x86: Native Branch History Injection [XSA-456, CVE-2024-2201]
update to xen 4.17.4, remove patches now included upstream
x86 HVM hypercalls may trigger Xen bug check [XSA-454, CVE-2023-46842]
x86: Incorrect logic for BTC/SRSO mitigations [XSA-455, CVE-2024-31142]

x86: Register File Data Sampling [XSA-452, CVE-2023-28746]
GhostRace: Speculative Race Conditions [XSA-453, CVE-2024-2193]
additional patches so above applies cleanly

x86: shadow stack vs exceptions from emulation stubs - [XSA-451,
2023-46841] (#2266326)

arm32: The cache may not be properly cleaned/invalidated (take two)
447, CVE-2023-46837]
pci: phantom functions assigned to incorrect contexts [XSA-449,
2023-46839]
VT-d: Failure to quarantine devices in !HVM build [XSA-450,
2023-46840]

x86/AMD: mismatch in IOMMU quarantine page table levels [XSA-445,
2023-46835]
x86: BTC/SRSO fixes not fully effective [XSA-446, CVE-2023-46836]

xenstored: A transaction conflict can crash C Xenstored [XSA-440,
2023-34323]
x86/AMD: missing IOMMU TLB flushing [XSA-442, CVE-2023-34326]
Multiple vulnerabilities in libfsimage disk handling [XSA-443,
2023-34325]
x86/AMD: Debug Mask handling [XSA-444, CVE-2023-34327,
2023-34328]

rebuild (f40) for OCaml 5.1

arm32: The cache may not be properly cleaned/invalidated [XSA-437,
2023-34321]
top-level shadow reference dropped too early for 64-bit PV guests
438, CVE-2023-34322]
x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]

update to xen-4.17.2 which includes
434, CVE-2023-20569]
435, CVE-2022-40982]
remove patches now included upstream

arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320]

bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]

adjust OCaml patch condition so eln builds work

x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]
omit OCaml 5 patch on fc38

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Add patch for OCaml 5.0.0

work around a build problem with python 3.12