similar to: kernel-3.18.25-19 xen kernel with XSA-171 in virt6 and virt7 testing

The Xen Project has publicly released XSA-138: http://xenbits.xen.org/xsa/advisory-138.html All users using HVM (fully virtualized) guests with emulated CDROM drives are advised to upgrade. There are signed versions of Xen4CentOS6 packages uploaded to the mirror system. There are also unsigned packages available on the CBS: http://cbs.centos.org/repos/virt6-testing/x86_64/os/Packages/

On 05/13/2015 01:14 PM, George Dunlap wrote: > Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap > goodness have been built and are now in the virt6-testing repo. I've > also uploaded libvirt 1.2.15. As you may have seen earlier today, > virt6-testing also includes an updated 4.4.2 package with the latest > security update (XSA-133). > > The kernel has

Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap goodness have been built and are now in the virt6-testing repo. I've also uploaded libvirt 1.2.15. As you may have seen earlier today, virt6-testing also includes an updated 4.4.2 package with the latest security update (XSA-133). The kernel has had some basic testing (by myself, Johnny, and another community member), but

On Sat, May 16, 2015 at 2:08 PM, Johnny Hughes <johnny at centos.org> wrote: > On 05/13/2015 01:14 PM, George Dunlap wrote: >> Thanks to work from Johnny, linux 3.18.12 with all the x4c blktap >> goodness have been built and are now in the virt6-testing repo. I've >> also uploaded libvirt 1.2.15. As you may have seen earlier today, >> virt6-testing also

I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test it, and won't for another week or two; but if some volunteers can put it through its paces, I can ask Johnny to push it to the public repo sometome early next week. Thanks, -George

On Thu, Apr 23, 2015 at 5:09 PM, George Dunlap <dunlapg at umich.edu> wrote: > I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test > it, and won't for another week or two; but if some volunteers can put > it through its paces, I can ask Johnny to push it to the public repo > sometome early next week. Unless there are any objections, I'll ask for

The following have been added to the virt6-xen-44-testing repo: x86_64: kernel-3.18.21-13.el6.x86_64 kernel-devel-3.18.21-13.el6.x86_64 kernel-firmware-3.18.21-13.el6.noarch kernel-headers-3.18.21-13.el6.x86_64 perf-3.18.21-13.el6.x86_64 src: kernel-3.18.21-13.el6.x86_64 Please test these for a week or so and we will move them into production next week. I am also building this kernel into

On Fri, Apr 24, 2015 at 4:32 AM, Pasi K?rkk?inen <pasik at iki.fi> wrote: > On Thu, Apr 23, 2015 at 05:09:56PM +0100, George Dunlap wrote: > > I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test > > it, and won't for another week or two; but if some volunteers can put > > it through its paces, I can ask Johnny to push it to the public repo

There is now a kernel-3.18.25-18 that fixes CVE-2016-0728 (and upgrades to the lastest 3.18 LTS kernel) for Xen4CentOS users. This kernel can be tested from here: http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/os/Packages/ (CentOS-6) and here: http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/os/Packages/ (CentOS-7) Once we get several tested installs we can move this

All, I have upgraded xen-44 from Xen-4.4.3 to Xen-4.4.4 (and placed the resulting RPMs from xen-4.4.4-2.el6.src.rpm into virt6-xen-44-testing). These RPMs have all the latest updates that were rolled into the xen-4.4.3-14.el6.src.rpm packages (through XSA-172 updates). Here is how to test: 1. If you want this box to always have 'testing' enabled for xen-44 .. do this: Edit

It looks like no XSA-142 patch, which is "libxl fails to honour readonly flag on disks with qemu-xen" has been applied to Xen4CentOS. I assume this was on purpose? If not, I can have someone try adding the original patch from http://xenbits.xen.org/xsa/advisory-142.html and some variant of the commit from ef6cb76026628e26e3d1ae53c50ccde1c3c78b1b

On 01/19/2016 05:22 PM, Johnny Hughes wrote: > There is now a kernel-3.18.25-18 that fixes CVE-2016-0728 (and upgrades > to the lastest 3.18 LTS kernel) for Xen4CentOS users. > > This kernel can be tested from here: > > http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/os/Packages/ > (CentOS-6) > > and here: > >

There is a new xen kernel for centos-6 and centos-7 the needs testing in: http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/os/Packages/ and http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/os/Packages/ Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes

On 02/17/2017 02:32 PM, Kevin Stange wrote: > Given the circumstances, might it make sense to offer formal advisories > of some type for these to indicate when the packages going to live are > for security or other reasons? > We release xen every 2nd (even numbered) release as a goal (4.4, 4.6, 4.8) We don't normally release anything other than security updates. This is a SIG

xen 4.6.1-5 has been build and should be available in buildlogs soon (available via the centos-virt-xen-testing repo). More information can be found here: http://xenbits.xen.org/xsa/advisory-172.html A signed copy should hit the mirrors tomorrow. Please report any problems on this list. Thanks, -George

Ian Jackson writes ("64bit PV guest breakout [XSA-213]"): > Source: xen > Version: 4.4.1-9 > Severity: important > Tags: security upstream fixed-upstream > > See > https://xenbits.xen.org/xsa/advisory-213.html Ian Jackson writes ("grant transfer allows PV guest to elevate privileges [XSA-214]"): > Source: xen > Version: 4.4.1-9 > Severity:

Dear Security Team, I have prepared a new upload addressing a number of open security issues in Xen. Due to the complexity of the patches that address XSA-273 [0] the packages have been built from upstream's staging-4.8 / staging-4.10 branch again as recommended in that advisory. Commits on those branches are restricted to those that address the following XSAs (cf. [1]): - XSA-273

OK Guys and Gals, We have just kicked off a build of the 4.9.34-29 xen kernel on the Community Build Service for both EL6 and EL7. This kernel has some important things in it. 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also the patch for Xen Security fix XSA-216. See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34:

Hi, I tried this new kernel on out xen testbed with centos 6 and iscsi over qlog 57810 is not working, tried replacing drivers from manufacturer but does not work either. tried 4.9.23 from repo and is not working finally the old 4.9.13-22.el6.x86_64 is the only one from 4.9.x taht is working with hw iscsi on this cards. I will be happy to help debug the issue and get a latest kernel working

I presume this addresses CVE-2016-0728? On 19 January 2016 at 21:02, Johnny Hughes <johnny at centos.org> wrote: > There is a new xen kernel for centos-6 and centos-7 the needs testing in: > > http://cbs.centos.org/repos/virt6-xen-common-testing/x86_64/os/Packages/ > > and > > http://cbs.centos.org/repos/virt7-xen-common-testing/x86_64/os/Packages/ > > Thanks,