diff -ur xen.orig//ChangeLog xen//ChangeLog
--- xen.orig//ChangeLog	2011-09-29 22:31:03.000000000 +0800
+++ xen//ChangeLog	2011-10-09 20:24:15.418815031 +0800
@@ -2,6 +2,13 @@
 # Copyright 1999-2011 Gentoo Foundation; Distributed under the GPL v2
 # $Header: /var/cvsroot/gentoo-x86/app-emulation/xen/ChangeLog,v 1.85 2011/09/29 14:21:09 tomka Exp $
 
+*xen-3.4.2-r4.ebuild
+
+  09 Oct 2011;  Alexey Shvetsov <alexxy@gentoo.org> +xen-3.4.2-r4.ebuild,
+  security patch fix-__addr_ok-limit.patch, closes bug 385319,
+  add elog meassage re /.config, patch by Ian Delaney aka idella4,
+  security patch sec-2011-1583.patch for bug 386371.	
+
   29 Sep 2011; Thomas Kahle <tomka@gentoo.org> xen-3.4.2-r3.ebuild:
   x86 stable per bug 379241
 
Only in xen//files: xen-3.4.2-fix-__addr_ok-limit.patch
Only in xen//files: xen-3.4.2-sec-2011-1583.patch
diff -ur xen.orig//Manifest xen//Manifest
--- xen.orig//Manifest	2011-09-29 22:31:03.000000000 +0800
+++ xen//Manifest	2011-10-09 20:24:21.627814934 +0800
@@ -1,23 +1,15 @@
------BEGIN PGP SIGNED MESSAGE-----
-Hash: SHA256
-
 AUX xen-3.3.0-unexported-target-fix.patch 788 RMD160 4b30444c021479cbd3969493639533fc1e43e781 SHA1 9119f06b4a005c385ac27e085e2d96ccf9cd4dc9 SHA256 e46f5fbe4c579b84f895f0ac6e05589553a11305ca30e69405082d58abd9ee07
 AUX xen-3.4.2-dump_registers-watchdog-fix.patch 533 RMD160 766249003d91cbec3b0014a8446e1a4d01cd847a SHA1 6306250671976c638f814a4958211af4bacb53b4 SHA256 17d18f268efd302085bdfa0673e2d9478e84206b6d060d0a63854441233a81c6
+AUX xen-3.4.2-fix-__addr_ok-limit.patch 1841 RMD160 85119eb7a77fd4272fe79f1fd9b4a5f94ad50356 SHA1 793f9a0594cf2cb9908214b657556e646a9d0f8e SHA256 8ba66bbc5aed479e8c346dbef8fe3bb28dee0cba1e103331591c6f023b4224ac
 AUX xen-3.4.2-no-DMA.patch 2708 RMD160 9aa83e21e8b07feca1f799f9efb4f9cd5728c6c6 SHA1 e55fa5a04203470af68452762f919b402854fce9 SHA256 87a3fe134b8d3c762d4d229986ccb77898a603a18974f453cfdf6ba9d68fe982
+AUX xen-3.4.2-sec-2011-1583.patch 2997 RMD160 92924227353632cd693e33cbe035338e044b23f4 SHA1 db61ea6976a7cb7f5be5bd3161e0aeaae9682683 SHA256 4663fc9f9ade0b7404e77c73c9be2064693351114e023b4a7ebaf21521880644
 AUX xen-3.4.2-werror-idiocy.patch 16826 RMD160 14f4678c723fd9241c88786b5b07a8c25252ce6f SHA1 f15d3c4d37b9c11fed49c025de2eaeb6911845a1 SHA256 261ef6541736f1df757476590bb8581cac376c9408e5041e8356336e13025c67
 AUX xen-4.1.1-iommu_sec_fix.patch 2851 RMD160 4367178c10cdc1e752f3e9ffb70f42e6e7179242 SHA1 8487f85dbf81bf245deaccca5ff5b8f46e60d112 SHA256 3a0ab3cb5c18db91f4be457cbba36189a558da7b794e1a35795f4fed3d48a7c8
 DIST xen-3.4.2.tar.gz 11187726 RMD160 2ef81df1f44356d60e04e21df2173ce5357d8509 SHA1 3cd2cafacd52bbac2e2da1cfd846ee6260b43455 SHA256 d17c33136041cc8da69214ccf527fc48637bee7a9ab4d68a88ec50e6a9d20b0b
 DIST xen-4.1.1.tar.gz 10355625 RMD160 4b3c0641b0f098889f627662aa6b8fea00c5b636 SHA1 f1b5ef4b663c339faf9c77fc895327cfbcc9776c SHA256 246289227507466b5da8b2d0da84a5b0e68a392527b16cde38898d0348890f5b
 EBUILD xen-3.4.2-r1.ebuild 3058 RMD160 19a8baa3dbf87f4c5d4e5019f88ae4dc5ccc32e6 SHA1 aed8b48c47b8f713dbc17d67fa2d21c838f7f071 SHA256 719917cfbf0605d4951415d9f53c49262d92ba8e8921a3835aefcd549dd275bb
-EBUILD xen-3.4.2-r3.ebuild 3068 RMD160 a7823f95b67e2f237a5395a0063525794bf21820 SHA1 b7ea3ce1c4df92ee1d87101fda58765cc580168f SHA256 df35d173a9fbcd041e8d33f7edc5478c9e3ed5f64a1f3b17caf746f5bd92252b
+EBUILD xen-3.4.2-r3.ebuild 3314 RMD160 24e3b07ed8068d5427127c4248a848ecd746234a SHA1 d6d81ff06f9a1771c125010f2de119b432a1df45 SHA256 d6bdb293ffd55cbc5279504eae1259c76bcba301e8efa151bf4529d81be1c553
 EBUILD xen-4.1.1-r2.ebuild 3015 RMD160 2026eb17050ee40ae504b3f377b0e0895849d02a SHA1 2d505aa3cf488a79c3518d9d5bf4d70d6c84f9c7 SHA256 4ae066db6bbdd5ca3c377944b9b3c2abc94d2095c075cb20485908bc954fdf78
 EBUILD xen-9999.ebuild 2929 RMD160 34b61aa566948357bed2bde59d06e38fdc21249c SHA1 5dfa8cebff2f2b9a10e40b888e151baf8afb804c SHA256 62f131e504a87ab2e05b1109325167ae9f6d9747ae90d89536d49734c7445f0e
-MISC ChangeLog 13823 RMD160 c00c5de5640dd8647d239fcf91a7d0fc5af221f6 SHA1 7a8036b12e92cb3dda2c667a560275485aaee75a SHA256 08aae3b2a4ff8c7cabee2cce2e90789a30ccfe279a54ee46bd9fa9815939e5cb
+MISC ChangeLog 14104 RMD160 632b782dd46550487060dd13f83e9c789e336b38 SHA1 f075f648a5c1996c1f30c82b302d6b40e2736d0e SHA256 722bd78f4f110cd848e223f4c315216917f31544b1e95c1826a48a34c79d3663
 MISC metadata.xml 581 RMD160 d22ffb491d9dad33425b97add683dd6b8b9139e1 SHA1 649f65e9fd2ab25e32394c555a24fc0f6b59c37f SHA256 1cf2cc4bb5b5278ac75e74910607518ddd2bd6454f18325319ce1ac102fab535
------BEGIN PGP SIGNATURE-----
-Version: GnuPG v2.0.17 (GNU/Linux)
-
-iF4EAREIAAYFAk6EfuAACgkQodBTJSDyo65dcgD/fYfP/HNKV7TieMkgrLpNZmuj
-PojFPqGBLufQjoyxdrcA/i+QMNeTlx88eCXqNY4ekfD1mU+qLSqmUdHftRi4vzjB
-=7N/T
------END PGP SIGNATURE-----
diff -ur xen.orig//xen-3.4.2-r3.ebuild xen//xen-3.4.2-r3.ebuild
--- xen.orig//xen-3.4.2-r3.ebuild	2011-10-09 16:26:41.220821097 +0800
+++ xen//xen-3.4.2-r3.ebuild	2011-10-09 20:15:09.394815151 +0800
@@ -24,6 +24,8 @@
 	"${FILESDIR}/"${P}-dump_registers-watchdog-fix.patch
 	"${FILESDIR}/"${P}-no-DMA.patch
 	"${FILESDIR}/"${P}-werror-idiocy.patch
+	"${FILESDIR}/"${P}-fix-__addr_ok-limit.patch 
+	"${FILESDIR}/"${P}-sec-2011-1583.patch
 )
 
 RESTRICT="test"
@@ -32,6 +34,11 @@
 QA_WX_LOAD="boot/xen-syms-${PV}"
 
 pkg_setup() {
+        if [ -x /.config/ ]; then
+                die "the system has a dir /.config; this needs to be removed to allow \
+		the package to emerge"
+        fi
+
 	if [[ -z ${XEN_TARGET_ARCH} ]]; then
 		if use x86 && use amd64; then
 			die "Confusion! Both x86 and amd64 are set in your use flags!"