anchor.diff:                         name = "204-4.5";
                          sha256 = "083z9pbdz3f532fnzg7n2d5wzv6rmqc0f4mvc3mnmkd0rzqw8vcp";
                        })
  +                     (xsaPatch {
  +                       name = "207";
  +                       sha256 = "0wdlhijmw9mdj6a82pyw1rwwiz605dwzjc392zr3fpb2jklrvibc";
  +                     })
                      ];
     };
   
  
positive.code:         }
        ];
  
        # Note this lacks patches for:
        # XSA-201
        # XSA-199
        # XSA-197
        # they didn't apply, and there are plenty of other patches here
        # to get this deployed as-is.
        xenPatches = [ ./0001-libxl-Spice-image-compression-setting-support-for-up.patch
                       ./0002-libxl-Spice-streaming-video-setting-support-for-upst.patch
                       ./0003-Add-qxl-vga-interface-support-for-upstream-qem.patch
  
negative.code:                   rev = "refs/tags/qemu-xen-${version}";
                    sha256 = "014s755slmsc7xzy7qhk9i3kbjr2grxb5yznjp71dl6xxfvnday2";
                  };
            patches = [
              (xsaPatch {
                name = "197-4.5-qemuu";
                sha256 = "09gp980qdlfpfmxy0nk7ncyaa024jnrpzx9gpq2kah21xygy5myx";
              })
              (xsaPatch {
                name = "208-qemuu-4.7";
                sha256 = "0z9b1whr8rp2riwq7wndzcnd7vw1ckwx0vbk098k2pcflrzppgrb";
              })
              (xsaPatch {
                name = "209-qemuu";
                sha256 = "05df4165by6pzxrnizkw86n2f77k9i1g4fqqpws81ycb9ng4jzin";
              })
            ];
          }
          { git = { name = "qemu-xen-traditional";
                    url = https://xenbits.xen.org/git-http/qemu-xen-traditional.git;
  