similar to: recent Xen XSA's (199-204)

On 01/03/2017 02:29 AM, Johnny Hughes wrote: > On 01/02/2017 11:05 AM, Brandon Shoemaker wrote: >> Hi list, >> >> >> >> Are the recent Xen XSA?s (199-204) updates going to be released soon? >> >> >> >> http://xenbits.xen.org/xsa/ > > They are in the testing repo .. waiting on feedback that they work. > > >

On 01/02/2017 11:05 AM, Brandon Shoemaker wrote: > Hi list, > > > > Are the recent Xen XSA?s (199-204) updates going to be released soon? > > > > http://xenbits.xen.org/xsa/ They are in the testing repo .. waiting on feedback that they work. http://buildlogs.centos.org/centos/7/virt/ (or /6/ as well) -------------- next part -------------- A non-text

On Thu, Jan 5, 2017 at 4:51 PM, Brandon Shoemaker <brandon at thinkhuge.net> wrote: > Hello again, > > I still actually do not see these Xen updates available for Xen 4.6.3-4.el6 > Centos6? I've checked a few different servers of mine over the last few > days. They should at least be available (unsigned) from centos-virt-xen-testing. KB I guess hasn't been doing any

Hello again, I still actually do not see these Xen updates available for Xen 4.6.3-4.el6 Centos6? I've checked a few different servers of mine over the last few days. Should I see them available by now? Using this repo: [centos-virt-xen] name=CentOS-$releasever - xen baseurl=http://mirror.centos.org/centos/$releasever/virt/$basearch/xen-46 gpgcheck=1 enabled=1

On Wed, Nov 18, 2015 at 1:31 PM, Pasi K?rkk?inen <pasik at iki.fi> wrote: > On Wed, Nov 18, 2015 at 02:20:49PM +0200, Manuel Wolfshant wrote: >> On 11/18/2015 02:08 PM, Pasi K?rkk?inen wrote: >> >Hello, >> > >> >On Sun, Nov 15, 2015 at 06:42:18PM +0200, Pasi K?rkk?inen wrote: >> >>On Sun, Nov 15, 2015 at 02:04:58PM +0200, Pasi K?rkk?inen wrote:

Hello, Looking at CBS (http://cbs.centos.org/koji/packageinfo?packageID=88) I can't seem to find any recent builds of CentOS Xen, to include the recent XSA's.. any chance we could do new builds for centos6 and centos7 ? Thanks, -- Pasi

I've built & tagged packages for CentOS 6 and 7 4.6.6-9, with XPTI "stage 1" Meltdown mitigation. This will allow 64-bit PV guests to run safely (with a few caveats), but incurs a fairly significant slowdown for 64-bit PV guests on Intel boxes (including domain 0). If you prefer using Vixen / Comet, you can turn it off by adding 'xpti=0' to your Xen command-line.

xen 4.6.1-5 has been build and should be available in buildlogs soon (available via the centos-virt-xen-testing repo). More information can be found here: http://xenbits.xen.org/xsa/advisory-172.html A signed copy should hit the mirrors tomorrow. Please report any problems on this list. Thanks, -George

I have the following packages going through the CBS: * A CentOS 7 xen-4.6.1-2, with XSAs 170 and 154 * A CentOS 6 xen-4.6.1-2, with XSAs 170 and 154 * A CentOS 6 xen-4.4.3-11, with XSAs 170 All these should show up in mirrors hopefully sometime later today. As usual, please report any problems here. Xen 4.4 only has XSA 170 because at the time the embargo was lifted, I didn't have a suitable

Hi, that kernel fix will be released on 6.x repo also ? I see it only on 7.x repo kernel-4.9.31-27.el7.x86_64.rpm thanks On 20/06/2017 20:15, Sarah Newman wrote: > On 06/20/2017 05:06 AM, George Dunlap wrote: >> Xen 4.6.3-15 packages for CentOS 6 and CentOS 7 are on their way >> through the build system. They should show up in centos-virt-testing >> in a few hours, and

XSA 169 is out, but is low-priority and has a work-around, so I'm going to batch it together with XSAs 167-168 and release a new 4.4.3 package when the embargo is lifted next Wednesday. This will be the last XSA update for the 4.4.3 packages. Today or tomorrow I will push the Xen 4.6.0 packages to buildlogs for testing; and sometime after the final 4.4.3 packages are released, I will push

OK Guys and Gals, We have just kicked off a build of the 4.9.34-29 xen kernel on the Community Build Service for both EL6 and EL7. This kernel has some important things in it. 1. It has a patch for the stack guard issue (CVE-2017-1000364). Also the patch for Xen Security fix XSA-216. See these upstream changelogs for ALL kernel commits from 4.9.31 to 4.9.34:

On 11/18/2015 02:08 PM, Pasi K?rkk?inen wrote: > Hello, > > On Sun, Nov 15, 2015 at 06:42:18PM +0200, Pasi K?rkk?inen wrote: >> On Sun, Nov 15, 2015 at 02:04:58PM +0200, Pasi K?rkk?inen wrote: >>> On Thu, Nov 12, 2015 at 02:00:27PM +0000, George Dunlap wrote: >>>> So going forward, we're moving the CentOS 6 Xen packages from the >>>> custom

Dear Security Team, I have prepared a new upload addressing a number of open security issues in Xen. Due to the complexity of the patches that address XSA-273 [0] the packages have been built from upstream's staging-4.8 / staging-4.10 branch again as recommended in that advisory. Commits on those branches are restricted to those that address the following XSAs (cf. [1]): - XSA-273

Just a heads-up: A Xen package with XSAs through 163 is on its way through the build system. I'll send an announcement when I've tagged it as ready to be propagated to the mirrors. As with the last XSA update, it will depend on having manually updated to the new Virt SIG repository layout. If you haven't already please run the following in preparation: yum install

Ian Jackson writes ("64bit PV guest breakout [XSA-213]"): > Source: xen > Version: 4.4.1-9 > Severity: important > Tags: security upstream fixed-upstream > > See > https://xenbits.xen.org/xsa/advisory-213.html Ian Jackson writes ("grant transfer allows PV guest to elevate privileges [XSA-214]"): > Source: xen > Version: 4.4.1-9 > Severity:

Hello, Are XSA-289 and XSA-274/CVE-2018-14678 fixed with Xen recent 4.8, 4.10 and kernel 4.9.177 packages ? Thank you

Salvatore Bonaccorso writes ("Re: Updated Xen packages for XSA 216..225"): > On Tue, Jul 11, 2017 at 11:34:38PM +0200, Moritz Muehlenhoff wrote: > > On Mon, Jul 03, 2017 at 12:33:54PM +0100, Ian Jackson wrote: > > > Moritz M?hlenhoff writes ("Re: Updated Xen packages for XSA 216..225"): > > > > Sorry for the late reply, was on vacation for a week.

Moritz Muehlenhoff writes ("Re: Xen package security updates for jessie 4.4, XSA-213, XSA-214"): > On Thu, May 04, 2017 at 05:59:18PM +0100, Ian Jackson wrote: > > Should I put jessie-security in the debian/changelog and dgit push it > > (ie, from many people's pov, dput it) ? > > Yes, the distribution line should be jessie-security, but please send > a

Moritz Muehlenhoff writes ("Re: Xen package security updates for jessie 4.4, XSA-213, XSA-214"): > Yes, the distribution line should be jessie-security, but please send > a debdiff to team at security.debian.org for a quick review before > uploading (I have no idea whether dgit supports security-master). Here is the proposed debdiff (actually, a git diff) for xen in jessie. My