# changelog

author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-5
changelog:
  - QEMU heap overflow flaw while processing certain ATAPI commands.
  	[XSA-138, CVE-2015-5154] (#1247142)
  - try again to fix xen-qemu-dom0-disk-backend.service (#1242246)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-6
changelog:
  - Use after free in QEMU/Xen block unplug protocol [XSA-139, CVE-2015-5166]
  	(#1249757)
  - QEMU leak of uninitialized heap memory in rtl8139 device model
  	[XSA-140, CVE-2015-5165] (#1249756)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-8
changelog:
  - libxl fails to honour readonly flag on disks with qemu-xen
  	[XSA-142, CVE-2015-7311] (#1257893) (final patch version)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-9
changelog:
  - ui/vnc: limit client_cut_text msg payload size [CVE-2015-5239] (#1259504)
  - e1000: Avoid infinite loop in processing transmit descriptor
  	[CVE-2015-6815] (#1260224)
  - net: add checks to validate ring buffer pointers [CVE-2015-5279] (#1263278)
  - net: avoid infinite loop when receiving packets [CVE-2015-5278] (#1263281)
  - qemu buffer overflow in virtio-serial [CVE-2015-5745] (#1251354)


author: Michael Young <m.a.young@durham.ac.uk> - 4.5.1-11
changelog:
  - create a symbolic link so libvirt VMs from xen 4.0 to 4.4 can still
  	find qemu-dm (#1268176), (#1248843)


author: Michael Young <m.a.young@durham.ac.uk> - 4.6.0-1
changelog:
  - update to xen-4.6.0
    xen-dumpdir.patch no longer needed
    adjust xen.use.fedora.ipxe.patch and xen.fedora.systemd.patch
    remove upstream patches
    add build fix for blktap2 to gcc5 fixes
    udev rules have now gone as have xen-syms in /boot
    package extra files 
      /etc/rc.d/init.d/xendriverdomain
      /usr/bin/xenalyze
      /usr/sbin/xentrace
      /usr/sbin/xentrace_setsize
      /usr/share/pkgconfig/*.pc
  - renumber patches
  - add build-requires for pandoc and discount to improve docs


