CentOS virt - Jun 2017 - Xen 4.6.3-15 packages, including XSAs 216-219, 221-225 on their way through the build system

Xen 4.6.3-15 packages for CentOS 6 and CentOS 7 are on their way
through the build system.  They should show up in centos-virt-testing
in a few hours, and in the main mirrors tomorrow morning (God
willing).

These contain several critical updates; users are encouraged to update
as soon as possible.

XSA 220 unfortunately had several dependencies on changes included in
4.6.4 and 4.6.5.  This particular vulnerability is slightly lower
priorty; so I have queued up an update to 4.6.5 which includes this
patch.  Once 4.6.3-15 is tagged for release, I'll start building 4.6.5
put it in centos-virt-testing for people to test.

 -George

On 06/20/2017 05:06 AM, George Dunlap wrote:
> Xen 4.6.3-15 packages for CentOS 6 and CentOS 7 are on their way
> through the build system.  They should show up in centos-virt-testing
> in a few hours, and in the main mirrors tomorrow morning (God
> willing).
> 
> These contain several critical updates; users are encouraged to update
> as soon as possible.
> 
There are also Linux kernel changes in XSA-216. They apply cleanly to 4.9.31 and
presumably also 4.9.25.

--Sarah

Hi,
that kernel fix will be released on 6.x repo also ?
I see it only on 7.x repo   kernel-4.9.31-27.el7.x86_64.rpm


thanks


On 20/06/2017 20:15, Sarah Newman wrote:
> On 06/20/2017 05:06 AM, George Dunlap wrote:
>> Xen 4.6.3-15 packages for CentOS 6 and CentOS 7 are on their way
>> through the build system.  They should show up in centos-virt-testing
>> in a few hours, and in the main mirrors tomorrow morning (God
>> willing).
>>
>> These contain several critical updates; users are encouraged to update
>> as soon as possible.
>>
> There are also Linux kernel changes in XSA-216. They apply cleanly to
4.9.31 and presumably also 4.9.25.
>
> --Sarah
> _______________________________________________
> CentOS-virt mailing list
> CentOS-virt at centos.org
> https://lists.centos.org/mailman/listinfo/centos-virt

-- 
--------------------------------------------------
Giuseppe Tanzilli
Serverplan