similar to: xen-4.4.2-2 push to main rxen4 repo

On 02/17/2017 02:32 PM, Kevin Stange wrote: > Given the circumstances, might it make sense to offer formal advisories > of some type for these to indicate when the packages going to live are > for security or other reasons? > We release xen every 2nd (even numbered) release as a goal (4.4, 4.6, 4.8) We don't normally release anything other than security updates. This is a SIG

xen-4.4.2-2, available from the virt6-testing repository, includes the fix for this issue. Note that Xen actually does attempt to disable the floppy disk for HVM domains by default, but due to a bug in qemu, the floppy disk only partially disabled; enough functionality to exploit this bug remains. This should be available from the normal xen4 repositories sometime this afternoon. -George

The Xen Project has publicly released XSA-138: http://xenbits.xen.org/xsa/advisory-138.html All users using HVM (fully virtualized) guests with emulated CDROM drives are advised to upgrade. There are signed versions of Xen4CentOS6 packages uploaded to the mirror system. There are also unsigned packages available on the CBS: http://cbs.centos.org/repos/virt6-testing/x86_64/os/Packages/

All, There are new xen packages released based on the new xen-4.4.2-3.el6.src.rpm package. This has the following changes: ========================= * Mon Jun 01 2015 George Dunlap <george.dunlap at eu.citrix.com> - 4.4.2-3.el6.centos - Import XSA-128,129.130,131 ========================= It has been uploaded to our master server, will be available in 30 minutes to mirror.centos.org and

These updates have now been pushed to mirror.centos.org and you can get them from the main repos. On 02/15/2017 08:27 AM, Johnny Hughes wrote: > There are xen rpms in the testing repos for XSA 207 and 208 in the > testing repos (xen-4.4.4-18.el6, xen-4.6.3-7.el6, xen-4.6.3-7.el7). > > You can enable the applicable centos-virt-xen-testing repo in your >

I have released to the master mirror the following packages for Xen4CentOS: b518e3b0fd4f735b34d7784815793cb787283d9029776bd9794cedeb274b9204 kernel-3.18.21-16.el6.x86_64.rpm 4b17373a0ef6806b26d02eb87fc299020beb60b6e31ed08a9c57d30a1410fbe7 kernel-devel-3.18.21-16.el6.x86_64.rpm cacedf6771849f7525145ad4ed7d36a2cad5b49b546173bb7c132b236cb7ac49 kernel-doc-3.18.21-16.el6.noarch.rpm

On Thu, Apr 23, 2015 at 5:09 PM, George Dunlap <dunlapg at umich.edu> wrote: > I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test > it, and won't for another week or two; but if some volunteers can put > it through its paces, I can ask Johnny to push it to the public repo > sometome early next week. Unless there are any objections, I'll ask for

George has built and I have pushed to virt6-xen-common-testing and virt7-xen-common-testing the kernel-3.18.25-19 kernel. Please test this kernel and we can release it. It also has the fix for XSA-171: http://xenbits.xen.org/xsa/advisory-171.html Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type:

There are xen rpms in the testing repos for XSA 207 and 208 in the testing repos (xen-4.4.4-18.el6, xen-4.6.3-7.el6, xen-4.6.3-7.el7). You can enable the applicable centos-virt-xen-testing repo in your /etc/yum.repos.d/CentOS-Xen.repo file. Please report positive and negative tests to this list so we can promote the updates to the main repos. Thanks, Johnny Hughes -------------- next part

On 05/13/2015 01:14 PM, George Dunlap wrote: > Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap > goodness have been built and are now in the virt6-testing repo. I've > also uploaded libvirt 1.2.15. As you may have seen earlier today, > virt6-testing also includes an updated 4.4.2 package with the latest > security update (XSA-133). > > The kernel has

On Sat, May 16, 2015 at 2:08 PM, Johnny Hughes <johnny at centos.org> wrote: > On 05/13/2015 01:14 PM, George Dunlap wrote: >> Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap >> goodness have been built and are now in the virt6-testing repo. I've >> also uploaded libvirt 1.2.15. As you may have seen earlier today, >> virt6-testing also

Given the circumstances, might it make sense to offer formal advisories of some type for these to indicate when the packages going to live are for security or other reasons? On 02/17/2017 09:51 AM, Johnny Hughes wrote: > These updates have now been pushed to mirror.centos.org and you can get > them from the main repos. > > On 02/15/2017 08:27 AM, Johnny Hughes wrote: >> There

I have released the xen-4.4.2-5.el6 rpms (fix XSA-137 and 138) and the kernel-3.18.17.el6 rpms (fix the broadcom driver issues) to the xen4 repository. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL:

On Fri, Apr 24, 2015 at 4:32 AM, Pasi K?rkk?inen <pasik at iki.fi> wrote: > On Thu, Apr 23, 2015 at 05:09:56PM +0100, George Dunlap wrote: > > I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test > > it, and won't for another week or two; but if some volunteers can put > > it through its paces, I can ask Johnny to push it to the public repo

I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test it, and won't for another week or two; but if some volunteers can put it through its paces, I can ask Johnny to push it to the public repo sometome early next week. Thanks, -George

On Wed, Feb 17, 2016 at 12:30 PM, George Dunlap <dunlapg at umich.edu> wrote: > I have the following packages going through the CBS: > * A CentOS 7 xen-4.6.1-2, with XSAs 170 and 154 > * A CentOS 6 xen-4.6.1-2, with XSAs 170 and 154 > * A CentOS 6 xen-4.4.3-11, with XSAs 170 > > All these should show up in mirrors hopefully sometime later today. > As usual, please report

Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap goodness have been built and are now in the virt6-testing repo. I've also uploaded libvirt 1.2.15. As you may have seen earlier today, virt6-testing also includes an updated 4.4.2 package with the latest security update (XSA-133). The kernel has had some basic testing (by myself, Johnny, and another community member), but

On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap wrote: > So going forward, we're moving the CentOS 6 Xen packages from the > custom "xen4" repos that were introduced several years ago, to repos > based on its position as a sub-project of the Virt Sig. That will > make things consistent between all the sigs, as well as between CentOS > 6 and 7 Xen packages.

Thanks George. As there are now quite many options to choose from, what would be the best option performance wise for running 32bit domUs under xen-4.6? Best, Peter On Wed, Jan 17, 2018 at 7:14 PM, George Dunlap <dunlapg at umich.edu> wrote: > I've built & tagged packages for CentOS 6 and 7 4.6.6-9, with XPTI > "stage 1" Meltdown mitigation. > > This will

Xen 4.6.3-3 packages, with XSA-190, are currently making their way through the build system. The vulnerability is an intra-guest information leak (i.e., between different processes in the same VM). More information here: https://xenbits.xen.org/xsa/advisory-190.html -George