for-DF.patch
5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch
5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch
5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch
5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch
5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch
5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch
5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch
5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch
5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch
xsa286-1.patch
xsa286-2.patch
xsa286-3.patch
xsa286-4.patch
xsa286-5.patch
xsa286-6.patch
xsa351-1.patch
xsa351-2.patch
xsa351-3.patch
xsa355.patch - Pass --with-rundir to configure to get rid of /var/run - bsc#1178736 - allow restart of xenwatchdogd, enable tuning of
keep-alive interval and timeout options via XENWATCHDOGD_ARGS=
add xenwatchdogd-options.patch
add xenwatchdogd-restart.patch - bsc#1177112 - Fix libxc.sr.superpage.patch
The receiving side may punch holes incorrectly into optimistically
allocated superpages. Also reduce overhead in bitmap handling.
add libxc-bitmap-50a5215f30e964a6f16165ab57925ca39f31a849.patch
add libxc-bitmap-long.patch
add libxc-bitmap-longs.patch - boo#1029961 - Move files in xen-tools-domU to /usr/bin from /bin
xen-destdir.patch
Drop tmp_build.patch - bsc#1176782 - L3: xl dump-core shows missing nr_pages during
core. If maxmem and current are the same the issue doesn't happen
5fca3b32-tools-libs-ctrl-fix-dumping-of-ballooned-guest.patch - bsc#1178963 - VUL-0: xen: stack corruption from XSA-346 change
(XSA-355)
xsa355.patch - Fix build error with libxl.fix-libacpi-dependency.patch - Enhance libxc.migrate_tracking.patch
Hide SUSEINFO messages from pause/unpause/resume from xl command.
They are intended for libvirt logging, but lacked info about
execution context.
Remove extra logging about dirty pages in each iteration, the
number of transferred pages + protocol overhead is already
reported elsewhere. - Remove libxl.libxl__domain_pvcontrol.patch
It is already part of 4.14.0-rc1 - bsc#1178591 - VUL-0: CVE-2020-28368: xen: Intel RAPL sidechannel
attack aka PLATYPUS attack aka XSA-351
xsa351-1.patch
xsa351-2.patch
xsa351-3.patch - bsc#1177950 - adjust help for --max_iters, default is 5
libxl.set-migration-constraints-from-cmdline.patch - jsc#SLE-16899 - improve performance of live migration
remove allocations and memcpy from hotpaths on sending and
receiving side to get more throughput on 10Gbs+ connections
libxc-sr-3cccdae45242dab27198b8e150be0c85acd5d3c9.patch
libxc-sr-add-xc_is_known_page_type.patch
libxc-sr-arrays.patch
libxc-sr-batch_pfns.patch
libxc-sr-page_type_has_stream_data.patch
libxc-sr-readv_exact.patch
libxc-sr-restore-handle_buffered_page_data.patch
libxc-sr-restore-handle_incoming_page_data.patch
libxc-sr-restore-map_errs.patch
libxc-sr-restore-mfns.patch
libxc-sr-restore-pfns.patch
libxc-sr-restore-populate_pfns-mfns.patch
libxc-sr-restore-populate_pfns-pfns.patch
libxc-sr-restore-read_record.patch
libxc-sr-restore-types.patch
libxc-sr-save-errors.patch
libxc-sr-save-guest_data.patch
libxc-sr-save-iov.patch
libxc-sr-save-local_pages.patch
libxc-sr-save-mfns.patch
libxc-sr-save-rec_pfns.patch
libxc-sr-save-show_transfer_rate.patch
libxc-sr-save-types.patch
libxc-sr-use-xc_is_known_page_type.patch
adjust libxc.sr.superpage.patch
adjust libxc.migrate_tracking.patch - Upstream bug fixes (bsc#1027519)
5f479d9e-x86-begin-to-support-MSR_ARCH_CAPS.patch
5f4cf06e-x86-Dom0-expose-MSR_ARCH_CAPS.patch
5f4cf96a-x86-PV-fix-SEGBASE_GS_USER_SEL.patch
5f560c42-x86-PV-rewrite-segment-ctxt-switch.patch
5f5b6b7a-hypfs-fix-custom-param-writes.patch
5f607915-x86-HVM-more-consistent-IO-completion.patch
5f6cfb5b-x86-PV-dont-GP-for-SYSENTER-with-NT-set.patch
5f6cfb5b-x86-PV-dont-clobber-NT-on-return-to-guest.patch
5f71a21e-x86-S3-fix-shadow-stack-resume.patch
5f76ca65-evtchn-Flask-prealloc-for-send.patch
5f76caaf-evtchn-FIFO-use-stable-fields.patch
5f897c25-x86-traps-fix-read_registers-for-DF.patch
5f897c7b-x86-smpboot-restrict-memguard_guard_stack.patch
- Renamed patches
5f560c42-x86-PV-64bit-segbase-consistency.patch
Replaces 5f5b6951-x86-PV-64bit-segbase-consistency.patch
5f6a002d-x86-PV-handle-MSR_MISC_ENABLE-correctly.patch
Replaces 5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch
5f6a0049-memory-dont-skip-RCU-unlock-in-acquire_resource.patch
Replaces 5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch
5f6a0067-x86-vPT-fix-race-when-migrating-timers.patch
Replaces 5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch
5f6a008e-x86-MSI-drop-read_msi_msg.patch
Replaces 5f6a05fa-msi-get-rid-of-read_msi_msg.patch
5f6a00aa-x86-MSI-X-restrict-reading-of-PBA-bases.patch
Replaces 5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch
5f6a00c4-evtchn-relax-port_is_valid.patch
Replaces 5f6a062c-evtchn-relax-port_is_valid.patch
5f6a00df-x86-PV-avoid-double-exception-injection.patch
Replaces 5f6a065c-pv-Avoid-double-exception-injection.patch
5f6a00f4-evtchn-add-missing-barriers.patch
Replaces 5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch
5f6a0111-evtchn-x86-enforce-correct-upper-limit.patch
Replaces 5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch
5f6a013f-evtchn_reset-shouldnt-succeed-with.patch
Replaces 5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch
5f6a0160-evtchn-IRQ-safe-per-channel-lock.patch
Replaces 5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch
5f6a0178-evtchn-address-races-with-evtchn_reset.patch
Replaces 5f6a06f2-evtchn-address-races-with-evtchn_reset.patch
5f6a01a4-evtchn-preempt-in-evtchn_destroy.patch
Replaces 5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch
5f6a01c6-evtchn-preempt-in-evtchn_reset.patch
Replaces 5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch - bsc#1177409 - VUL-0: CVE-2020-27674: xen: x86 PV guest
INVLPG-like flushes may leave stale TLB entries (XSA-286)
xsa286-1.patch
xsa286-2.patch
xsa286-3.patch
xsa286-4.patch
xsa286-5.patch
xsa286-6.patch
- bsc#1177412 - VUL-0: CVE-2020-27672: xen: Race condition in Xen
mapping code (XSA-345)
5f8ed5d3-x86-mm-map_pages_to_xen-single-exit-path.patch
5f8ed5eb-x86-mm-modify_xen_mappings-one-exit-path.patch
5f8ed603-x86-mm-prevent-races-in-mapping-updates.patch
- bsc#1177413 - VUL-0: CVE-2020-27671: xen: undue deferral of IOMMU
TLB flushes (XSA-346)
5f8ed635-IOMMU-suppress-iommu_dont_flush_iotlb-when.patch
5f8ed64c-IOMMU-hold-page-ref-until-TLB-flush.patch
- bsc#1177414 - VUL-0: CVE-2020-27670: xen: unsafe AMD IOMMU page
table updates (XSA-347)
5f8ed682-AMD-IOMMU-convert-amd_iommu_pte.patch
5f8ed69c-AMD-IOMMU-update-live-PTEs-atomically.patch
5f8ed6b0-AMD-IOMMU-suitably-order-DTE-mods.patch - Update libxc.sr.superpage.patch
set errno in x86_hvm_alloc_4k (bsc#1177112) - bsc#1176339 - VUL-0: CVE-2020-25602: xen: x86 pv: Crash when
handling guest access to MSR_MISC_ENABLE (XSA-333)
5f6a05a0-pv-Handle-the-Intel-specific-MSR_MISC_ENABLE-correctly.patch
- bsc#1176341 - VUL-0: CVE-2020-25598: xen: Missing unlock in
XENMEM_acquire_resource error path (XSA-334)
5f6a05b7-xen-memory-Dont-skip-the-RCU-unlock-path-in-acquire_resource.patch
- bsc#1176343 - VUL-0: CVE-2020-25604: xen: race when migrating
timers between x86 HVM vCPU-s (XSA-336)
5f6a05dd-vpt-fix-race-when-migrating-timers-between-vCPUs.patch
- bsc#1176344 - VUL-0: CVE-2020-25595: xen: PCI passthrough code
reading back hardware registers (XSA-337)
5f6a05fa-msi-get-rid-of-read_msi_msg.patch
5f6a061a-MSI-X-restrict-reading-of-table-PBA-bases-from-BARs.patch
- bsc#1176346 - VUL-0: CVE-2020-25597: xen: once valid event
channels may not turn invalid (XSA-338)
5f6a062c-evtchn-relax-port_is_valid.patch
- bsc#1176345 - VUL-0: CVE-2020-25596: xen: x86 pv guest kernel
DoS via SYSENTER (XSA-339)
5f6a065c-pv-Avoid-double-exception-injection.patch
- bsc#1176347 - VUL-0: CVE-2020-25603: xen: Missing barrier
barriers when accessing/allocating an event channel (XSA-340)
5f6a0674-xen-evtchn-Add-missing-barriers-when-accessing-allocating-an-event-channel.patch
- bsc#1176348 - VUL-0: CVE-2020-25600: xen: out of bounds event
channels available to 32-bit x86 domains (XSA-342)
5f6a068e-evtchn-x86-enforce-correct-upper-limit-for-32-bit-guests.patch
- bsc#1176349 - VUL-0: CVE-2020-25599: xen: races with
evtchn_reset() (XSA-343)
5f6a06be-evtchn-evtchn_reset-shouldnt-succeed-with-still-open-ports.patch
5f6a06e0-evtchn-convert-per-channel-lock-to-be-IRQ-safe.patch
5f6a06f2-evtchn-address-races-with-evtchn_reset.patch
- bsc#1176350 - VUL-0: CVE-2020-25601: xen: lack of preemption in
evtchn_reset() / evtchn_destroy() (XSA-344)
5f6a071f-evtchn-arrange-for-preemption-in-evtchn_destroy.patch
5f6a0754-evtchn-arrange-for-preemption-in-evtchn_reset.patch
- Upstream bug fix (bsc#1027519)
5f5b6951-x86-PV-64bit-segbase-consistency.patch - Fix problems in xen.spec with building on aarch64 - Make use of %service_del_postun_without_restart while preserving
the old behavior for older distros.
- In %post tools, remove unnecessary qemu symlinks. - Fix error in xen-tools %post when linking pvgrub64.bin
- Make paths below libexec more explicit
- Create symlink also for pvgrub32.bin - Revert previous libexec change for qemu compat wrapper
The path is used in existing domU.xml files in the emulator field
- Escape some % chars in xen.spec, they have to appear verbatim - Enhance libxc.migrate_tracking.patch
Print number of allocated pages on sending side, this is more
accurate than p2m_size. - jsc#SLE-15926 - Dev: XEN: drop netware support
Dropped the following patches
pygrub-netware-xnloader.patch
xnloader.py
Refreshed pygrub-boot-legacy-sles.patch - Fix build on aarch64 with gcc10
- Package xenhypfs for aarch64 - Correct license name
* GPL-3.0+ is now GPL-3.0-or-later - Upstream bug fixes (bsc#1027519)
5f1a9916-x86-S3-put-data-sregs-into-known-state.patch
5f21b9fd-x86-cpuid-APIC-bit-clearing.patch - Update to Xen 4.14.0 FCS release
xen-4.14.0-testing-src.tar.bz2
* Linux stubdomains (contributed by QUBES OS)
* Control-flow Enforcement Technology (CET) Shadow Stack support (contributed by Citrix)
* Lightweight VM fork for fuzzing / introspection. (contributed by Intel)
* Livepatch: buildid and hotpatch stack requirements
* CONFIG_PV32
* Hypervisor FS support
* Running Xen as a Hyper-V Guest
* Domain ID randomization, persistence across save / restore
* Golang binding autogeneration
* KDD support for Windows 7, 8.x and 10
- Dropped patches contained in new tarball
5eb51be6-cpupool-fix-removing-cpu-from-pool.patch
5eb51caa-sched-vcpu-pause-flags-atomic.patch
5ec2a760-x86-determine-MXCSR-mask-always.patch
5ec50b05-x86-idle-rework-C6-EOI-workaround.patch
5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch
5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch
5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch
5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch
5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch
5ed69804-x86-ucode-fix-start-end-update.patch
5eda60cb-SVM-split-recalc-NPT-fault-handling.patch
5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch
5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch
5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch
5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch
xsa317.patch
xsa319.patch
xsa321-1.patch
xsa321-2.patch
xsa321-3.patch
xsa321-4.patch
xsa321-5.patch
xsa321-6.patch
xsa321-7.patch
xsa328-1.patch
xsa328-2.patch - bsc#1172356 - Not able to hot-plug NIC via virt-manager, asks to
attach on next reboot while it should be live attached
ignore-ip-command-script-errors.patch - Enhance libxc.migrate_tracking.patch
After transfer of domU memory, the target host has to assemble
the backend devices. Track the time prior xc_domain_unpause. - Add libxc.migrate_tracking.patch to track live migrations
unconditionally in logfiles, especially in libvirt.
This will track how long a domU was suspended during transit. - bsc#1173376 - VUL-0: CVE-2020-15566: xen: XSA-317 - Incorrect
error handling in event channel port allocation
xsa317.patch
- bsc#1173377 - VUL-0: CVE-2020-15563: xen: XSA-319 - inverted code
paths in x86 dirty VRAM tracking
xsa319.patch
- bsc#1173378 - VUL-0: CVE-2020-15565: xen: XSA-321 - insufficient
cache write- back under VT-d
xsa321-1.patch
xsa321-2.patch
xsa321-3.patch
xsa321-4.patch
xsa321-5.patch
xsa321-6.patch
xsa321-7.patch
- bsc#1173380 - VUL-0: CVE-2020-15567: xen: XSA-328 - non-atomic
modification of live EPT PTE
xsa328-1.patch
xsa328-2.patch - bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
5ee24d0e-x86-spec-ctrl-document-SRBDS-workaround.patch
5edfbbea-x86-spec-ctrl-CPUID-MSR-defs-for-SRBDS.patch (Replaces xsa320-1.patch)
5edfbbea-x86-spec-ctrl-mitigate-SRBDS.patch (Replaces xsa320-2.patch)
- Upstream bug fixes (bsc#1027519)
5ec50b05-x86-idle-rework-C6-EOI-workaround.patch
5ec7dcaa-x86-dont-enter-C6-with-in-service-intr.patch
5ec7dcf6-x86-dont-enter-C3-C6-with-errata.patch
5ec82237-x86-extend-ISR-C6-workaround-to-Haswell.patch
5ece1b91-x86-clear-RDRAND-CPUID-bit-on-AMD-fam-15-16.patch
5ece8ac4-x86-load_system_tables-NMI-MC-safe.patch
5ed69804-x86-ucode-fix-start-end-update.patch
5eda60cb-SVM-split-recalc-NPT-fault-handling.patch
5edf6ad8-ioreq-pending-emulation-server-destruction-race.patch - Fixes for %_libexecdir changing to /usr/libexec - bsc#1172205 - VUL-0: CVE-2020-0543: xen: Special Register Buffer
Data Sampling (SRBDS) aka "CrossTalk" (XSA-320)
xsa320-1.patch
xsa320-2.patch - Update to Xen 4.13.1 bug fix release (bsc#1027519)
xen-4.13.1-testing-src.tar.bz2
5eb51be6-cpupool-fix-removing-cpu-from-pool.patch
5eb51caa-sched-vcpu-pause-flags-atomic.patch
5ec2a760-x86-determine-MXCSR-mask-always.patch
- Drop patches contained in new tarball
5de65f84-gnttab-map-always-do-IOMMU-part.patch
5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch
5e15e03d-sched-fix-S3-resume-with-smt=0.patch
5e16fb6a-x86-clear-per-cpu-stub-page-info.patch
5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch
5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch
5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch
5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch
5e318cd4-x86-apic-fix-disabling-LVT0.patch
5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch
5e3bd385-EFI-recheck-variable-name-strings.patch
5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch
5e3bd3f8-xmalloc-guard-against-overflow.patch
5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch
5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch
5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch
5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch
5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch
5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch
5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch
5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch
5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch
5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch
5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch
5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch
5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch
5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch
5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch
5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch
5e86f7fd-credit2-fix-credit-too-few-resets.patch
5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch
5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch
5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch
5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch
5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch
5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch - spec: Remove invocation of autogen.sh
- spec: Recommend qemu-ovmf-x86_64 to provide UEFI firmwares - bsc#1170968 - GCC 10: xen build fails on i586
gcc10-fixes.patch - bsc#1169392 - VUL-0: CVE-2020-11742: xen: Bad continuation
handling in GNTTABOP_copy (XSA-318)
5e95afb8-gnttab-fix-GNTTABOP_copy-continuation-handling.patch - bsc#1168140 - VUL-0: CVE-2020-11740, CVE-2020-11741: xen: XSA-313
multiple xenoprof issues
5e95ad61-xenoprof-clear-buffer-intended-to-be-shared-with-guests.patch
5e95ad8f-xenoprof-limit-consumption-of-shared-buffer-data.patch
- bsc#1168142 - VUL-0: CVE-2020-11739: xen: XSA-314 - Missing
memory barriers in read-write unlock paths
5e95ae77-Add-missing-memory-barrier-in-the-unlock-path-of-rwlock.patch
- bsc#1168143 - VUL-0: CVE-2020-11743: xen: XSA-316 - Bad error
path in GNTTABOP_map_grant
5e95af5e-xen-gnttab-Fix-error-path-in-map_grant_ref.patch
- bsc#1167152 - L3: Xenstored Crashed during VM install Need Core
analyzed
5e876b0f-tools-xenstore-fix-use-after-free-in-xenstored.patch
- bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog
bug soft lockup CPU #0 stuck under high load / upstream with
workaround. See also bsc#1134506
5e86f7b7-credit2-avoid-vCPUs-with-lower-creds-than-idle.patch
5e86f7fd-credit2-fix-credit-too-few-resets.patch
- Drop for upstream solution (bsc#1165206)
01-xen-credit2-avoid-vcpus-to.patch
default-to-credit1-scheduler.patch
- Upstream bug fixes (bsc#1027519)
5e4ec20e-x86-virtualise-MSR_PLATFORM_ID-properly.patch
5e5e7188-fix-error-path-in-cpupool_unassign_cpu_start.patch
5e6f53dd-AMD-IOMMU-fix-off-by-one-get_paging_mode.patch
5e7a371c-sched-fix-cpu-onlining-with-core-sched.patch
5e7c90cf-sched-fix-cpu-offlining-with-core-sched.patch
5e7cfb29-x86-ucode-AMD-fix-assert-in-compare_patch.patch
5e7cfb29-x86-ucode-fix-error-paths-in-apply_microcode.patch
5e7dd83b-libx86-CPUID-fix-not-just-leaf-7.patch
5e7dfbf6-x86-ucode-AMD-potential-buffer-overrun-equiv-tab.patch
5e846cce-x86-HVM-fix-AMD-ECS-handling-for-Fam10.patch
5e84905c-x86-ucode-AMD-fix-more-potential-buffer-overruns.patch - bsc#1167608 - unbound limit for max_event_channels
domUs with many vcpus and/or resources fail to start
libxl.max_event_channels.patch - bsc#1161480 - Fix xl shutdown for HVM without PV drivers
add libxl.libxl__domain_pvcontrol.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog
bug soft lockup CPU #0 stuck under high load / upstream with
workaround. See also bsc#1134506
01-xen-credit2-avoid-vcpus-to.patch - bsc#1158414 - GCC 10: xen build fails
gcc10-fixes.patch - bsc#1165206 - Xen 4.12 DomU hang / freeze / stall / NMI watchdog
bug soft lockup CPU #0 stuck under high load / upstream with
workaround. See also bsc#1134506
default-to-credit1-scheduler.patch - bsc#1160932 - VUL-0: xen: XSA-312 v1: arm: a CPU may speculate
past the ERET instruction
5e1dcedd-Arm-place-speculation-barrier-after-ERET.patch
- bsc#1164425 - x86: "spec-ctrl=no-xen" should also disable branch
hardening
5e4e614d-x86-spec-ctrl-no-xen-also-disables-branch-hardening.patch
- Upstream bug fixes (bsc#1027519)
5e21ce98-x86-time-update-TSC-stamp-after-deep-C-state.patch
5e286cce-VT-d-dont-pass-bridges-to-domain_context_mapping_one.patch
5e318cd4-x86-apic-fix-disabling-LVT0.patch
5e344c11-x86-HVM-relinquish-resources-from-domain_destroy.patch
5e3bd385-EFI-recheck-variable-name-strings.patch
5e3bd3d1-EFI-dont-leak-heap-VIA-XEN_EFI_get_next_variable_name.patch
5e3bd3f8-xmalloc-guard-against-overflow.patch
5e46e090-x86-smp-reset-x2apic_enabled-in-smp_send_stop.patch
5e4c00ef-VT-d-check-full-RMRR-for-E820-reserved.patch
5e4d4f5b-sched-fix-get_cpu_idle_time-with-core-sched.patch - bsc#1159755 - use fixed qemu-3.1 machine type for HVM
This must be done in qemu to preserve PCI layout
remove libxl.lock-qemu-machine-for-hvm.patch - jsc#SLE-10183 - script to calculate cpuid= mask
add helper script from https://github.com/twizted/xen_maskcalc
domUs may be migrated between different cpus from the same vendor
if their visible cpuid value has incompatible feature bits masked. - jsc#SLE-10172, bsc#1055731 - handle degraded raid for xendomains
add helper script and systemd service from
https://github.com/luizluca/xen-tools-xendomains-wait-disk
in new sub package xen-tools-xendomains-wait-disk
See included README for usage instructions
xendomains-wait-disks.LICENSE
xendomains-wait-disks.README.md
xendomains-wait-disks.sh - bsc#1159755 - use fixed qemu-3.1 machine type for HVM
qemu4 introduced incompatible changes in pc-i440fx, which revealed
a design bug in 'xenfv'. Live migration from domUs started with
qemu versions prior qemu4 can not be received with qemu4+.
libxl.lock-qemu-machine-for-hvm.patch - Upstream bug fixes (bsc#1027519)
5de65f84-gnttab-map-always-do-IOMMU-part.patch
5de65fc4-x86-avoid-HPET-use-on-certain-Intel.patch
5e15e03d-sched-fix-S3-resume-with-smt=0.patch
5e16fb6a-x86-clear-per-cpu-stub-page-info.patch
5e1da013-IRQ-u16-is-too-narrow-for-evtchn.patch - BuildRequire pkgconfig(libsystemd) instead of systemd-devel:
Allow OBS to shortcut through the -mini flavors. - bsc#1159320 - Xen logrotate file needs updated
logrotate.conf - Update to Xen 4.13.0 FCS release
xen-4.13.0-testing-src.tar.bz2
* Core Scheduling (contributed by SUSE)
* Branch hardening to mitigate against Spectre v1 (contributed by Citrix)
* Late uCode loading (contributed by Intel)
* Improved live-patching build tools (contributed by AWS)
* OP-TEE support (contributed by EPAM)
* Renesas R-CAR IPMMU-VMSA driver (contributed by EPAM)
* Dom0-less passthrough and ImageBuilder (contributed by XILINX)
* Support for new Hardware - Update to Xen 4.13.0 RC4 release
xen-4.13.0-testing-src.tar.bz2
- Rebase libxl.pvscsi.patch - Update to Xen 4.13.0 RC3 release
xen-4.13.0-testing-src.tar.bz2
- Drop python38-build.patch - Update to Xen 4.13.0 RC2 release
xen-4.13.0-testing-src.tar.bz2 - Add python38-build.patch fixing build with Python 3.8 (add
- -embed to python-config call) - Update to Xen 4.13.0 RC1 release
xen-4.13.0-testing-src.tar.bz2
- Drop patches contained in new tarball or invalid
5ca7660f-x86-entry-drop-unused-includes.patch
5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch
5cab2ab7-x86-IOMMU-introduce-init-ops.patch
5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch
5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch
5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch
5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch
5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch
5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch
5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch
5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch
5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch
5d358508-x86-IRQ-desc-affinity-represents-request.patch
5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch
5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch
5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch
5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch
5d417813-AMD-IOMMU-bitfield-extended-features.patch
5d417838-AMD-IOMMU-bitfield-control-reg.patch
5d41785b-AMD-IOMMU-bitfield-IRTE.patch
5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch
5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch
5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch
5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch
5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch
5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch
5d417b38-AMD-IOMMU-correct-IRTE-updating.patch
5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch
5d419d49-x86-spec-ctrl-report-proper-status.patch
5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch
5d4a9d25-AMD-IOMMU-drop-not-found-message.patch
5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch
5d4afa7a-credit2-fix-memory-leak.patch
5d4d850a-introduce-bss-percpu-page-aligned.patch
5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch
5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch
5d6524ca-x86-mm-correctly-init-M2P-entries.patch
5d67ceaf-x86-properly-gate-PKU-clearing.patch
5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch
5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch
5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch
5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch
5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch
5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch
5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch
5d80ea13-vpci-honor-read-only-devices.patch
5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch
5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch
5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch
5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch
5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch
5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch
5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch
5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch
5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch
5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch
CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch
blktap2-no-uninit.patch
libxl.prepare-environment-for-domcreate_stream_done.patch
pygrub-python3-conversion.patch
fix-xenpvnetboot.patch - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines
5d9ee2a8-AMD-IOMMU-alloc-1-devtab-per-PCI-seg.patch
5d9ee2f0-AMD-IOMMU-allocate_buffer-avoid-memset.patch
5d9ee312-AMD-IOMMU-prefill-all-DTEs.patch - bsc#1120095 - add code to change LIBXL_HOTPLUG_TIMEOUT at runtime
The included README has details about the impact of this change
libxl.LIBXL_HOTPLUG_TIMEOUT.patch - bsc#1135799 - Partner-L3: Xen crashes on AMD ROME based machines
5ca7660f-x86-entry-drop-unused-includes.patch
5cf8da09-adjust-sysdom-creation-call-earlier-on-x86.patch
5cab2a6b-x86-ACPI-also-parse-AMD-tables-early.patch
5cab2ab7-x86-IOMMU-introduce-init-ops.patch
5cab2ae8-x86-IOMMU-abstract-iommu_supports_eim.patch
5cab2b4e-x86-IOMMU-abstract-iommu_enable_x2apic_IR.patch
5cab2b95-x86-IOMMU-initialize-iommu_ops-in.patch
5cac9a4b-x86-IOMMU-abstract-adjust_vtd_irq_affinities.patch
5cdeac7f-AMD-IOMMU-adjust-IOMMU-list-head-init.patch
5d0cf4e4-AMD-IOMMU-initialize-IRQ-tasklet-once.patch
5d149bb0-AMD-IOMMU-dont-add-IOMMUs.patch
5d1b3fab-AMD-IOMMU-restrict-feature-logging.patch
5d358508-x86-IRQ-desc-affinity-represents-request.patch
5d358534-x86-IRQ-consolidate-arch-cpu_mask-use.patch
5d358a67-AMD-IOMMU-pass-IOMMU-to-iterate_ivrs_entries-cb.patch
5d358a92-AMD-IOMMU-pass-IOMMU-to-amd_iommu_alloc_intremap_table.patch
5d39811c-x86-IOMMU-dont-restrict-IRQ-affinities.patch
5d417813-AMD-IOMMU-bitfield-extended-features.patch
5d417838-AMD-IOMMU-bitfield-control-reg.patch
5d41785b-AMD-IOMMU-bitfield-IRTE.patch
5d41787e-AMD-IOMMU-pass-IOMMU-to-gfu-intremap-entry.patch
5d4178ad-AMD-IOMMU-128bit-non-guest-APIC-IRTE.patch
5d4178fc-AMD-IOMMU-split-amd_iommu_init_one.patch
5d41793f-AMD-IOMMU-allow-enabling-without-IRQ.patch
5d417a16-AMD-IOMMU-adjust-IRQ-setup-for-x2APIC.patch
5d417ab6-AMD-IOMMU-enable-x2APIC-mode.patch
5d417b38-AMD-IOMMU-correct-IRTE-updating.patch
5d417b6a-AMD-IOMMU-dont-needlessly-log-headers.patch
5d4a9d25-AMD-IOMMU-drop-not-found-message.patch
5d80e7c0-AMD-IOMMU-free-shared-IRT-once.patch
5d80e80d-AMD-IOMMU-valid-flag-for-IVRS-mappings.patch
5d80e82e-AMD-IOMMU-alloc_intremap_table-callers-handle-errors.patch
5d80e857-x86-PCI-read-MSI-X-table-entry-count-early.patch
5d8b72e5-AMD-IOMMU-dont-blindly-alloc-intremap-tables.patch
5d8b730e-AMD-IOMMU-phantom-funcs-share-intremap-tables.patch
5d8b733b-x86-PCI-read-max-MSI-vector-count-early.patch
5d8b736d-AMD-IOMMU-replace-INTREMAP_ENTRIES.patch
5d8b7393-AMD-IOMMU-restrict-intremap-table-sizes.patch
- bsc#1145240 - [Migration]Can't pre-allocate 1 shadow pages
5d70bfba-x86-shadow-dont-enable-with-too-small-allocation.patch
- bsc#1137717 - [HPS Bug] Unable to install Windows Server 2016
with 2 CPUs setting (or above) under SLES12 SP4 Xen Server on AMD
ROME platform
5d89d8d9-libxc-x86-avoid-overflow-in-CPUID-APIC-ID.patch
- Upstream bug fixes (bsc#1027519)
5d67ceaf-x86-properly-gate-PKU-clearing.patch
5d779811-x86-fix-CPUID7-0-eax-levelling-MSR.patch
5d77b40f-fix-hvm_all_ioreq_servers_add_vcpu-cleanup.patch
5d80ea13-vpci-honor-read-only-devices.patch
5d8b715f-ACPI-cpuidle-bump-max-num-of-states.patch - bsc#1145774 - Libivrtd segfaults when trying to live migrate a VM
Fix crash in an error path of libxl_domain_suspend with
libxl.helper_done-crash.patch - Upstream bug fixes (bsc#1027519)
5d419d49-x86-spec-ctrl-report-proper-status.patch
5d43253c-x86-ucode-always-collect_cpu_info-at-boot.patch
5d4aa36f-x86-apic-enable-x2APIC-mode-earlier.patch
5d4afa7a-credit2-fix-memory-leak.patch
5d4d850a-introduce-bss-percpu-page-aligned.patch
5d516531-x86-xpti-dont-leak-TSS-adjacent-data.patch
5d5bf475-x86-PV-fix-handling-of-iommu-mappings.patch
5d6524ca-x86-mm-correctly-init-M2P-entries.patch
- Drop 5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch - Preserve modified files which used to be marked as %config,
rename file.rpmsave to file - Update to Xen 4.12.1 bug fix release (bsc#1027519)
xen-4.12.1-testing-src.tar.bz2
- Drop patches contained in new tarball
5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch
5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch
5c87b6c8-drop-arch_evtchn_inject.patch
5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch
5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch
5c8f752c-x86-e820-build-with-gcc9.patch
5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch
5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch
5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch
5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch
5c9e63c5-credit2-SMT-idle-handling.patch
5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch
5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch
5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch
5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch
5cd921fb-trace-fix-build-with-gcc9.patch
5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch
5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch
5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch
5cd926d0-bitmap_fill-zero-sized.patch
5cd92724-drivers-video-drop-constraints.patch
5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch
5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch
5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch
5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch
5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch
5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch
5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch
5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch
5cdeb9fd-sched-fix-csched2_deinit_pdata.patch
5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch
5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch
5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch
5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch
5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch
5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch
5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch
5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch
5d03a0c4-6-Arm64-cmpxchg-simplify.patch
5d03a0c4-7-Arm32-cmpxchg-simplify.patch
5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch
5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch
5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch
5d03a0c4-B-bitops-guest-helpers.patch
5d03a0c4-C-cmpxchg-guest-helpers.patch
5d03a0c4-D-use-guest-atomics-helpers.patch
5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch
5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch
- Refreshed patches
libxl.pvscsi.patch - bsc#1143563 - Speculative mitigation facilities report wrong status
5d419d49-x86-spec-ctrl-facilities-report-wrong-status.patch - Update xen-dom0-modules.service (bsc#1137251)
Map backend module names from pvops and xenlinux kernels to a
module alias. This avoids errors from modprobe about unknown
modules. Ignore a few xenlinux modules that lack aliases. - Gcc9 warnings seem to be cleared up with upstream fixes.
Drop gcc9-ignore-warnings.patch - bsc#1138563 - L3: xenpvnetboot improperly ported to Python 3
fix-xenpvnetboot.patch - Move /etc/modprobe.d/xen_loop.conf to /lib/modprobe.d/xen_loop.conf - Remove /etc/xen/xenapiusers and /etc/pam.d/xen-api - Remove all upstream provided files in /etc/xen
They are not required at runtime. The host admin is now
responsible if he really needs anything in this subdirectory. - In our effort to make /etc fully admin controlled, move /etc/xen/scripts
to libexec/xen/scripts with xen-tools.etc_pollution.patch - Move /etc/bash_completion.d/xl.sh to %{_datadir}/bash-completion/completions - bsc#1138294 - VUL-0: CVE-2019-17349: XSA-295: Unlimited Arm
Atomics Operations
5d03a0c4-1-Arm-add-an-isb-before-reading-CNTPCT_EL0.patch
5d03a0c4-2-gnttab-rework-prototype-of-set_status.patch
5d03a0c4-3-Arm64-rewrite-bitops-in-C.patch
5d03a0c4-4-Arm32-rewrite-bitops-in-C.patch
5d03a0c4-5-Arm-bitops-consolidate-prototypes.patch
5d03a0c4-6-Arm64-cmpxchg-simplify.patch
5d03a0c4-7-Arm32-cmpxchg-simplify.patch
5d03a0c4-8-Arm-bitops-helpers-with-timeout.patch
5d03a0c4-9-Arm-cmpxchg-helper-with-timeout.patch
5d03a0c4-A-Arm-turn-on-SILO-mode-by-default.patch
5d03a0c4-B-bitops-guest-helpers.patch
5d03a0c4-C-cmpxchg-guest-helpers.patch
5d03a0c4-D-use-guest-atomics-helpers.patch
5d03a0c4-E-Arm-add-perf-counters-in-guest-atomic-helpers.patch
5d03a0c4-F-Arm-protect-gnttab_clear_flag.patch
- Upstream bug fixes (bsc#1027519)
5c87b6c8-drop-arch_evtchn_inject.patch
5c87b6e8-avoid-atomic-rmw-accesses-in-map_vcpu_info.patch
5cd921fb-trace-fix-build-with-gcc9.patch
5cd9224b-AMD-IOMMU-disable-upon-init-fail.patch
5cd922c5-x86-MTRR-recalc-p2mt-when-iocaps.patch
5cd9230f-VMX-correctly-get-GS_SHADOW-for-current.patch
5cd926d0-bitmap_fill-zero-sized.patch
5cd92724-drivers-video-drop-constraints.patch
5cd93a69-x86-spec-ctrl-reposition-XPTI-parsing.patch (Replaces xsa297-0a.patch)
5cd93a69-x86-MSR_INTEL_CORE_THREAD_COUNT.patch (Replaces xsa297-0b.patch)
5cd93a69-x86-boot-detect-Intel-SMT-correctly.patch (Replaces xsa297-0c.patch)
5cdad090-x86-spec-ctrl-misc-non-functional-cleanup.patch (Replaces xsa297-0d.patch)
5cdad090-x86-spec-ctrl-CPUID-MSR-definitions-for-MDS.patch (Replaces xsa297-1.patch)
5cdad090-x86-spec-ctrl-infrastructure-for-VERW-flush.patch (Replaces xsa297-2.patch)
5cdad090-x86-spec-ctrl-opts-to-control-VERW-flush.patch (Replaces xsa297-3.patch)
5cd981ff-x86-IRQ-tracing-avoid-UB-or-worse.patch
5cdeb9fd-sched-fix-csched2_deinit_pdata.patch
5ce7a92f-x86-IO-APIC-fix-build-with-gcc9.patch
5cf0f6a4-x86-vhpet-resume-avoid-small-diff.patch
5cf16e51-x86-spec-ctrl-Knights-retpoline-safe.patch - Fix some outdated information in the readme
README.SUSE - spec: xen-tools: require matching version of xen package
bsc#1137471 - Remove two stale patches
xen.build-compare.man.patch
xenpaging.doc.patch - Disable LTO (boo#1133296). - Remove arm32 from ExclusiveArch to fix build - bsc#1111331 - VUL-0: CPU issues Q2 2019 aka "Group 4".
CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091
xsa297-0a.patch
xsa297-0b.patch
xsa297-0c.patch
xsa297-0d.patch
xsa297-1.patch
xsa297-2.patch
xsa297-3.patch
- Update 5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch and
drop 5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch
Refresh 5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch - bsc#1131811 - [XEN] internal error: libxenlight failed to create
new domain. This patch is a workaround for a systemd issue. See
patch header for additional comments.
xenstore-launch.patch - bsc#1125378 - [xen][pygrub] Can not restore sle11sp4 pv guest
after upgrading host from sle11sp4 to sle15sp1
pygrub-python3-conversion.patch
- Fix "TypeError: virDomainDefineXML() argument 2 must be str or
None, not bytes" when converting VMs from using the xm/xend
toolstack to the libxl/libvirt toolstack. (bsc#1123378)
xen2libvirt.py - bsc#1124560 - Fully virtualized guests crash on boot
5cac6cba-vmx-Fixup-removals-of-MSR-load-save-list-entries.patch
- bsc#1121391 - GCC 9: xen build fails
5c8f752c-x86-e820-build-with-gcc9.patch
- Upstream bug fixes (bsc#1027519)
5c87b644-IOMMU-leave-enabled-for-kexec-crash.patch
5c87b6a2-x86-HVM-dont-crash-guest-in-find_mmio_cache.patch
5c87e6d1-x86-TSX-controls-for-RTM-force-abort-mode.patch
5c8fb92d-x86-HVM-split-linear-reads-and-writes.patch
5c8fb951-x86-HVM-finish-IOREQs-correctly-on-completion.patch
5c8fc6c0-x86-MSR-shorten-ARCH_CAPABILITIES.patch
5c8fc6c0-x86-SC-retpoline-safety-calculations-for-eIBRS.patch
5c9e63c5-credit2-SMT-idle-handling.patch
5ca46b68-x86emul-no-GPR-update-upon-AVX-gather-failures.patch
5ca773d1-x86emul-dont-read-mask-reg-without-AVX512F.patch
5cab1f66-timers-fix-memory-leak-with-cpu-plug.patch
5cac6219-xen-cpu-Fix-ARM-build-following-cs-597fbb8.patch - Install pkgconfig files into libdir instead of datadir - Update to Xen 4.12.0 FCS release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2
* HVM/PVH and PV only Hypervisor: The Xen 4.12 release separates
the HVM/PVH and PV code paths in Xen and provides KCONFIG
options to build a PV only or HVM/PVH only hypervisor.
* QEMU Deprivilege (DM_RESTRICT): In Xen 4.12, this feature has
been vastly improved.
* Argo - Hypervisor-Mediated data eXchange: Argo is a new inter-
domain communication mechanism.
* Improvements to Virtual Machine Introspection: The VMI subsystem
which allows detection of 0-day vulnerabilities has seen many
functional and performance improvements.
* Credit 2 Scheduler: The Credit2 scheduler is now the Xen Project
default scheduler.
* PVH Support: Grub2 boot support has been added to Xen and Grub2.
* PVH Dom0: PVH Dom0 support has now been upgraded from experimental
to tech preview.
* The Xen 4.12 upgrade also includes improved IOMMU mapping code,
which is designed to significantly improve the startup times of
AMD EPYC based systems.
* The upgrade also features Automatic Dom0 Sizing which allows the
setting of Dom0 memory size as a percentage of host memory (e.g.
10%) or with an offset (e.g. 1G+10%). - bsc#1130485 - Please drop Requires on multipath-tools in
xen-tools. Now using Recommends multipath-tools.
xen.spec - Update to Xen 4.12.0 RC7 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2 - Update to Xen 4.12.0 RC6 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2 - bsc#1026236 - add Xen cmdline option "suse_vtsc_tolerance" to
avoid TSC emulation for HVM domUs if their expected frequency
does not match exactly the frequency of the receiving host
xen.bug1026236.suse_vtsc_tolerance.patch - Update to Xen 4.12.0 RC5 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2 - jsc#SLE-3059 - Disable Xen auto-ballooning
- Add CONFIG_DOM0_MEM to the spec file for managing dom0 memory.
xen.spec
- Disable autoballooning in xl.con
xl-conf-disable-autoballoon.patch - Update gcc9-ignore-warnings.patch to fix build in SLE12 - bsc#1126325 - fix crash in libxl in error path
Setup of grant_tables and other variables may fail
libxl.prepare-environment-for-domcreate_stream_done.patch - bsc#1127620 - Documentation for the xl configuration file allows
for firmware=pvgrub64 but we don't ship pvgrub64.
Create a link from grub.xen to pvgrub64
xen.spec - Update to Xen 4.12.0 RC4 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2
- Tarball also contains additional post RC4 security fixes for
Xen Security Advisories 287, 288, and 290 through 294. - Update to Xen 4.12.0 RC3 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2 - Update to Xen 4.12.0 RC2 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2 - bsc#1121391 - GCC 9: xen build fails
gcc9-ignore-warnings.patch - bsc#1122563 - Virtualization/xen: Bug no Xen on boot, missing
/proc/xen, after 4.11 -> 4.12 upgrade on X86_64/efi.
Keep xen.efi in /usr/lib64/efi for booting older distros.
xen.spec - fate#326960: Package grub2 as noarch.
As part of the effort to have a unified bootloader across
architectures, modify the xen.spec file to move the Xen efi files
to /usr/share/efi/$(uname -m) from /usr/lib64/efi. - Update to Xen 4.12.0 RC1 release (fate#325107, fate#323901)
xen-4.12.0-testing-src.tar.bz2
- Drop
5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch
5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch
5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch
5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch
5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch
5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch
5b9784d2-x86-HVM-add-known_gla-helper.patch
5b9784f2-x86-HVM-split-page-straddling-accesses.patch
5bdc31d5-VMX-fix-vmx_handle_eoi.patch
gcc8-fix-array-warning-on-i586.patch
gcc8-fix-format-warning-on-i586.patch
gcc8-inlining-failed.patch
xen.bug1079730.patch - bsc#1121960 - xen: sync with Factory
xen.spec
xen.changes - Replace old $RPM_* shell vars.
- Run fdupes for all architectures, and not crossing
subvolume boundaries. - Do not run %fdupes on aarch64 to avoid the hardlink-across-partition
rpmlint error - Require qemu-seabios only on x86* as it is not available on non-x86
systems - Avoid creating dangling symlinks (bsc#1116524)
This reverts the revert of tmp_build.patch - Update to Xen 4.11.1 bug fix release (bsc#1027519)
xen-4.11.1-testing-src.tar.bz2
- 5b505d59-tools-xentop-replace-use-of-deprecated-vwprintw.patch
replaces xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch
- 5b76ec82-libxl-arm-Fix-build-on-arm64-acpi-w-gcc-8.2.patch
replaces xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch
- Drop the following patches contained in the new tarball
5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
5b3f8fa5-port-array_index_nospec-from-Linux.patch
5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch
5b4488e7-x86-spec-ctrl-cmdline-handling.patch
5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
5b4db308-SVM-fix-cleanup-svm_inject_event.patch
5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
5b505fe5-VMX-fix-find-msr-build.patch
5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
5b508775-2-x86-possibly-bring-up-all-CPUs.patch
5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch
5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch
5b62ca93-VMX-avoid-hitting-BUG_ON.patch
5b6d84ac-x86-fix-improve-vlapic-read-write.patch
5b6d8ce2-x86-XPTI-parsing.patch
5b72fbbe-ARM-disable-grant-table-v2.patch
5b72fbbe-oxenstored-eval-order.patch
5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch
5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch
5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch
5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch
5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch
5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch
5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch
5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch
5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch
5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch
5b72fbbf-xl.conf-Add-global-affinity-masks.patch
5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch
5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch
5b75afef-x86-setup-avoid-OoB-E820-lookup.patch
5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch
5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch
5b8d5832-x86-assorted-array_index_nospec-insertions.patch
5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch
5bacae4b-x86-boot-allocate-extra-module-slot.patch
5bae44ce-x86-silence-false-log-messages.patch
5bb60c12-x86-split-opt_xpti.patch
5bb60c4f-x86-split-opt_pv_l1tf.patch
5bb60c74-x86-fix-xpti-and-pv-l1tf.patch
5bcf0722-x86-boot-enable-NMIs.patch
5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch
5bd076e9-x86-boot-init-debug-regs-correctly.patch
5bd076e9-x86-init-vcpu-debug-regs-correctly.patch
5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch
5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch
5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch
5be2a308-x86-extend-get_platform_badpages.patch
5be2a354-x86-work-around-HLE-host-lockup-erratum.patch
xsa275-1.patch
xsa275-2.patch
xsa276-1.patch
xsa276-2.patch
xsa277.patch
xsa279.patch
xsa280-1.patch
xsa280-2.patch - bsc#1116524 - Package xen-tools-4.11.0_09-2.1.x86_64 broken:
Missing /bin/domu-xenstore. This was broken because "make
package build reproducible" change. (boo#1047218, boo#1062303)
This fix reverses the change to this patch.
tmp_build.patch - bsc#1115040 - VUL-0: CVE-2018-19961 CVE-2018-19962: xen:
insufficient TLB flushing / improper large page mappings with AMD
IOMMUs (XSA-275)
xsa275-1.patch
xsa275-2.patch
- bsc#1115043 - VUL-0: CVE-2018-19963: xen: resource accounting
issues in x86 IOREQ server handling (XSA-276)
xsa276-1.patch
xsa276-2.patch
- bsc#1115044 - VUL-0: CVE-2018-19964: xen: x86: incorrect error
handling for guest p2m page removals (XSA-277)
xsa277.patch
- bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even
when disabled (XSA-278)
5bd0e11b-x86-disallow-VT-x-insns-without-nested-virt.patch
- bsc#1115045 - VUL-0: xen: CVE-2018-19965: x86: DoS from attempting
to use INVPCID with a non-canonical addresses (XSA-279)
xsa279.patch
- bsc#1115047 - VUL-0: CVE-2018-19966: xen: Fix for XSA-240
conflicts with shadow paging (XSA-280)
xsa280-1.patch
xsa280-2.patch
- bsc#1114988 - VUL-0: CVE-2018-19967: xen: guest use of HLE
constructs may lock up host (XSA-282)
5be2a308-x86-extend-get_platform_badpages.patch
5be2a354-x86-work-around-HLE-host-lockup-erratum.patch
- bsc#1108940 - L3: XEN SLE12-SP1 domU hang on SLE12-SP3 HV
5bdc31d5-VMX-fix-vmx_handle_eoi.patch
- Upstream bug fixes (bsc#1027519)
5b752762-x86-hvm-emul-rep-IO-should-not-cross-GFN-boundaries.patch
5ba11ed4-credit2-fix-moving-CPUs-between-cpupools.patch
5bacae4b-x86-boot-allocate-extra-module-slot.patch
5bae44ce-x86-silence-false-log-messages.patch
5bb60c12-x86-split-opt_xpti.patch
5bb60c4f-x86-split-opt_pv_l1tf.patch
5bb60c74-x86-fix-xpti-and-pv-l1tf.patch
5bcf0722-x86-boot-enable-NMIs.patch
5bd076e9-dombuilder-init-vcpu-debug-regs-correctly.patch
5bd076e9-x86-boot-init-debug-regs-correctly.patch
5bd076e9-x86-init-vcpu-debug-regs-correctly.patch
5bd85bfd-x86-fix-crash-on-xl-set-parameter-pcid.patch - bsc#1114405 - VUL-0: CVE-2018-18883: xen: Nested VT-x usable even
when disabled (XSA-278)
5bd0e0cf-vvmx-Disallow-the-use-of-VT-x-instructions-when-nested-virt-is-disabled.patch - Use SMBIOS_REL_DATE instead of SMBIOS_DATE for reproducible binaries - make package build reproducible (boo#1047218, boo#1062303)
* Set SMBIOS_REL_DATE
* Update tmp_build.patch to use SHA instead of random build-id
* Add reproducible.patch to use --no-insert-timestamp - Building with ncurses 6.1 will fail without
xen.2b50cdbc444c637575580dcfa6c9525a84d5cc62.patch
- Building libxl acpi support on aarch64 with gcc 8.2 will fail without
xen.b8f33431f3dd23fb43a879f4bdb4283fdc9465ad.patch - bsc#1106263 - L3: The affinity reporting via 'xl vcpu-list' is
apparently broken
5b8fae26-tools-libxl-correct-vcpu-affinity-output-with-sparse-physical-cpu-map.patch
5b8fae26-xen-fill-topology-info-for-all-present-cpus.patch
5b8fb5af-tools-xl-refuse-to-set-number-of-vcpus-to-0-via-xl-vcpu-set.patch - bsc#1094508 - L3: Kernel oops in fs/dcache.c called by
d_materialise_unique()
5b9784ad-x86-HVM-drop-hvm_fetch_from_guest_linear.patch
5b9784d2-x86-HVM-add-known_gla-helper.patch
5b9784f2-x86-HVM-split-page-straddling-accesses.patch
- bsc#1103279 - (CVE-2018-15470) VUL-0: CVE-2018-15470: xen:
oxenstored does not apply quota-maxentity (XSA-272)
5b72fbbe-oxenstored-eval-order.patch
- bsc#1103275 - (CVE-2018-15469) VUL-0: CVE-2018-15469: xen: Use of
v2 grant tables may cause crash on ARM (XSA-268)
5b72fbbe-ARM-disable-grant-table-v2.patch
- Upstream patches from Jan (bsc#1027519)
5b6d84ac-x86-fix-improve-vlapic-read-write.patch
5b74190e-x86-hvm-ioreq-MMIO-range-check-honor-DF.patch
5b75afef-x86-setup-avoid-OoB-E820-lookup.patch
5b76b780-rangeset-inquiry-functions-tolerate-NULL.patch
5b83c654-VT-d-dmar-iommu-mem-leak-fix.patch
5b8d5832-x86-assorted-array_index_nospec-insertions.patch
- Drop 5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch - bsc#1078292 - rpmbuild -ba SPECS/xen.spec with xen-4.9.1 failed
xen.spec - bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
(XSA-273)
5b72fbbf-1-spec-ctrl-Calculate-safe-PTE-addresses-for-L1TF-mitigations.patch
5b72fbbf-2-spec-ctrl-Introduce-an-option-to-control-L1TF-mitigation-for-PV-guests.patch
5b72fbbf-3-shadow-Infrastructure-to-force-a-PV-guest-into-shadow-mode.patch
5b72fbbf-4-mm-Plumbing-to-allow-any-PTE-update-to-fail-with--ERESTART.patch
5b72fbbf-5-pv-Force-a-guest-into-shadow-mode-when-it-writes-an-L1TF-vulnerable-PTE.patch
5b72fbbf-6-spec-ctrl-CPUID-MSR-definitions-for-L1D_FLUSH.patch
5b72fbbf-7-msr-Virtualise-MSR_FLUSH_CMD-for-guests.patch
5b72fbbf-8-spec-ctrl-Introduce-an-option-to-control-L1D_FLUSH-for-HVM-HAP-guests.patch
- bsc#1103276 - VUL-0: CVE-2018-15468: xen: x86: Incorrect
MSR_DEBUGCTL handling lets guests enable BTS (XSA-269)
5b72fbbe-vtx-Fix-the-checking-for-unknown-invalid-MSR_DEBUGCTL-bits.patch
- Upstream prereq patches for XSA-273 and other upstream fixes
(bsc#1027519)
5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
5b4321f6-x86-correctly-set-nonlazy_xstate_used-when-loading-full-state.patch
5b505fe5-VMX-fix-find-msr-build.patch
5b56feb1-hvm-Disallow-unknown-MSR_EFER-bits.patch
5b56feb2-spec-ctrl-Fix-the-parsing-of-xpti--on-fixed-Intel-hardware.patch
5b62ca93-VMX-avoid-hitting-BUG_ON.patch
5b6d8ce2-x86-XPTI-parsing.patch
5b72fbbf-x86-Make-spec-ctrl-no-a-global-disable-of-all-mitigations.patch
5b72fbbf-xl.conf-Add-global-affinity-masks.patch
5b741962-x86-write-to-correct-variable-in-parse_pv_l1tf.patch - Upstream patches from Jan (bsc#1027519)
5b3f8fa5-port-array_index_nospec-from-Linux.patch
5b4488e7-x86-spec-ctrl-cmdline-handling.patch
5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
5b4db308-SVM-fix-cleanup-svm_inject_event.patch
5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
5b508775-2-x86-possibly-bring-up-all-CPUs.patch
5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
gcc8-fix-format-warning-on-i586.patch
gcc8-fix-array-warning-on-i586.patch
- Drop xen.fuzz-_FORTIFY_SOURCE.patch
gcc8-fix-warning-on-i586.patch - Update to Xen 4.11.0 FCS (fate#325202, fate#325123)
xen-4.11.0-testing-src.tar.bz2
disable-building-pv-shim.patch
- Dropped patches
5a33a12f-domctl-improve-locking-during-domain-destruction.patch
5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
5a9985bd-x86-invpcid-support.patch
5ac72a48-gcc8.patch
5ac72a5f-gcc8.patch
5ac72a64-gcc8.patch
5ac72a69-gcc8.patch
5ac72a6e-gcc8.patch
5ac72a74-gcc8.patch
5ac72a7b-gcc8.patch
5ad4923e-x86-correct-S3-resume-ordering.patch
5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
5adde9ed-xpti-fix-double-fault-handling.patch
5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
5ae31917-x86-cpuidle-init-stats-lock-once.patch
5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
5aec7393-1-x86-xpti-avoid-copy.patch
5aec7393-2-x86-xpti-write-cr3.patch
5aec744a-3-x86-xpti-per-domain-flag.patch
5aec744a-4-x86-xpti-use-invpcid.patch
5aec744a-5-x86-xpti-no-global-pages.patch
5aec744a-6-x86-xpti-cr3-valid-flag.patch
5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
5aec744b-8-x86-xpti-cr3-helpers.patch
5aec74a8-9-x86-xpti-use-pcid.patch
5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch
5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch
5af1daa9-3-x86-traps-use-IST-for-DB.patch
5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch
5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch
5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch
5af97999-viridian-cpuid-leaf-40000003.patch
5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch
5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch
5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch
5b0bc9da-x86-XPTI-fix-S3-resume.patch
5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch
5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch
5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
5b34882d-x86-mm-dont-bypass-preemption-checks.patch
5b348874-x86-refine-checks-in-DB-handler.patch
5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch
5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch
5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
5b348954-x86-guard-against-NM.patch
libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
libxl.LIBXL_DESTROY_TIMEOUT.patch
libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
xen_fix_build_with_acpica_20180427_and_new_packages.patch - Submit upstream patch libacpi: fixes for iasl >= 20180427
git commit 858dbaaeda33b05c1ac80aea0ba9a03924e09005
xen_fix_build_with_acpica_20180427_and_new_packages.patch
This is needed for acpica package to get updated in our build service - Upstream patches from Jan (bsc#1027519)
5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
5b0bc9da-x86-XPTI-fix-S3-resume.patch
5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-<>.patch)
5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-<>.patch)
5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
5b348954-x86-guard-against-NM.patch - Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch - bsc#1098403 - fix regression introduced by changes for bsc#1079730
a PV domU without qcow2 and/or vfb has no qemu attached.
Ignore QMP errors for PV domUs to handle PV domUs with and without
an attached qemu-xen.
xen.bug1079730.patch - bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
bypassed in x86 PV MM handling (XSA-264)
xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
safety check can be triggered by a guest (XSA-265)
xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
readonly flag on HVM emulated SCSI disks (XSA-266)
xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch - bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
(XSA-267)
xsa267-1.patch
xsa267-2.patch - bsc#1092543 - GCC 8: xen build fails
gcc8-fix-warning-on-i586.patch - bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 – Speculative Store
Bypass aka "Memory Disambiguation" (XSA-263)
5ad4923e-x86-correct-S3-resume-ordering.patch
5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
Spectre-v4-1.patch
Spectre-v4-2.patch
Spectre-v4-3.patch - Always call qemus xen-save-devices-state in suspend/resume to
fix migration with qcow2 images (bsc#1079730)
libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
xen.bug1079730.patch - bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
5ae31917-x86-cpuidle-init-stats-lock-once.patch
5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
5af97999-viridian-cpuid-leaf-40000003.patch - Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
5a9985bd-x86-invpcid-support.patch
5adde9ed-xpti-fix-double-fault-handling.patch
5aec7393-1-x86-xpti-avoid-copy.patch
5aec7393-2-x86-xpti-write-cr3.patch
5aec744a-3-x86-xpti-per-domain-flag.patch
5aec744a-4-x86-xpti-use-invpcid.patch
5aec744a-5-x86-xpti-no-global-pages.patch
5aec744a-6-x86-xpti-cr3-valid-flag.patch
5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
5aec744b-8-x86-xpti-cr3-helpers.patch
5aec74a8-9-x86-xpti-use-pcid.patch - bsc#1092543 - GCC 8: xen build fails
5ac72a48-gcc8.patch
5ac72a5f-gcc8.patch
5ac72a64-gcc8.patch
5ac72a69-gcc8.patch
5ac72a6e-gcc8.patch
5ac72a74-gcc8.patch
5ac72a7b-gcc8.patch
gcc8-inlining-failed.patch - Update to Xen 4.10.1 bug fix release (bsc#1027519)
xen-4.10.1-testing-src.tar.bz2
disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
5a4caa8c-x86-E820-don-t-overrun-array.patch
5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
5a4fd894-4-clarifications-to-wait-infrastructure.patch
5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
5a5e2cff-x86-Meltdown-band-aid.patch
5a5e2d73-x86-Meltdown-band-aid-conditional.patch
5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
5a5e459c-2-x86-report-domain-id-on-CPUID.patch
5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
5a69c0b9-x86-fix-GET_STACK_END.patch
5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
5a6b36cd-9-x86-issue-speculation-barrier.patch
5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
xsa258.patch
xsa259.patch - bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
debug exceptions (XSA-260)
xsa260-1.patch
xsa260-2.patch
xsa260-3.patch
xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
injection errors (XSA-261)
xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
unbounded loop (XSA-262)
xsa262.patch - bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
crafted user-supplied CDROM (XSA-258)
xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
Xen with XPTI (XSA-259)
xsa259.patch - Preserve xen-syms from xen-dbg.gz to allow processing vmcores
with crash(1) (bsc#1087251) - Upstream patches from Jan (bsc#1027519) and fixes related to
Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch - bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
xsa252.patch
xsa255-1.patch
xsa255-2.patch
xsa256.patch - bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
L3/L4 pagetable freeing (XSA-252)
xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -> v1
transition may crash Xen (XSA-255)
xsa255-1.patch
xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
LAPIC may DoS the host (XSA-256)
xsa256.patch - Remove stale systemd presets code for 13.2 and older - fate#324965 - add script, udev rule and systemd service to watch
for vcpu online/offline events in a HVM domU
They are triggered via xl vcpu-set domU N - Replace hardcoded xen with Name tag when refering to subpkgs - Make sure tools and tools-domU require libs from the very same build - tools-domU: Add support for qemu guest agent. New files
80-xen-channel-setup.rules and xen-channel-setup.sh configure a
xen-pv-channel for use by the guest agent
FATE#324963 - Remove outdated /etc/xen/README* - bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
MSR emulation (XSA-253)
5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
xen: Information leak via side effects of speculative execution
(XSA-254). Includes Spectre v2 mitigation.
5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
5a4caa8c-x86-E820-don-t-overrun-array.patch
5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
5a4fd894-4-clarifications-to-wait-infrastructure.patch
5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
5a5e2cff-x86-Meltdown-band-aid.patch
5a5e2d73-x86-Meltdown-band-aid-conditional.patch
5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
5a5e459c-2-x86-report-domain-id-on-CPUID.patch
5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
5a69c0b9-x86-fix-GET_STACK_END.patch
5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
5a6b36cd-9-x86-issue-speculation-barrier.patch
5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch - Fix python3 deprecated atoi call (bsc#1067224)
pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch - bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
depending on the libxl disk settings
libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch - Remove libxl.LIBXL_DESTROY_TIMEOUT.debug.patch - bsc#1067224 - xen-tools have hard dependency on Python 2
build-python3-conversion.patch
bin-python3-conversion.patch - bsc#1070165 - xen crashes after aborted localhost migration
5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
- bsc#1035442 - L3: libxl: error: libxl.c:1676:devices_destroy_cb:
libxl__devices_destroy failed
5a33a12f-domctl-improve-locking-during-domain-destruction.patch
- Upstream patches from Jan (bsc#1027519)
5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch - Update to Xen 4.10.0 FCS (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2 - Rebuild initrd if xen-tools-domU is updated - Update to Xen 4.10.0-rc8 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2 - Increase the value of LIBXL_DESTROY_TIMEOUT from 10 to 100 seconds
If many domUs shutdown in parallel the backends can not keep up
Add some debug output to track how long backend shutdown takes (bsc#1035442)
libxl.LIBXL_DESTROY_TIMEOUT.patch
libxl.LIBXL_DESTROY_TIMEOUT.debug.patch - Adjust xenstore-run-in-studomain.patch to change the defaults
in the code instead of changing the sysconfig template, to also
cover the upgrade case - Update to Xen 4.10.0-rc6 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2 - Since xen switched to Kconfig, building a debug hypervisor
was done by default. Adjust make logic to build a non-debug
hypervisor by default, and continue to provide one as xen-dbg.gz - fate#316614: set migration constraints from cmdline
fix libxl.set-migration-constraints-from-cmdline.patch for xen-4.10 - Document the suse-diskcache-disable-flush option in
xl-disk-configuration(5) (bsc#879425,bsc#1067317) - Replace references to /var/adm/fillup-templates with new
%_fillupdir macro (boo#1069468) - Update to Xen 4.10.0-rc5 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2
- fate#323663 - Run Xenstore in stubdomain
xenstore-run-in-studomain.patch - bsc#1067224 - xen-tools have hard dependency on Python 2
pygrub-python3-conversion.patch
xenmon-python3-conversion.patch
migration-python3-conversion.patch
xnloader.py
xen2libvirt.py - Remove xendriverdomain.service (bsc#1065185)
Driver domains must be configured manually with custom .service file - Update to Xen 4.10.0-rc3 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2
- Drop 59f31268-libxc-remove-stale-error-check-for-domain-size.patch - Adjust xen-dom0-modules.service to ignore errors (bsc#1065187) - fate#324052 Support migration of Xen HVM domains larger than 1TB
59f31268-libxc-remove-stale-error-check-for-domain-size.patch - Update to Xen 4.10.0-rc2 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2 - Update to Xen 4.10.0-rc1 (fate#321394, fate#322686)
xen-4.10.0-testing-src.tar.bz2
- Drop patches included in new tarball
592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch
596f257e-x86-fix-hvmemul_insn_fetch.patch
5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch
598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch
598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch
5992f1e5-x86-grant-disallow-misaligned-PTEs.patch
5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch
5992f233-gnttab-correct-pin-status-fixup-for-copy.patch
59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch
59958ebf-gnttab-fix-transitive-grant-handling.patch
59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch
599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch
59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch
59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch
59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch
59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch
59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch
59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch
59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch
59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch
59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch
59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch
59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch
59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch
gcc7-arm.patch
gcc7-mini-os.patch - bsc#1061084 - VUL-0: xen: page type reference leak on x86
(XSA-242)
xsa242.patch
- bsc#1061086 - VUL-0: xen: x86: Incorrect handling of self-linear
shadow mappings with translated guests (XSA-243)
xsa243.patch
- bsc#1061087 - VUL-0: xen: x86: Incorrect handling of IST settings
during CPU hotplug (XSA-244)
xsa244.patch - bsc#1061077 - VUL-0: xen: DMOP map/unmap missing argument checks
(XSA-238)
xsa238.patch
- bsc#1061080 - VUL-0: xen: hypervisor stack leak in x86 I/O
intercept code (XSA-239)
xsa239.patch
- bsc#1061081 - VUL-0: xen: Unlimited recursion in linear pagetable
de-typing (XSA-240)
xsa240-1.patch
xsa240-2.patch
- bsc#1061082 - VUL-0: xen: Stale TLB entry due to page type
release race (XSA-241)
xsa241.patch - bsc#1061075 - VUL-0: xen: pin count / page reference race in
grant table code (XSA-236)
xsa236.patch
- bsc#1061076 - VUL-0: xen: multiple MSI mapping issues on x86
(XSA-237)
xsa237-1.patch
xsa237-2.patch
xsa237-3.patch
xsa237-4.patch
xsa237-5.patch - bsc#1056278 - VUL-0: xen: Missing NUMA node parameter
verification (XSA-231)
59b7d664-mm-make-sure-node-is-less-than-MAX_NUMNODES.patch
- bsc#1056280 - VUL-0: xen: Missing check for grant table (XSA-232)
59b7d69b-grant_table-fix-GNTTABOP_cache_flush-handling.patch
- bsc#1056281 - VUL-0: xen: cxenstored: Race in domain cleanup
(XSA-233)
59b7d6c8-xenstore-dont-unlink-connection-object-twice.patch
- bsc#1056282 - VUL-0: xen: insufficient grant unmapping checks for
x86 PV guests (XSA-234)
59b7d6d9-gnttab-also-validate-PTE-perms-upon-destroy-replace.patch
- bsc#1055321 - VUL-0: xen: add-to-physmap error paths fail to
release lock on ARM (XSA-235)
599da329-arm-mm-release-grant-lock-on-xatp1-error-paths.patch
- Upstream patches from Jan (bsc#1027519)
59a01223-x86-check-for-alloc-errors-in-modify_xen_mappings.patch
59a0130c-x86-efi-dont-write-relocs-in-efi_arch_relocate_image-1st-pass.patch
59a9221f-VT-d-use-correct-BDF-for-VF-to-search-VT-d-unit.patch
59ae9177-x86-emul-fix-handling-of-unimplemented-Grp7-insns.patch
59aec335-x86emul-correct-VEX-W-handling-for-VPINSRD.patch
59aec375-x86emul-correct-VEX-L-handling-for-VCVTx2SI.patch
59afcea0-x86-introduce-and-use-setup_force_cpu_cap.patch
59b2a7f2-x86-HVM-correct-repeat-count-update-linear-phys.patch
- Dropped gcc7-xen.patch - bsc#1057358 - Cannot Boot into SLES12.3 with Xen hypervisor when
Secure Boot is Enabled
xen.spec - bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored
update from v6 to v9 to cover more cases for ballooned domUs
libxc.sr.superpage.patch - bsc#1026236 - remove suse_vtsc_tolerance= cmdline option for Xen
drop the patch because it is not upstream acceptable
remove xen.suse_vtsc_tolerance.patch - bsc#1055695 - XEN: 11SP4 and 12SP3 HVM guests can not be restored
after the save using xl stack
libxc.sr.superpage.patch - Unignore gcc-PIE
the toolstack disables PIE for firmware builds as needed - Upstream patches from Jan (bsc#1027519)
592fd5f0-stop_machine-fill-result-only-in-case-of-error.patch
596f257e-x86-fix-hvmemul_insn_fetch.patch
5982fd99-VT-d-don-t-panic-warn-on-iommu-no-igfx.patch
598c3630-VT-d-PI-disable-when-CPU-side-PI-is-off.patch
598c3706-cpufreq-only-stop-ondemand-governor-if-started.patch
5992f1e5-x86-grant-disallow-misaligned-PTEs.patch (Replaces xsa227.patch)
5992f20d-gnttab-split-maptrack-lock-to-make-it-useful-again.patch (Replaces xsa228.patch)
5992f233-gnttab-correct-pin-status-fixup-for-copy.patch (Replaces xsa230.patch)
59958e76-gnttab-dont-use-possibly-unbounded-tail-calls.patch (Replaces xsa226-1.patch)
59958ebf-gnttab-fix-transitive-grant-handling.patch (Replaces xsa226-2.patch)
59958edd-gnttab-avoid-spurious-maptrack-handle-alloc-failures.patch - bsc#1044974 - xen-tools require python-pam
xen.spec - Clean up spec file errors and a few warnings. (bsc#1027519)
- Removed conditional 'with_systemd' and some old deprecated
'sles_version' checks.
xen.spec - Remove use of brctl utiltiy from supportconfig plugin
FATE#323639 - Use upstream variant of mini-os __udivmoddi4 change
gcc7-mini-os.patch - fate#323639 Move bridge-utils to legacy
replace-obsolete-network-configuration-commands-in-s.patch - bsc#1052686 - VUL-0: xen: grant_table: possibly premature
clearing of GTF_writing / GTF_reading (XSA-230)
xsa230.patch - bsc#1035231 - migration of HVM domU does not use superpages
on destination dom0
libxc.sr.superpage.patch - bsc#1051787 - VUL-0: CVE-2017-12135: xen: possibly unbounded
recursion in grant table code (XSA-226)
xsa226-1.patch
xsa226-2.patch
- bsc#1051788 - VUL-0: CVE-2017-12137: xen: x86: PV privilege
escalation via map_grant_ref (XSA-227)
xsa227.patch
- bsc#1051789 - VUL-0: CVE-2017-12136: xen: grant_table: Race
conditions with maptrack free list handling (XSA-228)
xsa228.patch - Add a supportconfig plugin
xen-supportconfig
FATE#323661 - bsc#1026236 - add suse_vtsc_tolerance= cmdline option for Xen
To avoid emulation of TSC access from a domU after live migration
add a global tolerance for the measured host kHz
xen.suse_vtsc_tolerance.patch - fate#323662 Drop qemu-dm from xen-tools package
The following tarball and patches have been removed
qemu-xen-traditional-dir-remote.tar.bz2
VNC-Support-for-ExtendedKeyEvent-client-message.patch
0001-net-move-the-tap-buffer-into-TAPState.patch
0002-net-increase-tap-buffer-size.patch
0003-e1000-fix-access-4-bytes-beyond-buffer-end.patch
0004-e1000-secrc-support.patch
0005-e1000-multi-buffer-packet-support.patch
0006-e1000-clear-EOP-for-multi-buffer-descriptors.patch
0007-e1000-verify-we-have-buffers-upfront.patch
0008-e1000-check-buffer-availability.patch
CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch
CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch
CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch
CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch
CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch
CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch
CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch
CVE-2015-4037-qemut-smb-config-dir-name.patch
CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch
CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch
CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch
CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch
CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch
CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch
CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch
CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch
CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch
CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch
CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch
CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch
CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch
CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch
CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch
CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch
CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch
CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch
CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch
CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch
CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch
CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch
CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch
blktap.patch
cdrom-removable.patch
xen-qemu-iscsi-fix.patch
qemu-security-etch1.patch
xen-disable-qemu-monitor.patch
xen-hvm-default-bridge.patch
qemu-ifup-set-mtu.patch
ioemu-vnc-resize.patch
capslock_enable.patch
altgr_2.patch
log-guest-console.patch
bdrv_open2_fix_flags.patch
bdrv_open2_flags_2.patch
ioemu-7615-qcow2-fix-alloc_cluster_link_l2.patch
qemu-dm-segfault.patch
bdrv_default_rwflag.patch
kernel-boot-hvm.patch
ioemu-watchdog-support.patch
ioemu-watchdog-linkage.patch
ioemu-watchdog-ib700-timer.patch
ioemu-hvm-pv-support.patch
pvdrv_emulation_control.patch
ioemu-disable-scsi.patch
ioemu-disable-emulated-ide-if-pv.patch
xenpaging.qemu.flush-cache.patch
ioemu-devicemodel-include.patch
- Cleanup spec file and remove unused KMP patches
kmp_filelist
supported_module.patch
xen_pvonhvm.xen_emul_unplug.patch - bsc#1002573 - Optimize LVM functions in block-dmmd
block-dmmd - Record initial Xen dmesg in /var/log/xen/xen-boot.log for
supportconfig. Keep previous log in /var/log/xen/xen-boot.prev.log - Remove storytelling from description in xen.rpm - Update to Xen 4.9.0 FCS (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - Update block-dmmd script (bsc#1002573)
block-dmmd - Update to Xen 4.9.0-rc8+ (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2
gcc7-arm.patch
- Drop gcc7-error-xenpmd.patch - Update to Xen 4.9.0-rc8 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - bsc#1042160 - VUL-1: CVE-2017-9330: xen: usb: ohci: infinite loop
due to incorrect return value
CVE-2017-9330-qemut-usb-ohci-infinite-loop-due-to-incorrect-return-value.patch - bsc#1037243 - VUL-1: CVE-2017-8309: xen: audio: host memory
leakage via capture buffer
CVE-2017-8309-qemut-audio-host-memory-leakage-via-capture-buffer.patch - Update to Xen 4.9.0-rc7 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - Update to Xen 4.9.0-rc6 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - bsc#1031343 - xen fails to build with GCC 7
gcc7-mini-os.patch
gcc7-xen.patch - bsc#1031343 - xen fails to build with GCC 7
gcc7-error-xenpmd.patch - Update to Xen 4.9.0-rc5 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2
- Drop xen-tools-pkgconfig-xenlight.patch - bsc#1037779 - xen breaks kexec-tools build
xen-tools-pkgconfig-xenlight.patch - Update to Xen 4.9.0-rc4 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - bsc#1036146 - sles12sp2 xen VM dumps core to wrong path
xen.spec - Update to Xen 4.9.0-rc3 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2
aarch64-maybe-uninitialized.patch - Update to Xen 4.9.0-rc2 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2 - Update to Xen 4.9.0-rc1 (fate#321394, fate#323108)
xen-4.9.0-testing-src.tar.bz2
ioemu-devicemodel-include.patch
- Dropped patches contained in new tarball
xen-4.8.0-testing-src.tar.bz2
0001-xenstore-let-write_node-and-some-callers-return-errn.patch
0002-xenstore-undo-function-rename.patch
0003-xenstore-rework-of-transaction-handling.patch
584806ce-x86emul-correct-PUSHF-POPF.patch
584fc649-fix-determining-when-domain-creation-is-complete.patch
58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch
58510cac-x86emul-MOVNTI-no-REP-prefixes.patch
58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch
5853ed37-VT-d-correct-dma_msi_set_affinity.patch
5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch
58580060-x86-emul-correct-SYSCALL-eflags-handling.patch
585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch
585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch
585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch
586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch
587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch
587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch
5882129d-x86emul-LOCK-check-adjustments.patch
58821300-x86-segment-attribute-handling.patch
58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch
58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch
5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch
5887888f-credit2-never-consider-CPUs-outside-of-pool.patch
5887888f-credit2-use-the-correct-scratch-cpumask.patch
5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch
5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch
589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch
58a44771-IOMMU-always-call-teardown-callback.patch
58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch
58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch
58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch
58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch
58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch
58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch
58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch
58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch
58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch
58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch
58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch
58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch
58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch
CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch
CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch
glibc-2.25-compatibility-fix.patch
xs-09-add_change_node-params.patch
xs-10-call-add_change_node.patch
xs-11-tdb-record-header.patch
xs-12-node-gen-count.patch
xs-13-read-directory-part-support.patch
xs-14-command-array.patch
xs-15-command-return-val.patch
xs-16-function-static.patch
xs-17-arg-parsing.patch
xs-18-default-buffer.patch
xs-19-handle-alloc-failures.patch
xs-20-tdb-version.patch
xs-21-empty-tdb-database.patch
xs-22-reopen_log-fix.patch
xs-23-XS_DEBUG-rename.patch
xs-24-xenstored_control.patch
xs-25-control-enhance.patch
xs-26-log-control.patch
xs-27-memory-report.patch
xs-28-remove-talloc-report.patch
xs-29-define-off_t.patch
xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch
xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch - bsc#1022703 - Xen HVM guest with OVMF hangs with unattached CDRom
58a59f4b-libxl-correct-xenstore-entry-for-empty-cdrom.patch - bsc#1015348 - L3: libvirtd does not start during boot
suse-xendomains-service.patch - bsc#1014136 - Partner-L3: kdump can't dump a kernel on SLES12-SP2
with Xen hypervisor.
58cf9260-x86-EFI-avoid-Xen-when-looking-for-mod-kexec-pos.patch
- bsc#1026236 - L3: Paravirtualized vs. fully virtualized migration
- latter one much faster
58cf9277-x86-time-dont-use-vTSC-if-host-guest-freqs-match.patch
- Upstream patch from Jan
58cbf682-x86-EFI-avoid-overrunning-mb_modules.patch
58cf9200-x86-EFI-avoid-IOMMU-faults-on-tail-gap.patch
58d91365-sched-dont-call-wrong-hook-via-VCPU2OP.patch - bsc#1022555 - L3: Timeout in "execution of /etc/xen/scripts/block
add"
58d25ea2-xenstore-add-missing-checks-for-allocation-failure.patch
0001-xenstore-let-write_node-and-some-callers-return-errn.patch
0002-xenstore-undo-function-rename.patch
0003-xenstore-rework-of-transaction-handling.patch
- bsc#1030144 - VUL-0: xen: xenstore denial of service via repeated
update (XSA-206)
xsa206-0001-xenstored-apply-a-write-transaction-rate-limit.patch
xsa206-0002-xenstored-Log-when-the-write-transaction-rate-limit.patch
- bsc#1029827 - Forward port xenstored
xs-09-add_change_node-params.patch
xs-10-call-add_change_node.patch
xs-11-tdb-record-header.patch
xs-12-node-gen-count.patch
xs-13-read-directory-part-support.patch
xs-14-command-array.patch
xs-15-command-return-val.patch
xs-16-function-static.patch
xs-17-arg-parsing.patch
xs-18-default-buffer.patch
xs-19-handle-alloc-failures.patch
xs-20-tdb-version.patch
xs-21-empty-tdb-database.patch
xs-22-reopen_log-fix.patch
xs-23-XS_DEBUG-rename.patch
xs-24-xenstored_control.patch
xs-25-control-enhance.patch
xs-26-log-control.patch
xs-27-memory-report.patch
xs-28-remove-talloc-report.patch
xs-29-define-off_t.patch - bsc#1029128 - fix make xen to really produce xen.efi with gcc48 - bsc#1028235 - VUL-0: CVE-2017-6505: xen: qemu: usb: an infinite
loop issue in ohci_service_ed_list
CVE-2017-6505-qemut-usb-an-infinite-loop-issue-in-ohci_service_ed_list.patch
- Upstream patches from Jan (bsc#1027519)
5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch
5887888f-credit2-use-the-correct-scratch-cpumask.patch
5899cbd9-EPT-allow-wrcomb-MMIO-mappings-again.patch
589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch
58a44771-IOMMU-always-call-teardown-callback.patch
58a48ccc-x86-fix-p2m_flush_table-for-non-nested.patch
58a70d94-VMX-fix-VMCS-race-on-cswitch-paths.patch
58ac1f3f-VMX-dont-leak-host-syscall-MSRs.patch
58b5a2de-x86-correct-Xens-idea-of-its-memory-layout.patch
58b6fd42-credit2-always-mark-a-tickled-pCPU-as-tickled.patch
58b6fd42-credit2-dont-miss-accounting-during-credit-reset.patch - bsc#1027654 - XEN fails to build against glibc 2.25
glibc-2.25-compatibility-fix.patch
libxl.pvscsi.patch - fate#316613: Refresh and enable libxl.pvscsi.patch - bsc#1024834 - VUL-0: CVE-2017-2620: xen: cirrus_bitblt_cputovideo
does not check if memory region is safe (XSA-209)
CVE-2017-2620-xsa209-qemut-cirrus_bitblt_cputovideo-does-not-check-if-memory-region-safe.patch - bsc#1023948 - [pvusb][sles12sp3][openqa] Segmentation fault
happened when adding usbctrl devices via xl
589b3272-libxl-dont-segfault-when-creating-domain-with-invalid-pvusb-device.patch - Upstream patches from Jan (bsc#1027519)
587d04d6-x86-xstate-fix-array-overrun-with-LWP.patch
587de4a9-x86emul-VEX-B-ignored-in-compat-mode.patch
5882129d-x86emul-LOCK-check-adjustments.patch
58821300-x86-segment-attribute-handling.patch
58873c1f-x86emul-correct-FPU-stub-asm-constraints.patch
58873c80-x86-hvm-do-not-set-msr_tsc_adjust-on-.patch
5887888f-credit2-use-the-correct-scratch-cpumask.patch
5887888f-credit2-never-consider-CPUs-outside-of-pool.patch
5887888f-credit2-fix-shutdown-suspend-with-cpupools.patch
5888b1b3-x86-emulate-dont-assume-addr_size-32-implies-protmode.patch - bsc#1023004 - VUL-0: CVE-2017-2615: qemu: display: cirrus: oob
access while doing bitblt copy backward mode
CVE-2017-2615-qemut-display-cirrus-oob-access-while-doing-bitblt-copy-backward-mode.patch - fate#322313 and fate#322150 require the acpica package ported to
aarch64 which Xen 4.8 needs to build. Temporarily disable aarch64
until these fates are complete.
xen.spec - bsc#1021952 - Virutalization/xen: Bug xen-tools missing
/usr/bin/domu-xenstore; guests fail to launch
tmp_build.patch
xen.spec - No systemd presets for 42.3+ and SLE12SP3+ (bsc#1012842) - bsc#1007224 - broken symlinks in /usr/share/doc/packages/xen/misc/
xen.spec - 585aa3c5-x86-force-EFLAGS-IF-on-upon-exit-to-PV.patch
Replaces xsa202.patch (bsc#1014298)
- 585aa407-x86-HVM-NULL-check-before-using-VMFUNC-hook.patch
Replaces xsa203.patch (bsc#1014300)
- 58580060-x86-emul-correct-SYSCALL-eflags-handling.patch
Replaces xsa204.patch (bsc#1016340)
- Upstream patches from Jan
58526ccc-x86emul-64bit-ignore-most-segment-bases-in-align-check.patch
5853ed37-VT-d-correct-dma_msi_set_affinity.patch
5853ee07-x86emul-CMPXCHG16B-aligned-operand.patch
585bd5fe-x86-emul-correct-VMFUNC-return-value-handling.patch
586ba81c-x86-cpu-dont-update-this_cpu-for-guest-get_cpu_vendor.patch - bsc#1015169 - VUL-0: CVE-2016-9921, CVE-2016-9922: xen: qemu:
display: cirrus_vga: a divide by zero in cirrus_do_copy
CVE-2016-9921-qemut-display-cirrus_vga-divide-by-zero-in-cirrus_do_copy.patch - bsc#1016340 - VUL-0: CVE-2016-10013: xen: x86: Mishandling of
SYSCALL singlestep during emulation (XSA-204)
xsa204.patch - bsc#1012651 - VUL-0: CVE-2016-9932: xen: x86 CMPXCHG8B emulation
fails to ignore operand size override (XSA-200)
58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch - bsc#1014298 - VUL-0: CVE-2016-10024: xen: x86 PV guests may be
able to mask interrupts (XSA-202)
xsa202.patch
- bsc#1014300 - VUL-0: CVE-2016-10025: xen: x86: missing NULL
pointer check in VMFUNC emulation (XSA-203)
xsa203.patch
- Upstream patches from Jan
584806ce-x86emul-correct-PUSHF-POPF.patch
584fc649-fix-determining-when-domain-creation-is-complete.patch
58510c06-x86emul-CMPXCHGnB-ignore-prefixes.patch
58510cac-x86emul-MOVNTI-no-REP-prefixes.patch - Update to Xen 4.8 FCS
xen-4.8.0-testing-src.tar.bz2
- Dropped
xen-4.7.1-testing-src.tar.bz2
0001-libxc-Rework-extra-module-initialisation.patch
0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch
0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch
0004-firmware-makefile-install-BIOS-blob.patch
0005-libxl-Load-guest-BIOS-from-file.patch
0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch
0007-hvmloader-Grab-the-hvm_start_info-pointer.patch
0008-hvmloader-Locate-the-BIOS-blob.patch
0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch
0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch
0011-hvmloader-Load-OVMF-from-modules.patch
0012-hvmloader-Specific-bios_load-function-required.patch
0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch
0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch
57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch
576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch
5769106e-x86-generate-assembler-equates-for-synthesized.patch
57a1e603-x86-time-adjust-local-system-time-initialization.patch
57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch
57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch
57a30261-x86-support-newer-Intel-CPU-models.patch
5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch
581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch
581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch
58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch
582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch
582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch
58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch
58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch
58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch
58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch
58343ec2-x86emul-fix-huge-bit-offset-handling.patch
58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch
58343f44-x86-svm-fix-injection-of-software-interrupts.patch
58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch
CVE-2016-9381-xsa197-qemut.patch
CVE-2016-9637-xsa199-qemut.patch - bsc#1011652 - VUL-0: xen: qemu ioport array overflow
CVE-2016-9637-xsa199-qemut.patch - bsc#1009100 - VUL-0: CVE-2016-9386: XSA-191: xen: x86 null
segments not always treated as unusable
58343dc2-x86-hvm-Fix-the-handling-of-non-present-segments.patch
- bsc#1009103 - VUL-0: CVE-2016-9382: XSA-192: xen: x86 task switch
to VM86 mode mis-handled
58343df8-x86-HVM-dont-load-LDTR-with-VM86-mode-attrs-during-task-switch.patch
- bsc#1009104 - VUL-0: CVE-2016-9385: XSA-193: xen: x86 segment base
write emulation lacking canonical address checks
58343e24-x86-PV-writes-of-fs-and-gs-base-MSRs-require-canonical-addresses.patch
- bsc#1009105 - VUL-0: CVE-2016-9384: XSA-194: xen: guest 32-bit
ELF symbol table load leaking host data
58343e9e-libelf-fix-stack-memory-leak-when-loading-32-bit-symbol-tables.patch
- bsc#1009107 - VUL-0: CVE-2016-9383: XSA-195: xen: x86 64-bit bit
test instruction emulation broken
58343ec2-x86emul-fix-huge-bit-offset-handling.patch
- bsc#1009108 - VUL-0: CVE-2016-9377,CVE-2016-9378: XSA-196: xen:
x86 software interrupt injection mis-handled
58343f29-x86-emul-correct-the-IDT-entry-calculation-in-inject_swint.patch
58343f44-x86-svm-fix-injection-of-software-interrupts.patch
- bsc#1009109 - VUL-0: CVE-2016-9381: XSA-197: xen: qemu incautious
about shared ring processing
CVE-2016-9381-xsa197-qemut.patch
- bsc#1009111 - VUL-0: CVE-2016-9379,CVE-2016-9380: XSA-198: xen:
delimiter injection vulnerabilities in pygrub
58343f79-pygrub-Properly-quote-results-when-returning-them-to-the-caller.patch
- Upstream patches from Jan
581b2c3b-x86-emul-reject-LGDT-LIDT-with-non-canonical-addresses.patch
581b647a-x86emul-L-S-G-I-DT-ignore-opsz-overrides-in-64-bit-mode.patch
58249392-x86-svm-dont-clobber-eax-edx-if-RDMSR-intercept-fails.patch
582c35d6-x86-vmx-correct-long-mode-check-in-vmx_cpuid_intercept.patch
582c35ee-x86-traps-dont-call-hvm_hypervisor_cpuid_leaf-for-PV.patch - Update to Xen Version 4.7.1
xen-4.7.1-testing-src.tar.bz2
- Dropped patches contained in new tarball
xen-4.7.0-testing-src.tar.bz2
575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch
57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch
57973099-have-schedulers-revise-initial-placement.patch
579730e6-remove-buggy-initial-placement-algorithm.patch
57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch
57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch
57ac6316-don-t-restrict-DMA-heap-to-node-0.patch
57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch
57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch
57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch
57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch
57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch
57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch
57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch
57c82be2-x86-32on64-adjust-call-gate-emulation.patch
57c93e52-fix-error-in-libxl_device_usbdev_list.patch
57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch
57c96e2c-x86-correct-PT_NOTE-file-position.patch
57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch
57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch
57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch
57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch
57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch
57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch
57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch
57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch
57da8883-credit1-fix-mask-to-be-used-for-tickling.patch
57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch
57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch
57e93e1d-x86emul-correct-loading-of-ss.patch
57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch
57e93e89-x86-AMD-apply-erratum-665-workaround.patch
57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch
57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch
57fb6a91-x86-defer-not-present-segment-checks.patch
5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch
5800caec-x86emul-fix-pushing-of-selector-registers.patch
5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch
580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch
57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch - bsc#1004981 - Xen RPM doesn't contain debug hypervisor for EFI
systems
xen.spec - bsc#1000106 - VUL-0: CVE-2016-7777: xen: CR0.TS and CR0.EM not
always honored for x86 HVM guests (XSA-190)
57f3a8ee-x86emul-honor-guest-CR0-TS-and-CR0-EM.patch
- bsc#996191 - [XEN][acpi]residency -n 88 -c will cause xen panic
on broadwell-ep
57dfb2ff-x86-Intel-Broadwell-no-PKG_C8-10_RESIDENCY-MSRs.patch
- Upstream patches from Jan
57d7ca5f-x86-domctl-fix-TOCTOU-race-in-XEN_DOMCTL_getvcpuextstate.patch
57d7ca64-x86-domctl-fix-migration-of-guests-not-using-xsave.patch
57da8883-credit1-fix-mask-to-be-used-for-tickling.patch
57da8883-credit2-properly-schedule-migration-of-running-vcpu.patch
57dfb1c5-x86-Intel-hide-CPUID-faulting-capability-from-guests.patch
57e93e1d-x86emul-correct-loading-of-ss.patch
57e93e4a-x86emul-don-t-allow-null-selector-for-LTR.patch
57e93e89-x86-AMD-apply-erratum-665-workaround.patch
57ee6cbc-credit1-return-time-remaining-to-limit-as-next-timeslice.patch
57fb6a91-x86-defer-not-present-segment-checks.patch
5800c51d-x86-hvm-Clobber-cs-L-when-LME-becomes-set.patch
5800caec-x86emul-fix-pushing-of-selector-registers.patch
5800cb06-x86-Viridian-don-t-depend-on-undefined-register-state.patch
580e29f9-x86-MISALIGNSSE-feature-depends-on-SSE.patch
5810a9cc-x86-emul-Correct-decoding-of-SReg3-operands.patch - bsc#1007941 - Xen tools limit the number of vcpus to 256 when the
system has 384
xen-arch-kconfig-nr_cpus.patch - bsc#1007157 - VUL-0: CVE-2016-8910: xen: net: rtl8139: infinite
loop while transmit in C+ mode
CVE-2016-8910-qemut-net-rtl8139-infinite-loop-while-transmit-in-Cplus-mode.patch - bsc#1005004 - CVE-2016-8667: xen: dma: rc4030 divide by zero
error in set_next_tick
CVE-2016-8667-qemut-dma-rc4030-divide-by-zero-error-in-set_next_tick.patch
- bsc#1005005 - VUL-0: CVE-2016-8669: xen: char: divide by zero
error in serial_update_parameters
CVE-2016-8669-qemut-char-divide-by-zero-error-in-serial_update_parameters.patch - bsc#1003030 - VUL-0: CVE-2016-7908: xen: net: Infinite loop in
mcf_fec_do_tx
CVE-2016-7908-qemut-net-Infinite-loop-in-mcf_fec_do_tx.patch
- bsc#1003032 - VUL-0: CVE-2016-7909: xen: net: pcnet: infinite
loop in pcnet_rdra_addr
CVE-2016-7909-qemut-net-pcnet-infinite-loop-in-pcnet_rdra_addr.patch - bsc#995785 - VUL-0: CVE-2016-7092: xen: x86: Disallow L3
recursive pagetable for 32-bit PV guests (XSA-185)
57d1563d-x86-32on64-don-t-allow-recursive-page-tables-from-L3.patch
- bsc#995789 - VUL-0: CVE-2016-7093: xen: x86: Mishandling of
instruction pointer truncation during emulation (XSA-186)
57d15679-x86-emulate-Correct-boundary-interactions-of-emulated-insns.patch
57d18642-hvm-fep-Allow-test-insns-crossing-1-0-boundary.patch
- bsc#995792 - VUL-0: CVE-2016-7094: xen: x86 HVM: Overflow of
sh_ctxt->seg_reg[] (XSA-187)
57d1569a-x86-shadow-Avoid-overflowing-sh_ctxt-seg_reg.patch
57d18642-x86-segment-Bounds-check-accesses-to-emulation-ctxt-seg_reg.patch
- bsc#991934 - xen hypervisor crash in csched_acct
57c96df3-credit1-fix-a-race-when-picking-initial-pCPU.patch
- Upstream patches from Jan
57c4412b-x86-HVM-add-guarding-logic-for-VMX-specific-code.patch
57c57f73-libxc-correct-max_pfn-calculation-for-saving-domain.patch
57c805bf-x86-levelling-restrict-non-architectural-OSXSAVE-handling.patch
57c805c1-x86-levelling-pass-vcpu-to-ctxt_switch_levelling.patch
57c805c3-x86-levelling-provide-architectural-OSXSAVE-handling.patch
57c82be2-x86-32on64-adjust-call-gate-emulation.patch
57c96e2c-x86-correct-PT_NOTE-file-position.patch
57cfed43-VMX-correct-feature-checks-for-MPX-and-XSAVES.patch - bsc#979002 - add 60-persistent-xvd.rules and helper script
also to initrd, add the relevant dracut helper - bnc#953518 - unplug also SCSI disks in qemu-xen-traditional for
upstream unplug protocol - bsc#989679 - [pvusb feature] USB device not found when
'virsh detach-device guest usb.xml'
57c93e52-fix-error-in-libxl_device_usbdev_list.patch - bsc#992224 - [HPS Bug] During boot of Xen Hypervisor, Failed to
get contiguous memory for DMA from Xen
57ac6316-don-t-restrict-DMA-heap-to-node-0.patch
- bsc#978755 - xen uefi systems fail to boot
- bsc#983697 - SLES12 SP2 Xen UEFI mode cannot boot
57b71fc5-x86-EFI-don-t-apply-relocations-to-l-2-3-_bootmap.patch
- Upstream patch from Jan
57b7447b-dont-permit-guest-to-populate-PoD-pages-for-itself.patch - spec: to stay compatible with the in-tree qemu-xen binary, use
/usr/bin/qemu-system-i386 instead of /usr/bin/qemu-system-x86_64
bsc#986164 - bsc#970135 - new virtualization project clock test randomly fails
on Xen
576001df-x86-time-use-local-stamp-in-TSC-calibration-fast-path.patch
5769106e-x86-generate-assembler-equates-for-synthesized.patch
57a1e603-x86-time-adjust-local-system-time-initialization.patch
57a1e64c-x86-time-introduce-and-use-rdtsc_ordered.patch
57a2f6ac-x86-time-calibrate-TSC-against-platform-timer.patch
- bsc#991934 - xen hypervisor crash in csched_acct
57973099-have-schedulers-revise-initial-placement.patch
579730e6-remove-buggy-initial-placement-algorithm.patch
- bsc#988675 - VUL-0: CVE-2016-6258: xen: x86: Privilege escalation
in PV guests (XSA-182)
57976073-x86-remove-unsafe-bits-from-mod_lN_entry-fastpath.patch
- bsc#988676 - VUL-0: CVE-2016-6259: xen: x86: Missing SMAP
whitelisting in 32-bit exception / event delivery (XSA-183)
57976078-x86-avoid-SMAP-violation-in-compat_create_bounce_frame.patch
- Upstream patches from Jan
57a30261-x86-support-newer-Intel-CPU-models.patch - bsc#985503 - vif-route broken
vif-route.patch - bsc#978413 - PV guest upgrade from sles11sp4 to sles12sp2 alpha3
failed on sles11sp4 xen host.
pygrub-handle-one-line-menu-entries.patch - bsc#990843 - VUL-1: CVE-2016-6351: xen: qemu: scsi: esp: OOB
write access in esp_do_dma
CVE-2016-6351-qemut-scsi-esp-make-cmdbuf-big-enough-for-maximum-CDB-size.patch - bsc#900418 - Dump cannot be performed on SLES12 XEN
57580bbd-kexec-allow-relaxed-placement-via-cmdline.patch
- Upstream patches from Jan
575e9ca0-nested-vmx-Validate-host-VMX-MSRs-before-accessing-them.patch
57640448-xen-sched-use-default-scheduler-upon-an-invalid-sched.patch - fate#319989 - Update to Xen 4.7 FCS
xen-4.7.0-testing-src.tar.bz2
- Drop CVE-2014-3672-qemut-xsa180.patch - bsc#954872 - script block-dmmd not working as expected - libxl:
error: libxl_dm.c (Additional fixes)
block-dmmd - Convert with_stubdom into build_conditional to allow adjusting
via prjconf
- Convert with_debug into build_conditional to allow adjusting
via prjconf - bsc#979002 - add 60-persistent-xvd.rules and helper script to
xen-tools-domU to simplify transition to pvops based kernels - Convert with_oxenstored into build_conditional to allow
adjusting via prjconf (fate#320836) - bsc#983984 - VUL-0: CVE-2016-5338: xen: qemu: scsi: esp: OOB r/w
access while processing ESP_FIFO
CVE-2016-5338-qemut-scsi-esp-OOB-rw-access-while-processing-ESP_FIFO.patch
- bsc#982960 - VUL-0: CVE-2016-5238: xen: qemu: scsi: esp: OOB
write when using non-DMA mode in get_cmd
CVE-2016-5238-qemut-scsi-esp-OOB-write-when-using-non-DMA-mode-in-get_cmd.patch - fate#319989 - Update to Xen 4.7 RC5
xen-4.7.0-testing-src.tar.bz2 - fate#319989 - Update to Xen 4.7 RC4
xen-4.7.0-testing-src.tar.bz2
- Dropped
xen.pkgconfig-4.7.patch
xsa164.patch - bsc#981264 - VUL-0: CVE-2014-3672: xen: Unrestricted qemu logging
(XSA-180)
CVE-2014-3672-qemut-xsa180.patch - bsc#980724 - VUL-0: CVE-2016-4441: Qemu: scsi: esp: OOB write
while writing to 's->cmdbuf' in get_cmd
CVE-2016-4441-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-get_cmd.patch
- bsc#980716 - VUL-0: CVE-2016-4439: xen: scsi: esp: OOB write
while writing to 's->cmdbuf' in esp_reg_write
CVE-2016-4439-qemut-scsi-esp-OOB-write-while-writing-to-cmdbuf-in-esp_reg_write.patch - fate#319989 - Update to Xen 4.7 RC3
xen-4.7.0-testing-src.tar.bz2
- Dropped
libxl-remove-cdrom-cachemode.patch
x86-PoD-only-reclaim-if-needed.patch
gcc6-warnings-as-errors.patch - bsc#954872 - script block-dmmd not working as expected - libxl:
error: libxl_dm.c (another modification)
block-dmmd - fate#319989 - Update to Xen 4.7 RC2
xen-4.7.0-testing-src.tar.bz2 - bsc#961600 - L3: poor performance when Xen HVM domU configured
with max memory > current memory
x86-PoD-only-reclaim-if-needed.patch - Mark SONAMEs and pkgconfig as xen 4.7
xen.pkgconfig-4.7.patch - bsc#977329 - Xen: Cannot boot HVM guests with empty cdrom
libxl-remove-cdrom-cachemode.patch - fate#319989 - Update to Xen 4.7 RC1
xen-4.7.0-testing-src.tar.bz2 - fate#316614: set migration constraints from cmdline
restore libxl.set-migration-constraints-from-cmdline.patch - Remove obsolete patch for xen-kmp
magic_ioport_compat.patch - fate#316613: update to v12
libxl.pvscsi.patch - Update to the latest Xen 4.7 pre-release c2994f86
Drop libxl.migrate-legacy-stream-read.patch - bnc#972756 - Can't migrate HVM guest from SLES12SP1 Xen host
to SLES12SP2 Alpha 1 host using xl migrate
libxl.migrate-legacy-stream-read.patch - Add patches from proposed upstream series to load BIOS's from
the toolstack instead of embedding in hvmloader
http://lists.xenproject.org/archives/html/xen-devel/2016-03/msg01626.html
0001-libxc-Rework-extra-module-initialisation.patch,
0002-libxc-Prepare-a-start-info-structure-for-hvmloader.patch,
0003-configure-define-SEABIOS_PATH-and-OVMF_PATH.patch,
0004-firmware-makefile-install-BIOS-blob.patch,
0005-libxl-Load-guest-BIOS-from-file.patch,
0006-xen-Move-the-hvm_start_info-C-representation-from-li.patch,
0007-hvmloader-Grab-the-hvm_start_info-pointer.patch,
0008-hvmloader-Locate-the-BIOS-blob.patch,
0009-hvmloader-Check-modules-whereabouts-in-perform_tests.patch,
0010-hvmloader-Load-SeaBIOS-from-hvm_start_info-modules.patch,
0011-hvmloader-Load-OVMF-from-modules.patch,
0012-hvmloader-Specific-bios_load-function-required.patch,
0013-hvmloader-Always-build-in-SeaBIOS-and-OVMF-loader.patch,
0014-configure-do-not-depend-on-SEABIOS_PATH-or-OVMF_PATH.patch
- Enable support for UEFI on x86_64 using the ovmf-x86_64-ms.bin
firmware from qemu-ovmf-x86_64. The firmware is preloaded with
Microsoft keys to more closely resemble firmware on real hardware
FATE#320490 - fate#319989: Update to Xen 4.7 (pre-release)
xen-4.7.0-testing-src.tar.bz2
- Dropped:
xen-4.6.1-testing-src.tar.bz2
55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch
5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch
5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch
hotplug-Linux-block-performance-fix.patch
set-mtu-from-bridge-for-tap-interface.patch
xendomains-libvirtd-conflict.patch
xsa154.patch
xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch
xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch
xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch
xsa170.patch - Use system SeaBIOS instead of building/installing another one
FATE#320638
Dropped files:
seabios-dir-remote.tar.bz2
xen-c99-fix.patch
xen.build-compare.seabios.patch - spec: drop BuildRequires that were only needed for qemu-xen - bsc#969377 - xen does not build with GCC 6
ipxe-use-rpm-opt-flags.patch
gcc6-warnings-as-errors.patch - bsc#969351 - VUL-0: CVE-2016-2841: xen: net: ne2000: infinite
loop in ne2000_receive
CVE-2016-2841-qemut-ne2000-infinite-loop-in-ne2000_receive.patch
- Drop xsa154-fix.patch - Use system qemu instead of building/installing yet another qemu
FATE#320638
- Dropped files
qemu-xen-dir-remote.tar.bz2
CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch
CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch
CVE-2015-4037-qemuu-smb-config-dir-name.patch
CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch
CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch
CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch
CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch
CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch
CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch
CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch
CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch
CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch
CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch
CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch
CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch
CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch
CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch
CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch
CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch
qemu-xen-enable-spice-support.patch
qemu-xen-upstream-qdisk-cache-unsafe.patch
tigervnc-long-press.patch
xsa162-qemuu.patch - bsc#962321 - VUL-0: CVE-2016-1922: xen: i386: null pointer
dereference in vapic_write()
CVE-2016-1922-qemuu-i386-null-pointer-dereference-in-vapic_write.patch - bsc#968004 - VUL-0: CVE-2016-2538: xen: usb: integer overflow in
remote NDIS control message handling
CVE-2016-2538-qemuu-usb-integer-overflow-in-remote-NDIS-message-handling.patch - bsc#954872 - L3: script block-dmmd not working as expected -
libxl: error: libxl_dm.c
block-dmmd
- Update libxl to recognize dmmd and npiv prefix in disk spec
xen.libxl.dmmd.patch - bsc#967101 - VUL-0: CVE-2016-2391: xen: usb: multiple eof_timers
in ohci module leads to null pointer dereference
CVE-2016-2391-qemuu-usb-null-pointer-dereference-in-ohci-module.patch
CVE-2016-2391-qemut-usb-null-pointer-dereference-in-ohci-module.patch
- bsc#967090 - VUL-0: CVE-2016-2392: xen: usb: null pointer
dereference in remote NDIS control message handling
CVE-2016-2392-qemuu-usb-null-pointer-dereference-in-NDIS-message-handling.patch - Update to Xen Version 4.6.1
xen-4.6.1-testing-src.tar.bz2
- Dropped patches now contained in tarball or unnecessary
xen-4.6.0-testing-src.tar.bz2
5604f239-x86-PV-properly-populate-descriptor-tables.patch
561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch
561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
561d20a0-x86-hide-MWAITX-from-PV-domains.patch
561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch
5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch
56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch
56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch
5632127b-x86-guard-against-undue-super-page-PTE-creation.patch
5632129c-free-domain-s-vcpu-array.patch
563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch
563212e4-xenoprof-free-domain-s-vcpu-array.patch
563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch
56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch
56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch
5641ceec-x86-HVM-always-intercept-AC-and-DB.patch
56549f24-x86-vPMU-document-as-unsupported.patch
5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch
xsa155-qemut-qdisk-double-access.patch
xsa155-qemut-xenfb.patch
xsa155-qemuu-qdisk-double-access.patch
xsa155-qemuu-xenfb.patch
xsa159.patch
xsa160.patch
xsa162-qemut.patch
xsa165.patch
xsa166.patch
xsa167.patch
xsa168.patch - bsc#965315 - VUL-0: CVE-2016-2270: xen: x86: inconsistent
cachability flags on guest mappings (XSA-154)
xsa154.patch
- bsc#965317 - VUL-0: CVE-2016-2271: xen: VMX: guest user mode may
crash guest with non-canonical RIP (XSA-170)
xsa170.patch - bsc#965269 - VUL-1: CVE-2015-8619: xen: stack based OOB write in
hmp_sendkey routine
CVE-2015-8619-qemuu-stack-based-OOB-write-in-hmp_sendkey-routine.patch - bsc#965156 - VUL-0: CVE-2015-6855: xen: ide: divide by zero issue
CVE-2015-6855-qemuu-ide-divide-by-zero-issue.patch
- bsc#965112 - VUL-0: CVE-2014-3640: xen: slirp: NULL pointer deref
in sosendto()
CVE-2014-3640-qemut-slirp-NULL-pointer-deref-in-sosendto.patch - bsc#964947 - VUL-0: CVE-2015-5278: xen: Infinite loop in
ne2000_receive() function
CVE-2015-5278-qemut-Infinite-loop-in-ne2000_receive-function.patch
- bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100:
infinite loop in processing command block list
CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch
CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch - bsc#964644 - VUL-0: CVE-2013-4533: xen pxa2xx: buffer overrun on
incoming migration
CVE-2013-4533-qemut-pxa2xx-buffer-overrun-on-incoming-migration.patch
- bsc#964925 - VUL-0: CVE-2014-0222: xen: qcow1: validate L2 table
size to avoid integer overflows
CVE-2014-0222-blktap-qcow1-validate-l2-table-size.patch
- Dropped CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch - bsc#964415 - VUL-1: CVE-2016-2198: xen: usb: ehci null pointer
dereference in ehci_caps_write
CVE-2016-2198-qemuu-usb-ehci-null-pointer-dereference-in-ehci_caps_write.patch
- bsc#964452 - VUL-0: CVE-2013-4534: xen: openpic: buffer overrun
on incoming migration
CVE-2013-4534-qemut-openpic-buffer-overrun-on-incoming-migration.patch - bsc#963783 - VUL-1: CVE-2016-1981: xen: net: e1000 infinite loop
in start_xmit and e1000_receive_iov routines
CVE-2016-1981-qemuu-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch
CVE-2016-1981-qemut-e1000-eliminate-infinite-loops-on-out-of-bounds-transfer.patch - bsc#962758 - VUL-0: CVE-2013-4539: xen: tsc210x: buffer overrun
on invalid state load
CVE-2013-4539-qemut-tsc210x-fix-buffer-overrun-on-invalid-state-load.patch - bsc#962632 - VUL-0: CVE-2015-1779: xen: vnc: insufficient
resource limiting in VNC websockets decoder
CVE-2015-1779-qemuu-limit-size-of-HTTP-headers-from-websockets-clients.patch
CVE-2015-1779-qemuu-incrementally-decode-websocket-frames.patch
- bsc#962642 - VUL-0: CVE-2013-4537: xen: ssi-sd: buffer overrun on
invalid state load
CVE-2013-4537-qemut-ssi-sd-fix-buffer-overrun-on-invalid-state-load.patch
- bsc#962627 - VUL-0: CVE-2014-7815: xen: vnc: insufficient
bits_per_pixel from the client sanitization
CVE-2014-7815-qemut-vnc-sanitize-bits_per_pixel-from-the-client.patch - bsc#962335 - VUL-0: CVE-2013-4538: xen: ssd0323: fix buffer
overun on invalid state
CVE-2013-4538-qemut-ssd0323-fix-buffer-overun-on-invalid-state.patch
- bsc#962360 - VUL-0: CVE-2015-7512: xen: net: pcnet: buffer
overflow in non-loopback mode
CVE-2015-7512-qemuu-net-pcnet-buffer-overflow-in-non-loopback-mode.patch
CVE-2015-7512-qemut-net-pcnet-buffer-overflow-in-non-loopback-mode.patch - bsc#961692 - VUL-0: CVE-2016-1714: xen: nvram: OOB r/w access in
processing firmware configurations
CVE-2016-1714-qemuu-fw_cfg-add-check-to-validate-current-entry-value.patch
CVE-2016-1714-qemut-fw_cfg-add-check-to-validate-current-entry-value.patch - bsc#961358 - VUL-0: CVE-2015-8613: xen: qemu: scsi: stack based
buffer overflow in megasas_ctrl_get_info
CVE-2015-8613-qemuu-scsi-initialise-info-object-with-appropriate-size.patch
- bsc#961332 - VUL-0: CVE-2016-1568: xen: Qemu: ide: ahci
use-after-free vulnerability in aio port commands
CVE-2016-1568-qemuu-ide-ahci-reset-ncq-object-to-unused-on-error.patch - bsc#959695 - missing docs for xen
xen.spec - bsc#960862 - VUL-0: CVE-2016-1571: xen: VMX: intercept issue with
INVLPG on non-canonical address (XSA-168)
xsa168.patch
- bsc#960861 - VUL-0: CVE-2016-1570: xen: PV superpage
functionality missing sanity checks (XSA-167)
xsa167.patch
- bsc#960836 - VUL-0: CVE-2015-8744: xen: net: vmxnet3: incorrect
l2 header validation leads to a crash via assert(2) call
CVE-2015-8744-qemuu-net-vmxnet3-incorrect-l2-header-validation-leads-to-crash.patch - bsc#960707 - VUL-0: CVE-2015-8745: xen: reading IMR registers
leads to a crash via assert(2) call
CVE-2015-8745-qemuu-net-vmxnet3-read-IMR-registers-instead-of-assert.patch
- bsc#960726 - VUL-0: CVE-2015-8743: xen: ne2000: OOB memory access
in ioport r/w functions
CVE-2015-8743-qemuu-ne2000-OOB-memory-access-in-ioport-rw-functions.patch - bsc#960093 - VUL-0: CVE-2015-8615: xen: x86: unintentional
logging upon guest changing callback method (XSA-169)
5677f350-x86-make-debug-output-consistent-in-hvm_set_callback_via.patch - Adjust xen-dom0-modules.service to run Before xenstored.service
instead of proc-xen.mount to workaround a bug in systemd "design"
(bnc#959845) - bsc#959387 - VUL-0: CVE-2015-8568 CVE-2015-8567: xen: qemu: net:
vmxnet3: host memory leakage
CVE-2015-8568-qemuu-net-vmxnet3-avoid-memory-leakage-in-activate_device.patch - bsc#957988 - VUL-0: CVE-2015-8550: xen: paravirtualized drivers
incautious about shared memory contents (XSA-155)
xsa155-xen-0001-xen-Add-RING_COPY_REQUEST.patch
xsa155-xen-0002-blktap2-Use-RING_COPY_REQUEST.patch
xsa155-xen-0003-libvchan-Read-prod-cons-only-once.patch
xsa155-qemuu-qdisk-double-access.patch
xsa155-qemut-qdisk-double-access.patch
xsa155-qemuu-xenfb.patch
xsa155-qemut-xenfb.patch
- bsc#959006 - VUL-0: CVE-2015-8558: xen: qemu: usb: infinite loop
in ehci_advance_state results in DoS
CVE-2015-8558-qemuu-usb-infinite-loop-in-ehci_advance_state-results-in-DoS.patch
- bsc#958918 - VUL-0: CVE-2015-7549: xen: qemu pci: null pointer
dereference issue
CVE-2015-7549-qemuu-pci-null-pointer-dereference-issue.patch
- bsc#958493 - VUL-0: CVE-2015-8504: xen: qemu: ui: vnc: avoid
floating point exception
CVE-2015-8504-qemuu-vnc-avoid-floating-point-exception.patch
CVE-2015-8504-qemut-vnc-avoid-floating-point-exception.patch
- bsc#958007 - VUL-0: CVE-2015-8554: xen: qemu-dm buffer overrun in
MSI-X handling (XSA-164)
xsa164.patch
- bsc#958009 - VUL-0: CVE-2015-8555: xen: information leak in
legacy x86 FPU/XMM initialization (XSA-165)
xsa165.patch
- bsc#958523 - VUL-0: xen: ioreq handling possibly susceptible to
multiple read issue (XSA-166)
xsa166.patch - bsc#956832 - VUL-0: CVE-2015-8345: xen: qemu: net: eepro100:
infinite loop in processing command block list
CVE-2015-8345-qemuu-eepro100-infinite-loop-fix.patch
CVE-2015-8345-qemut-eepro100-infinite-loop-fix.patch
- Upstream patches from Jan
56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch
5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch)
5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch
56544a57-VMX-fix-adjust-trap-injection.patch
56546ab2-sched-fix-insert_vcpu-locking.patch - bsc#956592 - VUL-0: xen: virtual PMU is unsupported (XSA-163)
56549f24-x86-vPMU-document-as-unsupported.patch
- bsc#956408 - VUL-0: CVE-2015-8339, CVE-2015-8340: xen:
XENMEM_exchange error handling issues (XSA-159)
xsa159.patch
- bsc#956409 - VUL-0: CVE-2015-8341: xen: libxl leak of pv kernel
and initrd on error (XSA-160)
xsa160.patch
- bsc#956411 - VUL-0: CVE-2015-7504: xen: heap buffer overflow
vulnerability in pcnet emulator (XSA-162)
xsa162-qemuu.patch
xsa162-qemut.patch
- bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
readonly flag on disks with qemu-xen (xsa-142)
5628fc67-libxl-No-emulated-disk-driver-for-xvdX-disk.patch
5649bcbe-libxl-relax-readonly-check-introduced-by-XSA-142-fix.patch - fate#315712: XEN: Use the PVOPS kernel
Turn off building the KMPs now that we are using the pvops kernel
xen.spec - Upstream patches from Jan
561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-it-is-zero.patch
561d20a0-x86-hide-MWAITX-from-PV-domains.patch
561e3283-x86-NUMA-fix-SRAT-table-processor-entry-parsing-and-consumption.patch
5632118e-arm-Support-hypercall_create_continuation-for-multicall.patch
56321222-arm-rate-limit-logging-from-unimplemented-PHYSDEVOP-and-HVMOP.patch
56321249-arm-handle-races-between-relinquish_memory-and-free_domheap_pages.patch
5632127b-x86-guard-against-undue-super-page-PTE-creation.patch
5632129c-free-domain-s-vcpu-array.patch (Replaces CVE-2015-7969-xsa149.patch)
563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch
563212e4-xenoprof-free-domain-s-vcpu-array.patch
563212ff-x86-rate-limit-logging-in-do_xen-oprof-pmu-_op.patch
56323737-libxl-adjust-PoD-target-by-memory-fudge-too.patch
56377442-x86-PoD-Make-p2m_pod_empty_cache-restartable.patch
5641ceec-x86-HVM-always-intercept-AC-and-DB.patch (Replaces CVE-2015-5307-xsa156.patch)
5644b756-x86-HVM-don-t-inject-DB-with-error-code.patch
- Dropped 55b0a2db-x86-MSI-track-guest-masking.patch - Use upstream variants of block-iscsi and block-nbd - Remove xenalyze.hg, its part of xen-4.6 - Update to Xen Version 4.6.0
xen-4.6.0-testing-src.tar.bz2
mini-os.tar.bz2
blktap2-no-uninit.patch
stubdom-have-iovec.patch
- Renamed
xsa149.patch to CVE-2015-7969-xsa149.patch
- Dropped patches now contained in tarball or unnecessary
xen-4.5.2-testing-src.tar.bz2
54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch
54f4985f-libxl-fix-libvirtd-double-free.patch
55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch
551ac326-xentop-add-support-for-qdisk.patch
552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch
552d0fe8-x86-mtrr-include-asm-atomic.h.patch
552d293b-x86-vMSI-X-honor-all-mask-requests.patch
552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch
5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch
5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch
554c7aee-x86-provide-arch_fetch_and_add.patch
554c7b00-arm-provide-arch_fetch_and_add.patch
554cc211-libxl-add-qxl.patch 55534b0a-x86-provide-add_sized.patch
55534b25-arm-provide-add_sized.patch
5555a4f8-use-ticket-locks-for-spin-locks.patch
5555a5b9-x86-arm-remove-asm-spinlock-h.patch
5555a8ec-introduce-non-contiguous-allocation.patch
556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch
5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
557eb55f-gnttab-per-active-entry-locking.patch
557eb5b6-gnttab-introduce-maptrack-lock.patch
557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch
557ffab8-evtchn-factor-out-freeing-an-event-channel.patch
5582bf43-evtchn-simplify-port_is_valid.patch
5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch
5583d9c5-x86-MSI-X-cleanup.patch
5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch
5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch
5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch
5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch
5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch
5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch
55b0a218-x86-PCI-CFG-write-intercept.patch
55b0a255-x86-MSI-X-maskall.patch 55b0a283-x86-MSI-X-teardown.patch
55b0a2ab-x86-MSI-X-enable.patch blktapctrl-close-fifos.patch
blktapctrl-default-to-ioemu.patch blktapctrl-disable-debug-printf.patch
blktap-no-uninit.patch blktap-pv-cdrom.patch build-tapdisk-ioemu.patch
ioemu-bdrv-open-CACHE_WB.patch ioemu-blktap-barriers.patch
ioemu-blktap-fv-init.patch ioemu-blktap-image-format.patch
ioemu-blktap-zero-size.patch libxl.set-migration-constraints-from-cmdline.patch
local_attach_support_for_phy.patch pci-attach-fix.patch
qemu-xen-upstream-megasas-buildtime.patch tapdisk-ioemu-logfile.patch
tapdisk-ioemu-shutdown-fix.patch udev-rules.patch xen.build-compare.ipxe.patch
xen.build-compare.mini-os.patch xen.build-compare.smbiosdate.patch
xen.build-compare.vgabios.patch xen.build-compare.xen_compile_h.patch
xl-coredump-file-location.patch - bsc#954405 - VUL-0: CVE-2015-8104: Xen: guest to host DoS by
triggering an infinite loop in microcode via #DB exception
- bsc#954018 - VUL-0: CVE-2015-5307: xen: x86: CPU lockup during
fault delivery (XSA-156)
CVE-2015-5307-xsa156.patch - Update to Xen 4.5.2
xen-4.5.2-testing-src.tar.bz2
- Drop the following
xen-4.5.1-testing-src.tar.bz2
552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
5576f178-kexec-add-more-pages-to-v1-environment.patch
55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch
558bfaa0-x86-traps-avoid-using-current-too-early.patch
5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch
559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch
559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
559bdde5-pull-in-latest-linux-earlycpio.patch
55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch
55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
55a77e4f-dmar-device-scope-mem-leak-fix.patch
55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
55e43fd8-x86-NUMA-fix-setup_node.patch
55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
55f9345b-x86-MSI-fail-if-no-hardware-support.patch
5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch
561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
561d20a0-x86-hide-MWAITX-from-PV-domains.patch
561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch
563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch
CVE-2015-4106-xsa131-9.patch CVE-2015-3259-xsa137.patch
CVE-2015-7311-xsa142.patch CVE-2015-7835-xsa148.patch
xsa139-qemuu.patch xsa140-qemuu-1.patch xsa140-qemuu-2.patch
xsa140-qemuu-3.patch xsa140-qemuu-4.patch xsa140-qemuu-5.patch
xsa140-qemuu-6.patch xsa140-qemuu-7.patch xsa140-qemut-1.patch
xsa140-qemut-2.patch xsa140-qemut-3.patch xsa140-qemut-4.patch
xsa140-qemut-5.patch xsa140-qemut-6.patch xsa140-qemut-7.patch
xsa151.patch xsa152.patch xsa153-libxl.patch
CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch
CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch" - bsc#950704 - CVE-2015-7970 VUL-1: xen: x86: Long latency
populate-on-demand operation is not preemptible (XSA-150)
563212c9-x86-PoD-Eager-sweep-for-zeroed-pages.patch - Upstream patches from Jan
5604f239-x86-PV-properly-populate-descriptor-tables.patch
561bbc8b-VT-d-don-t-suppress-invalidation-address-write-when-0.patch
561d2046-VT-d-use-proper-error-codes-in-iommu_enable_x2apic_IR.patch
561d20a0-x86-hide-MWAITX-from-PV-domains.patch
561e3283-x86-NUMA-fix-SRAT-table-processor-entry-handling.patch - bsc#951845 - VUL-0: CVE-2015-7972: xen: x86: populate-on-demand
balloon size inaccuracy can crash guests (XSA-153)
xsa153-libxl.patch - bsc#950703 - VUL-1: CVE-2015-7969: xen: leak of main per-domain
vcpu pointer array (DoS) (XSA-149)
xsa149.patch
- bsc#950705 - VUL-1: CVE-2015-7969: xen: x86: leak of per-domain
profiling-related vcpu pointer array (DoS) (XSA-151)
xsa151.patch
- bsc#950706 - VUL-0: CVE-2015-7971: xen: x86: some pmu and
profiling hypercalls log without rate limiting (XSA-152)
xsa152.patch
- Dropped
55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
5604f239-x86-PV-properly-populate-descriptor-tables.patch - bsc#932267 - VUL-1: CVE-2015-4037: qemu,kvm,xen: insecure
temporary file use in /net/slirp.c
CVE-2015-4037-qemuu-smb-config-dir-name.patch
CVE-2015-4037-qemut-smb-config-dir-name.patch
- bsc#877642 - VUL-0: CVE-2014-0222: qemu: qcow1: validate L2 table
size to avoid integer overflows
CVE-2014-0222-qemuu-qcow1-validate-l2-table-size.patch
CVE-2014-0222-qemut-qcow1-validate-l2-table-size.patch - bsc#950367 - VUL-0: CVE-2015-7835: xen: x86: Uncontrolled
creation of large page mappings by PV guests (XSA-148)
CVE-2015-7835-xsa148.patch - bsc#949138 - Setting vcpu affinity under Xen causes libvirtd
abort
54f4985f-libxl-fix-libvirtd-double-free.patch - bsc#949046 - Increase %suse_version in SP1 to 1316
xen.spec
- Update README.SUSE detailing dom0 ballooning recommendations - bsc#945167 - Running command ’ xl pci-assignable-add 03:10.1’
secondly show errors
55f7f9d2-libxl-slightly-refine-pci-assignable-add-remove-handling.patch
- Upstream patches from Jan
55f2e438-x86-hvm-fix-saved-pmtimer-and-hpet-values.patch
55f9345b-x86-MSI-fail-if-no-hardware-support.patch
5604f239-x86-PV-properly-populate-descriptor-tables.patch
5604f2e6-vt-d-fix-IM-bit-mask-and-unmask-of-FECTL_REG.patch
560a4af9-x86-EPT-tighten-conditions-of-IOMMU-mapping-updates.patch
560a7c36-x86-p2m-pt-delay-freeing-of-intermediate-page-tables.patch
560a7c53-x86-p2m-pt-ignore-pt-share-flag-for-shadow-mode-guests.patch
560bd926-credit1-fix-tickling-when-it-happens-from-a-remote-pCPU.patch
560e6d34-x86-p2m-pt-tighten-conditions-of-IOMMU-mapping-updates.patch - bsc#941074 - VmError: Device 51728 (vbd) could not be connected.
Hotplug scripts not working.
hotplug-Linux-block-performance-fix.patch - bsc#947165 - VUL-0: CVE-2015-7311: xen: libxl fails to honour
readonly flag on disks with qemu-xen (xsa-142)
CVE-2015-7311-xsa142.patch - bsc#945165 - Xl pci-attach show error with kernel of SLES 12 sp1
pci-attach-fix.patch - bsc#945164 - Xl destroy show error with kernel of SLES 12 sp1
5537a4d8-libxl-use-DEBUG-log-level-instead-of-INFO.patch - Upstream patches from Jan
55dc78e9-x86-amd_ucode-skip-updates-for-final-levels.patch
55dc7937-x86-IO-APIC-don-t-create-pIRQ-mapping-from-masked-RTE.patch
55df2f76-IOMMU-skip-domains-without-page-tables-when-dumping.patch
55e43fd8-x86-NUMA-fix-setup_node.patch
55e43ff8-x86-NUMA-don-t-account-hotplug-regions.patch
55e593f1-x86-NUMA-make-init_node_heap-respect-Xen-heap-limit.patch
54c2553c-grant-table-use-uint16_t-consistently-for-offset-and-length.patch
54ca33bc-grant-table-refactor-grant-copy-to-reduce-duplicate-code.patch
54ca340e-grant-table-defer-releasing-pages-acquired-in-a-grant-copy.patch - bsc#944463 - VUL-0: CVE-2015-5239: qemu-kvm: Integer overflow in
vnc_client_read() and protocol_client_msg()
CVE-2015-5239-qemuu-limit-client_cut_text-msg-payload-size.patch
CVE-2015-5239-qemut-limit-client_cut_text-msg-payload-size.patch
- bsc#944697 - VUL-1: CVE-2015-6815: qemu: net: e1000: infinite
loop issue
CVE-2015-6815-qemuu-e1000-fix-infinite-loop.patch
CVE-2015-6815-qemut-e1000-fix-infinite-loop.patch - bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
config handling stack overflow
55a62eb0-xl-correct-handling-of-extra_config-in-main_cpupoolcreate.patch - bsc#907514 - Bus fatal error & sles12 sudden reboot has been
observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after
shutdown of guest with VT-d NIC
- bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been
observed
- bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden
reboot has been observed
552d293b-x86-vMSI-X-honor-all-mask-requests.patch
552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
5576f143-x86-adjust-PV-I-O-emulation-functions-types.patch
55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
5583d9c5-x86-MSI-X-cleanup.patch
5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
55b0a218-x86-PCI-CFG-write-intercept.patch
55b0a255-x86-MSI-X-maskall.patch
55b0a283-x86-MSI-X-teardown.patch
55b0a2ab-x86-MSI-X-enable.patch
55b0a2db-x86-MSI-track-guest-masking.patch
- Upstream patches from Jan
552d0f49-x86-traps-identify-the-vcpu-in-context-when-dumping-regs.patch
559bc633-x86-cpupool-clear-proper-cpu_valid-bit-on-CPU-teardown.patch
559bc64e-credit1-properly-deal-with-CPUs-not-in-any-pool.patch
559bc87f-x86-hvmloader-avoid-data-corruption-with-xenstore-rw.patch
55a66a1e-make-rangeset_report_ranges-report-all-ranges.patch
55a77e4f-dmar-device-scope-mem-leak-fix.patch
55c1d83d-x86-gdt-Drop-write-only-xalloc-d-array.patch
55c3232b-x86-mm-Make-hap-shadow-teardown-preemptible.patch
- Dropped for upstream version
x86-MSI-mask.patch
x86-MSI-pv-unmask.patch
x86-MSI-X-enable.patch
x86-MSI-X-maskall.patch
x86-MSI-X-teardown.patch
x86-pci_cfg_okay.patch
x86-PCI-CFG-write-intercept.patch - bsc#939712 - VUL-0: XSA-140: QEMU leak of uninitialized heap
memory in rtl8139 device model
xsa140-qemuu-1.patch
xsa140-qemuu-2.patch
xsa140-qemuu-3.patch
xsa140-qemuu-4.patch
xsa140-qemuu-5.patch
xsa140-qemuu-6.patch
xsa140-qemuu-7.patch
xsa140-qemut-1.patch
xsa140-qemut-2.patch
xsa140-qemut-3.patch
xsa140-qemut-4.patch
xsa140-qemut-5.patch
xsa140-qemut-6.patch
xsa140-qemut-7.patch
- bsc#939709 - VUL-0: XSA-139: xen: Use after free in QEMU/Xen
block unplug protocol
xsa139-qemuu.patch - bsc#937371 - xen vm's running after reboot
xendomains-libvirtd-conflict.patch - bsc#938344 - VUL-0: CVE-2015-5154: qemu,kvm,xen: host code
execution via IDE subsystem CD-ROM
CVE-2015-5154-qemuu-check-array-bounds-before-writing-to-io_buffer.patch
CVE-2015-5154-qemut-check-array-bounds-before-writing-to-io_buffer.patch
CVE-2015-5154-qemuu-fix-START-STOP-UNIT-command-completion.patch
CVE-2015-5154-qemut-fix-START-STOP-UNIT-command-completion.patch
CVE-2015-5154-qemuu-clear-DRQ-after-handling-all-expected-accesses.patch
CVE-2015-5154-qemut-clear-DRQ-after-handling-all-expected-accesses.patch - Remove xendomains.service from systemd preset file because it
conflicts with libvirt-guests.service (bnc#937371)
Its up to the admin to run systemctl enable xendomains.service - bnc#935634 - VUL-0: CVE-2015-3259: xen: XSA-137: xl command line
config handling stack overflow
CVE-2015-3259-xsa137.patch
- Upstream patches from Jan
558bfaa0-x86-traps-avoid-using-current-too-early.patch
5592a116-nested-EPT-fix-the-handling-of-nested-EPT.patch
559b9dd6-x86-p2m-ept-don-t-unmap-in-use-EPT-pagetable.patch
559bdde5-pull-in-latest-linux-earlycpio.patch
- Upstream patches from Jan pending review
552d0fd2-x86-hvm-don-t-include-asm-spinlock-h.patch
552d0fe8-x86-mtrr-include-asm-atomic.h.patch
552d293b-x86-vMSI-X-honor-all-mask-requests.patch
552d2966-x86-vMSI-X-add-valid-bits-for-read-acceleration.patch
554c7aee-x86-provide-arch_fetch_and_add.patch
554c7b00-arm-provide-arch_fetch_and_add.patch
55534b0a-x86-provide-add_sized.patch
55534b25-arm-provide-add_sized.patch
5555a4f8-use-ticket-locks-for-spin-locks.patch
5555a5b9-x86-arm-remove-asm-spinlock-h.patch
5555a8ec-introduce-non-contiguous-allocation.patch
55795a52-x86-vMSI-X-support-qword-MMIO-access.patch
557eb55f-gnttab-per-active-entry-locking.patch
557eb5b6-gnttab-introduce-maptrack-lock.patch
557eb620-gnttab-make-the-grant-table-lock-a-read-write-lock.patch
557ffab8-evtchn-factor-out-freeing-an-event-channel.patch
5582bf43-evtchn-simplify-port_is_valid.patch
5582bf81-evtchn-remove-the-locking-when-unmasking-an-event-channel.patch
5583d9c5-x86-MSI-X-cleanup.patch
5583da09-x86-MSI-track-host-and-guest-masking-separately.patch
5583da64-gnttab-use-per-VCPU-maptrack-free-lists.patch
5583da8c-gnttab-steal-maptrack-entries-from-other-VCPUs.patch
5587d711-evtchn-clear-xen_consumer-when-clearing-state.patch
5587d779-evtchn-defer-freeing-struct-evtchn-s-until-evtchn_destroy_final.patch
5587d7b7-evtchn-use-a-per-event-channel-lock-for-sending-events.patch
5587d7e2-evtchn-pad-struct-evtchn-to-64-bytes.patch
x86-MSI-pv-unmask.patch
x86-pci_cfg_okay.patch
x86-PCI-CFG-write-intercept.patch
x86-MSI-X-maskall.patch
x86-MSI-X-teardown.patch
x86-MSI-X-enable.patch
x86-MSI-mask.patch - Adjust more places to use br0 instead of xenbr0 - bnc#936516 - xen fails to build with kernel update(4.1.0 from
stable)
556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch - Update to Xen Version 4.5.1 FCS (fate#315675)
xen-4.5.1-testing-src.tar.bz2
- Dropped patches now contained in tarball
556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch
556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch
556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch
556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch
55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch
55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch
55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch
55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch
5513b458-allow-reboot-overrides-when-running-under-EFI.patch
5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch
5576f178-kexec-add-more-pages-to-v1-environment.patch
5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch
CVE-2015-3456-xsa133-qemuu.patch
CVE-2015-3456-xsa133-qemut.patch
qemu-MSI-X-enable-maskall.patch
qemu-MSI-X-latch-writes.patch
x86-MSI-X-guest-mask.patch - Replace 5124efbe-add-qxl-support.patch with the variant that
finally made it upstream, 554cc211-libxl-add-qxl.patch - bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable
qemu MSI-X pass-through error messages
qemu-MSI-X-latch-writes.patch
- bsc#907514 - Bus fatal error & sles12 sudden reboot has been observed
- bsc#910258 - SLES12 Xen host crashes with FATAL NMI after shutdown
of guest with VT-d NIC
- bsc#918984 - Bus fatal error & sles11-SP4 sudden reboot has been
observed
- bsc#923967 - Partner-L3: Bus fatal error & sles11-SP3 sudden reboot
has been observed
x86-MSI-X-teardown.patch
x86-MSI-X-enable.patch
x86-MSI-X-guest-mask.patch
x86-MSI-X-maskall.patch
qemu-MSI-X-enable-maskall.patch
- Upstream patches from Jan
55780aaa-efi-avoid-calling-boot-services-after-ExitBootServices.patch
55780aff-x86-EFI-fix-EFI_MEMORY_WP-handling.patch
55780b43-EFI-early-add-mapbs-to-map-EfiBootServices-Code-Data.patch
55780b97-EFI-support-default-attributes-to-map-Runtime-service-areas.patch
55780be1-x86-EFI-adjust-EFI_MEMORY_WP-handling-for-spec-version-2.5.patch
55103616-vm-assist-prepare-for-discontiguous-used-bit-numbers.patch
5548e95d-x86-allow-to-suppress-M2P-user-mode-exposure.patch
- Dropped the following patches now contained in the tarball
xen-no-array-bounds.patch CVE-2015-4103-xsa128.patch
CVE-2015-4104-xsa129.patch CVE-2015-4105-xsa130.patch
CVE-2015-4106-xsa131-1.patch CVE-2015-4106-xsa131-2.patch
CVE-2015-4106-xsa131-3.patch CVE-2015-4106-xsa131-4.patch
CVE-2015-4106-xsa131-5.patch CVE-2015-4106-xsa131-6.patch
CVE-2015-4106-xsa131-7.patch CVE-2015-4106-xsa131-8.patch - Update to Xen 4.5.1 RC2
- bsc#931628 - VUL-0: CVE-2015-4106: XSA-131: xen: Unmediated PCI
register access in qemu
CVE-2015-4106-xsa131-1.patch
CVE-2015-4106-xsa131-2.patch
CVE-2015-4106-xsa131-3.patch
CVE-2015-4106-xsa131-4.patch
CVE-2015-4106-xsa131-5.patch
CVE-2015-4106-xsa131-6.patch
CVE-2015-4106-xsa131-7.patch
CVE-2015-4106-xsa131-8.patch
CVE-2015-4106-xsa131-9.patch
- bsc#931627 - VUL-0: CVE-2015-4105: XSA-130: xen: Guest triggerable
qemu MSI-X pass-through error messages
CVE-2015-4105-xsa130.patch
- bsc#931626 - VUL-0: CVE-2015-4104: XSA-129: xen: PCI MSI mask
bits inadvertently exposed to guests
CVE-2015-4104-xsa129.patch
- bsc#931625 - VUL-0: CVE-2015-4103: XSA-128: xen: Potential
unintended writes to host MSI message data field via qemu
CVE-2015-4103-xsa128.patch
- Upstream patches from Jan
5548e903-domctl-don-t-truncate-XEN_DOMCTL_max_mem-requests.patch
556c2cf2-x86-don-t-crash-mapping-a-page-using-EFI-rt-page-tables.patch
556d9718-efi-fix-allocation-problems-if-ExitBootServices-fails.patch
556d973f-unmodified-drivers-tolerate-IRQF_DISABLED-being-undefined.patch
556eabf7-x86-apic-Disable-the-LAPIC-later-in-smp_send_stop.patch
556eac15-x86-crash-don-t-use-set_fixmap-in-the-crash-path.patch - Add DefaultDependencies=no to xen-dom0-modules.service because
it has to run before proc-xen.mount - Update to Xen 4.5.1 RC1 - Update blktap-no-uninit.patch to work with gcc-4.5 - bsc#927967 - VUL-0: CVE-2015-3340: xen: Information leak through
XEN_DOMCTL_gettscinfo (XSA-132)
5535f633-dont-leak-hypervisor-stack-to-toolstacks.patch - bnc#929339 - VUL-0: CVE-2015-3456: qemu kvm xen: VENOM qemu
floppy driver host code execution
CVE-2015-3456-xsa133-qemuu.patch
CVE-2015-3456-xsa133-qemut.patch - bsc#928783 - Reboot failure; Request backport of upstream Xen
patch to 4.5.0, or update pkgs to 4.5.1
5513b458-allow-reboot-overrides-when-running-under-EFI.patch
5513b4d1-dont-apply-reboot-quirks-if-reboot-set-by-user.patch - bnc#927750 - Avoid errors reported by system-modules-load.service - Add xen-no-array-bounds.patch and blktap-no-uninit.patch to selectively
turn errors back to warnings to fix build with GCC 5.
- Amend xen.stubdom.newlib.patch to pull in declaration of strcmp to
avoid implicit-fortify-decl rpmlint error.
- Fix quoting of __SMBIOS_DATE__ in xen.build-compare.smbiosdate.patch. - xentop: Fix memory leak on read failure
551ac326-xentop-add-support-for-qdisk.patch - Dropped xentop-add-support-for-qdisk.patch in favor of upstream
version
551ac326-xentop-add-support-for-qdisk.patch - Enable spice support in qemu for x86_64
5124efbe-add-qxl-support.patch
qemu-xen-enable-spice-support.patch - Add xen-c99-fix.patch to remove pointless inline specifier on
function declarations which break build with a C99 compiler which
GCC 5 is by default. (bsc#921994)
- Add ipxe-no-error-logical-not-parentheses.patch to supply
- Wno-logical-not-parentheses to the ipxe build to fix
breakage with GCC 5. (bsc#921994) - bnc#921842 - Xentop doesn't display disk statistics for VMs using
qdisks
xentop-add-support-for-qdisk.patch - Disable the PIE enablement done for Factory, as the XEN code
is not buildable with PIE and it does not make much sense
to build the hypervisor code with it. - bnc#918169 - XEN fixes required to work with Kernel 3.19.0
xen.spec - Package xen.changes because its referenced in xen.spec - Update seabios to rel-1.7.5 which is the correct version for
Xen 4.5 - Update to Xen 4.5.0 FCS - Include systemd presets in 13.2 and older - bnc#897352 - Enable xencommons/xendomains only during fresh install
- disable restart on upgrade because the toolstack is not restartable - adjust seabios, vgabios, stubdom and hvmloader build to reduce
build-compare noise
xen.build-compare.mini-os.patch
xen.build-compare.smbiosdate.patch
xen.build-compare.ipxe.patch
xen.build-compare.vgabios.patch
xen.build-compare.seabios.patch
xen.build-compare.man.patch - Update to Xen 4.5.0 RC4 - Remove xend specific if-up scripts
Recording bridge slaves is a generic task which should be handled
by generic network code - Use systemd features from upstream
requires updated systemd-presets-branding package - Update to Xen 4.5.0 RC3 - Set GIT, WGET and FTP to /bin/false - Use new configure features instead of make variables
xen.stubdom.newlib.patch - adjust docs and xen build to reduce build-compare noise
xen.build-compare.doc_html.patch
xen.build-compare.xen_compile_h.patch - Drop trailing B_CNT from XEN_EXTRAVERSION to reduce build-compare noise - Update to Xen 4.5.0 RC2 - Update to Xen 4.5.0 RC1
xen-4.5.0-testing-src.tar.bz2
- Remove all patches now contained in the new tarball
xen-4.4.1-testing-src.tar.bz2
5315a3bb-x86-don-t-propagate-acpi_skip_timer_override-do-Dom0.patch
5315a43a-x86-ACPI-also-print-address-space-for-PM1x-fields.patch
53299d8f-xenconsole-reset-tty-on-failure.patch
53299d8f-xenconsole-tolerate-tty-errors.patch
5346a7a0-x86-AMD-support-further-feature-masking-MSRs.patch
53563ea4-x86-MSI-drop-workaround-for-insecure-Dom0-kernels.patch
537c9c77-libxc-check-return-values-on-mmap-and-madvise.patch
537cd0b0-hvmloader-also-cover-PCI-MMIO-ranges-above-4G-with-UC-MTRR-ranges.patch
537cd0cc-hvmloader-PA-range-0xfc000000-0xffffffff-should-be-UC.patch
539ebe62-x86-EFI-improve-boot-time-diagnostics.patch
53aac342-x86-HVM-consolidate-and-sanitize-CR4-guest-reserved-bit-determination.patch
53c9151b-Fix-xl-vncviewer-accesses-port-0-by-any-invalid-domid.patch
53d124e7-fix-list_domain_details-check-config-data-length-0.patch
53dba447-x86-ACPI-allow-CMOS-RTC-use-even-when-ACPI-says-there-is-none.patch
53df727b-x86-HVM-extend-LAPIC-shortcuts-around-P2M-lookups.patch
53e8be5f-x86-vHPET-use-rwlock-instead-of-simple-one.patch
53f737b1-VMX-fix-DebugCtl-MSR-clearing.patch
53f7386d-x86-irq-process-softirqs-in-irq-keyhandlers.patch
53fcebab-xen-pass-kernel-initrd-to-qemu.patch
53ff3659-x86-consolidate-boolean-inputs-in-hvm-and-p2m.patch
53ff36ae-x86-hvm-treat-non-insn-fetch-NPF-also-as-read-violations.patch
53ff36d5-x86-mem_event-deliver-gla-fault-EPT-violation-information.patch
53ff3716-x86-ats-Disable-Address-Translation-Services-by-default.patch
53ff3899-x86-NMI-allow-processing-unknown-NMIs-with-watchdog.patch
54005472-EPT-utilize-GLA-GPA-translation-known-for-certain-faults.patch
540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch
540f2624-x86-idle-add-barriers-to-CLFLUSH-workaround.patch
541825dc-VMX-don-t-leave-x2APIC-MSR-intercepts-disabled.patch
541ad385-x86-suppress-event-check-IPI-to-MWAITing-CPUs.patch
541ad3ca-x86-HVM-batch-vCPU-wakeups.patch
541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch
54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch
54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch
542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch
54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch
5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch
5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch
542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch
542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch
54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch
54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch
54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch
54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch
54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch
54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch
CVE-2013-4540-qemu.patch qemu-support-xen-hvm-direct-kernel-boot.patch
qemu-xen-upstream-blkif-discard.patch change-vnc-passwd.patch
libxc-pass-errno-to-callers-of-xc_domain_save.patch
libxl.honor-more-top-level-vfb-options.patch
libxl.add-option-for-discard-support-to-xl-disk-conf.patch
libxl.introduce-an-option-to-disable-the-non-O_DIRECT-workaround.patch
x86-dom-print.patch x86-extra-trap-info.patch tmp_build.patch
xl-check-for-libvirt-managed-domain.patch disable-wget-check.patch
- Xend/xm is no longer supported and is not part of the upstream code. Remove
all xend/xm specific patches, configs, and scripts
xen-xmexample.patch bridge-opensuse.patch xmexample.disks xmclone.sh
init.xend xend-relocation.sh xend.service xend-relocation-server.fw
domUloader.py xmexample.domUloader xmexample.disks
bridge-vlan.patch bridge-bonding.patch bridge-record-creation.patch
network-nat-open-SuSEfirewall2-FORWARD.patch
xend-set-migration-constraints-from-cmdline.patch
xen.migrate.tools-xend_move_assert_to_exception_block.patch
xend-pvscsi-recognize-also-SCSI-CDROM-devices.patch
xend-config.patch xend-max-free-mem.patch xend-hvm-default-pae.patch
xend-vif-route-ifup.patch xend-xenapi-console-protocol.patch xend-core-dump-loc.patch
xend-xen-api-auth.patch xend-checkpoint-rename.patch xend-xm-save-check-file.patch
xend-xm-create-xflag.patch xend-domu-usb-controller.patch xend-devid-or-name.patch
xend-migration-domname-fix.patch xend-del_usb_xend_entry.patch xend-xen-domUloader.patch
xend-multi-xvdp.patch xend-check_device_status.patch xend-change_home_server.patch
xend-minimum-restart-time.patch xend-disable-internal-logrotate.patch xend-config-enable-dump-comment.patch
xend-tools-watchdog-support.patch xend-console-port-restore.patch xend-vcpu-affinity-fix.patch
xend-migration-bridge-check.patch xend-managed-pci-device.patch xend-hvm-firmware-passthrough.patch
xend-cpuinfo-model-name.patch xend-xm-reboot-fix.patch xend-domain-lock.patch
xend-domain-lock-sfex.patch xend-32on64-extra-mem.patch xend-hv_extid_compatibility.patch
xend-xenpaging.autostart.patch xend-remove-xm-deprecation-warning.patch libxen_permissive.patch
tmp-initscript-modprobe.patch init.xendomains xendomains.service
xen-watchdog.service xen-updown.sh - bnc#901317 - L3: increase limit domUloader to 32MB
domUloader.py - bnc#898772 - SLES 12 RC3 - XEN Host crashes when assigning non-VF
device (SR-IOV) to guest
54325cc0-x86-MSI-fix-MSI-X-case-of-freeing-IRQ.patch
- bnc#882089 - Windows 2012 R2 fails to boot up with greater than
60 vcpus
54325ecc-AMD-guest_iommu-properly-disable-guest-iommu-support.patch
- bnc#826717 - VUL-0: CVE-2013-3495: XSA-59: xen: Intel VT-d
Interrupt Remapping engines can be evaded by native NMI interrupts
541ad81a-VT-d-suppress-UR-signaling-for-further-desktop-chipsets.patch
- Upstream patches from Jan
540effe6-evtchn-check-control-block-exists-when-using-FIFO-based-events.patch (Replaces xsa107.patch)
54216833-x86-shadow-fix-race-when-sampling-dirty-vram-state.patch (Replaces xsa104.patch)
54216882-x86-emulate-check-cpl-for-all-privileged-instructions.patch (Replaces xsa105.patch)
542168ae-x86emul-only-emulate-swint-injection-for-real-mode.patch (Replaces xsa106.patch)
54228a37-x86-EFI-fix-freeing-of-uninitialized-pointer.patch
5423e61c-x86emul-fix-SYSCALL-SYSENTER-SYSEXIT-emulation.patch
5424057f-x86-HVM-fix-miscellaneous-aspects-of-x2APIC-emulation.patch
542405b4-x86-HVM-fix-ID-handling-of-x2APIC-emulation.patch
542bf997-x86-HVM-properly-bound-x2APIC-MSR-range.patch (Replaces xsa108.patch)
54325d2f-x86-restore-reserving-of-IO-APIC-pages-in-XENMEM_machine_memory_map-output.patch
54325d95-don-t-allow-Dom0-access-to-IOMMUs-MMIO-pages.patch
54325f3c-x86-paging-make-log-dirty-operations-preemptible.patch (Replaces xsa97.patch)
54379e6d-x86-vlapic-don-t-silently-accept-bad-vectors.patch ibs-arm-5 1674127095
! " # $ % & ' ( ) * + , - . / 0 1 2 3 4 5 6 7 8 9 : ; < = > ? @ A B C D E F G H 5 A K D M 4.16.3_02-150400.4.19.1 4.16.3_02-150400.4.19.1
xen html hypercall arm index.html index.html x86_32 index.html x86_64 index.html index.html man index.html xen-pci-device-reservations.7.html xen-pv-channel.7.html xen-tscmode.7.html xen-vtpm.7.html xen-vtpmmgr.7.html xenhypfs.1.html xenstore-chmod.1.html xenstore-ls.1.html xenstore-read.1.html xenstore-write.1.html xenstore.1.html xentop.1.html xentrace.8.html xentrace_format.1.html xl-disk-configuration.5.html xl-network-configuration.5.html xl-numa-placement.7.html xl-pci-configuration.5.html xl.1.html xl.cfg.5.html xl.conf.5.html xlcpupool.cfg.5.html misc amd-ucode-container.txt arm big.LITTLE.txt booting.txt device-tree acpi.txt booting.txt guest.txt index.html passthrough.txt early-printk.txt index.html passthrough.txt silicon-errata.txt block-scripts.txt console.txt crashdb.txt distro_mapping.txt dump-core-format.txt grant-tables.txt index.html kexec_and_kdump.txt libxl_memory.txt printk-formats.txt qemu-backends.txt stubdom.txt vtd-pi.txt vtd.txt vtpm-platforms.txt xen-error-handling.txt xenmon.txt xenpaging.txt xenstore-ring.txt xenstore.txt xsm-flask.txt misc crashdb.txt vtpm-platforms.txt xen-command-line.pandoc xenpaging.txt xenstore-paths.pandoc /usr/share/doc/packages/ /usr/share/doc/packages/xen/ /usr/share/doc/packages/xen/html/ /usr/share/doc/packages/xen/html/hypercall/ /usr/share/doc/packages/xen/html/hypercall/arm/ /usr/share/doc/packages/xen/html/hypercall/x86_32/ /usr/share/doc/packages/xen/html/hypercall/x86_64/ /usr/share/doc/packages/xen/html/man/ /usr/share/doc/packages/xen/html/misc/ /usr/share/doc/packages/xen/html/misc/arm/ /usr/share/doc/packages/xen/html/misc/arm/device-tree/ /usr/share/doc/packages/xen/misc/ -fmessage-length=0 -grecord-gcc-switches -O2 -Wall -D_FORTIFY_SOURCE=2 -fstack-protector-strong -funwind-tables -fasynchronous-unwind-tables -fstack-clash-protection -g obs://build.suse.de/SUSE:Maintenance:27487/SUSE_SLE-15-SP4_Update/21a70de35a63c4a4057a17a7cea840b1-xen.SUSE_SLE-15-SP4_Update cpio xz 5 aarch64-suse-linux directory HTML document, ASCII text XML 1.0 document, ASCII text, with very long lines XML 1.0 document, ASCII text C source, ASCII text ASCII text ASCII text, with very long lines Algol 68 source, ASCII text
JyV# utf-8 92f7024a353d2eef6a937653f312dac0563fba16be6389cf631e278481e8d62a ? P 7zXZ
! t/5O]
crt:bLL
"`
1FN$z!L52&hK%hvC݉L Y`bhl, TM1m.eKg~1p!o]
rrJs N Ŕ)G|TYj j
B.xG eBV )\"~(T65< ė$ASjm|Ko9xԃw~Tp0ƀv1l'9vA)NJ0_AOG!oyS; ~RǤ7/i 'N8%5ʼn Ю˛VX!E{VeA :H{;e!,a{[iRD^ǠŞa2 V6ctF=pYK̗KSaW e'DQAaeKmSdl , .^*g=~wYʴSJbb4'`]&1<ιN'[iSr6`>?]CؽdYO`BJp~PæPv!
>m?[a5L2<߇䟧#|l GiB'Z CgX z +̤`
|L%@AhB(BmK;fLՠCX(Z&2&>P)<*hObt
2MqhxI 4/{p3`GyCW1հ];L}q
-D *װFugkwfT>SlgSF+ HBe&VJ-M籐I]`vԉ悤lDMڴ'qi
`]e L:c7*ʻSMψH^>:l?lH
zqe}
\O 1HGI_ւxuېG u;Td.گ=Y$XEJYd}_
[Vsס6r ?F(zswY MnDRU*SW8gh 韣s&73@>QXvgc)
J1 , ŜK03r,`_q.o"n8DAnmޯ h=Ǐa^~~?p X햓`qcLoq9PF͊c)ts N2Q?PԳ}lnO Qwem_s|~KKLmRn,!{BCȃ-CSP/wn -%&;&|Ʒ6 P{ +l jKپ^P)>> b^=I#>*G9ɒqŚeի3C &.%wjcf9 Ogsi\BSL`0X8y@, L҉3̕' fիY6%~`W$XV# iٮ kGG64=af
c2+Kx .W3<pb 9 RmH y 9"oPQA #ݒ ƍ$T䞮^?_M}гϫNԩb(jiIPVU^Lo`H$'ePl5I, ^q QMra:=Vϔaq;qE@1cB Fٰ
p Y& ̶KOʱ6qy!UR ´nSv3&h|B.:
} ύ' : +鮸qs{eR\ ٻ!沠!E*5E3Hf3(OiXV6ߤFuF8D :
vߦ7ˬf̐Օw+OG. ټ ?Xw$z uÒ|DW0$EF p|I) N/&ʫF K(&@6
g.,AVۼt)tD3>-Gbih ^kmY);s ϕ #νW3˵;V#
S/ # oo- PU y4|g2 vWuWztVd 6 7c&ʭsq uȏ ٮm}dWJ;<ha9r皉PM),T!0_[sCiÌ3k ,M
W'p u-? {B;D1 ;V'k>gӡ^ ?|ؓOo@ 8d&I>c|C`oғ
oHCL,`THl9S匜eVcl@л :{!E!upb_
.'Ԍ#
Ī%uOI֍6tQ3 *R{Αrn5'8w:(WրO+Os-q\ؠݶ&hk̷|x<704$6]02VAg4vXG<.-f
4
L9+,Vat^Ճk;q
Q>bJHG \e'"#F~Y(t- l%={ѓ75'L.R˦8qQnÉV5Y O0;1K
V = x@vB͆7T~Sr]wxC&R" -@uKeqFFS%V]9p[iI-lL^ &y-RЭ9 ֈYQ< +r4Nh'u9z 5»ݷWۜp6 oޔk{l?cjDբ&f
Or`nv>&lŅ'y]>ĝ#ެ"Lx߫ҷ,s YT
7) F r8̓Si()_!ϫ~ Q[uXUL4uT/),t$@"$DjO6kYuqp:4IoT
q6ؐHj)%>lsݻק]b/4ԹK_oh g %hj ? ˤTc+WR~PzXG| ?ڥulՐe "DHן[!jTD0.1uVEu̝A7|I(;`CE9
nZiE^Wy$V=xL$ 6NEyLKH({LFPӟBrDo˿a^\Xڗ#`Eh#aΡo;H( Cߢ,u1QV0 |;s7f︾̋rQ Z>Vအ&.Rg*&Dd~&e w RB1ɉ2 YsH_w;@m-c%-n85M)y¨#Y(ׂnBy7 -Rű֔}c b<8uI&?Äm"BdKB S"ʔ62'!E$ TW=ގJ_͛
'>'y UXb"|y*PVR@)0Mfge d$ T,3SBzwX3|˃lu| u$Hh]vn*aSĶxEWB=G
}zM}/ 7i퍦g]EGkÚOx-v7pM^śtQ+[>D"I`aw.o]C{H˄
6=Cs_ܴ}e_u`S|]\/ZyCaJieQ@* 5`V9٩<6@t-~t KGu wE ^VaN1OE J 7&$%Gijhz\6P:HXH3܌1^>qW)|ʚ +Pn.yk7UT,MV ɞ2oJÊEOgY·wpbN?̒L:,( I/ X jqlIM]_Eħڳ,Ԍ] ;/s͈G:8QH ޓVPCuύgk6[IwSE`տiŻzC=sbBOU6Å;A\]/TaS7-*
p N0"m\]ag+ފNS720I Vǥ0
١ ZP_I5Mʶ`iuSK(Bk7ԓC 띃7 rAPDTJloN|:BY2dK翰Om7 ǿ`\LX^ N+7ɝZX )\)I5= ȏoH
Eʎ_
cߥv"Tp"Hs@ (+^*UWAgƦܸN*u@ ue"2S[Ʋ7e^C>Yi.g]TmSo05^V b߶
TP;r1Hٷ BIzas53ȯ&|s?; f ma"IJ
vä 13%L݃M8ME:׆ l5gABV Q[\D=)Q?+]骆.ByK<yc6ũW\9ƆU|M#*7Sd}AE*EID%%t", Avt=WvaZ&_ l!, ,pe;ms_}"!$Y7,{+idGP j
EdR0 |¸dW^aoJ%n'fz& ԅR`gfWFNkr? ̚WunV @͔4,D|phIL{eD _VY{vȕZR{WwX?%ͧ+} eg:+
9eX
l1ro3v_vѣB?%0% tk= ߕZ\]0u:0.Q0f87bXT561,ܪy,OGOko]X5 JXy}o`Jg}'O ⢣ % yBIt\8d"@/L:
2 f| 6+z;O1`DZ邤E
}+7wN5m`{W TwjMiQnx秲tl)eHt{'~t "R.VޭE{bf]O<١2Xln9Qd5>1*/wwjy0ܮ@ 2òb*L$|H^Lݤ7]bG[Rq E7aK5wvVԥP ՟2eh.DqOI״բ 5@Uu
a*Ϻs~qcôE2>fQE2ԥ ٲM2=~g3W!]֘ AMxABiÍV**>6oX]?uY#>1ɃĥW;[3@BYJ]ҡrFpm⯘aE+N&ﰩ/ 赯Hi)d~'')b +f~p+t%@lHrV)rVcn"Ŀs)G:״10X_2kM`\h\!XKZ=tMtH oόKP.W ;L]L=K*lT;/0L9$F1Gu{Mt&6|y.\X]NдK-Es~9X|ઞ \'rR_Ww7 PgC9>$X?/?At:Y
DEqH6p3i qM*?AK?=`yْڶXO yxS(u CO=7uo=.`j _M7K^]Z83 bE f<4d)kx!E4I#ژƁFy :H>ɉo䆫.~q ޣߕL)fwdMt ,تaTپюL8=x$0aI(R ;B'A3 @?+U»^5f8yFRnhzyd 1d쯉-~]W Jb1?Չ;g|!]qi 7O]ERz#ƓADQ 2xzhd2wRN[9|] ,|Rj E+\gu,JcL zΛ} ]z7ds HA-"$q:4w)cfQ:cnհ&)teRϺ!JLWP8vo.FI>Ī6"GPpl"B㳦@(p~. r"b,:)*H[Jo 2i8k)ݤ{3X^u5à_$VڄL^Ϡ0] vJ{IN/c:Md.LƛV
,Nj0wshmɥvQ P jN2?g0:)z{':~ 1(l(TnmC| H)[%RjGHl1a>sPݽmvg>T:5hMX0 S[O^x 8㮊Ð ]`9Ypӭ:!ި搻~_m*<= PnPIѾ_}8䦃'M.$uH>\xJEǟ!1\T4 d vylmvDأ? [w}:W2tGX vm`ӻi=mq%"rO~+b>||v O/ʣ.
G2ݠ] ?m;K*`g]gב̐LIY9_%]-(?OHALêVdC\)3n[aM 5RqysRӎ/W W*:c.|ʽ: bПYa!kqk jA> 1isXx^q?zN)&1d\)2 ]h~ya;xMfJ
ݟ:D"/JRTc-w~vy A 1><5rt.} C%c\j ^hfDs+MYT&u7tHK`r.LtһQw8ͽ &%K䮮 /Q:Q}:e[88lk{5(Q U{jǗB"ڲ ͥڪ |zT pP'^6FXK=v]k^ T. ͑}u{p^{ Do! (c4B~? -`G:yEa#+v!Ovg q]lu &&A8rb:Wᑛ5 !>1*dz18}EdyI*^7&pkw8aXG3U j䲦(§Oi4@җ.oJG0p]
Pt\ mÞ$% >G~8W|u@G
ӓ-= 1t 4?leϼAIMo|Umj;1qmRJnEW2ZNBs m T#'*R_.`ɳy+/2\$ѣqOMa^8=3l;sپU<d ye"x
!${nICKJ)** [ JQ! \'2lzu ;aږJLwҡjMv䟭#{s:p,3RH/{O
|2p&=nFؾ:KO)P2@ S_j%q
(uՌQz, xG UW"UH()=_G?} a^ Ma>v៸
(h.S)^/y$.~ ,4x86:{d1 c%LYc#]Xsr
:~
&I p> CWLzR°p(2הL&u9|W"m 3X\ю yP
"uv3buhG2xu(O
O#q%x0
\Ŝo"HjzR yGuBW# SHmrsWR+,:#|:V!
ߛ ܀d g_-< KPNyw@:b
f\*v`r.g\SѶ+ (:EO=J$y?c'3s?^Vr~G2Xr"[-cwl] ys Q}̰؈SG[Tn7>eaN>ȊWzWs g`~hղZMX$bv
)@.'c|;2(*},iy[cf75+@$p+u
g~vj~H *n.kPw<Մ,))Ԭ6L|veY tЅ6mZwRo
b7gtI '< %oHD/e#LבLara'gr- =H2To]gtx-SGU0p8U;4hdpՙW&_ qZ 8uV'~D)
ؚw~"s0]P@lN+c
x |b:9#%1t(ʶN 颙e2Qv7zHtO5MA
$3=&ڔ,7C
{οKv !c=~WۨJzoo^ ^cAsSM!0 ƌ A9ch|
?6
i\ygb ΄Y_6W67ޕF@m mHH/[x#h Aiׇ GuHu<:ųmՐe|Ά "o5}iw^D uw _C똑[9]%Ąj8(}
v[ } I*r^i hXLü;tXSp
I+_Ktԓ,6m&9/=C8!EpM ^7U qρ<ϫ9*ioSu!~3/fE=/9 MPS,ݘl3p! nvw6Eu.c[ĝ4:_|.MO@;xEqM]O2_ ]Q>kyp$ ݞYN{ 1 B jlPA`E9m_+=rShoJ E4HRxI}֩ՎLײ= w{U˓ִ z 9E
a$dD]ca'E
s@2U
(a|4pE&9A1ӼMpXwy*rbn\Gkkk6+/w8d ??T5xG2BT@TD>K ~MF$>'']3M|Wm02 ѺR43k_;GsQS|Hϸ-$/ΐ7GjeF c-l'(yPgWA_`Ph^' Ĉ_ 29e3`1<4Ov{r6$ٍ+1Ts^?o}+ƜEe
Y-_<|#aXsKD=B d U˰y0]Kb=wYq~K (hx(;^!OL`?EuvZ $ 8hduXy뀒_[eKa B[g@/MdZts+̨QqTPO'RBb5Cz((EZt zg?.!]ptGI OW]p8;'Lxq#C!sۤ2 & s֤MUm
R-0V$ c3~t6w a
O\ n`b-jC>땭
qůTt Vy.Ox'kyXq3
-LZ1JF)vxsb`6gwQ̱<j.Y 2"5$/.$1{[D# MMglj_|G0^ ANILJ'alX ?j>q* rK+}0uBYi̯F
S*[U7 Gٓ>>VqGsuԐm6CgʕA;SR&Q`sD@bq3t$ dGXd < ;K⫝̸K@8 &j>Gڼ g %ԖHip )k8pƹE1{Dc}X6~b ;ETݚtk痗֞iw(iD%{F~F/=v,]4ݗX-P"l
$ sWI#bhϴa-g gFϩiI'4Dh;G #^SK([ЪQY,Sν6݆J yhTbI#Z/T&@;~;!Y?78Ze:ptX{Ba6f6vthzSC[Y*>=:]I) v3cWWndEY]xwt
Qyi^L^('O:noS-ND I$jǰKk;v冁 /rvc+2g83UɑIg- R BF$D}MQb?p$Vx߂u|>;5|s.Sg@~4\*V)rAy{GߔUżAP
RS]X;D~m$}yTͱ5JpXJe,a >[^>d2 /nZTFNyb@/z Tg` ؼ!Hgax?yձC/ ٱ2LX`lxOV%^nVίm0 t@Q^&s8ԝS֥![g/Ut}yt}s 8qh
sJM[hQH!7|^]y0ԿX}KP 06\
ŇF_O%JtTW ӓzl(7^aY) P(t0T ~n0v#O{D8{\`CڵP.U
|4
i:y]jZ\npA_v &{+r,ƾ9k&U2 a\E?F :6";2@ PC$d=ߺE[C"c߉Ý6:kjQE/9Xc{5
ڻ x:)~tY6wl]1xgps$ ~YGcyIpuk(ǭG2?]4 :7&SỨa OK! g$ 8~a /
M{= p⊅5.N m_iN ԕ9P4`t ad`@"HXGRfIԷ&%V-cJspu 70
/4 OmQ^",QȗK$7XPAљ %#=}$Y$gXl\_)# x~|0wBB4L ;%힘!,IC] 4%6Ӆ/\cBaGk惀h[%ֿ0> S.קC8Թ q[摩7_s:KN{VSoTO\y?sqe#nʩ8!@-!mD$|$ =9Lc}#52(ϼ!ںTy&aNJC x3#A?e3= 拧$NpAAH%
EE%,I]5B$: RO힃懓5C[
$/ bĨUJ %O! c
^#9X{t]?i(ұ/ j >u8\s-|< BYʏ4C\t55V2dWCM `zIcVT*RVͱk6Fv+2lR 4,ߟL ] \> ^:~Z0Й\Rsucp&G*Z #V; I6V?>FjDŽGmwn=G,4 rQm2:G)68n bZEqseaUBQJi9KWDg #3b!% #]瞴?yf
1ka %=?djD< g`jhFx2tޭ_TxㆂMMHw}?'`cO"1kU`W2 ZT0%OoPӅ LƵFojsHǷ Z8hO6qcKfWEΪfD._ $i{D'K*|;$UI/yzl؆r\(#u\$iFP6)ZEWM .H J;mh] ]Xdf7KTSHP4"v'ݍ$3.Pb´|]r^Rc>m絬5:d:cl^lY.ZpFlS䡮WjLjAʤl5/O$2:9b {s@H"y/WxPanAHuu ʣ$1
=1tl5%#Mw'f
*mXwkF
h[*?VX0 8w*t/@v p2V_wP`Uxv Ѓ1M
T2*Ghh5Og+(HG]Sq-bw2la(S{NYq_1\KG2g;KܐbL ltKo=%BBT{&wi]e*``*2,>=c\qE!+lj$˞ &y KPQedC.jL|$?HH2V{nϚ,;P+o&)a"_b]OPFL%\7aK
R `+-z a,L ]> V?HK@hj@y"{hw_N{˽U@$U~E!Ȯt <X(76&RS-NUQ=(߁%zT3p̅S!G)[}ZǑ(bE: T@RɝT `2 }
ף)tyʓpވLZc$JJfǺl|dodmEF"g.vrOX JJZeK M\Z O#P־Q[ *`90s6/ɄFMh*9CcǶ:?)2SRj 51 @9H8O-`sƶCsv6T7&;
-+n !+F/MK`7aȳ9%<d$6D PiI:_¢X~i/ [ Ы:$R4zp9b|`Ǜ{Pz<(iTsLJ7ؓǏNa^6/H-o C"~{ "?OF?鎡&!
lv%zAw*٘xwdP[~ɿqW*+3z
hqDŽq*,V\ucmBaPa
)]Uʟ-ݎ%S
vēdzMv0 27~ũ?ǡEHSnωYrVxR|@X蚜P'AaM?W8](Z1NS6p1ѿ`z.X\(/d귲gXNP}H`i]4`<z G|~Ztg$ֲB ~#2DurY+ =ɭFksyH\I{³Jͪ?3 UP 4pO*3fRWM~9(*G9;(Aj ȰĿ=p$Ej:j6!X
k}@[;kc@gY 6 Rwi?oX{<5 AO& 7\$m^ lv |+$. 䠭lQJ4G*,&o>GrE{ub睥W`v8#qvdPw1.í Jr8 y >~VQ9~>\\y$bD34`Omj cؖA Zc[e{>#=)- dFqz()O?GO5OÜ?XgVz |Nո ,6}c[g<@sQJo!45'\]Xjh7Q~ʝsf7gQn]$XeVPsX}w/jɒPt}D79[b4& UpZ´:ZdݵQf.-Kz=̕c'Sl~3`B|o`Đ;p{O hͲ>:_o@WPZ`=\R>3afr"--
藏C0 G6տkx_d!k3:Swĵ# saHOu_KSeV HQrtŁ vw}Qot|շĊоnXG
.j1GGhJqj cE4~ZoNb<')
ԭIyY@SK>q$E8%H4#d D#U.ُaoOzdh?XEe3{@yȿD?"I~a>!汼i1jn֊. i5 O;幾WhSYѤСvޝ[ʔy'Tm}vC *QX yAaA~]=Q B ;gA 4/c&+
v
V(`OW Fq4ɼckW5=zC 47;)xQ էXbIk^P'_Ye>Z*ཕL Q>\ I^n (:o
y _œn1gr@+>,ErTS/h pD?p~ϢB/6P假*7x_c_#f|7jw!6ɖ^5 ኟKMq2@8r*Pg!ioOTfB.KSW1Yz(/ckg S[@a
H MkE5ϖ-$N֢qnL{z;aDtAm eД\tcfY!9=^kv>D)P/CPݶ2h2?-9('v_Ҍڲn1THb"F-Z\:l&~5:V31>䉚9(YJXxpxɇQN5K ,s >)Ŷs[); GSrwkˑRqH~7J2nK/zӰgk1Gr}8J}gi'OiDIG ?
,Jܞ0UQﶅ 2O.ΣS&w I `?@z0 D9}"!0/J$D~':K VŊrMu{7@3wC*C;HH9d:%Ou;v#خfOL )i$@u=$C'(Uه J%I%$ڃSZC,Gr- ^]Y qޖGlt3 b?9n H= 6OܰͶm62RE`',%Ɠ:~zߧmS:@Q8NJ0J{Baw1nI Ly}07~xQ 3l@UEpx؉.7ƛ7ΌF]c {|wz2/P.9aC[=C7̲J͔ )5jU 9;NxP;A?6gx+]ي(H )p9?ֺ+73plYG`Xx Gl5'>zonshI6 hj
$lIG쫉
x`I2Zvi| !-&o.G6H#N)Ֆ:6*8O
=mI:Ϳ|R0WHjQdz }_"h+aaM=0nh
s }ޣ">sp8a"ymuTcZ9.ވ?``*=&uC_i(3T['$jt)!Jc{:DkORx4RqCQ<&_Ae3j D A* \wߜ^V
8YE ĆxyO;bRaHgOL<TPLv%\Yلv/f*< ,a&&)֢, @~b.8ybtD&-8!?XO g8o+*\7d\OZc?c8Cp\&=qR'd_6iW2(b. W2 3jjmz N?.S#5rKI(Qf:,}ONK]*:V
Z%ǧ
GD4k|x`^\Cm[JA
|% Nɩ;o0 +X!\۳jۢ%B
4֮7C[R, ]|_ ?A%yeYPg<215H㱞 AK2^5M$ *p]QI݂m@8'9:LcS]ϓRP?#X1C
"U(,}!?5ŦP89'A_+WIS֗{}np>%`yEo/l .fېܫq& Jqͪ 4Kt&8X{9AP
wAϮH2ZGoNnD3MLy'aE.'e"|Vs,!JZ!Q>? rCl
5d5e8D?VZ<=JD§
m><¥Qۘ{1Jm5G24 iQYغƀ6N?ԓ
I9S'K[ne*i
d"XVƃ9!o*E"? =:7^.RC!m 6U
O<9r'%&R :^bw13UyGDiKO 86?(n?0 /\="'Jh!J c-<|
o |93DHg" SVf;k$G:'\y:N:J[ PZy2Xei7y8w!+ "UksI*Ιs(\Y,w@p$?!3f~xd %
+
o>R!"$Uͻ ʋoBߔ+/E{ˀ(BhLjG`yHkWkxmڨ qv&`ݧ5'S&ȿ
RjVaqpYXТvҰEHNۍ"A/~Z?l G.|4tɃKFUrQE6R%˿JK`ߓN04hvWC .Wԙ+SC7˼ 4wc iь?.Ry7#DQ7\GmKyIQzIlw !\D9U;+b ?Фv|
=]AL8Ǽ >B\KʶNZSOrFnG,^% TՕ@M2 3-rb! Q%ki><!lӓPD:g
uMd 5f-Xγx< (tnΉ{."U\NϤs Р EIC+.1k,Y (j+ 1 7]qJ,O1b>CAFL0#|.thծebF-]<~i MZSZ,VV^y BM~;
a=2ZlY)
4ov'hCJ9 9;7N \VwOl&)G^7ƣ^H=kzSGeԦ E϶f|Hmy>N{UGQe3Xxp
BL#%;*Ӂ`5p7EJv&\P~ z6>s6>U߈" INݬ._$;W8>6B% =2bmQor
O S%tiL(232lvl 9)-IB=!.Rr*.53magk8 < @Z~iκG kf\2KMZga_w.x*aEj)v r 'H䜌2!soO ^aBoЀcέD?Ll
z@_ќ|V{G-}; V}6N=-u3,B MJ0v'@|U6FZF_aZw5ԅ tmCe?Hy[ݗᰚ?T)r D>)żVp-JC&r 0O_H·}j$=$`dbOv"ɵoWİoa:>!7eYPAxL xbH>i%R"2L2C1+c$#/ޣBWU)~c_+4 v,Y 0˱pǃy
/f; U꿙Q$%ċ4&7[vb^Lg pEsV8~]ߺ$ kA5d4fbx?=NtDs\Sp;=
Myӎ)<ٹb[ITyD,h>ʡc{b @M" !w[m_^R
('ƅN3
5
Qtl١!4 wS Xk网ŜF GZmf
T:ҫhgkfQK] H˟?[?qPHT\M %awH +Gfi
kP`-(+ g.HHL,r)rUxLTp,ou Q'WijU:gg
z*ћtȹKLSA oY;Je7lGs;}Űesn mëץSНv&T'#AC&G M}5< @f=#ٹi' 23~
OG 6ޔqmt56 :yz?( |Wu)YU9}EuuRCFFϔtAAlԾ\0_}6O
]4%&L1iB܆p ayBetm aB19TYK< cVkQw,Hq-V9j/U2,,4$95QkQ=c3״1lG6^\M;
ǭ>Puc6T/>xcN39ݍ-٫UBe>)*ښYJMPR ;BD o[.o|],[kƂNJ[;B9%M'h/s]W/V#H)>X izP}#SSWi~f
t7 y&nAeҟ ٤AjXx|~N1 ]F{y |8tdM?E`xς4۫B\^w,\O%+pox_1j멘RAq9vU {ʢ1$v!_ǛT +EB M5@EE)pu^ ^!>l:vܺSՇc>zhΒ# )wK@єi' \ n]:շn)?*y0 6bB'C$m_# XZiX?}_ ҲF`9"=0 T-JubQh!:DH%m4Vn9KA:͡66ho,$~9jU DG +;;phoDv JXү
G5vQ~5#+RRҁ7:O58eoi \ j:fC<m]pmj|_ƺһ'^DT!C[Q NJt+ְ0GTcE*FSs%YL~/AA<?] l{ƒL췆*X@:QH,).°ebG'BfΆ9vWT6936ٮ0jLQdٺ# 3ݝ _~@N2TNJPE_ R
Uq%F =hc:rX-}Y8x@7W`(14-J6L kS~.ƽp%SCᆕA.UՃ!4
TuBNb9Gr=-xv~7˨cB~LIʜ= lX+7?GLcdz )WT;aτi%jrhikU[e0E Tsi[BwRWfŭ4_JCB{(H
&ش!{ p$rIq
)
w_mԨ@4#Ů _vuNL ~~^>y,β88BR^BTs[&^(昒^&Q<\Z?0܅y SPs'v.ԩ7cOBw<L_5 ^6xA W! 9F:Lh
u(HtὙ6sO;YxM.s
13MO\. 3Brښ%ӫ~ ?#}LxyAºyހK-le';-q hcc>.*KezGӘ м`qK n }pe#&`^
u7 {D3iGHCrmn&Msw[>
UV\%
'{#O ڂ~xmʖ<9[_SJEG@ue/ /Џqn4R+%< DeB(r< IVk媣j[H2 N&(sj]ڡsja,f$me3 L$|\lqwM %Gy}0ǥeҫ !ջqᄬ?O
~ʹVr2nlhi!-/I\[ @ a֬bC}?"s6ϭvҷAs ؗ9XƸ
uvRc- ru$U%KNxb֥qV(43]u-Q\dpNUyn y;m֩2-~\ MBa9/ĮHr˕+'X:*BJ\Ѱ:уA II;:5v:N㖃% 'k0~6ւqruڟRЪkf{:<;_A(k NWYLDf
o?Y䏖T.x1Ca~ U d_*D,A, (
"LșQxRvt'vFuP,n):!hw@!*NKlkjݣmI[c
\ Fh+cf]cPNo4B& KC.
=3ul-6`Dٝ#8aYqke R)$OmYl+P\$ svG_Hum=Ppxh"X{< `uivw
ZP}'"k6l-hXja*7݉8["EUÉDb`s&^ub 6H2sOSN ;UTnEʻ3yB3 k:a-3UPbHhi^t Bx5H߾Dr<:p> !I0Kȉ=Cת F[Vrļ-Rb˱+i$p{
8L҃z0;(r0tˣ*H]Vu)Q-ޙ5?lv3L4<; f)}b<4LLNŊ!R:c p]SM|_͜dzK^Zn D=p'3E[
#XKi_om d) HwZ/
[+aFhyddr
_vμ,_2|\W "mb9 # ubU)J=*^v~;=j GL`<=7ٲW1^(|t㢻 $D,w]_ 5T
ʂvqk9Bs1/!<3_6ee.dhj -X]pL, `2B%rY8?TMm8h}:zRUK(Ed 3 }7Sה L's$C$ILBd5S%U^/54QYI Oo^35ȡk0 zc/[
(5ZA :j(r8rF|Ly |]{=J]R}nDgt,u[b
߮m\%=:FVsGg3oP?᳂"-f>%r5}2=ޔ lJzЋ 1Y^OE;^d*^
k.: o0jC5`pNeڸ9Tvr K](JVd~ /s_xF#*kF&'L˕|i+3ZcoqIf*}NgfTq `{L-5(f-Ga"H`,pHި kWLcD J
.-؟62"J?+!>NUby'j ./͕ fJa
C08|8:kC9dȟm
fJev
m{ztH0#>R!Fep}{X :\]SJw 3Hz+CY-[)` !d
:V@-#A+J7}wMa@G7$!!*\$ lDbrnsk~im[-_ދZ 4EZWJ'KHK-(L6 ۮ(ℌBIa 2aC ; i&ǫFkSTШz+VT GJ M !q"%Qϑ׀
l Ы[T}g]< #2*!KűT m\µkW$;l!3bL
h.Ր Hph3C9a G$ ["4Ũ䁤jN <)u^S tE 0!&<_!=& Sf
;i|Q-csO%ϭ\W?F躴yDa% q!(]L]9c ~_j)::(`q
A&*"lusԼOSvGzSNwMp< Xu d x'}F~[2WC~cURRe8 79JeNMK+:s +. l|K2 2-`
nf* 6|cH χʉDACuxˊ*Cssſ~>{Nt.ǩw?ٮzz|3VZā6-u];X[{tr8 9}Ԡ:93TRJJv#.FZ^YsK̹ ݘ^ʑ AjAW_/(8gYiϺ'3Eı
Kِwbx @O . f#/Cgf,O 剶M'鰏wg'Uc|/<7 Uf`tR(oumU9Q&avӼ<6pu;=S Lf+ Sl&ў ƺ5 km#X >x7tU1G0 Ғ/:yޡdv.Jk$YZ}~2iJtps wt/ &(#kP8_nlN<Ĩ_K"Dys+segG~GzVBM7=d<@s`NԱPj8 k)WװŹNYaĞ0RuDgm'E.0˪Wdi+wX Dn#R&@K.gWB <5C~x4Na%' }RT퉈d.Ԩ2¹U
RӼ_Re#U5[= i*Z?EO aWT+{An@
mdF'!JϩDZ<##)
&ac#L)?ǖAovpuku7zON2肄VF
V MD=^
_fQ~I3t#Y
c=Wma(
|"\D铤n + n}D;$~ mnkH6ӻx/y F
O!gK:&.I<~ DTsoq 1;Ȍݫn[Tj
ߒ#X$R@K>` rsVRԽ`5*-&UBm4n?BCA
4S h|,>X6RHY%JJ: N Ñqp^bDk ]h~#eK8L<ߵ&9W6S) hzP!$nAgs*kfcWi3fy? @jXSN0 w0כ{&t<Ϫv6t+m)md@=^Ґ4]K"I l I*f?#mu+@-@6P"|M-,v,aVtm[ixbJ[wݹ' BGm!]@: fR x0~CH.w
hsyWa#Ǵ_ly}X\jL8lwތ0/(b5߂>W/[ d{;xq] EDž
>2; }EX|#ŻGl&fiY-U?A>8- i8!+rkrI#ax ȃ YhN=D` ]d,tk Z ]S riy\]hG7擫71]'ҜHxvphPVJG sY~{w`pM@!(aD@
zʞC}
>S"LK>)VT1PƩ@NTQ Lou zGM
'~G(Ύǹ ژ)$L|YJA5kc};} DnPb7\A᳝ %T\IfiP緛yWڡ.17F[3AUF sgB!haUk
][Jx<<(r$!3}Zg E*$5/^ ]]fJh!qU
0Wa|F';x;m5't",)?rZUf ˲eĔ>Z7rsQA0q\a:ˊgi]Wmӥ ]I ] ~${Z:(#ӁT
cv0qg]u)2 3yd@.C^DSZjW(Z4]8Z_v2?s~lhG/]M#}}eGzژX;IR\K0ԑyk >zy ?hJ,/ -81'DQwO&bEIwaC1|$rk` 83่`~ 6.z/F3M@]w[m߰_w EKT DS8fZ .W )&[! &N2ج82Gq}WBLGzP3J<
^ mVdx9nyR#3\ٌi id $ϓMݽ+z4c3ϹS
"QFI BF+KvUy̆VUA5Ja?ϵ~Vqla bwDxnn䎚3o{)TKWWұ0NcP |M~ 7Y*bӎg.nV# ֮J-ɬYEkKL| 'SP&Bn%hW\ک-m?Fd;tDg:dG1%\ Qv_6P&OPLE7-%IYd=\$VR8\*W4rs\
Jk8wNӿC݇W l 5a3<_ (09DIvX\g2 c^D Qy~0/lfY @7)F+ 肼ص^]
߽6kV `
=XOIFˠ(̔oO!S)6.1M"&#%dk"҄&Y\ _jSP34 zO,_tWا 3a8KS4mmuԔ+==1 In
LmiOƓcU=0.$Hn0(A$x|ʓ @j^}@^~ਫ਼ybbUyAR"eMvO+ֻeyB)tׁNkE_}2}6'kp dDُQ Y! {Tޘ5O-K .uP֞ 7VJ{VYbro*kx]6(~GEC
o!ID(f ^aQ,+:! e\7V}Oy`f9
F: %&8hG6G^ . 'XlLA#b nKPD+ՇNwSOhp:LZ^ JNhDb|55iROOV`F')vr6CzҸ r IM "9mSYd~״n2N!l?7toVs$Nf=T g {g/G-'+zgn ~ QTǬ ]1s t]#8pD`&vlKOn4XQv*QGKM| PCkI\sʃ^_+&ekv1Vzc:˘Ps2?Igj(
2 rVH2 _Jem}#CH- ӑȾvWPm
[8֫u>R|Fʥŀ>tyO 'Rz덒i.EЎ)軾^@K NAS)AUƻЕ7'RXwyIt/v9fۃzʌoWޯv QX+tbףl;t~fP M8C:4 Rl'f'&Ww( O CelYG(nC)2pO
뗩fGT2|ۋa1N<_ >&x7߷1Ǩ aX3[9)|WP6f p
ɍv]xR1Y#} O=E^ &M6yu?DYmfvjq~AfvP :&B6:IlҒ "ukP$~'WO *w$Tt/"Tu%Oaq[N"^ϫ>}{+%ARʶOTaa=א|^饭0Z?ǫ^6lcO*Xdl6Il/#6YgN]ÔE |F!oqVV&yL d TSx:Cyr{?>_˵ҝp) H
j?Uv7zP6
@`t@z{p7e1å?׳v4)AF+< Sv1E+ xޣeᆾ:|>.>[`1"A*7MO +zŘ
d-T_Ӿ u8 Z[lEPf3es UʢCkj( ]YF[QvNBn][W%E [͝2V,_/@:!L@W73`WW"pSv@ B)jX֩V*U%RqߙHԺT[jO F8{H#E|M1!!ϫ!O1\Hl` fTښ8 )K] :"C5EppXru 1h҉8/h1L SE¡I :|6L\o\C(xma
Y{`}'7 %OX0k͌.Eo^akF7&9k"|
T+Vw`0 VSn~*4KSLQbh[VWDpݾ@%1 }eP;׆%9Q9^p/Fs*F%VN. ag gdTĴA?V
Tz> w,;X1#)in/9CϽ\ҥ @=ـ:qa#cM
MˑtSǵaI[4l 967yyYępzj5ttӟh3ӓwHB-RTgoWz%݀Ceh@
%\7ѓ]Q6o. *>K&8t07
q|O+4{~6"o\x4d6@~`# ]ݻ!P}
ZR^kLJ=2}xаK*> v!rIZ9+rʚ+ʱCG z=_
#9(*L?Ƀ?- y:ƦU:B%EvjQQ-lP:^,yg+jx+n![Su N[ts%gL+v}? @Āgi+Ffo KҒq␕0 A$vK /w OO ugK59C =)
,!)no=e&]:f `2 bPSEɾyOt[$YQuAH=1h_q<^0JQIrkѥD9Tg*In$6_,o#Vr0ǕIO/[鸯Tּ+T#B=oqinnR lї,<-aϛ-% JJ$7wh [Iz7 JB6
N$b+X
WxSFYXjOij4 Im+:W+TꂈT {ٞd~W_9qw@sk\[{r@a苇W_E{[Ǚ@ ~w )xmP 61h^Å̿agcz]CnT 9ʏE9 d w}v O iΖXRW=RٟTgnBϒAЀa| ,=|_/(X 1N:9*
d`;EܻU#+Dɮ@yh;EÄ
, $3Ql
|6ƈ!cc50\> r\>9tON*KBEوϖ rK0jtd::*#_Ap䑌Q.`;ᔪ#Dx\D+*Sy ͦO>3ybSa!R9g`kjElF',Iwt(wzHkI9X**ە_|YRgE
O]N}=k%
bĻa WL9m=#P"QH/=; lxs0L,dZgeup*CBϸcge##:Z6j}?Z"u0 !~['QC~ [b.R ^OB."e@Wy{CuBx%~qjON(]H\G8)pۛ)P5zrrZD8]g 2o:!܁7^]baoV FD J+î>T e<-%+aU0cO ^qYէ_oe复A 9j" +E, Ұ1
Ow<:cJ]maJ{? Sԙ
15'=3#w]W%/SXWȨp+.$8ӹXL>^⥼z
(FiW"ho{e"} NMDa5Mi #[EHFozVbK@s* ?鵞XyC!: U Dj
*틔g!ȨhLp&/,ѳ#%w~c
RI;ɉ z;Wr[2?,
ӵwxxx4>>DNO4NɃq[cA47飭VZUgzF~^q\hU@'LtU.GX646 /ŷUPQ#15W@!yct2@yΕ`!Sľ!4ʏ Nrv!9~$[kSgcuZoF: 1zq
[ }URT
֛z&qC a`=-XEJq]ڥإ\N@0ki{\n4۔d"zm=<+N SC#Gx+q 7;[prZXY)xuLz ^"XdCDO o1I|g|19.LQ(BW_Z+YxD\krICgעg)YROf\)u jʑ3aCyN5V%n1Y ja䛧84_GۀX_}t:&"]":H&KA{Ӣ`ZfF}+ RVw?,o|
g E+$
K
ΑsI2;`~aRN
aX.k*>)X/rT6 Ts)MTh<Ȟ q+R.䘏\/Ҥ7ת懥 %T&:Ft㚹 &gFr qtf#jioo͠I;O fg.n>GkmG0 Ig3^ꗷ CP0iv#t qKn"A&Fy| C Ƚ:Hѳ JǼu 'x BN;RSa [93. W3FJӠ
AfS9b _Y|®1Ib>@jZۗYv^ #FT+$UΪxzQg K/Tި>GwFRu
iܱqFExǟRnɒ
Xd{2?cPu3!**펿WiF [3C
#8t{T Q=j9 L Nl@"|ڳwüӣ0}_eEYT&k@AsFXY0ɲ~|=Z<àD9ҒeZŦ[e&Afs< ص01 9O( >| k;5yԃ g2T*pcSI
H}:IM1~
6㇜`In,{|qp{U#(%
(lxsh\aL XAj|zcM5pl@7+s|CekQc+ %۳v >r5>w@K!3i MWWp끏ABdMPnİ;el;%}#$/P.Ϩ5U]bU@:I$aJ1*
axoܶ62~,MeqL95NnՓN|k~#zulwۥ! >mb/8 5;t~I sa7w&kiĘ|n948Up%EiǓ*S@R ѩ1_S)ض>͂,V&+3]O4eԪx&1]'(l*a ˋGE Ko49ݓ`>1g \LFNPp[D>n >k /!07YX/&")@3EyB?D~spVqU|i( CbFL)p,ϒHMJg ?fxHյX ԓvϘ%Lݼۺ[v# !}J{7[RbÕw{Q`
ntyYb' B q=f/d\bի2RO,.ծ¤5Vi ?D;AXR'(Eq
9#^K-"GzLֶ 1<?Tᙒ@Bd~IF&
KZoTퟟEiU
S-W$&eV/d6fө{[.!#ɢNpj"2Ccrkrjɀ Æu qE;zK-?fqHk=x (1T$a[̴OӨ#N :qL;!9U7NNL)NarN%Y eA " aTCptr.ypT@0$\R]WJyt+X\uFSݧ(Ȍw> JK{Q-^
zb %C)3.] MsnbS<Ӟ& 梸9,rHH5TYczа[Uߑo#6n4b3po-NDQ > @쀑ݲ<5h/:>X)+E٣yJNh$ =D9?uY{* mx:Y,oQ2XcY5mFх-XH4+q5ر8VJ":N` #J~aRFF] *FYU9>]C/]fx5j3 1e&5ca;ML5 .["$1AmpМ輖
jb՚( HR!zg;5!/ZFfKFWsA^
q>_@ؗ䴶ⵒ͡ S;FC_Иc8+8 ]R I2L vDB8r*CJV0_ԶC$e7;ަ%']A4#/It[ve "E_YѴ
iq]p>ž5b'/@u^}
a y= 3yG
#g\d%
/ ),#Jg m 2oy`8rkX
J'x
^_xe<wQ
E͵i$+$bRo$&K ni̘Iu>~rUۢq)%,t ^qSF%hՂkth\.;AFȤ#K伈%ȼ
IV4,8I~? 'H}ƉQ$BG|¹Ͼ =#E Kˈ;gj_B)iy`E gb8x Z8$2&JBN н>T\\{a#u%)S2 CxV$C*is\dz&j b*57xe #C/g@EVHڐr[1шƪ!B,9(!_UCT c=,4S۶^<٢zt<2fJ^? /h"wO :qiD \2 N)\+
lYS/Bf6ŬMY;-.?YGԺ=ě߈\mʫ0prӖߡwEYom$\1}ո(h#sy| }J̠ cHa h Q s ~.M>U!S
i7q&.bX~?I&_D F:WD%.~_;:߾H]:2O\ gyq S+V8'1Ѣ**Iʵȇ82r_
bǐάwGSoKf ;
hO6 P7o+.JBCA4S@B}x7e>J.'xoMJ*Lh4ӍI\:w~هz# J&G26Hn^nb~N&Hޘز~=hu G'+@^TPv M?sfԶ}{=.=B'S|ɢx5:5E1;tp|a`'_r)-Lz4M|m'l85<=ze˷7lк<% /Էo<>+ixB?~Avʧ7*7N8@wsty 6RY9iz(1H۹B0.Ez
'9Ű\z4i[c>s̷@&' bZ(&59o.XìvFHȓq
z9۾X *u |;ЂiOMŏ3P:mc 3 FTMU-
> =*xŬx,LrZEp[Oqu7j53ݺju
;1N
Y"eFp@O#-#JCh5s]Tr7
snRVyC_h yH#nQ
0Zfk, /pCrvb<#,I M凣="J ^b*|\"ZcEWːdY:c-ﬓV%V:N)B,wu?@:Wb }h-WgP>OFi Q/v >#A%V*K_"
%rC]4'gn-lZ;9OjvaMyfK*ҋӭ]& V %2>.W=hWjԻA =B>4$\ڛA[P>hE]dl ?!s;`lf~y#}8.@[WuUWE_>;rπj!!8&\vG) lQ0FELG 2 Bd5̿~_zh3KFwX³Y¾ 1MvH=45T.4vڼI* вlx !c4h(5~
Cf+r"Q]ir!{2\n_5!zv;?o+bvfڸ3pr"4Mշ4Vjv+1>ի\߸ZAp!^H直 hKeUM/pKNϮ({hǙi ɸ^@ F}^Jr@u_>[S9k2y#uN҅۩
j
cҾdr!4 &xw(ދL8`|=ZdaAm|II.n õpp Js4L r|3YUkRP˟tP
3X ˿-* Rtld PŝhQf)[i%è `Bi
ew5 PbA3qynM~=PCi0GBJL#&6`ْwcBSo @03= a{Xܜ-Ff|tǁp4Icg(F+wP5q~Eu2sCfF{gʟaq/7X2'S5pɭ:2sE!ｗ {%YN
$ަft="t' ͼJyظԅ'MNg yħ(gLw\S 4>WeI$BYBS"Hҏci=ۇo܁4x uoĸv!lWUͻUCϢ (7-Ά 04
lzStu3t/x-]ݳkr$9*fbw J٧},0ΠPpM0v>P5(v-!{wꇨ3IL/* ԣV1cOͷYTQLК TIFyLI^i
2)/E-2D*ȒVnE PhB?!ne/im⍠kh0[J O~֗<b[{t/q[EP *Qx* Ϟ c I*n
j} depHMXϏ0-vu# l2P ͘k<)5KPS}@ceu
W dQ.fe+RtYzF{*O"-He
o,0&]ؙkk*27 ?g+#puayv(}
.WyKg Pxے#1Fv-S{JxkuAVA2)\/iie4 p ⼒4 d USO:$^ʢ̪Zlߞ.VEї3](J:fz|=F}ppOl<+MRi7@P]H)qp+TI7F5(1 QB(O2FEt DS多!e߄Wr ?/[R=?u_1ZA70jg+l؊x @RJdj 74]hhq"q ' '/`Ò熛'"
Vs [MMJ'P%E.A*MKiJ QFu@xeuҴBCVNNGoO ۽ŎQlű#M[-2w[`GX>>1/4ـQ1a{0Bݡ 8Ay
@PF0oßU d,1P`
B[8dxf G'` ;䃑@,0+Ub鶯S A f=]Z*CR
ߴ[n>.B&q2\/Lp)0 7 ]h{9SRNۢp&Ӳ}':`n.z@Z\hX,nC)8j47 -wtfhKHsybb#/RE'5ϮW~/ʶse;cMbIuұ|
ɟW؆ /r-{TKhXrgO /;(QO9iovn~D(L1JJ#,\U>Sq5*NvȟK?]ZJb_t I2 թ樆
W ?'H S44&FbwQ)px4[B7F]
J!T^]IqpdTgk~@2`Bn*cv|NTa m[X@. A02@υEvC8 Qlۭz(
<6]l^8Vjl[+5+mV }uZK>7
P?{-|mZV;f xL~`QCHԎ#J4OF!ZpH2|gJSH< ?!`qYnZ' 9>^Py=+݇ {
tu ՚r NR%iQhƠYkEnMϴTA_Vd!g3Vg %PP>'d76la~q4BDwPܿއ6x&xf^ٓܐnL!ő٨#^,5`<1>y)ɑr$d0-0c[8[ xtHOmqQE4HyI8n -<# @jd̶:J\}ӏ<#bkW)]/Zj^ntAu~^H Cx̡Wm5
ЅebJ`yzxm3tz%H)PJbj o>n|;g yOےTKY.T&БܥeMZpb5w .0 +(G,%tDO '$t(ϗC=5LĚ3,iMow` ճ0~irILM pЛ Qe0}.e *ad[PW1 @V·:1 Vv@jٶLA
n-<3EoUNͅ@#3Gq;q|1Nj
|
9&#L8Hh |Vbf'*vL^g}סn.ưa/BIT5
-1jO^}J6%T?ϊoHfP㣬/״|ɗ4]L;O\s'-~AsY V"K ~h"C@Z.U@Wأ-o q/m-aSFR4}o'JQvc"3l aHXܤB\H]լk;0z4v=
˾;Ro5] ncY!o2H/J`JV&zy~0R!`8 eV&R I u\ 6)V#UWm_>*t9+JFLxgd;!Nf{Kfc3|sYUĮy.DUc}~$!= Q ggp! s] 뾣2ASCcZ%75xiaߍ4)ڍ6y;\!H*ڤRwO<j:sQ#G3PңCn3n -j*wtBj 46CPCi("7el¬|nTnuUL(S Y[MP *n|Nao? F#B[ O4vP/L!Jh$;xs){\d+ o>u1M UP (2tzM 磿Upo0&a F8Mqsn
&گ^x CJ!PP!"ɫL~eMJ3_sJ 6),Z?At`
PuV]K n `eW';'
~D='U{}@^N# rMMl0 ~<;!xg0W tGV ULzDN,
'BuJNLquL^U0nramjat1] SZ6BZڗ A,rCp%0cy=[d)Mx{/.m߈w {kBXC2s%n7ia{O g.-l$~%,S7>9@e
fcF'0UF N̂
)aQ<}A @+LA7Xvbȭr'NGC':ByXYmXﮠ&$h5}9TdUsKgt?T)& "k>ҖrzO
"Y`|'$%|FFZ5q.ݶİ;)DŦV6o}qLDl^+ }`1N^^Br~Lf??e=cEZ9*5{jV:%`nXb$
̷g [f|sMU*zW &e6Kf~䑎#sQ" qPtBQ+ǥA" 4^O WOƮg 6go7mY cvgVcS4R1lwE媼`gK4hiuiƻS[¯GyMnVS#/,B`dXGS}NyN[b2Dָi'JÃ٬[mͽfgs1#C C}qӶJGX6Bm s@BzJ5)r/`Wc_q a N醨'F3怆ћ[B|!8;9-X ]@Rd&
_ $Zζ Qk`_fFrKtfe۔ܰAAeu*=GٓQ_'ъҋc d;BBN7=(3@& ep(KU X`+)'xhQ
cN7]-)!~xE8MJ$^` R|bt`)&wq
npP3) -!g?C }9Ԟ8ͤ09D*(@o%2Wu>%ϵ}3]Ж]mUGWzvAμ?E O?&kJā^p΅*I \t Y'EZGu鶨XgLf+JGBI5 x
S \#ܗI㲠 Y)D5=un q]3
O>T0Ie&DIOF@Y6@TC$8+)①K8
Czp@8w)|`Y I[`Xѧ9K۪1c Ea
>-
mEUʬJıqX2U-:[CR*lڰ; |Sz<̓ տ|,9409I:9cb
s{ FSO 4U*'Zo/Y/l^B SjeDOu%]9b 4
Pw+P
s,ҏҦUaỒnDL, S+酱ӯxjkҿ].Q 8ow4\< )i;5X
qY_ۂsۯ]ɾ~Me_$"~!I(&$GE~ F} Y$2D>LM ^# ~97z-U47GEܙE9꥟4 ״;I
dڎcE ݱ}lp$VfjRO\DIhd,4mH'M[Y46>/ (fzGj[KfYJj`&0y8+VB_"Ey <ʑt9چH0i}0o9S]VCgم7? R/ a՝qz R潙t.@&r8Ʒy&һ
pZx.r~@]DT^h_XU|vc7*Z;T_U`YIG IQݳIlkIW-72A{3 dw7(ȭ4mЏA8+Ixo/.s6l!¥ ޠI5<[' *Az 勩꒹\T\\"@ 02D
T j8 tg,e
3# \$˿j+y&su gw7SF'Qk[F$Nـc,;O%ˣ,MU@f7NP,M7\VxX$71:?fH_!Уvuf/kz&:i- Y ڡټF<IW}ʛ66=ְE CBb G5 F zlj\k1[\got V|* ,5[i켤;jܞkipX*Is
#ԔouWPQ;3Ҍd9 ʨmz;9N p5;LI;+]EEN{ ]T;#44 r^{It#_;"/)U X>˭A ָŬ"s>bpuI J03P 8?
QS$ <
_8pE#w 4p~y0g6iMn,+\*g#Fɲ0tH1Cg-)9%PIu:(ZJ:̞ܩX 2|U6r;
\j,-zl$Ha' a`(wy:"dxS|FDgDaHY@,lv}&3[8 l("^S5{4iF 7䪖 [_O^tkzT5nj ~ɶehk}V9Y!Ĥ+8xlUi;'5r{ ^.mZ8|-)c!ޮ Lwj KOC.A[q-m6^ͤTH7"f4>wCէL{=*K,#h$rt}ׇ^F&_:
zKfv -~!7 >O1_p-R 9pZ4D'5--8,/;oթ=TuK•))V+Y<$t91{:T
NT7g=BZ^H |$ :˕>$% ;y<&5-"~:j-tq㿁,?IlSOQzIz݀ft܁{&vwn,J>%a7 IWE ǚScӵ fIv7P ӌْ _ h{&%rr_6uɨ] 3S@jO7($x\=ڥ܅e
H[9Q)WP>>n}aHO`x bogl{ ƻg=~)2P8·`ԳQTffiNcLTb&J@?7j:cS2م|t~L5J B3Ԡ/Z.5x4Kw Ai2{4b3f8 fqQ:g C@)>`F2B<;iͭƷT4VNDE=D8ME:G}_*?JspINղ(`nH0K^a^ oϼ:D !o>U3%+>U&+#DX}R& +BE"D;IτMB0` k\I*zzkL|ҥ}_܉3;(pzЮIB & E$=C*hjXf ByGG z2p
3XͰ/TӰ
M VﱺP^ŮnTTƓ_>=
?1Z1a3nj3@])W*)n0Z3BVg/ ;
ںc$aO:\jeDf)?C`
O2tL]R כEC N USK}gE*1ak[.T#⯵;{ك*e )v2$7c#`A5K l
Cjy EN[Ң^7@뫔^ ӄ?T>pnvq8W]&DjBV"zevEnJHneAgNԦy [kA ǀT74qbkGBz rzR6 alR2
3-7Dq@eS≭*J'
e' GJe <1' w1E!i6K>MRTm3Rcy`|z"*Dp9u/ l\1qv\l
a
Z^lR!7WD쿡>Nq߱@/+͍:)Tq/YRsiZZhgv <[O/qdՅZ#>uڵQH2qzL.y إ]$-BC\I}C)lw<hv^䒏 \ZIsa[]=laS ;sP1Z6VAM~Yr VnKʓqg$ן9[&^Eif#u?<ۖ447tWہYCNfLq2 3>GNqșNg?gk敺c=Exw=^jDAze-1ܛ9T{ڐ()n*[ZxY{6Wӊp1RR ^W#s~ucɗwIe`:@}mL䚞6iZr-^hK/pMvX*Zs̘7 px eGċ-V ;6ZZ;5CD`ybܽ5N=Np-^op3(O1KHz3o[ Gڋ4=~N&
[[S3G rw*{xi|HD3RESUL6's9v4 fٔג4TI(KA<YLV @A vbv#L{No|ⱬ 4q,xLk@&m$oby v(l.h0LnEK ~ߣ)[SzA?|SO=sSYƆV7 %Dp ] eDjb&$؉h$9ׯbqGK|U; .C|QfD'Mϑ9mɸFQ mbE-ƛ.'i2%5P>m8
2CjXuHYtk4T% vY<]| }j+f=5 /\%tVRBaFg6r&$w
Dg{wW@uf ( Ɗ}$#Pt"j/rmz1縛GWޘftuO |)& ms}z/"LH; XzFݠY`#34y$ ؆Bp}I{ g` ΰX f |H/^jfSM
4W)ݿi[r"*?־Uȵo<L☄D o L
|{]Qrl)i 2(ŏR"'Q-k1=W Uy2d`k,:V"&LKvSr f6udcx(wJ``#) Uh+u#әӗ'*KC,\{O2&3PEWM xkϗah)!@'~?;y6s<v8XM|ap܅ z#bSʱ}le)rvq(Ws.ʉo4Zx:I MVS`B['81 c# vZ0t|p7r)ٰΖኚq@ :3il$88rӲl{M/JvAB<=ݐjoG.}揭V5{ !vWgX`&6?jEҔsH@Ԛ=66zl1\v!ʺ| BBD+} >7'
O '`'cby2Ȗ"?d >s2g;j݊D^Ēj
I
R~&zge"n3d:/C+jOIǞ2 rvŀq{GReDk
ǻ9}ܶ
L5'A.18dBme.G.N}
9PVDcP3d~N(̰e<{蚘 wӓ w7`4O='>}^K1.O=?&E -"Q9IUi-^搧/4 iV.>0e v?8
d=A9ݎ J @% ok
ew^PPk5O*H-h7Rnjrh,5RGfEBUV/* ɚ;y˼}<W
51/NRӝS$ 暫 QyDXp> Ǘwyk-> ;5Sn_b{\hi?JD'¤ΖQ} }"Jg;}a8q^a|uS< uDT9}քu
V+dȘ>lb-0h yFYŌ.вM/z zK YgIq[[Z ${٣yQ6112 UP[*
:[Mۗ
wTWLAJd <4; Jd=@ܙIn~\ƙ2 UY7AO߆# C _]v4@-AycOVGJC[&#pYQ-%_= EhS@ K3RQy5v{xs5lAR. pC>R R3j ؗv6&LDHcge&iy /ZrLx`#Ol&Wcu|^a" 2N)MዒDgx[=
t8 natE79!ӰbhUKfw4-+h&lup lJ,)Ӥ+t5%ovtWCd _?eN8Fhuy3{D>"vK|JX7\#?{T; >T'quW\:2 $N$. ^gԪ{VQb$rt^PpH뱂v70Z̬rQ_q2$ ,Fv ;Wؔ :CX L : B] 8>J?֚4rx7pʻdGdF3Sy8W~L*7]~a|FB0}IzZ=v lR06'Q*@ jVg\4ăfY<,VQ = ^66ci/ab(cjݒ̵Hu9A$ )7` |c(ق$S3JeB%%?^ ůdP zZq\ xW!TW:VǤ ^M3L17DSZS9"7=IvSXwp"AֱZ+mjWZ ;.v
55ڼp Qk r˅#1f;OnKW̻^C?]NeA90 >@ȃ]m E혣-%F4儩7s4]Ib}v6Gw
/)0KobJVؒy
Al nG^gCLA
qh
pQWǡ5h@Oo duDé{y xG$̼Nbah}Wm죣9(+?bX.O*3ε QQTR| Xލ,<3CBG*ӫ$tƻ t,zVRxoM(0 lJ`CyXj,=4dDg,9^,Y0,
+(l ܾ
7aٲv_]!r7e䛏
p W bY$j2Ȃ
,' .>!['"0NW|IMّ2(|iUlF ɘ 88 .,ҜڗXXoZBD>iIWM Q̂lLw7 H#<C'Oi 2ō 7V X"qfv7 RyWe0H}NQAɭl"B7hq =uxU@d*7v^kl-x%.Lce*YeK W}%6gG.yX-c t1ڍ咿=S_z7g 4w0X2N'
vx/5&^m#ߍ
jBF໒<8+
*9F
XvRc_E F^ xI݊Q+]P[9 ?#?ݪK]!xL綇fs|8)4]eΊ(B -H?3oO5 >LQ<ȟp6{ W{_Oz{ 1a,4]?l>d,b2Rasc, jnjcr{I䒄Qg"hT
8cy)$H}H*@A`Q2.?#5e5=ô\U1VR3KzE:讌9驺 94m) Y$B 2S}"W蔺q_j`\۽r gҋ{-Dc}&w }f;BĜ7/[',|%O;?X(&{m\?CKp_ptK>0.X"0 XCUp_steҩoC5>@J mX@ xO;eItLj{Mw! }gfs?0~QC_wc͓#
;9H)˩/布0P* Qˣ~uj9R: %2S6\׃qijq8CS>,5[vP5OviEt%0enK#Ce1_Jߙjt^p`5ZUF
.EGM!JJB35fu[],GZG\q]wN3,u4JVn(/h謨$!V'G
<"Sһ/@۳06 qt4uA0YH6wa<ͩ?+V/T{ $փo#CD;056 3m]js, Xv1XH?1! ݊ BgE<p1/Uc&-=7o'gd =.R6Y3b+̅wQ-[?rO$䵡ʸ- #:l)+u1zBYUGܺ٫ ٲf.PFk铺OCEeTan ?
~=b\P=V[N~j@t
a i:mB~V)|{ tl2h-*
e)qYv')me{Rr IdK"Y>vl[P: &JU0fG FȯRr`vW@ L ~Lmc<}B]W{BӐѶӚUQ'bQr.
b p6۩sVM11D5uSg\m~z6ubO> N>U4Al;.~, kw3Mm"/տBYU<Hƿ8c
iqx*}N(_̭䦍lGK6r:
PU hmO>@mC2e `0'Kqh`Iw}*9+P%D`ޱz \m*ܼzP5"-Ylo>ϒ^ߛ1t=QEv6ó=@' NJF$8 JLK3uۀpS,N ܮ<}`:M@L|>7VG辤߯XQV( 27u
Qg ז\%% Z ƓUdAv'amB(y e8>N
#W
,#&P/v=es5sI @&tlt3ﺄVsY'ӾS
ex/h j
5 Dp
cs~p%*(K1zrA?ԕk e4&5r?UcdƱt6q/j~F tNJ1-ed!*qb{bf1A cqHAJUMZ HJL4 xoXϐ3e0z(П0X$kL@nȎj-=c2
u6gb7\Hh04eX?hƤB 5euΣ
5v_`Q6:RvjSq0K]:PB4D!#Mab-,zuK',EWɒ(d쇳I08v+2`{X%Y @G[-硅YP
F}dOKO 3t'nvvėud?SW|Oj OU3a@6L_ޙ 2N{bKYO :jX=zkV3~֊
#dJ䫎TfK$t `|$$q itP
8Ov:ēg&n^Q?K R"m@i~Wfe?!y`b
cOqM㘘8rH6pe^["Nfg۽klF55![íKYa*`Db;/UY$p=uw
n*U?RۈbX ,o\"dOȫj\<|NIN9} ƞoI1 TY:'C1I8ڬ=kJə7 6]t@ B)iG l+& ѕQM V JCA2+r4V^AP- _7v؈+#妣 ^
-9LKJ{M˔0&Y{K a%߃(GASuD zaͼ d J[ F8hwFU)Vt9a}}jUrV.$Pέ mz)
o;?:4CU T-A-X8*, iS4R P^$=c
IU{v&乄.1=j5έ DD#
~ 6 .0d
ݚJ7ܜ9
DUIJEq&!\MOrH<{cG
=
>}=าvTrg K.ddj9"ۼ]Qa F@)*k nU)ڎ|dpTg4f
E h/Ű{R2{uW/Sj\4/ؾu^|9(sɫQ̛ykaO@Ͻ !O*Sw{4
V`D!|$2ZH-rA%= Mӱ1q}cO4) ҍ3ԯk8ͨ.7QX\=Jrɺֶ z8 GIszRGl2o 6"ӇLʆZ$0P~ydu(:BT^ 5 EImb 0[XFZɲx!g<{Zd eb*W( fb ^}cf+"K]iA8
IF>T?]*PhS4 f[7 QH( ?\J қ 9]njW6Mdg.,BD>FVs9da]|`GnCҏI]i|%b>eK1# jh't0p$&a 0k
%@c)Tvך=KM?''(?a+Qg0lM.'ꂖgdwqU@Y7>x ".^l٘y
Oۦ~b ([Nj ԓ˳nN "
]lۿK Vc ZPvQ1b( / KJ?G W{ 6NԑR0 x, *VKDUZ' 0VZƤG2 :/k2{a!'UVHeS%~r\}=7nqcT; )Ss[,\sՔQSv4h@
KBA7s[1L_HY**8D(Tm m)05FmX";+$K9 d|uk%|F?]Kr*A=UOIw{.+w&KyB#NmRԐRgwY ?Mhn3 w)P6 %PQK_oyG6Շ*Mpfb=7^@ݺe|9ޑBہf̻O J3Jh0 G܂g/*$u9&UTWyEj9go8x&l1; k$6'̈́\Ф(WgU5ea+I쓇#X]a|<
vǔ M[:"0
YGiЮH5M .hnѮWNg床[fO!hAw|t#[Vyos OQen`%{>edF Ğ'ˮ+у;z5"N7^˪m+ȁVjEi 9!+: EZ WImbq|`ie)FлpITjq 7*a픓zn{` a5rV6}^B
ŃqߊͳxDC%Tt"щc{c){%5"`B?b,B#F-|"[[H梛V'RO<8?E?b>L09 `wtM {ANx;k &s*@x@ ١VB2N$Up+_7( ([i:xr{ZxYW<ڏKYf+^NXb c[7n %A@tC}
)&_gG4I 7-*i,O ^"6^A\3 Ic{1vMof<f!"5Sr9UBr@ǿTC?ђ {oA$/`v>(F,2K]fϷx\yOEF #Hb7*
F~S8hƆ_hfA"gg+Oĩw>%,NGo!*5>(MD8/Vڻ&QLTPO\D U"J(~6 v_ИW9Y `^;[m1D waju] ;u2fx =('0[:8
ѱT_{ JWΆfiHlq/Qyn"\T 1}5
3Yx .DM: ~sBS ZP5 ! e3U hfEvlKȠ~0 x dj5^;brk$k0FL|TmQ5 KCB.; \xG !gc=TM~rmܒN$^tۄIU6@b`bܥ9̉G>_!ƁIuRʠkzrø_F{zT+kdfC|My
/ǔR=ț俓uT=R#1FhHDM Y B9rlv cn0YDQ?6_ţ 6A d}=Mj8?|@Rd*8 Ug#%Aўh0@k'
@
e
F ]k]ޕ q&]H2o} .ZULG8zF(5NV{eC~~k`2zE4fLM V+l 3VD7[jw3=h[Q'ˀ,r q#yHpN ?
D+;OXްª`Ȕ o:7y|7k۹0KX 髥sWW2 )FVF+N|,ZBszF%oX ȒĩF(
.;,O;`QF0 X +ܯ6oC#'#Clkyb \{ܲ91
*ϊM1|lXANV{^AzX B_Cjtc$xQ|*5OBOgf,h(lk +J:YwOP07ɉf#ꌘ7Ѓ^wM금Gv%- `\aL[J4;gYmncu HT @ZcWb`7_
h@2ĐC*y4IZ ʜ F7IfC1p*A19ANW*.,r=Nh2wъC)Z*b^SK$ٕS&lƘl@@7fA+aZ3Rؐܘk7|kU?}z1QIv<U>]8@%ķcFmM3GZQhMOuUTuj|ES;ca*oFV_SR/%QOa R;%\ZkH7K\Jm?k +bkű)z{cu%_I$F 7 Dts!k_[}?u͔NG-\ZѓvE]i؇`P k?wA͐l.mz{ Pr誖|C QST =(wU N4.ֽ
Ž
m&KviN5pn y-Cm ]~ltT*]WigrF3 nT"i\A8i EH+IUk Q°
Y
{yC:;Y{[/?\aNKA͘[Nf:t5 GHvS*.9Tʶ^WNw
E1u1,GX S9!Z8xDXN 3nՔ51\[WåtcWc{*;_m@%E|O,c_dkh[!%& N$Y|fUγc1 R^@;["@V?ix~{~o[kGc`,
Խ lږ!U;$
+V4.P6u>w\yK9p߃(I̵7X迒 Q4r, &5˩r
~(l's=MzJxXQCgPf[Y@j@G IoIoRkVF$>aqFp\Sgqc3_x`C/
ƶ.͑ߦJM.jǩ#p؋WK2u^\v#̶ ΰ=Hcoh| ]dfSw˓Q T!C&=Ov+77 w& ĜVM+ Q/e2'Yz&
O&{Ma#1buOqSm ±[74C9Dd6²>j~^GQ&f 묂 SdxӒSQ%tY h]"e]4
vW&X+RokxR< A8c1A t l Ik /ހWvby;͢[P>S'!uےh*OliH\5@๐?Iub4Mȉ5{ gw[+,U}'LL?rbD p@/j:!yYL('|eo߃ s1Ͷ0#6P=ݵ2mR*"swuA/Q
#hM .7>^B '5@y Vii@+~VS<&qy%^ouQo|dA#˻G UOC-hp <7PБ
AVVP+MiϺ9 ,4|jCrd~- X | Z BsTo~ND1sEv\5+F k>kҷ@
]k|'ߊ(!?2 LiZܓ -cҹH@$8% Bb- $j2cTfv!}ssw9Q 6Đ:"}ߙUP8Cn3N`f[{}&+J}.FK7K _M^D *`ȳu :gi@#P*`b
nTvp8q.jDu%Z}ݞ_Q !?JKbsjxP1w~:ߩoJJQJW!ݠhd_9 }9غG#ܷq^s 5z"ɗD.Zkxg]5
Ǩv:4@I ݄ywd_u7=}YPa!LZU<= 4 ӀO Wy@uQE"P'3vQA fu1A[ 8oK}jž
(%'TYV➜DO^;GcóiO8nhOǡ@#贡Dx&.b5[@bCwM5y,~,- xY6Hnmc5 k#+=6@ #"K@̵4G^pGOd)"A*e__W7! d#K+m _H62o㘪z$D Yc xDJ
v!D6k?KqݢmxPh;MTx%;X\#!5@kq>C>a+ʹO|}\
-ޥ DwF3L Vrܢ{
J`] \.0Uq8OЇJT:9)ŻSƫ^HM4/jWeR; +SmVe70g67o
eg
wnTEK &Oh÷a:BBT0ؼ&SD@~mXG %h 7a5!wiY)7knhɅJQ>u4CC-ܔWVa 醢V ՂÓyW,(3#/_:ЂoOqFsH. \>k{^a
M
>
;=R i1K}(fóD6UTT!ɵ3. w"pRdUjsI3Qζа7y.c'sĉA3.oobKIzV`2%(9t?w6n;:0"H$2tv f-C͂ݾNDa?ޖ:f@+#f:뺬l]
1u-uVG)Bx|zfFJab?4էZĬY~
*]9fOV÷zeK$ Ǘ!{
zuBxIA;6+P`% -% &_?9uEPbvD3-fMgNxxΎ'sXlDV}㞡C;` t͢&e<O
v4#tyMzǤۺFJ8OQ-{qf-)Bȧ,SBt)Ќ* \;g>J9-L`H*; Ib!|ܲw\2x3r:a_rӇ:^(ODYDAB FӉJ &X]㛁9qnaE̱dB CDAΑ*UN7
##EA\V >ڢq*untB|fÛ]z
?^!8Z1;Y;<0
?h=c~8D?0f~$DأyzH`2ys1g /3|O < ^
6kDNr $Qly
Ss1;(UUw:cU
ъDl+ ,;66^k_Gcӡ*zj"q"Zj'#\:bY_
Bv~=ȑ}Qؠ2عIr[-iJB,@6#~2ňN0vrm9)ː0-1rmE>~bTgfzfW
c`ZFNOaVsT#8OP( 4b{^
s4K1cT5#m~[ڮ+*7_"U/<*m a40)MڧYN dJdt S6Ԫ.OӄvѸr1+Yx"e ,efjH{o` wG C z!&.{ p$j7Kv
NvOq nu_<\&|bNk]r8]|Y2Clr~3ά{ ł~
;s|=5tQP٠dB97L]lq3?pO'.;v:*
~ˉ;t|1yq8oZfηܺ 6jo5oJrjlB} >ޔ绠¦8WɑnΈEMOB}
y$ު=;Og'CyZ3JpД_?9i͟: IH.[|ovX kE[R*ԩ XY &d j& )K`{J4;
ooOylڱ"9:6D:ʆl;^Άh껥oAv.\#EMV)_4
C s us;aSS]y; ё\h)x^^'$ʭ]k]a!@vg:ѳg_ Ucqx 19 3
tHHDL"fI[,ZuJղې#+!6\ŚLzkk"ŋR& -sAxcvNdLQ7O>|m:eB
Ԑ<rDB #"V&+:ϱh)w85"1"pm ,{vnVL\6JH͓^GbOA)>A#tZDRa:mQ|膁A*XIK42f;>"~ZH."s[c
3ifuO1 Fb %o/8l5+e_㭞2E.x3?sLZ!ԫ[xKK8jcw1oׂ7Oc1O$hg Avn cp:ɦNP
6TMN6% {jJPMSQ5h2 YEn l* ~&8Qv:>ox|4]dhY'Hkm(N|zXh$my|;3w5S5393&ůmN+XaD~-d
huY 8>i8Ecϊ\V5ʛ_ƺL'FxpWD;)b'OU錃"\[ 3c|
cZܼs 1Oc_^
}٧CjL[ =4
+t6ٸ諰1)
mMz;Oh%~ךω?=P6KLOXU>:z5l/,2s` \? a% dvuC*bߞY_#PlRO1g3Ta r04l|= ƱSWMԉӕƫHTUk.i4ĕn|)!OfIreO@.[kYڡ>YW
> 9RGv)
lj)ݧĀ`~N_d~+\ٯA-!>*nEi952ScBSSJ*7 eC¡>[?wHT)M_@:# Gr1M6lBj1 ZWjYSm?u>J"Ne>0x0䎠3Ad$~Oq,>y\l
8s ؕ&'Qt[rY#m&9<"TAJZjׂmcH,;"=L}h#1$kK_=cFA-9EtP3 v
<*|6XV`
sh[jˤ}MiNL~~e&[kE&1?cz\ķ7Tǘ* P[ʾ1HM};P]g^Pj76& TQҪPr *5';HMpvTd 8p=̝}mVm֠1uܥ>NJ"! ? rds8[GU)Ӹ }L h&9& `ݽ7i
&!̑Os?ǭجXw4co[sS6kW-:Zit2dlwaEaͪ\'B mtX}T^@ץ\&r
b*ܗ-YLvP6
**`yI p(&-.X0
!G=d&z}'" yu!@= lC[1V ;$<ܼllYѝ&@U }c㧊3N%mug
N`ք֚hLA<3㷴}NL%ŏ'fXx@iS\p2Op 2bO3(d笑>U7/G /@l]1NzOmxe||;U-_
mY;Bb.~ςWBCSⳕѶU
k
]f2מ ?(VoZ(`J 3O!xoaZtYC1 -ACZ$acsX_dUmEkՄ 7Έb3[:ԛP4֩cݵpr4.'ґխZރ\(zVrhX&wux 7 n3
;osH~[RE%P*Hq܈+bX{pk L=@7eKyO&2 MW'apD BY5AwZD0DfºؾUn,v1pT͒Mc~X\weiAƅf*ei #ؾh\z߈ԕRuڥ`k7oVz k DOlSdN׀l և(OHu&M 5 SFԇ؇L/Qb&=R@%+kҝr]x٬HQzIt[Ug)Ҽ=M>KۼxC:ovt-![(#Bu6
2dk"iNкƄY\)2hsOvd%ы mmd,>p^qx^ fqTmR ѣ}O&uL0+Z)3
x8 ;
z҃ e(INv[(@6z|,xgB91UIktYG];3 r4͂+v$މlzo7Lpj䶈Te= U{PN{[Ԡv"K5s,OR27낒LՏFkLJ(l澵hFfG
^$'xM' YʖDo-Ck<ᵀ쌨UT@Ըr.Co rȻ#$z>Y{Ap Ԩ'[uj+1bTlX
!>
BV
LG0Ndͼ5`oPD{ &_:MxZ|>] Ik,ӂW4j%&N}u`jct NM q槡e1FC;FY?=,vm ktC9 +mo\ z@ͤa_)gD ߁;.f%J$7JC# Pg Ʒ۳% Я Y w -+pk[R$@Ez!6(oy M%Gh sdV&Ӓq>R=
HWm0)oNX2S/)24"زk?נOoAN' @kaK]7}"B|xCϧzqh4# vW)q}L׀9HQa9es!C.FDx:( d&4zX2T
j̎eٝFuN s
h[4؎hĠT̪*.f!_ٚ6wF{c4a
v=N)n`
ЌbBԠHr-&7ԣfMaI2iQ*yYR7QU fTI,eh5VE{%.j#Oj_bN 8NjE JA&}0k'Z=G|uUVB~PK=yȋ
`T_~j"]UTΝp/7,"/`'@t
±R`2?
Z{7)vw i1 Ц!RcH,E8n&rA1]xEz$ >K%n1 RbxOK W%T| q`u1 ɵm}MB[%:O7 )9>o t?8!r8B/!!t^pݫީ(W=[ZKT>8A)R~+JwFa̸s`!i7=zsjV5! p >|&˳7tOm\vL@uT )~Oi F 1{Xʝq]uYOcLGv 8
?| 6uzr_tj[DZ vn rcw )}9i$e8|-ud^1ԔB8NJĨxplsT89+|&oN>}ؠPW wT%両7 ? dnē>f; /<@TL~J5ŘĘl&8u oB ̢*&/ Diag7az=(]t] oJ3Ï 52!+˱-nL,_m:>Q3#OE7j$ON7:;_x5+Ѵw=L,Vmexچ:5/7U3v Sg( ͺv{O7G /
{yhIA~Z"9 oDMW ƛ
T87P d$}qW-:O0&ֵ?(L댱l !Hoa_}; O.t aЈatEr 9ͷ `O%6x
/>MmϾ`
?ލ+{Ŭnm}@
"Rgc gpR\Rࡔ0*{XӢd SAbv:9@7`{Zؖu
VG|4j]D cf9\oXz,3Z0BN2 a+wGtwq!2qVChti_,EmwCzژvw0dQjB5#U\%G܆qn m['ߒ
O;
%?lRB1rtA,+~#o_0jdSC$Ԏ - ܞqUemlSo(D $-vYޕb'i= y82 fݿ9dfS> JϑulZ;wwz{ͤ8M {͉eȃ_:snf-$W?4t&0ْn#BPwZ$L[wE'Éh?x`õ7qZ
,T9G+&RF(8D
TaQJ,B$ĭ3 IsBQO>&# $;fv> نlX3Fm[Xڍg'lr악s\L gh' S49KGHuQ ކ{ 4`fCʎ
du00qۦi՛` `eV-ŗ b9Ro ? lzQv죐R1NH)㬨P蘀; J=su%PΕ%yba"(" T6;϶cvD9zTU@&B rt هdi5<o_;E*UTIA+^r+;#9iUW{B#O~t08
fi!a';_҆3}u0BCQxgDM#e2-r^'dG|+(kT.^
q2?l~'ɖ7*!(TƘoix&gf61?@IO|P歾o w7Qq}a#)xtwO fbAگ< TyI&^mC HzA{ &@cd=?l1[ߴ͓?ޓݯĔPyƊ u!l- eD Q@f!> H$DsF,5U9#ߜUX!xR]~'5pC%_" sͰ2=[י (Ma ~[cN`)$S%#!N%LAEJ(\*Gt(C `< @k;|Zc*K.zȊA, (pWX)?V+k->&a=@,qZQlqG02;lfckf(}n2"+8jb8DA*qufK/'$Oh'V4kA/ʑ LIO(*\-[4@|P6[0
TaGq!RZUHK' X8x"2*$o qUU獓ZO5#@4`>Ӊh$$3x7O;Cf@o]}U)J*̠;*Ad' ۤnCruJPR8A,I&PQJ4WMp` NNߘ˱{pr+AOEz
),uE>᧒S kB0R2ñ63s+$mpl4c4-lgun\gaM |w# ='u2 Yȹ^J
tti+(}oŞ}{v0>~[KNdt `O<" ^um,9R7yXN RvK paJ*E3M+ ,w:W]r~=m?A tHd6ՀIwHD>͂#5ї\4P
u+j+3 >FLѓy{6S85ʤInec4`h2pDkCܺXlC6N'c#Ls)hop2 %5Z,aX1:Z' cX[Q c䃅D*++X bsϬk?M% ֡x0gyJל1qGbJkt\$¾gf٥䴾P}V躲JpEʴ-Lt|9y.ۿ(ʼ (Os8ۛU(h;k@!5̽W,UVa>}J3wFg P X IH0GC] +Wzc
7iE%,R0P9T~܅"jx} sͦxI@guԌϧk4;0̭rDM 1Y㶻 ChWu%!jk[Wٹeqi vK? Et-AzlbaV!"J*Lw=~xg|}7k" aTfk ֊!?Uu/̞INNklpbbue~\d=øCfK^VI d
[3R"rtiteH
)h*. o @
6=U .O{Vv$8FLL
ԍ¸x56liђ5osgn>s9%` bE7ZWq, E@ M5L$ Tt_z(V|/ycFŚ2 ,\nWsLPZ0'cu7u9;p4s#d?}D vD xBOݎuNV]@WLsh"bry̓+WU
tvVLJ#`xx! W#lXy^A
K>SC\°u{ǪbiR6lǁXE]Hpa)IN[T<@O|>j
",_=?O5 (~7OH·cŀ|f(u,yr&Vyb0VaM-T_d. F Aod}aDg j+rFKXw s{.`@ 0 Cev; oR> Hn$o7L%
crk\C[N נs _l w bg);tƭwH"5s}TԱ)^8&'.&^~4*ә]5f }9{8OW NF~kO$ɤ.(;=)UB`
R
7dTMd`SaƇ/&};`V~e;=u}~LOB+=ہK̚l|\P m<pHWb T~cYV8@lpHs MY 53E rLR
m 锎ȹ ,cGЭ 5t#аR̅P]j M[{(-[\;Xpځ ))̌) 4HC
ׅD +5uO( zWE/_/J}yVf ҜbD]cXSsa.m`!>k Oz;ځHn<
W
sxj qr"sAWح sIIBi`# cS%l5w\
o nСy'a+^H|c 2^l7Sm5 Ǐ0dBnTL`aT!l)p:r5ðmMqэxڮ1qԮL!d8FiXAU% # sU i|KE`£gsȐL@u%Jz۱38drwjIZ]Z$o8Qس/Gr kZ9C=- j0fB
)uRb,9O+bO]@oe{_'fǚ{G[,}[a'4L @&+)p})X S?Psh`bpl_eF >Y\gd׆6V,xy;8}GܱS!#Vݖ 4`)5S:g*q(}sKצcԒ?>ˉ1q~BZHP Skznj l,; 8_X/6)i9iqtꭌ2»
_hZgUu a pQ,jbh_ !z^"2qD(ӨLg'X!kHB kQ|lޅ1i`omAh##f;t[ڔBTHj?@Nio4ec*X3 nt,8e+H̕Ż|4G
/ `doK~ [>|HKioh-+_$+.F[ E ' a^ZO g$kT2"&
.r9 r+tywp*#ꮹ{-5 ߈W)_@)/?X?)4RX v>M W0(K
v`QdR ?݆$,12G鲞~N:VY|z<`RQ+aW]'H˺~!se @jI ?8G6E6[Z P, 5,Iu+ NW;]3WvL%a# *,2:#<eޛb+s>8fuGƤ S}Maf.zpX.9\c#
k*{,:VTW{mWAha1 N8zMMX ۗ!{J
-"O̼"BGFq$)b5,) Pm-5@ՙ,?*!+.3'65LnM!r =] ɓImJbٺ8m/g;Ao&,gH *e48j
dbK4<ڼ#p>ωh] ai빯cE~&5PEw<IƷa- ng$R0vj YhG(ǝ?笿}"%9>aA4Nޢ;*$+閉
ar07ͳJDW(|Pdf GF9Hp~'O,%$d165cQQ(K2W;֣s]AKg F Nĭ9"Pr0J*sQ&fH=%w.~()OO;p*o7!|8+,VB|vhEe/7} 4IpO"ƣĺ' zhBQv~Ƹ4iECEJ NqU[I NqG)WϨCq|7} % w*3I#8Oeeq ^'J r-J=3⳪Cs=DOv2ȇWYtd5v77-A%T*x_Յص[!K͚K z/E_KU
ESN4 $5SI5#J.Z D5R|͖'oJWC ڛxxd&ۆd<'oX+ Xd!9lyЈ5q~۫^wrX(7X?:;PS+)`&73_7`J2\1
65qe6bY/'v;
|lzM GerG8R e8\+ H 'rd *;?שUf@ "[NC~xNiNe$ĺ:[+fQBO
?`>OU QA%>;eòvu ;JJz1ҀE\h]]x@-l/K^, j
WZ&KW֊與)
))F(R#Zn*"{ltGTzn|4dIkfI 8؝=ag 5`RbZ= kϭ}w0 CsTJR# Rд{<˽h.DQ,QlMe0ëD[p|9 &ftͲ
ː~m &mآ>ߏ~wMs&y!C[9.l@V|2Aa[ۂ3 $ PO AR&SK a5I }bE#9b
eCg .Ϊ0C훹wVˊ7I%<L> o7G?V' apccFiA 釅uX7uȃm_#bCA/@XW`(ɱĿ*Ŏm
Ѽ< X EnS
$tS-nv~AsyؐZD n;ƀTk鴑 T~e0Ft{ bJ0x#
K?0&ٰ*˱5|=x\/,T0&SVQJ ݾ!wRruk"D!6?h(`7Q~ۀlj
9c~TkVH Hqt uX2B&Cl2! ̳V"'}'JyV9K y\ Eu OofE@
e///4.m- RvZW
)A:팅 ~22yLF\@y23lFD7{O'
j+̾Oz۵8;8lw1N_i+KUȗ$1c#bG _5Wk˶Е&+( 9yŝ=Io h5~ZYFB_:{$$Y~odvy$pt >x>4k .͠ez桹}Gˉ-d|ifA )z +C4T1w%jxx2FZ"oxgx|T}9dž,h /0VLp!R5,$5e7Q38z-nHS
n (k|p S7[?u
uǵڽ`;0>-ܞ\
6 ` ˲R9Kb% +.Zf/̩E8cI_qŵ& , ^C{O7 PK0XY/B}`n6KԵפG &WE`_h҉ÉYmsQjNҍ~ u5vi:ReN7r}\uf*t@푿ش~6 ו
Hۇ6cZ b$$NMaDN3
ŏRZ! f4NJΔa Tv][ />]OuFh0( Si0:Y 6Ħ_)L?=̚A9
ᶒ *&@
VRLh4RbH)NȘ]t߸@͵- /urxˬՉCݬ ^b ֵL ?j RX50>VX@Xjq?qK J6D)[0Æ lD;*x瘿 {ѓ#..J631GԾ+LlN[΅ѨE p lZ ?>AK>b8~ 9fDl
s յ nBѓN#>
˗dS{
Ey9<ފP}c|8Xt X5
OIoQE^TR)s "щKOp"״ o+ .QuiF"̚i_pY3_nY t]p Tcptr]O͋%5_Mj(|.~K-.Ӝ8.!*)Zf1 Z@sSla1b=}ϱRB}iHt F ٖt Rrn@QFHxUt_gAVs
~
g/\LgH0|М;VvGҧQ}1{uJ4'`UR> S8>1ώ
B}s
]`X*Ce
%|UT6n|zC!_ox"cJc= k}¾4طE8#3 %Cy L>bY3Vd*4cwerGB=5 Xg*5T27
;6PMP 4}PGTQo-"Eұ8ʙ11#T֑'Z\JJhM[ 0|aU$.9_F[$5Ń vjo&p:BF]px=̑P(Gn1aV:e 7$û̎ Ͽlݵ.*\XU9( )5W͏s2(Ӵj
5kE͌㍯_kéI۶ |ǏP=oQ'ѮOOR# !X^S G O_Hi'ʞwY>V4 {մPEc˻35 @:1M
1z/[Y_^D91 4P> 1"
~c*q2G6 ?gX-!瓺 aMyHwe4V]M _)n
N5~F飗I{?5zgUE0'ch, .K̳3ծnsFCB?m4Ԃ҇9WD^+ B.M.YTj]QgHv3[Dcp<*])wi6@V}';d^ƅXhf5)Yx?}x*;@7n8N ZiC %R0)@`6;*' pDs >( _촏Q%ݰ%}WV
c3L/#Ӊ,DZE[FwdCUܓv k'DI,33|]@
e.0i˘$'*/.EZ ^/+ 9,#?fOJybp)8:i~72ͽw앐 jc{UyGX n$jP#|4dܻ+
~*DՂ`(ފm 'pp#)WGY1|٘ȾDwZc00|c-!^ǥ-*. ,l_(yvspoQ6m<.ah!S0 hC\
Jݑ_~4`3`m,dɔEn
4(ފC!K2 @,R}lx ^@hȻl='zQl#ɡWR>Bb+O#Yb M Bk,`^ (X>J thU kA=gd&o[
enh=UͿ",谧1}+>1 wd ^π
AbL91,&D>.
{b
l2փ}J;ӋVcےrǁvyE/@lFF縋"l.r٫8pW_G/z&)?оJB2jN ]s2O 2v
I,qa60} T\ٶ|ueD]lh`ޟ"ʻM$r`qoe8.%4ǠQ,kűJb֟aM(Q$"S˹Đ&u /SB75 An=U f U(BrT"fq&mPfƋBƠF$F_Y?EvkJ" r"E k1r,P5GH!(`4Gϖ 4KP4ՙe
:DC;L-u?6o#U 'N z4O0:
OG
ߖg[%:~r P+k!0QiwQnCLJeU4#+v>iyi")u1hee@5/9jndu v3غ `zb|q[,Zy f1o$ݘ%]wy!{m- 8 |0pqsW_ХͬE:,@A)WP/Tt"9KqW+Ѓ-@6f;]Ƚ1]k&p$9Xzr {@dwɴĢXVMnUݪLDGy'h,Ӄ,bG.~ƣԹ}bf S.Egp,
{uYLܖ2&lUo?5W4L=|J^
Gwi.28b.>UģJC2h~A$J@KY=wYVx!~ Oz8V 38 l ֍a5 IF&>+xSZ!A>t- Rja? tv=|*]loR~L{PG;z!# zWC ï20mӏby(! 6߅^Akضav4 EnXZitK] hig欽tY`W?وPS&yc~H͗4 @ \ E.M a ;5ɝ=}|Rhs^`S "[h$GX=\pZ
E *Q#w WVtL|
Qh";7o O߿ Yީ&^}z&7+P4Js^tv
:d
/![5FO>: <:~ո!W?%{M]nB`:͈7qv'0p|EW(D]8ɨj pѥ4m Yd^Yo;)/ fvgГ!{{:cОxlAZY9@Dx](,Cl\ C)~pȎl:gIs!Ð&b"3#G}
18W M:B%2< FOaֳ׀N9'Scf<7ְ+P:
u8S
{a(9uOK5Xg#Bԝ@fk~_4i$|a h+mMǿQdx\w-ZsC@~H z4;~9)u=!whE5.r&$ڬt!*YUHe'xjw뉩a[Ր w!>K9ưG'!De"Uvz:T%vsr}aqtȽ gk;*'!TW*gg*匵ţ$C(sV߶PkZVV[)*ӖqpESE+cq7 'i إ9Uԙ@0ҍ3٤PWϵܕ ~/duQ>voq~ZN/u5>V!Jc9SC EUNA7YQ&s`er
)(<ӨQw78 ڐCA\
ra/47ηܪvYEI#yl Ž7_4]Mݷ=K/7
#obiksd.#Gk_9#O 7 qey_Kн*IO"nKM|.W $jS:>M9-W%mdR ݒ@'{|<*o ~h6! W1+?llSlc2ɂ͢VY;^<:R)
Rj *b $gX@ֱ=p/*o,l0js5i]SR{KxV.\)20_naFc9a
,uLOb-x,&`jp~Q˹@q+ lmgz9M Ĭy9"<ŪH/FE*s#C?gUq{Z`Fdqg{Zq%h.a^aEAEz41҄KxP Tpu])qbO?Y됽E+A\suc"
Fu*p=utZdj \J/$}_ڷZ6N*vT2K&J2<}BU5kI_tE)MlCT}!
#aX>3pl
t_ `@ 1ՋMs˿[y R`e&cd6<eƟX Zj r#L H`,B/:enwb 9= K 6-Qi#k5`V
mҙ8ޞjB ^u[le+"&gg&$6F;q2~N| JB 5"靏J:GD*3S%tsxlNXTԄdh]䄟"QdyP/8Txv>⇰W]g9LhqK t>8\_hC!݊&C jϪۋ,@^R)%1wdDiVݰCD@2MN[.`ܲukncp:.a/ޜZ_oDr1eI^]ר"*j rPw~_-]}}UhePVj}'l5SnV,Tu/]Y1HjZSTaѻl?c8M|,ŮͭLlbϊDyjw
~ EC]d?5߹^D
ÍO ej D](Ig r0
QPMٖ%>*kILުou][mFGJJ>r:c$|f 8G/fBZUظG]p,`"]5=#TD :n @TaC6[Uf >(l549ZcF kϿ&8 ( IhO/*鄟~vUƶDXiպ1k -(( 7f ix_:"$
/O81q\TJY#fŻh e eӌ44Sbh荙mLC)ko#y91Y[bȓTz [u9cr!KkBiHx{>+gqXXpu: $Z.hb ﵋+z3 3#m#ť}%ܱNwQ=^ o + GYZ\
glj. R5%w/ ]lNRc;!mOc`G>" FXo$2_
0=0tS R|ӾڢP^dݝeOhf!t,#tو#.^1.D0, r FRw{ɴϏ W9,1 m gQ
$pS=@3VxKG
z V`\e7 h>Q@ӏHd&: ǭWCokSC{x4f:!")ԃ["K| /UcJ%AfJF6 tF9SRJ$a6fړs[ q9 64Jd4<.Cea4f
z '4A P.aj( q|j"Hճ;7G (7tp{ubR{;okʹy\ 3K'Hr~;n3ln[KpՓCvuś_d߂k@~C eH
y6o] WjOb1[Y>*b=]&-4b6,FĨ kJrL|]A?1g"QŘ9JgwMz^6:vb> eNz,XjUN;6;KcS5oO+6]fݲ e_ eR Pa="t%D X9n '): MGP )O @.#Tˣ6'% ˌa PsvO` GL9KV7lbM Wvcq^=?./n;{?pOE7tPFgLEmX[枌YyO%:WkQd$ *qEP95FpC}No|_ޣ, ,.cX; l ̸O !$E
k>5J7bɃAٿx
ci6 `
5 9D`_~
w3P0q#0
>dz7ϼkAi %%%6={q2 !a}pW
ku
nb5駃֒(A N* T
.(F |otd//a dev%3-Jqη==Zbqefүr& sO|i 2Vq~_+6D3C̺{tN8T+|).ddxmZ}ƌu*FS W-2>;Qs}x?b"N`I fP9V 93bJ/*vV(g*
!MNp)tTB s{aHuܩl PBx{ zc!Ub"#}#j*SEݹ}1~RȒ \A sC+B,ہԘ:Ѩ/jjo J `ypEite(:4L #ef s)jp~#.4N_SU 1qKG9P &#u2cO
y}'+J!Z*AN:?"ב]LənךNҒi}R x( ̵ˇ`ͼv^q7g#"3]ĚHt@+uE!^ ։)-L\e1~*CLn' (Y\23IBQw}U
h3Læ~ `-zF&K+pK((֦z0ڻ+ |(x9x ?W` ]>3 dƹ+wRo^M^eYP` UEcx
[1%<p}u>p -%
Fz {_ei̶vWrV@ Ev!:?o
~WHuc4u dȋĢޠ] EB6c^8 "^O '^nL$;|M~x &/]3{ƗUC+v/Dr!D yy+-@ tL 3 z;U i.;ļߐ&mfw n/U8Dōf'|hm, \5uN桖KH0
5З֞|`2&9Qͻ#|:K t|x
x6ίa.^8!}
J'K) zTN=&,By ^Uԝ 0l*_J(L1Ŷgeܐ ˔br}ENY:kC/~~p 209S ~ZE0UT(Ey֧2Y,X^ovR{ La׆=J 9 &`UE/u8Ӵ=Ҳ7"J [x2:ZU{+QIC\?Z Nh 3[y'E_ C&|KM);t
Еʖ;3;\T0 FAcFc]\V(/ ;ӥu檛c`I#ʂqtT+^n; +\1JSL85s?doRN,h}M(^{E I'Gwbjc̉G -g!&zb"ȢUkh d Ct7 مm~EѬ#n G;{
Z_ia
xO _@U}(aѶmR %) =
,Hd(>RWs)U$+p|
aӭ^%ȆI(LYd.'0] w*FS[ kV)6`-;_"ikK}Npc8!kBfuUpV4GoxD+҃+\nt8[%z0+xm>
//I(Dз:J ň;.+a_A%%J`k/M h e&I:@ƶ'
L5rTm+{f|IؗpE^a!,3@slKnK9ur,',I~ _C;h8) ԘOah7ȶ3'^[ٱߝ,^ ka!# 4! oUf@fg;3qV~Zp1vs h8WznR-Wx;^ŗoXb W cϰ@Yd"00B-y._US5/~U2t 'c?hi-fu\S[٨K~6CmzzkSP QKJ(I8,) 4ȷ :uv)yVe+Q[;lԤh=]1E/Ԃk7ҼL0C
Ob( SppkT6Hߚ{3 V%S A{gcݙuI%D15^9( kRH uO9xȼ"Z銔ե
:Kec#*pS]HưvSYp$㊡G1< 8Û-/ﵜN>2^Kb]+!3GW)fiI( &pg.M{m5'S*א U?; KqD(]ZF#_W[(D
C~0Fqu7s?]yWWݜEr{?Ր&[yn E}OM$UJluq]UtUl+4Mi4hKUN?s*z!zd:O(j
HT"o!IPaDZXI !.͞ ;υ瀖"h]#
^^C7 n;FHn,l=ZM_7؏n#FZ?K&t\=m+6$Sh
l^nt8qr-WNPNQZE`c! ,Erc gq?gS\uBɫojePbۂG5@܍R;[ R4F!_ d~
5(ɪnV A
yʚĻY(lF, OJ% K+o
ޠۙ/W!DT JzlWF"CTa:},YSN`x{ l`LW,FzƂTq9Yzz
I{C Lgb6GٝuMߔ{XB[ŋhԷZ(XpHP* Zɼfc/ n~H* *"} p'gxPgsÚ_{icFIo TwbZ+%q!h8QqĢT$j)
$fK jt[l_P"w,$1 =i3:)0cB?J(Vtub sHf;KH;Q"&ev(I} C!
>MVEKVq926YDO(1tΦv>e(&蛼gxEXP8^ ˆAL&_9;L!AA5eoxp \ M5h5]|eZt#4:yc"pܺYV3wN;HnXYz(XreM46//[EzoҭsɻS~/ZRTHyL}KAtyĉMQ
cpYI7q5GZ{Cm88)f㧹eF@''b; FM xZUP)+ε}I.v]xAV&#> ;óuMQ͚;`{ӦBsO'TZs1iX$ 5I.@xAIͻd%h=KǗrF|tj/7[?3fȑf DH;'2 r[+G){\Au!L53 a=īUXA1')=`b
@ obc:kӍ1iv|"8 +8j p?ԩW5!ϢD/(U28#.H33 /[gwTFIfޙ7hnu~2 ]v9Pq/u~L& +SM|ny٘ =#Y]k+&Dpw W Y/ҁb(= CCC2"\i8.kfeQy5NH1
K▪1o`Z ; 5i
_2Y8x9O P $y5?g&^|-%*7A變
NPH gWhh2
*IۜQ D3%/L60g1mtS\ؿ:C>
a2 =B2>^т"-F,}/. [ ld SY:)5ǓO {sEݨUג~AqR[_eKsEO⤵QR5= H/ XvC~8 )Y#n%=WM*% ^B{ CF
Qb 톈|0 T9 dJe>R%B`wͦ!Ez{JGʺ gbglКPEFHtk\ty%|2S
O{nҀTυlFB$7;i1ɓO1BfԐ _ż2_#6 H=/KkeJn$ N's([+x x!(x)XB% J]
61 pρbD @ mzXx
Wu2, ͞=SiV.-NE9N?lui-QOkH\YDͱ~/ ST .9f6q s%cc0| }GS?_- ȩvqb^[gy/MTV6h;LokS4[6Ct='wvMZ☥̡TW'O[va s@B.M
찙J>cOшR`V J \~uͅ ce^SAs X)gMB^$ B!Bsi]^2xQ*vaFqD""R"ȜpP/%LH}L<džGfV.|9%w냷x/67tb{ 헝oӐ|Qc{iWň3L[PK[yI.6nJ rPg-oc;1^3Swg# v|=K |_FmfBifmA 17J*zMy9R$2TKC/v`Jz@%
!ʢ ]+:"5j 3wD[I">hFZ'uo.~FSV<3UWo&lV Bm9cylo͢+9nH
LhSi*ьg
Ѥq(d-C"G^+t-PP,XTɹZ&VA=M . _R &͢Rp8|t>? X* 569 V`U~zT*$W
hBYʵJT?}}t 7S}W8'jS=ܪ@Aᰏ(GExfOsS^ٿi^ԿZ[yB)K$WyBQıW`&AFObX\o+LIEWrHԪp =wj&\f+G
_ʧMTQ0S^.1YԼG \In SD0e-NS5bf/.VsăfE؛UCzuR_2')U
d !M pԇ ](I|:x*h/(+yxҐVu)a A6y&Pn}('= z.-`x0l=n~Fu;
*Ξkh }&iAۚ{h"#+|n DUsrTiqׄm^C}=3'z5:|a/VjI<᭭~qw ւVf&O Ej%K$ "57Bn/+v4tK)@ 5t_ul A֗X<6ު /}e 'B<IW5hz i[8h>oMNt'[Ÿ CfWSZUvCcCvxtm *cB+qe;1Tfy5' )Ӓ9 ).0331_H:
2(0'vN>"HWk O[;Ӓ4L=m0c4'챃ڎjf ^V1q qq DfNa/G~)?P >+=`-M^cE
$K+~вv/(*γ Ob
4wgYk>xv|ԾO (eJ6U; no!~ȩ -#IX% H'u嶋T n3v! !+60O/jRwJ(EǨٝ Vl 6).FL _R%Gw Ȃg-\ >hJ&uZ;t=bE1LV XT
(-\ kLea%Kq3aHh!$SLZov/:]]
qIQlۥS 7 QO~ih ay!@}w1g4ť)ȯ\fyٳ[9͂dloU9ma [iem`w.w~j|iߙ22x
]%l D]r 3 ZB+,s?qkT_Y 6]/gЋ̷^'A*'JnT gNhXy>p GKIY /6Zj?%
آEStcT-t jc=>5 OVnEjXVD0N$Kq`0_,| ø&t]ϊn
}`w͂NJ 7,%woT0 YM/uΡQi$yiaZ2QG3tިd8}qNiQ'u<̽^=, s۲*:> }$Ov^!fV 6d )c2*` ȳ a xu{ P|
jXӾgbp^$&g}hع9;fk!g)m[-U5pVxNuO /{ @KdAM
)$a4?"l
q2 ~^+VM$* ~mTދ 'w
c|Aۏ3ꁛBn`/ރ%v
du EKbൻMR/Z\M+/~%0lq^ I(U.$r@%WHT S0L}w~"Sߏs# tŗr:/rۮvn/F8lO"x i5bmL4٭m|lcV? 'cxL: @k=w?4z; yZ$SmSJvJhlE OЙ=4WWygrd8-T\5U)X S\"EozQ9gcN*[
jæ*xUW%+ON\'۔% G-]ߊ$
Ȼ/ҌIMuX6(>O@w=k1l7q \b8Xe&kO8< Z&L[/|
ZGl6(ýtF2 tD*];b%7ɀ6y?].bn'a?Z̢@c ?ҥA{ZT^9Om \2,5r`g\=0'Ow\
l0+\N0O +Q6%ऺyRiJx#]v+G%haH}k5rXNEZTr({c[|'j'qI#[0T\ 3JX6QD~D,ĩv` T']Eb%Y]]ɺ G6y/ug F71D}!vClͥL V?{%{x5ƱWM R6{lly1o~-H9F1P /OE99֪Q\
' K[f P])FH ku! ( ,S`sQbT; ? {EiUjg X"tSs:5AZfӻA
]enrIzt 7S7JM;}98xp6#y{{ƩCcW "(hTߨ$ %GW'75dT-VߗWg#" c5eKTUb5{g7M9ASbwmNs2øl$1gM˩鹭`4V{J7 $b XvwXپWj 1?ìT>gxaLr])VXԠfX8Eś9>rGЧfhKAi[&@a>5loй a?ls|V<SﯿH0-hULAl}H P }Ͽ#5K"w\1z"
HtB.x:i qn IW"ո*O^#Y,=rAe>HjDlpF9byr C᳘nJ?BZ
t)]N0pI܍.izhGK1`8XLE1PiG̴b uA(Rixö0 a;jb`ӎ46
dD,C RL3 Eu^ՔatGj_p._=msζx֬sj#d^ Yv| eC+@ ǃv-8`Z> e!:- HꅈI,*,t
h7 *_{V|2 "nRG$_P'4m76 ֣7 :XXI݈X(
V_ے4m;Il"lc H,
Zt3ץ#֡%h:aIYxcsg܀9!Tmv29aY%ޑtВ1Ϯo,^SF
\nJ3u71@J6g@VHj'6BS/Zy\iq>/þ_&8" S\ %̬Cisvmkܜ)%DO Ҝ:1_d 3~?+;
4~%{rk3ev.d aj@ONZ.LRݬ% ^d?>ӏ>zX^|" bdۊC
gЄbO?%ZqAX2|IO{/7T +m9ek\if#}~)܍ 鏼SZ\Y^Y6z-JO_9!A+ aQ,U#3uF}"RuJ 隘C
f|LaR>*thٓbhkRTDbÄ( <@f ȍ 4@Y18 /B~{%2ȕnj yPފaX CvX
|u$iA%8y|* f ĵ h5ʸƂYXl%?tCDKK" tֿg^ 0DL
=\~k?[Kzq]s(4&Ђdqdž
~ i pN]?G[~>Uګȟ|@.tgr'%9"61 A·""->ȖW?$
bM&Ѻ]3r?j~^TGo>u# .8ЃH ̽J|LSl_F\G`\T!B-3Jqu/ 6~%̅6W )"R97<qoX xdPVo| ڵM 8 qAQ63 U Ϧi\u}rh,ԈD!hf!0 j$] ;m7ԓᙋUº4n^dFl
43S->e'_$L5Pb[ʛ s=,ERՉ
&TFDPU#u?Z>2IHwY f kf[KE6t%;yV (J7a Ks+אɫ w-X# G ];aฮ&0T@v/ocFf"!̖j-sذ}KA8ujuh]g{/ YP*8C!q1vwiSd:z7-9ݕ;0jSڲa 8s) sP]sCmm QشB`7iNma6ZFE08#`)/VHEz:eSc<&բ7D@WGIGTT"G D9u+/2Ƶ{* E A5X1>9G=]2UQSV#TH0|M +.reL ܝ) "8+
!z\ꛤ%( cPnNs?u|hx&$#c豧:SƖG+V-
:Tn:N [dC
0/ѡc
}!C"eڹk
wqq:7C9+}v$j Q*Kݰmح䀹[1":u@^":oJcg o fGsgsxgm}Vj&+Ì7$lpvwb3Pso6tHC;, |H
3ԋb
}6,X4٢?+xR0 Eb%xe {>1 =*Axb=ށA lKhmO u軻*b`[Bo." Q{"8$~p)' ̋nR%D0ҭ8.K([Ƚ B 59i}\Nki
gG @y
~袧_KC\kߗ }Sx 6f7d 7G\μ M1֓Lz GN91="ۍ + ιQ?Ϙ LZKÇ4 \\6,wlV;R#+twyIڪ1`bdU't(,
XH?c`iʉ˴`\p~Z;!"wv ͝6BB,@݄hIUx-EHeƃhdSejZ[ґ$כh cMxiy!f7xja0_Ki]TJ)&w/2Y >;3JOFa%632s?bMg zZ (ɗ`$r{o,[1_;LyYq HF4Y b#;j3/ R22jJ狘P :U'xx%_ { Iㅣ +l;quAܥk.
`K Q
w`q9g߯Hۡ/ݣ a){ؾ{3b݁b>$Kġ} Phr F4plvG2jdpXևix
w bAb7i31|FҪ}?R.U [;ԍq1e7r`oAts s"lߥ:r78pςĀd@B8h/ p_Qsq0B#p1 I֒C#9SYw%JU]9 ӢYy t8|7<*8?/4W_'Xk=!iY[eR Uk.!*U
U* g7/c\ AȚ)/St:&1n|j^Mn: ±[jF `j3gΧRq@/aBJ{G X fup KV'Wp:& -HJ]*L* $g75ĞݼӒ GT-b@m7mJ
,Kt$PH q0=Ap(A0CjapD2rlh [N9UE f[ 2vCuPUm]W1pFf\A͵2k3L GO.ksOM"6 +x
h,AhSߊcv[.kInUm FL5vknbaFB\ b8d\Um|{ViHV1C=lV4Ԏ@4p1UG
Q]b9݈\^7fTfQT m1.oA0 UHn/]|q.5N[מ1~I}OeBkU.aDSe3rGs3G\ j|=5OoX`FdM.wY,-sW[nWr/%lk# 7ɘkN剪W 3,eEW#/X6V) 1OȚ% Ź;ʂ ,
RH!SvQz6YguC (_{PɝMrsQuoT! 8%!:,#İń(7$BnzЌ+ä00Z(gj{
hmED}C@n^IuKpp* _!2ُW:; Ѵt灔2DI[C!f;Q ~X_s I/_~Z0pOebL{(qzRZal5a ԉ;?47\y@
eǂWca4 _4rR61 }fnw)U[:Ϊ Y͗1VkǃZ XFK -A?FݰJOdz w@Q03ކ $\*W\K@ ~gvpf_<S8uK{J(zhӻцfWjL20=븋y$¢`ΈYtFӱ}sBrPɹǖ@ QʃИJ^hw69?n @TmjaqXNЩ0\-s:?GH流 = L+ #iC<L^H$]KKhh"z!$
r`!}˰CSv OvTv!gVnyOG\GrPm,iZ ״@n"NSgzgMI`x4-gV& ٻE]-#TM Q?'0=| ?U^6 ǪL.@cɸLj7fE[ R
sy #.&j,, {
o'Z:jp^?LrgPF(K[FUdA1{1K(hR=T x35eZ9]0$\)NTmJwGu:@BjJ S,T4i@;N5زcZUxP:?" ,WDmnڳ04;{SS|+tC>qCw ~`H Z#e$V2:,j[/c5]$5 s?nKG75{oi|% NLلկu0]:yaO WnԖ wn!Q:{&t'1`z[1긹$L+e?FhCծw } M:; :e{9P"IʙؚBKk^!zvdВ8~>pM_+q9II\_]^I-5GDlGݶ2#ïmX#{ ,]"_pTIDSEy*KoUfl~D>{SV n5xQ^%V[ 2>"r~8a2_ D' M3%%"^g{Z=λlH159 09hƆamMF诱m* (I 18=G9Y?ڤey|'4 HRTP
v=L@9я"@
dT|^U
: "V-z #Rr.1K̦ 3$A{4 v͂`WVYSY1 j6ZpNFٲڐM*]"4mvbE[;迿IIfKݞn +kR ;AnܭYgP0D³'+rymq79U'x$Ob 4)Zz(R VT5жVG9>靀3o|2_od."&(u~.?,g4[E[>@>'#Ut몱&gE'j,I[ɖakpJ`; Wd u6z\^k%m{}9/\nvfnn?ctpYTQA
owt|΄D̸r3i7jUDVdXͶpMDJ8cNqeFʃIlN:?"XsM'vB2lZb鏒ɩxifʪuOQ5yKO_Dn*'>{3 Oꚽ&W 7|6 ( | );m n^(DRIT4N(t{#D8wg*p¬ [ĿC9h cB>~*pj~+}'܅3PSs2MCfĒiX)Qұy=LJ \fpe&ly\ӅĉO,BSkN'(x 9hq ! X ~b9 KE_/igwڣ' pSTh8u:JhxV< FA?R#fYSڣCD7ݚ7n u-mhs48$_NrSWGѦ*o̴f5cܭF48XoiwܚD!;"2 -Q ̌7pwMk+.眎 X =IEGhrWY!Nl B@+cvFd*oȯ0s-Fa"0W 0NY" ޯSd+ fP1!{oSqҚ뼓b=Fʾ{ ChM$L*[ :J<#`=ϳ@&*1CԮsZ 2|]3E #s@=' | 6ZZϙ#Jš88Խ8qJKE !ػkW8 BD(%uύxD2#[ނLz#+
%A,!RR<|R dr*9Tk@/awsׂZ۠fBRz@5÷ĠAbh#4zeXB ߜ ΖOic~OZ,XUV> K%B3D0$Mlq^/"'>UZd & X\,÷e..t#Դ3 zr:En4X?ԮsOH/`
V93}僓(6T!6hWq
eB: ?rM%StK BA9YdHcfZ26B&Y2ӠBSFOE2_r;6/IgS(yIS遜Cӿ2g@8m|S]nc
5Ъxq˘5D72,NrjVB/:y5OA!
* _?ь[n&[@"r(tKӫMO 5
/Vȴ|_y_peU|#1oؿgkU!|KAd>T~STBң^a5KBxor8. T|C9!}߸"SpM7 )$QbNv) *n^irMn==TpWţE̘O]*MKi(U19YC
ق1P 4&=ςI-U
IdfHG rB?ӯ k7 8GQ}l/%)df#FSuzZJ!cKZ!Ib1Gv{˙1E9aԏ}d[N@A.˂dW1I jpr,A~ Ty1v˝mΓC_{_:k'B5/ pU&R9EU1BEo*M0+gޱ
zLTdkTt]pQΫA*],| (`^5mgz01G[ zLʲ&r`D$'K)~>66("j=^x;N`^-A(~[ʷfPZBnS fN2`>d^6:YYcZp~.ܦt<(kS^ejJҺ~|ȫ۞
g`'0Hxq ڵrXy^$Cȷd7Ivr`]`zFkW lO_ 3'
Bi]Dvg&QNpCg UJS@<EnLuG(\-Վ ))4 S@j4^(=e (:\|Y 郧6~'֛ F Go3Eڨ売SB|dY~o> y^"
_.8ǫ+b;Hfo 6 mOTrugg w7,*O7u02`JI85j]Qx?uQ\&0$= qRPn @NԿqz; x{& lZFMhM+f/qD$VEiL,Hz{
F6jXgDB/Sc2EG9 %a^Zd9
~P \b{)TT9)e> d107B8]Zs$B;#7#m)Uk\9z"T뷆='x.f{m5% $?BU
ā6I};;,֊՝<~ÉXhd*R좯BVB&y 1 WɎx ˅L&|H7UQ#@v3~!*ܨ
9dvOg8*(;@V4yLɚ\[f9@q9=5uIt5&JkW&1?# /c+!8|iJ :cU3'/e MEtdž89weW_QN)Qc4\xuXq@-.ks%qN$1bMPE"3lEa
(fl*~?lZ! y;\LA/JY] cxn 2+N݊XU "LS
H5XQ
ԢFI- @eQ{r>ѫQQ&h hm%boGT`_/#LoyMLdSFE4;WӋiGLcIkGH
5eQfT4gS]ѩϼb8_2o{ǏucA*_;$x\PFpj4+rP>E)8npUo?|vm ¸/DE m:IaCwPn#u<Ak*LS ZS]H Hj`o g$n$ ױo UEi![LoM&.Kn8Es}>bn۲D#@+k +eI.Z^ Es2*O
EIuX l|T.ڋC[ZfS1$iϾƀUNm! NHj lAKRzFLm\X4T` hW&B]/|D}Th
vjܚ Vzʋ/H f 6"1-{GNOM(yÞMbOD=
*~pى/^}o&}3^XxjVjP5-xPĤ>|)D"?~1ʂ魙z . 8DCھ8 Du};YŮ ROHhԆ٧G$Yðk'Wl:`c\?~:O=n"Ǧ<:w#U A-rܯ 9i6^%K[f5#>la1X6=tJ$ !/#4T7b{g6qN m~9s$.Y! 癮Md,ݜ9GEbz!D*JJk$ '*KdƖ.貖YVy"蝅G$-خV|z 1 vUL}V`qU:Zo&@S .fSP
d_JP6U2|@%Qĉ ۞ AFBbn1MR/L7RD (*UMb[ )6Bo`CTlyr!6XBv!I|?c&$2J% i.p9l^ @R`տ6-8u;ysx+%w *a
PlB0`'U
$*+vM@#k;2%2Q(e3(U an %
#Xz,eIN~5
TQ,<
S2GYW WX jT?Ak>sm3 miWq'f QztNeh2~vΉ\uQпHE"
c*N1ҌƘSq VSO؆g|1,gZJhD'A8 (z_]o uuN {2
$z/G8RP) TӚ%Ņ LqkE,s(GiQ+GDvu!ӌD?`ҺQHLYX&ztj,ģE6/?kPi4|vz~4 _< B=@6eҔy;}oDwքÊU`[hJH 9}Vㅩ@QO5GޜfƄVO"fta$kIVơʋ|Lc&ޖz }=Qv8>Xx8Ocؒyӛ2[tFO)>aK)I4W|$ Ǫrɞ 0jхG֮CL950UiT =n:džYu6F+[Aw H5,qڤ791["r3~zogڥF9}(Z)<(g-5ť^P{PVZ%>P+'\ ,a16NNeGsD: b11rJNSfӽ̸l* 0K0x$Y;K_Yt'Or`o4rO
qOvT$Y z,E
/lm.1ʒ4ΟZBr M qһ[Atz'Ib7`ӡ?01*鼃N^,VJWU:2z5 b#h27qDez[+^cU<-ϣD>U5<T
F y&})WqQ !>~ P;*^ '%H+g5afR&Pp%z,UNFZ] 9P,Xܮ`{Ed[i ~\{ #ZC2^],}HNG%rEf1j$e1AvUq
'̊S _$Հy3S@-@ЄJƸ6utug-NvĪFOe0|> 4qE(1Mמ 4jCiFx^
fd&k
Ea4j?xE
D!$MzUTyE ۅ=f@V VWC3kMc
/؉WNfB^ f/P.-.FA*ˡ{n'82E e^)n CyʛIUEЫP P "ސzkV Rcdr iOlK"Q(VSdjAғ/9NL.;'[u1"t; wM$gogg%54u;z_aJtz s n.3$ND2$bY?3͍!-aw.5u{Q^Oezչ9M
ˏl]73oĜR
GsXih `o!$h.
ψ]3` ÿwN3%/JV 8Iq- 1*G㲵dϖ|XC#SɵRQ3¡'n- >{T⺉(y+ |w!(R Z@ Faa
##zalUf[[P68*^:G`V_$K#@W΄G{PЬZj^73%*=ZA` EWp>G,
[ӭB]Y/
IBk;uCk#KS6ޢylkk :2/\)@r-2
Mt 2AvB `"v|"Wm*#
@h5ƕ<\a{y ;f>PQ+Km!E_p2^nnV詓y月Jq%d܈HɌL XB("Io @x/sL"8vYL0$pF3fs&(] )wN6@T?])fh4@/08OH pڡ,O拊+d c Ay~X^r킩hS>-i @,da8ؗｘCpzQrl18JV{ "lHv7ψ&L13!m
qBAS:]+\fAi+^ᗼC +Ѫ%O慣G( 0=b9^D
\TBA4·M8<: V=NH^b՟U~ӹ 6p
D ?x눛 9oI#g~YXEJdE6U$
f r /l<~WJTRyf[ϜR6L&< / ңViW!Lm
{.۰9 U=/q% wx}Az k+<=~E
8L?#{~Ll??w;[
?'u^
hpk K6uI1tAuSrGqY,Рtf!P^`~XLE9Iun?@ 2AKdLWsGL1m}XQ?\ (t R!в~<naG#d#;"vOG -Drfj 6c`VyQan!Z}*NlkY^F!3rKGpZy/#Wwq6!b i )|(u'N<1%.i4z5cs DŞPן+ >''| 8*M!X/H2(D̨*]{ГN$cҮnVC$vU,k~xlE 42OYSt9glتJC&Q%4 dƄZޤ "] K̀"TiEyɌFB3U{%PQ`/[A;νyC~ hl U&Y&<p9䐹F!#+1x^NLT 9!(f3,b]G4N3f}t[=xA 2~ueEjjL-8dbBM> B5溇 S~i$ eoBw80DǗ>K -^YbF\j hHjL w]R\'S!H@r9kz],V{= QWp)xNvRt˒eN-fRazhP`h.Wk{]lC?\VVzs`n2 w*kV{#
7/bۮEB R-$ko/, m+ VP'LpƒY^d +eYL.g=l_ [ `W}Ѽ]v}E2gp6n!%8ul :,JI|=,gW
̘S[`*b|䲂G އқJc=N>e3,8HEs_ԑB#١?Ni
Li([:ԅz8q-0#@gR75o`Ұ f*{/}i1$왊}Q~S';;ok7g4 )k[`L=Ɓ9m}Z ga} 7h u$*XѳaqwK۱6vTz~_(%rFyιq>fʼ q3W ]Ѿ ce~,JB?5UK8BdkZ7&a )!*HS>~ej ~
`
DT
k5in1D!lo:PQe^ ' zAEGD$Cdϱfj
BJWXc } YL[đ=
IYp p8jҩM8
df80IDF^ͧ%{*W= nRǎ. ylBwE*/
n4BR uR܁'I]،;yQg
:skM=6 }L]nT[ 9 4@% |G#cfOhHv)ARA7)zRJ*_jEsJ6"03(Û lp@E;#\t- .&9$2i O1eKUAB 6D+ݹ}b$?%T43_Jlqa>>WMEp KFk[-SZz/Ћp%z.L*cN zAɖ{rU'4۸f >n]:̭/X2oGa*P5uY!?ų~8QhH ^c>эM
; cwcE?On+BOu-/?(^+Wh>k9aNI'%A?H%uV fv8(^bbj{IO|TMz;v;coL{LN2ISW..,X,QEtQfwFDم % fLSMIc:bR ¹O}4k cչ%U mi# RWtEHߓ %
txsE4,^N=kK$#?_DKjM PؠB(,}fG+] 6+RԜ ZvF*gi?x,(Xg2>= Յqa5VIug8=kc%
-x;ax ?BLm?I
Iof ivE۪(f+?Ƭ~=Tcه"m/71R,j)o2X~mrLb- K3ՏA((7#"C@J-l0/crMrq1/I)[kDlGЊN jJҷxb)qp߷!= 4jɒO1 oWrӒtҗ:D~&pt1ot)eOq.
85RWo ֭*&jwf}j/bl;i'䡐ȐŰl`_TWR<4E|koYd{~EwZ*-݉1 _ d?=3^6"$ Kc~¯%ҢRv/6bԶaQ:_{fƃ oGa4!|
W0~_߃bK# l5Xzk5ٿ,O0 pʥ5YT4Y{1: 3Np9հ&XM/ukU - pWsfaRӈs?VH,p s.JOX"/
`,/ZXRs"?ܒ|2{1¼:5IP|T2% +P]O{UGvv F`q~ sN\YYIm
[Y TэɲޛlRik^έ+ $C?w:^vK)?ջ7aʑ_WmF Ä{"- ѥpRr%9A]4%q7Gs>{ʼn ?KWcO[y֍:[?Ȃ$zTL6i2A Y\)iWs"PÂoi>|UKJ]TJs3~aE}b}4ߗrSyo,Z
Z κ`ՓM\!Ln*8f(3Kv^ ϟOF o[m}D#+ lq0e4
o/Yg淃"*G| s5rlCwzg*3 koB/AnΡu04x%<NQEnh|<܍yW V cIJ'
뜞 JF:2Ih`WPEP_)|b%qY_5Ԝ( ;«`GgtKUb@屿?fmk['C*Q1Borai_c-@33pP̔i| dAsZXeڥ5=.gBawcd=XSn68QzEwك
4dK~B,ENϕ")V& 4̯+䡋3[mx ry{ZX2IJstR3<;: ze
`>qLϞӳ_," fS\JN5'r2ue`b#Y305}`.Zz_T E)G Pɢ
yY\u N֩62vС;`Tq^' mzӗN)=TЍhA*h yBm g_*9~AtfSG[ʤ=:baXs\6Ya젤y-o̾]f $ /Z^q)x.v2f+@}yi!ۇ`ܟ\:IlI0\y5Ll@5*7r9<ßV]woF` i7a%L;ٶ6`h4 oʥ3<&SQ=%XAǏ+hUQHxs9u96+ [;]MzYEf7a;\\?.R/XL
-?HR BKaf1NӏQɁV×O, dKRۤ4-ܱ"Ȫ(x%r'/>%5di'q֙qd/lů٩9~v\~MX&m"wvJЍu+ɶ^|,>,sB
F5Dn O3G LCdcmH^g{e
:ElBno 7LUqu0Cp Bh1]gSs鲕)ᡥB|h+ 73|^J. C4 R*Z/9ᣂ!x1>rW?E0-oM.K w | #
81@!FdOdm-&ϥ!EՒqªy&'@W:ނ ? @ƲhSwԋ#H }sn9!Whgذ8L_H
/_?6 &]<$X ~[p]EJ{MGj3c>z'xɛ+ !ܤ[uw uԚamZֱ2(!De Qr- Xd¾9DDӼZu[jmc̜tsAz֘^Ly+>!0ĎT^j2 4-L z6߂?HS nUZ%~.YhS }3:gU3mačM) [Lp +. k B t
2qN 65z5Aa~@LtKԂc#pyH*s^:aFG
=wR;ɪ<74_6"[țGKOվ]$u_YzťPɳ-M/@mݯOo!3 )Wc5$jUʩ3>.lv%(֒xtȞ
:J
}jR[NEi\"; d#_ǃMCiy㘅/Ѭ}!yZVjF]xrzta_\sP4~}T. {Q`57FLL#2nږuwpO iz@fQY^0)si~yCґ2 WƖmN|O51 j1K 4勪.?4mX5~
C⪼6(L4zHphBn-1s<#Y8$3U܁ZV yO˩הj-s_l8<A{g)tl<2 carė%8w B ybGsZi<ԕ MM:j3 #S?)sDlt:8I() 8wV< @ 6B%xdui: JW}, 8D~%e۟#Ywݐ
<~ľGA c|@8lpY,N0ue8d:XjQ SS)0}ߡ euӷ j`HRBE *
]a/[QzƎB?4 mWw}oZvҊP\VݽgVS~GuU[vs }4pKƒwyLO
=uy'=:GT ?sQܩZ&.UEgGK p>@$6o@ oJ} `C " :\`RIAtUYֈ \eVcq
5]nAl17QvA
>hh;KvG YG .hUq*O$,$ _g&sUBIEUpٍKrR A sTtjt9I:J?w$w푾by]R,CZSF:оn> V) IYʝY^!Dbgk
TARڊ㽖T\ ܋|#!}BE{M{UHmppu)ǚqzVf!.>BfЄ AWKpйv{t}Bm9[ ^gB v
XyfGĄFM pqתJ TKFey H:bB$ hq`}|@(5'= %1ZE =B [j;
'CT]R k͑Bh̏\Vwl
u(_| [&\ L8G:~,UG [;+OAg+ieu۱->rO߁]44(W\r٤O(1Ys`Kt]L@36N{T 8yiAO#Ӻ\ZyA`1ԹR| TykJ ӜרM*6X,{NDz谭GN>7 4=NQ{u%Hn&iCDžD2o9e7IK0_p!Yv7јӉ~k! b, j IɌ5
\dNCV&5 j.K3 i30:
vbXw8073Ӵ7'yYFej 8aWJ:r
qqu!_@ZI p璉2aڊ-:gȗۄcoYB\@ raH#J& q߳ IA`wipt#7E u `v~,<1vc^tw˨?Ig`N$L2 [ UG1B ~ϸ;qT(
QW .wSU) )#o3jT=~ʹxrVtԚK7l (,u8.q$7^;Ͻ-P\ 2Cޑf
T4PFGKS
P۔ rnߒ+ <*jNcEtQ DM4w;DF?q<)/S~!#cݥ
?ױ+9běd V3g|,\bܽEf(^z[gp0 4S0$Ua0#)fTrts(8^c~5Q"7_ONY<ov(B: DCqC u
b1]k=51(
(+q/*so"SnjadmV4kpOn)T/s
J( 9߳lqK 4. tULDCKv[aÝa&{RT}8nJ>8Mk^%U{"dTS>'HCG Wwjv}'*\БӤ}t=Ͷ ?>(&t#<%uQH E(jbw '4:&'m՚š`YKkXs#8FZh o2lDh(mTl1ʘq' Nv _NYe@n
ӋQs)IY0sbؤ%M6SH]i
[GrɌ9y`oDx,\MdK$'A#6upr,,#e| 8_%^4il)LMg,
J iJӟtaґ H! 0ny9rRn h5n
tFƼ*T+d wH:Z:Zk9`lGDw ʬx1x7˾+D_kq*Ă:Oéo? q" iVXX.сD &B Z,s$`n<+i] @kGc6aemF-Jk/5k>6a>WXpB /ߓ}J,Rceze Yv N aXQh3^֙#71{M P
Ⱃ(\s(c 1TJEe _ />FvP V
e2ӣL潷jm2\ .!
w
%x_^H8m8NSN͉!#i뼞ĘOO K%$З+ҭ 3RZn74Oa Zn '
ͷ8II
T+p)Ng 92>'νauػ 밓xZRpG]jR08;4l3x.щkýM 4
&xm{uPAvH"}-?y H =8ֻfP/~ysK+=ҋac;zXB
^;Y,z2&^800zuO8zT?ɡf\d/.(1wqm .SkKU
3 |+@)E3 ԧ&^pӮ&r6ƖR1sUmq|{c;Q)<^(ӝy
Aޱ Ih" Ɓj¢ONÎa ZI}:FOζ"F QCnS]T&hTӏdҊ~и :LC5K(m;}H_˜/_<ox ڟ$#h9?Pgҍ&u^Yy/Gʐvy>!B+(ecZɤ EfssӜWvF#fv_}@_F3#v% |$/SJQIH,Α2`rf"q_|/ s`´W0iP D,ɳVDkj}bY `,TJE`[
'=Չ|Y]GNαX_'Y2հn[Qp
%A瓆N"-/
uJn .'W#:q
U;>> 7v;uRZ
HVSW|WcsY:
{'jW+#ߨ r? ZY9lSoxHocmf;9 (ʤSڶ
YZ