SOURCE_HASH=sha512:0e94ba9a20c7374839d2a53a9ed8cce647cc74142b464634fdb9cbaf96e91e43ea13f0b4dab5c06c247e6719de0c0ae03fdcba0c7c4518ee504c545c96da70d0
+ SPELLX=mpc
SECURITY_PATCH=1
- SOURCE="mpc-$VERSION.tar.gz"
- SOURCE_URL[0]=http://www.multiprecision.org/mpc/download/$SOURCE
-SOURCE_DIRECTORY="$BUILD_DIRECTORY/mpc-$VERSION"
+ SOURCE="$SPELLX-$VERSION.tar.gz"
+ SOURCE_URL[0]=http://www.multiprecision.org/${SPELLX}/download/${SOURCE}
+SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELLX}-${VERSION}"
+ GATHER_DOCS=off
WEB_SITE="http://www.multiprecision.org/index.php?prog=mpc"
LICENSE[0]="LGPL"
ENTERED=20100410
diff --git a/libs/libmpc/HISTORY b/libs/libmpc/HISTORY
index 55673c9..7619fd2 100644
--- a/libs/libmpc/HISTORY
+++ b/libs/libmpc/HISTORY
@@ -1,3 +1,8 @@
+2015-05-07 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: use SPELLX; added GATHER_DOCS to drop dirty hack in INSTALL
+ * INSTALL: corrected install phase by adding a test case & '-f' flag
for
+ ln (thanks to Justin and his super-fresh rebuild)
+
2014-01-19 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version 1.0.2
diff --git a/libs/libmpc/INSTALL b/libs/libmpc/INSTALL
index 7443a11..0efe3f0 100755
--- a/libs/libmpc/INSTALL
+++ b/libs/libmpc/INSTALL
@@ -1,4 +1,5 @@
default_install &&
# gcc needs previous libmpc
-ln -s $TRACK_ROOT/usr/lib/libmpc.so $INSTALL_ROOT/usr/lib/libmpc.so.2 &&
-rm -r doc # remove the remaining build system cruft
+if [[ ! -h "$INSTALL_ROOT/usr/lib/libmpc.so.2" ]]; then
+ ln -sf $TRACK_ROOT/usr/lib/libmpc.so $INSTALL_ROOT/usr/lib/libmpc.so.2
+fi
diff --git a/libs/pcre/HISTORY b/libs/pcre/HISTORY
index 9ab5a89..722ba6c 100644
--- a/libs/pcre/HISTORY
+++ b/libs/pcre/HISTORY
@@ -1,3 +1,6 @@
+2015-05-04 Pavel Vinogradov <public AT sourcemage.org>
+ * *SUB_DEPENDS: g++ -> gcc with CXX
+
2015-03-06 Vlad Glagolev <stealth AT sourcemage.org>
* BUILD: re-enabled build of static libraries
* cve-2014-8964: renamed to cve-2014-8964.patch
diff --git a/libs/pcre/PRE_SUB_DEPENDS b/libs/pcre/PRE_SUB_DEPENDS
index 7236d16..1763f0e 100755
--- a/libs/pcre/PRE_SUB_DEPENDS
+++ b/libs/pcre/PRE_SUB_DEPENDS
@@ -3,6 +3,6 @@ case "$THIS_SUB_DEPENDS" in
then return 0; else return 1; fi ;;
UTFPROP) if [[ $BUILDUTF == y ]] &&
[[ $UTFPROPERTIES == y ]]; then return 0; else return 1; fi ;;
- CPP) is_depends_enabled $SPELL g++ ;;
+ CPP) is_depends_enabled $SPELL gcc ;;
*) echo "bogus sub_depends: pcre $THIS_SUB_DEPENDS"; return 1;;
esac
diff --git
a/libs/pcre/REPAIR^f759b166c7ff34012ab85e9c6742315f^PRE_SUB_DEPENDS
b/libs/pcre/REPAIR^f759b166c7ff34012ab85e9c6742315f^PRE_SUB_DEPENDS
index 3e15cf5..ca784db 100755
--- a/libs/pcre/REPAIR^f759b166c7ff34012ab85e9c6742315f^PRE_SUB_DEPENDS
+++ b/libs/pcre/REPAIR^f759b166c7ff34012ab85e9c6742315f^PRE_SUB_DEPENDS
@@ -1,6 +1,6 @@
case "$THIS_SUB_DEPENDS" in
UTFPROP) if [[ $BUILDUTF8 == y ]] &&
[[ $UTFPROPERTIES == y ]]; then return 0; else return 1; fi ;;
- CPP) is_depends_enabled $SPELL g++ ;;
+ CPP) is_depends_enabled $SPELL gcc ;;
*) echo "bogus sub_depends: pcre $THIS_SUB_DEPENDS"; return 1;;
esac
diff --git a/libs/pcre/SUB_DEPENDS b/libs/pcre/SUB_DEPENDS
index 0d72a16..70419a1 100755
--- a/libs/pcre/SUB_DEPENDS
+++ b/libs/pcre/SUB_DEPENDS
@@ -5,6 +5,6 @@ case "$THIS_SUB_DEPENDS" in
BUILDUTF=y &&
UTFPROPERTIES=y &&
persistent_add UTFPROPERTIES ;;
- CPP) depends g++ "--enable-cpp" ;;
+ CPP) depends -sub CXX gcc "--enable-cpp" ;;
*) echo "bogus sub_depends: pcre $THIS_SUB_DEPENDS"; return 1;;
esac
diff --git
a/net/wpa_supplicant/0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
b/net/wpa_supplicant/0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
new file mode 100644
index 0000000..de1964c
--- /dev/null
+++
b/net/wpa_supplicant/0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
@@ -0,0 +1,42 @@
+From 9ed4eee345f85e3025c33c6e20aa25696e341ccd Mon Sep 17 00:00:00 2001
+From: Jouni Malinen <jouni AT qca.qualcomm.com>
+Date: Tue, 7 Apr 2015 11:32:11 +0300
+Subject: [PATCH] P2P: Validate SSID element length before copying it
+ (CVE-2015-1863)
+
+This fixes a possible memcpy overflow for P2P dev->oper_ssid in
+p2p_add_device(). The length provided by the peer device (0..255 bytes)
+was used without proper bounds checking and that could have resulted in
+arbitrary data of up to 223 bytes being written beyond the end of the
+dev->oper_ssid[] array (of which about 150 bytes would be beyond the
+heap allocation) when processing a corrupted management frame for P2P
+peer discovery purposes.
+
+This could result in corrupted state in heap, unexpected program
+behavior due to corrupted P2P peer device information, denial of service
+due to process crash, exposure of memory contents during GO Negotiation,
+and potentially arbitrary code execution.
+
+Thanks to Google security team for reporting this issue and smart
+hardware research group of Alibaba security team for discovering it.
+
+Signed-off-by: Jouni Malinen <jouni AT qca.qualcomm.com>
+---
+ src/p2p/p2p.c | 1 +
+ 1 file changed, 1 insertion(+)
+
+diff --git a/src/p2p/p2p.c b/src/p2p/p2p.c
+index f584fae..a45fe73 100644
+--- a/src/p2p/p2p.c
++++ b/src/p2p/p2p.c
+@@ -778,6 +778,7 @@ int p2p_add_device(struct p2p_data *p2p, const u8 *addr,
int freq,
+ if (os_memcmp(addr, p2p_dev_addr, ETH_ALEN) != 0)
+ os_memcpy(dev->interface_addr, addr, ETH_ALEN);
+ if (msg.ssid &&
++ msg.ssid[1] <= sizeof(dev->oper_ssid) &&
+ (msg.ssid[1] != P2P_WILDCARD_SSID_LEN ||
+ os_memcmp(msg.ssid + 2, P2P_WILDCARD_SSID, P2P_WILDCARD_SSID_LEN)
+ != 0)) {
+--
+1.9.1
+
diff --git a/net/wpa_supplicant/DETAILS b/net/wpa_supplicant/DETAILS
index 62009d0..164f285 100755
--- a/net/wpa_supplicant/DETAILS
+++ b/net/wpa_supplicant/DETAILS
@@ -8,14 +8,15 @@ elif [[ $WPA_RELEASE == devel ]]; then
SOURCE=$SPELL-$VERSION.tar.gz
SOURCE_GPG=gurus.gpg:$SOURCE.sig:WORKS_FOR_ME
else
- VERSION=1.1
+ VERSION=2.4
+ SECURITY_PATCH=1
SOURCE=$SPELL-$VERSION.tar.gz
-
SOURCE_HASH=sha512:61afeff24d6175feb4c73a6c53f0e88acb32746739febeafc9b834652af6607c339b9fe8ef1e05bc61f6b078f85aa0a35261fc8d02f05a844cfded12c8709901
+
SOURCE_HASH=sha512:03d8199325b3910f77013ddb7edd803ab4444542230484e1cb465dc3df9372b39ee3307d823ce88730e8f5a5231ef3183954c54cf07297b70432f526e45aac2b
fi
SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
- SOURCE_URL[0]=http://hostap.epitest.fi/releases/$SOURCE
+ SOURCE_URL[0]=http://w1.fi/releases/$SOURCE
LICENSE[0]=GPL
- WEB_SITE=http://hostap.epitest.fi/wpa_supplicant/
+ WEB_SITE=http://w1.fi/wpa_supplicant/
ENTERED=20050130
SHORT="WPA/WPA2 supplicant"
cat << EOF
diff --git a/net/wpa_supplicant/HISTORY b/net/wpa_supplicant/HISTORY
index 431042c..ff323e9 100644
--- a/net/wpa_supplicant/HISTORY
+++ b/net/wpa_supplicant/HISTORY
@@ -1,3 +1,13 @@
+2015-05-12 Thomas Orgis <sobukus AT sourcemage.org>
+ * PRE_BUILD, 0001-P2P...copying-it-C.patch: add patch for buffer
overflow issue
+ * DETAILS: SECURITY_PATCH++
+
+2015-03-22 Thomas Orgis <sobukus AT sourcemage.org>
+ * DETAILS: version 2.4, updated URLs
+
+2014-08-26 Thomas Orgis <sobukus AT sourcemage.org>
+ * DETAILS: version 2.2
+
2014-08-23 Ismael Luceno <ismael AT sourcemage.org>
* DEPENDS: Allow the use of libressl
* BUILD, DEPENDS: nl80211 support requires libnl
diff --git a/net/wpa_supplicant/PRE_BUILD b/net/wpa_supplicant/PRE_BUILD
index 7349fc1..aa6f574 100755
--- a/net/wpa_supplicant/PRE_BUILD
+++ b/net/wpa_supplicant/PRE_BUILD
@@ -12,6 +12,12 @@ if is_depends_enabled $SPELL dbus; then
fi
fi &&
+cd "$SOURCE_DIRECTORY" &&
+if [[ $WPA_RELEASE == stable ]]; then
+ # Should be included in version 2.5.
+ patch -p1 <
"$SCRIPT_DIRECTORY/0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch"
+fi &&
+
if [[ -z $QTDIR ]] && is_depends_enabled $SPELL qt-x11; then
. "$INSTALL_ROOT/etc/profile.d/qt.sh"
fi
diff --git a/net/xinetd/DETAILS b/net/xinetd/DETAILS
index 0519861..8e24bec 100755
--- a/net/xinetd/DETAILS
+++ b/net/xinetd/DETAILS
@@ -1,9 +1,11 @@
SPELL=xinetd
VERSION=2.3.15
- SECURITY_PATCH=1
+ SECURITY_PATCH=2
SOURCE=$SPELL-$VERSION.tar.gz
-SOURCE_DIRECTORY=$BUILD_DIRECTORY/$SPELL-$VERSION
- SOURCE_URL[0]=http://www.xinetd.org/$SOURCE
+SOURCE_DIRECTORY="$BUILD_DIRECTORY/$SPELL-$VERSION"
+ SOURCE_URL[0]=http://download.x.inetd.net/$SOURCE
+ SOURCE_URL[1]=http://download.sourcemage.org/distro/$SOURCE
+ SOURCE_URL[2]=http://sourcemage.ru/mirror/$SOURCE
SOURCE_GPG="gurus.gpg:${SOURCE}.sig"
LICENSE[0]=http://www.xinetd.org/license
WEB_SITE=http://www.xinetd.org/
diff --git a/net/xinetd/HISTORY b/net/xinetd/HISTORY
index d4cab25..b2a776a 100644
--- a/net/xinetd/HISTORY
+++ b/net/xinetd/HISTORY
@@ -1,3 +1,9 @@
+2015-05-10 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: SECURITY_PATCH++ (CVE-2013-4342); updated source urls;
+ quoting paths
+ * PRE_BUILD: apply patch
+ * tcpmux.patch: added, to fix a security issue
+
2012-07-15 Sukneet Basuta <sukneet AT sourcemage.org>
* DEPENDS: howl -> -sub COMPAT_HOWL avahi
diff --git a/perl-cpan/weakref/BUILD b/perl-cpan/weakref/BUILD
new file mode 100755
index 0000000..27ba77d
--- /dev/null
+++ b/perl-cpan/weakref/BUILD
@@ -0,0 +1 @@
+true
diff --git a/perl-cpan/weakref/CONFLICTS b/perl-cpan/weakref/CONFLICTS
new file mode 100755
index 0000000..9ae5303
--- /dev/null
+++ b/perl-cpan/weakref/CONFLICTS
@@ -0,0 +1 @@
+conflicts perl y
diff --git a/perl-cpan/weakref/DEPENDS b/perl-cpan/weakref/DEPENDS
deleted file mode 100755
index 6826bc7..0000000
--- a/perl-cpan/weakref/DEPENDS
+++ /dev/null
@@ -1 +0,0 @@
-depends perl
diff --git a/perl-cpan/weakref/DETAILS b/perl-cpan/weakref/DETAILS
index 701afc4..71b2adc 100755
--- a/perl-cpan/weakref/DETAILS
+++ b/perl-cpan/weakref/DETAILS
@@ -1,9 +1,9 @@
SPELL=weakref
VERSION=0.01
- SOURCE=WeakRef-$VERSION.tar.gz
+ PATCHLEVEL=1
SOURCE_DIRECTORY=$BUILD_DIRECTORY/WeakRef-$VERSION
- SOURCE_URL[0]=$PERL_CPAN_URL/authors/id/LUKKA/$SOURCE
-
SOURCE_HASH=sha512:5167cc624a41ec0a92219be0d2788ad404a61c192f980df67afe3e6259004e7f97e1c0e4d756582b7e1ec6f82346fb85be4806ecd093825442946841b8922599
+ GATHER_DOCS=off
+ ARCHIVE=off
LICENSE=ART
WEB_SITE=http://search.cpan.org/~lukka/WeakRef/
ENTERED=20020405
diff --git a/perl-cpan/weakref/HISTORY b/perl-cpan/weakref/HISTORY
index 452adb4..17a75bd 100644
--- a/perl-cpan/weakref/HISTORY
+++ b/perl-cpan/weakref/HISTORY
@@ -1,3 +1,7 @@
+2015-05-06 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: deprecated in favour of perl
+ * {PRE_,}BUILD, INSTALL, UP_TRIGGERS: added
+
2008-01-07 Vlad Glagolev <stealth AT sourcemage.org>
* DETAILS: cleaned up
* BUILD: useless
diff --git a/perl-cpan/weakref/INSTALL b/perl-cpan/weakref/INSTALL
new file mode 100755
index 0000000..27ba77d
--- /dev/null
+++ b/perl-cpan/weakref/INSTALL
@@ -0,0 +1 @@
+true
diff --git a/perl-cpan/weakref/PRE_BUILD b/perl-cpan/weakref/PRE_BUILD
new file mode 100755
index 0000000..27ba77d
--- /dev/null
+++ b/perl-cpan/weakref/PRE_BUILD
@@ -0,0 +1 @@
+true
diff --git a/perl-cpan/weakref/UP_TRIGGERS b/perl-cpan/weakref/UP_TRIGGERS
new file mode 100755
index 0000000..ef7ae47
--- /dev/null
+++ b/perl-cpan/weakref/UP_TRIGGERS
@@ -0,0 +1,2 @@
+up_trigger weakref dispel_self &&
+up_trigger perl cast_self
diff --git a/perl-cpan/xml-parser-expat/DETAILS
b/perl-cpan/xml-parser-expat/DETAILS
index 83a5b5c..d46c9a7 100755
--- a/perl-cpan/xml-parser-expat/DETAILS
+++ b/perl-cpan/xml-parser-expat/DETAILS
@@ -1,24 +1,22 @@
SPELL=xml-parser-expat
- VERSION=2.42_01
-
SOURCE_HASH=sha512:cd351a9c3e857fc1e8e742924d10b83917da5ce5e3f1c7168a6447c0bd27b2a878f301e3bfa927eb4a977b71e93c7d7bd4536e7837000f7b45ce6a31ae7d9390
- SOURCE=XML-Parser-$VERSION.tar.gz
-SOURCE_DIRECTORY="$BUILD_DIRECTORY/XML-Parser-$VERSION"
- SOURCE_URL[0]=$PERL_CPAN_URL/authors/id/T/TO/TODDR/$SOURCE
+ SPELLX=XML-Parser
+ VERSION=2.44
+ SOURCE=${SPELLX}-${VERSION}.tar.gz
+ SOURCE_URL[0]=$PERL_CPAN_URL/authors/id/T/TO/TODDR/${SOURCE}
+
SOURCE_HASH=sha512:4790d20d89478880b18255679727e5b2fb2860bb4de67d5032c805fd44c9f90697a240a612aba51255325192253aa578b346d658b29f631a4e92ad96e7d65b61
+SOURCE_DIRECTORY="${BUILD_DIRECTORY}/${SPELLX}-${VERSION}"
LICENSE=ART
- WEB_SITE=http://search.cpan.org/~toddr/XML-Parser/
+ WEB_SITE=http://search.cpan.org/~dist/XML-Parser/
ENTERED=20020314
- KEYWORDS="parser perl"
- SHORT="Flexible fast parser with plug-in styles"
+ KEYWORDS="parser perl xml"
+ SHORT="flexible fast parser with plug-in styles"
cat << EOF
-This module provides ways to parse XML documents. It is
-built on top of the XML::Parser::Expat manpage, which is a
-lower level interface to James Clark's expat library. Each
-call to one of the parsing methods creates a new instance
-of XML::Parser::Expat which is then used to parse the doc�
-ument. Expat options may be provided when the XML::Parser
-object is created. These options are then passed on to
-the Expat object on each parse call. They can also be
-given as extra arguments to the parse methods, in which
-case they override options given at XML::Parser creation
-time.
+This module provides ways to parse XML documents. It is built on top of the
+XML::Parser::Expat manpage, which is a lower level interface to James Clark's
+expat library. Each call to one of the parsing methods creates a new
instance of
+XML::Parser::Expat which is then used to parse the document. Expat options
may
+be provided when the XML::Parser object is created. These options are then
+passed on to the Expat object on each parse call. They can also be given as
+extra arguments to the parse methods, in which case they override options
given
+at XML::Parser creation time.
EOF
diff --git a/perl-cpan/xml-parser-expat/HISTORY
b/perl-cpan/xml-parser-expat/HISTORY
index 698d3e2..7bb7723 100644
--- a/perl-cpan/xml-parser-expat/HISTORY
+++ b/perl-cpan/xml-parser-expat/HISTORY
@@ -1,5 +1,6 @@
-2013-12-20 Treeve Jelbert <treeve AT sourcemage.org>
- * DETAILS: version 2.42_01
+2015-05-06 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 2.44; use SPELLX; updated website,
+ descriptions, keywords
2014-02-23 Vlad Glagolev <stealth AT sourcemage.org>
diff --git a/utils/util-linux/HISTORY b/utils/util-linux/HISTORY
index 44855f8..bfcb082 100644
--- a/utils/util-linux/HISTORY
+++ b/utils/util-linux/HISTORY
@@ -1,3 +1,8 @@
+2015-05-07 Vlad Glagolev <stealth AT sourcemage.org>
+ * PREPARE: added forgotten spell_ok check (thanks to Justin and his
+ super-fresh rebuild); added a warning message for those who haven't
+ had util-linux installed yet
+
2015-01-02 Treeve Jelbert <treeve AT sourcemage.org>
* DETAILS: version to 2.25.2
diff --git a/utils/util-linux/PREPARE b/utils/util-linux/PREPARE
index f8acac4..5f29fbf 100755
--- a/utils/util-linux/PREPARE
+++ b/utils/util-linux/PREPARE
@@ -6,29 +6,33 @@ config_query_list UL_VERSION "What version do you want to
use?" \
latest \
aes &&
-local OLD_SPELL_VERSION="" &&
-spell_ok $SPELL && OLD_SPELL_VERSION="$(installed_version $SPELL)" &&
-
# util-linux 2.20 needs ttyX in /etc/inittab without /dev
# http://www.sourcemage.org/issues/110
message "${MESSAGE_COLOR}Checking sanity of
$INSTALL_ROOT/etc/inittab...${DEFAULT_COLOR}" &&
if grep -iq "/dev/tty" "$INSTALL_ROOT/etc/inittab"; then
- if is_version_less ${OLD_SPELL_VERSION} 2.20; then
- message "${PROBLEM_COLOR}" &&
- message "WARNING: $INSTALL_ROOT/etc/inittab needs syntax update. You
need to" &&
- message "replace all '/dev/tty*' lines to 'tty*' equivalents, e.g.:" &&
- message "${MESSAGE_COLOR}Before: tty1:linux:/sbin/agetty /dev/tty1 9600"
&&
- message "After: tty1:linux:/sbin/agetty tty1 9600${PROBLEM_COLOR}" &&
- message "Press 'n' to abort cast and do that manually by editing" &&
- message "$INSTALL_ROOT/etc/inittab file under superuser, then recast
$SPELL." &&
- message "${DEFAULT_COLOR}" &&
+ if spell_ok $SPELL; then
+ local OLD_SPELL_VERSION="$(installed_version $SPELL)" &&
+
+ if is_version_less ${OLD_SPELL_VERSION} 2.20; then
+ message "${PROBLEM_COLOR}" &&
+ message "WARNING: $INSTALL_ROOT/etc/inittab needs syntax update. You
need to" &&
+ message "replace all '/dev/tty*' lines to 'tty*' equivalents, e.g.:" &&
+ message "${MESSAGE_COLOR}Before: tty1:linux:/sbin/agetty /dev/tty1
9600" &&
+ message "After: tty1:linux:/sbin/agetty tty1 9600${PROBLEM_COLOR}" &&
+ message "Press 'n' to abort cast and do that manually by editing" &&
+ message "$INSTALL_ROOT/etc/inittab file under superuser, then recast
$SPELL." &&
+ message "${DEFAULT_COLOR}" &&
- if ! query "Attempt to replace the lines automatically?" n; then
- return 1
- else
- persistent_add UL_DEV_AUTOREPLACE &&
- local UL_DEV_AUTOREPLACE="y"
+ if ! query "Attempt to replace the lines automatically?" n; then
+ return 1
+ else
+ persistent_add UL_DEV_AUTOREPLACE &&
+ UL_DEV_AUTOREPLACE="y"
+ fi
fi
+ else
+ message "${PROBLEM_COLOR}Your /etc/inittab was not managed by
${SPELL_COLOR}$SPELL${PROBLEM_COLOR} previously."
+ message "You should probably fix your '/dev/tty*' entries by removing
'/dev/' from them.${DEFAULT_COLOR}"
fi
fi
diff --git a/utils/xen/DETAILS b/utils/xen/DETAILS
index 7b7f28c..007ccc9 100755
--- a/utils/xen/DETAILS
+++ b/utils/xen/DETAILS
@@ -1,10 +1,10 @@
SPELL=xen
if [[ $XEN_BRANCH == "4.2" ]]; then
VERSION=4.2.5
- SECURITY_PATCH=1
+ SECURITY_PATCH=2
else
- VERSION=4.4.0
- SECURITY_PATCH=9
+ VERSION=4.4.2
+ SECURITY_PATCH=10
fi
SOURCE=${SPELL}-${VERSION}.tar.gz
SOURCE2=$SOURCE.sig
diff --git a/utils/xen/HISTORY b/utils/xen/HISTORY
index bab5e0e..98740d2 100644
--- a/utils/xen/HISTORY
+++ b/utils/xen/HISTORY
@@ -1,3 +1,10 @@
+2015-05-13 Vlad Glagolev <stealth AT sourcemage.org>
+ * DETAILS: updated spell to 4.4.2 (4.4); SECURITY_PATCH++ for both
+ fixing VENOM (CVE-2015-3456); quoting paths
+ * PRE_BUILD: apply patches
+ * xsa133-qemut.patch, xsa133-qemuu-4.3-4.2.patch, xsa133-qemuu.patch:
+ added official patches, to fix VENOM vulnerability
+
2015-02-11 Vlad Glagolev <stealth AT sourcemage.org>
* DEPENDS: UDEV -> DEVICE-MANAGER