similar to: New Xen-44 update for XSA-179

There are new Xen-46 packages for XSA-179 in the testing repo based on xen-4.6.1-7.el6.src.rpm (for EL6) and xen-4.6.1-7.el7.src.rpm (for EL&). If you are using the xen-46 branch on either el6 ot el7, please test and report issues to this list. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type:

On 02/17/2017 02:32 PM, Kevin Stange wrote: > Given the circumstances, might it make sense to offer formal advisories > of some type for these to indicate when the packages going to live are > for security or other reasons? > We release xen every 2nd (even numbered) release as a goal (4.4, 4.6, 4.8) We don't normally release anything other than security updates. This is a SIG

There are xen rpms in the testing repos for XSA 207 and 208 in the testing repos (xen-4.4.4-18.el6, xen-4.6.3-7.el6, xen-4.6.3-7.el7). You can enable the applicable centos-virt-xen-testing repo in your /etc/yum.repos.d/CentOS-Xen.repo file. Please report positive and negative tests to this list so we can promote the updates to the main repos. Thanks, Johnny Hughes -------------- next part

These updates have now been pushed to mirror.centos.org and you can get them from the main repos. On 02/15/2017 08:27 AM, Johnny Hughes wrote: > There are xen rpms in the testing repos for XSA 207 and 208 in the > testing repos (xen-4.4.4-18.el6, xen-4.6.3-7.el6, xen-4.6.3-7.el7). > > You can enable the applicable centos-virt-xen-testing repo in your >

On 04/18/2016 02:19 PM, Johnny Hughes wrote: > New Packages in Testing for CentOS-7-Xen-46, CentOS-6-Xen-46, > CentOS-6-Xen-44. > > CentOS-7-Xen46: > - kernel-3.18.30-20.el7.src.rpm : XSA-174, upstream changelogs: > https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.26 > https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.27 >

All, I have upgraded xen-44 from Xen-4.4.3 to Xen-4.4.4 (and placed the resulting RPMs from xen-4.4.4-2.el6.src.rpm into virt6-xen-44-testing). These RPMs have all the latest updates that were rolled into the xen-4.4.3-14.el6.src.rpm packages (through XSA-172 updates). Here is how to test: 1. If you want this box to always have 'testing' enabled for xen-44 .. do this: Edit

Given the circumstances, might it make sense to offer formal advisories of some type for these to indicate when the packages going to live are for security or other reasons? On 02/17/2017 09:51 AM, Johnny Hughes wrote: > These updates have now been pushed to mirror.centos.org and you can get > them from the main repos. > > On 02/15/2017 08:27 AM, Johnny Hughes wrote: >> There

On 01/03/2017 02:29 AM, Johnny Hughes wrote: > On 01/02/2017 11:05 AM, Brandon Shoemaker wrote: >> Hi list, >> >> >> >> Are the recent Xen XSA?s (199-204) updates going to be released soon? >> >> >> >> http://xenbits.xen.org/xsa/ > > They are in the testing repo .. waiting on feedback that they work. > > >

George has built and I have pushed to virt6-xen-common-testing and virt7-xen-common-testing the kernel-3.18.25-19 kernel. Please test this kernel and we can release it. It also has the fix for XSA-171: http://xenbits.xen.org/xsa/advisory-171.html Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type:

Hi all, Sorry for running a bit behind on security patch releases for the Xen-44 branch. As of yesterday, package version 4.4.4-28 was released for testing, which includes all relevant XSA patches through XSA-235 here: https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ Please test and provide feedback if possible so we can get this package moved to release fairly soon. Currently in the

CentOS Errata and Security Advisory 2013:X003 Important (Xen4CentOS) The following updated files have been uploaded and are currently syncing to the mirrors: ( sha256sum Filename ) ----------------------------- X86_64 ----------------------------- xen-4.2.2-23.el6.centos.alt.x86_64.rpm: 5e4118518434950ae600618884f97a0f959f39f772cce1e5c540e25ddadaef51

On Thu, Nov 19, 2015 at 12:28 PM, George Dunlap <dunlapg at umich.edu> wrote: > On Wed, Nov 18, 2015 at 1:31 PM, Pasi K?rkk?inen <pasik at iki.fi> wrote: >> On Wed, Nov 18, 2015 at 02:20:49PM +0200, Manuel Wolfshant wrote: >>> On 11/18/2015 02:08 PM, Pasi K?rkk?inen wrote: >>> >Hello, >>> > >>> >On Sun, Nov 15, 2015 at 06:42:18PM

There are new kernel packages for Xen-44 and Xen-46 EL6 based on kernel-3.18.32-20.el6.src.rpm and for Xen-46 EL7 based on kernel-3.18.32-20.el6.src.rpm in the xen testing repos. Please test and report any problems with these kernels to this list. Change logs this the last kernel update: https://cdn.kernel.org/pub/linux/kernel/v3.x/ChangeLog-3.18.32

On 11/28/2017 10:11 AM, Johnny Hughes wrote: > Kevin has been rolling back the security updates to the 4.4 branch. He > has been working with some of the other distros (debian for sure, and > some others on the xen security list). > > I think it is his intention to continue this for as long as he is able > to. (Kevin, chime in if you have a schedule lifetime or EOL in mind)

I have released to the master mirror the following packages for Xen4CentOS: b518e3b0fd4f735b34d7784815793cb787283d9029776bd9794cedeb274b9204 kernel-3.18.21-16.el6.x86_64.rpm 4b17373a0ef6806b26d02eb87fc299020beb60b6e31ed08a9c57d30a1410fbe7 kernel-devel-3.18.21-16.el6.x86_64.rpm cacedf6771849f7525145ad4ed7d36a2cad5b49b546173bb7c132b236cb7ac49 kernel-doc-3.18.21-16.el6.noarch.rpm

On Fri, Apr 24, 2015 at 4:32 AM, Pasi K?rkk?inen <pasik at iki.fi> wrote: > On Thu, Apr 23, 2015 at 05:09:56PM +0100, George Dunlap wrote: > > I've got Xen 4.4.2 in virt6-testing. I haven't had a chance to test > > it, and won't for another week or two; but if some volunteers can put > > it through its paces, I can ask Johnny to push it to the public repo

On Wed, Nov 18, 2015 at 02:20:49PM +0200, Manuel Wolfshant wrote: > On 11/18/2015 02:08 PM, Pasi K?rkk?inen wrote: > >Hello, > > > >On Sun, Nov 15, 2015 at 06:42:18PM +0200, Pasi K?rkk?inen wrote: > >>On Sun, Nov 15, 2015 at 02:04:58PM +0200, Pasi K?rkk?inen wrote: > >>>On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap wrote: > >>>>So

On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap wrote: > So going forward, we're moving the CentOS 6 Xen packages from the > custom "xen4" repos that were introduced several years ago, to repos > based on its position as a sub-project of the Virt Sig. That will > make things consistent between all the sigs, as well as between CentOS > 6 and 7 Xen packages.

Kevin has been rolling back the security updates to the 4.4 branch. He has been working with some of the other distros (debian for sure, and some others on the xen security list). I think it is his intention to continue this for as long as he is able to. (Kevin, chime in if you have a schedule lifetime or EOL in mind) As long as Kevin (or anyone else) maintains the tree, I am happy to build

I have released the xen-4.4.2-5.el6 rpms (fix XSA-137 and 138) and the kernel-3.18.17.el6 rpms (fix the broadcom driver issues) to the xen4 repository. Thanks, Johnny Hughes -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 198 bytes Desc: OpenPGP digital signature URL: