arm32: The cache may not be properly cleaned/invalidated [XSA-437,
2023-34321]
top-level shadow reference dropped too early for 64-bit PV guests
438, CVE-2023-34322]
x86/AMD: Divide speculative information leak [XSA-439, CVE-2023-20588]

update to xen-4.17.2 which includes
434, CVE-2023-20569]
435, CVE-2022-40982]
remove patches now included upstream

arm: Guests can trigger a deadlock on Cortex-A77 [XSA-436, CVE-2023-34320]

bugfix for x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]

adjust OCaml patch condition so eln builds work

x86/AMD: Zenbleed [XSA-433, CVE-2023-20593]
omit OCaml 5 patch on fc38

Rebuilt for https://fedoraproject.org/wiki/Fedora_39_Mass_Rebuild

Add patch for OCaml 5.0.0

work around a build problem with python 3.12

Rebuilt for Python 3.12

Mishandling of guest SSBD selection on AMD hardware
431, CVE-2022-42336]

update to xen-4.17.1

x86 shadow paging arbitrary pointer dereference [XSA-430, CVE-2022-42335]

3 security issues (#2180425)
dirty mode use-after-free [XSA-427, CVE-2022-42332]
handling [XSA-428, CVE-2022-42333,
2022-42334]
429,
2022-42331]

use OVMF.fd from new edk2-ovmf-xen package as ovmf.bin file
ovmf package no longer supports xen (#2170930)

x86: Cross-Thread Return Address Predictions [XSA-426, CVE-2022-27672]