Xen 4.1.5 / 4.2.2 - Changelog

What's new in Xen 4.2.2:

May 17th, 2013

· CVE-2012-5634 / XSA-33: VT-d interrupt remapping source validation flaw
· CVE-2013-0151 / XSA-34: nested virtualization on 32-bit exposes host crash
· CVE-2013-0152 / XSA-35: Nested HVM exposes host to being driven out of memory by guest
· CVE-2013-0153 / XSA-36: interrupt remap entries shared and old ones not cleared on AMD IOMMUs
· CVE-2013-0154 / XSA-37: Hypervisor crash due to incorrect ASSERT (debug build only)
· CVE-2013-0215 / XSA-38: oxenstored incorrect handling of certain Xenbus ring states
· CVE-2012-6075 / XSA-41: qemu (e1000 device driver): Buffer overflow when processing large packets
· CVE-2013-1917 / XSA-44: Xen PV DoS vulnerability with SYSENTER
· CVE-2013-1919 / XSA-46: Several access permission issues with IRQs for unprivileged guests
· CVE-2013-1920 / XSA-47: Potential use of freed memory in event channel operations
· CVE-2013-1922 / XSA-48: qemu-nbd format-guessing due to missing format specification

What's new in Xen 4.1.5:

May 17th, 2013

· CVE-2012-5634 / XSA-33: VT-d interrupt remapping source validation flaw
· CVE-2013-0153 / XSA-36: interrupt remap entries shared and old ones not cleared on AMD IOMMUs
· CVE-2013-0215 / XSA-38: oxenstored incorrect handling of certain Xenbus ring states
· CVE-2012-6075 / XSA-41: qemu (e1000 device driver): Buffer overflow when processing large packets
· CVE-2013-1917 / XSA-44: Xen PV DoS vulnerability with SYSENTER
· CVE-2013-1919 / XSA-46: Several access permission issues with IRQs for unprivileged guests
· CVE-2013-1920 / XSA-47: Potential use of freed memory in event channel operations
· CVE-2013-1964 / XSA-50: grant table hypercall acquire/release imbalance

What's new in Xen 3.3.1:

January 13th, 2009

· This release adds power management (P & C states) in the hypervisor, PVSCSI drivers, and HVM emulation domains.
· It has improved paravirtualization, device passthrough, hardware-assisted paging, HVM framebuffer, and shadow pagetable performance.
· It has improved safety of domain transfer across systems with different CPU models.
· There are assorted bugfixes and other minor enhancements.