similar to: Xen-44 Package Updates for XSAs up to XSA-235

Xen 4.4.4 along with kernel 4.9.44 containing patches for XSAs (226 - 230) from August 15th are now available in centos-virt-testing. If possible, please test and provide feedback here so we can move these to release soon. XSA-228 did not affect Xen 4.4 XSA-229 only applies to the kernel XSA-235 disclosed today only affects ARM and isn't going to be added to these packages. Thanks. --

On 11/28/2017 10:11 AM, Johnny Hughes wrote: > Kevin has been rolling back the security updates to the 4.4 branch. He > has been working with some of the other distros (debian for sure, and > some others on the xen security list). > > I think it is his intention to continue this for as long as he is able > to. (Kevin, chime in if you have a schedule lifetime or EOL in mind)

Hi, On Wed, Aug 23, 2017 at 04:02:46PM -0500, Kevin Stange wrote: > Xen 4.4.4 along with kernel 4.9.44 containing patches for XSAs (226 - > 230) from August 15th are now available in centos-virt-testing. If > possible, please test and provide feedback here so we can move these to > release soon. > > XSA-228 did not affect Xen 4.4 > XSA-229 only applies to the kernel >

Kevin has been rolling back the security updates to the 4.4 branch. He has been working with some of the other distros (debian for sure, and some others on the xen security list). I think it is his intention to continue this for as long as he is able to. (Kevin, chime in if you have a schedule lifetime or EOL in mind) As long as Kevin (or anyone else) maintains the tree, I am happy to build

Given the circumstances, might it make sense to offer formal advisories of some type for these to indicate when the packages going to live are for security or other reasons? On 02/17/2017 09:51 AM, Johnny Hughes wrote: > These updates have now been pushed to mirror.centos.org and you can get > them from the main repos. > > On 02/15/2017 08:27 AM, Johnny Hughes wrote: >> There

Looks like this never got a response from anyone. On 6/25/19 10:15 AM, Yuriy Kohut wrote: > Hello, > > Are XSA-289 and XSA-274/CVE-2018-14678 fixed with Xen recent 4.8, 4.10 and kernel 4.9.177 packages ? XSA-289 is a tricky subject. In the end, it was effectively decided that these patches were not recommended until they were reviewed again and XSA-289 has no official list of flaws

I was looking to see if XSA-384 was in testing for CentOS Virt and so far it doesn't look like it is yet. From the patch, it looks like it touches x86 code. Can anyone push a build with this version? Thanks. Kevin Stange Chief Technology Officer Steadfast | Managed Infrastructure, Datacenter and Cloud Services 231 S LaSalle St, Suite 2100 | Chicago, IL 60604 312.602.2689 x203 | Fax:

On Thu, Jan 18, 2018 at 11:48:35AM -0600, Kevin Stange wrote: > Hi, > Hi, > I am very sorry to do this on short notice, but obviously Meltdown and > Spectre are a lot more than anyone was really expecting to come down the > pipeline. Xen 4.4 has been EOL upstream for about a year now and I have > personally been reviewing and backporting patches based on the 4.5 > versions

On 09/06/2017 08:40 AM, Johnny Hughes wrote: > On 09/05/2017 02:26 PM, Kevin Stange wrote: >> On 09/04/2017 05:27 PM, Johnny Hughes wrote: >>> On 09/04/2017 03:59 PM, Kevin Stange wrote: >>>> On 09/02/2017 08:11 AM, Johnny Hughes wrote: >>>>> On 09/01/2017 02:41 PM, Kevin Stange wrote: >>>>>> On 08/31/2017 07:50 AM, PJ Welsh wrote:

On 02/21/2017 05:32 PM, Kevin Stange wrote: > On 02/21/2017 11:50 AM, Johnny Hughes wrote: >> On 02/21/2017 11:47 AM, Johnny Hughes wrote: >>> >>> >>> Kevin, >>> >>> Please try the 4.9.11-22 kernel that I just released for CentOS-6 (along >>> with the newer linux-firmare packages and xfsprogs). >>> >>> If you enable

On 01/19/2018 06:17 AM, Pasi K?rkk?inen wrote: > On Thu, Jan 18, 2018 at 11:48:35AM -0600, Kevin Stange wrote: >> Hi, >> > > Hi, > >> I am very sorry to do this on short notice, but obviously Meltdown and >> Spectre are a lot more than anyone was really expecting to come down the >> pipeline. Xen 4.4 has been EOL upstream for about a year now and I

On 01/24/2017 09:10 AM, Konrad Rzeszutek Wilk wrote: > On Tue, Jan 24, 2017 at 09:29:39PM +0800, -=X.L.O.R.D=- wrote: >> Kevin Stange, >> It can be either kernel or update the NIC driver or firmware of the NIC >> card. Hope that helps! >> >> Xlord >> -----Original Message----- >> From: CentOS-virt [mailto:centos-virt-bounces at centos.org] On Behalf Of

On 02/24/2017 11:51 AM, Kevin Stange wrote: > On 02/21/2017 05:32 PM, Kevin Stange wrote: >> On 02/21/2017 11:50 AM, Johnny Hughes wrote: >>> On 02/21/2017 11:47 AM, Johnny Hughes wrote: >>>> >>>> >>>> Kevin, >>>> >>>> Please try the 4.9.11-22 kernel that I just released for CentOS-6 (along >>>> with the

On 12/12/19 8:25 AM, George Dunlap wrote: > On Mon, Dec 2, 2019 at 5:08 PM Kevin Stange <kevin at steadfast.net> wrote: >> I don't really think we should drop a release before its security >> support ends, unless we have *really clear* communication to repo users >> as to the life cycles of these builds in advance. > > Indeed, the purpose of this email is in

On 01/30/2017 03:18 AM, Jinesh Choksi wrote: >>Are there other kernel options that might be useful to try? > > pci=nomsi > > https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1521173/comments/13 Incidentally, already found that one and I'm trying it currently on one of the boxes. So far there's been no issues, but it's only been since Friday. Also, I found

On 01/30/2017 06:41 PM, Kevin Stange wrote: > On 01/30/2017 06:12 PM, Adi Pircalabu wrote: >> On 31/01/17 10:49, Kevin Stange wrote: >>> You said 3.x kernels specifically. The kernel on Xen Made Easy now is a >>> 4.4 kernel. Any chance you have tested with that one? >> >> Not yet, however the future Xen nodes we'll deploy will run CentOS 7 and >>

The last few lines are NMI watchdog: disabled CPU0 hardware events not enabled NMI watchdog: shutting down hard lockup detector on all CPUS installing Xen timer for CPU1 installing Xen timer for CPU2 installing Xen timer for CPU3 installing Xen timer for CPU4 installing Xen timer for CPU5 installing Xen timer for CPU6 Here is the screen shot: https://goo.gl/photos/yNQqaQY9bJBWQ84X8 It stops at

On 02/12/2017 05:07 PM, Adi Pircalabu wrote: > On 11/02/17 06:29, Kevin Stange wrote: >> On 01/30/2017 06:41 PM, Kevin Stange wrote: >>> On 01/30/2017 06:12 PM, Adi Pircalabu wrote: >>>> On 31/01/17 10:49, Kevin Stange wrote: >>>>> You said 3.x kernels specifically. The kernel on Xen Made Easy now >>>>> is a >>>>> 4.4

On 03/25/2017 02:35 PM, Sarah Newman wrote: > On 03/16/2017 04:22 PM, Kevin Stange wrote: > >>> I still can't rest assured the NIC issue is fixed, but no 4.4 or 4.9 >>> server has yet had a NIC issue, with some being up almost a full month. >>> It looks promising! (I'm knocking on all the wood everywhere, though.) >> >> I'm ready to call

On 07/20/2017 03:14 PM, Piotr Gackiewicz wrote: > On Thu, 20 Jul 2017, Kevin Stange wrote: > >> On 07/20/2017 05:31 AM, Piotr Gackiewicz wrote: >>> On Wed, 19 Jul 2017, Johnny Hughes wrote: >>> >>>> On 07/19/2017 09:23 AM, Johnny Hughes wrote: >>>>> On 07/19/2017 04:27 AM, Piotr Gackiewicz wrote: >>>>>> On Mon, 17 Jul