similar to: XSA-384

Xen 4.4.4 along with kernel 4.9.44 containing patches for XSAs (226 - 230) from August 15th are now available in centos-virt-testing. If possible, please test and provide feedback here so we can move these to release soon. XSA-228 did not affect Xen 4.4 XSA-229 only applies to the kernel XSA-235 disclosed today only affects ARM and isn't going to be added to these packages. Thanks. --

On 11/28/2017 10:11 AM, Johnny Hughes wrote: > Kevin has been rolling back the security updates to the 4.4 branch. He > has been working with some of the other distros (debian for sure, and > some others on the xen security list). > > I think it is his intention to continue this for as long as he is able > to. (Kevin, chime in if you have a schedule lifetime or EOL in mind)

Hi, On Wed, Aug 23, 2017 at 04:02:46PM -0500, Kevin Stange wrote: > Xen 4.4.4 along with kernel 4.9.44 containing patches for XSAs (226 - > 230) from August 15th are now available in centos-virt-testing. If > possible, please test and provide feedback here so we can move these to > release soon. > > XSA-228 did not affect Xen 4.4 > XSA-229 only applies to the kernel >

Kevin has been rolling back the security updates to the 4.4 branch. He has been working with some of the other distros (debian for sure, and some others on the xen security list). I think it is his intention to continue this for as long as he is able to. (Kevin, chime in if you have a schedule lifetime or EOL in mind) As long as Kevin (or anyone else) maintains the tree, I am happy to build

Looks like this never got a response from anyone. On 6/25/19 10:15 AM, Yuriy Kohut wrote: > Hello, > > Are XSA-289 and XSA-274/CVE-2018-14678 fixed with Xen recent 4.8, 4.10 and kernel 4.9.177 packages ? XSA-289 is a tricky subject. In the end, it was effectively decided that these patches were not recommended until they were reviewed again and XSA-289 has no official list of flaws

Hi all, Sorry for running a bit behind on security patch releases for the Xen-44 branch. As of yesterday, package version 4.4.4-28 was released for testing, which includes all relevant XSA patches through XSA-235 here: https://buildlogs.centos.org/centos/6/virt/x86_64/xen-44/ Please test and provide feedback if possible so we can get this package moved to release fairly soon. Currently in the

Given the circumstances, might it make sense to offer formal advisories of some type for these to indicate when the packages going to live are for security or other reasons? On 02/17/2017 09:51 AM, Johnny Hughes wrote: > These updates have now been pushed to mirror.centos.org and you can get > them from the main repos. > > On 02/15/2017 08:27 AM, Johnny Hughes wrote: >> There

On 02/21/2017 05:32 PM, Kevin Stange wrote: > On 02/21/2017 11:50 AM, Johnny Hughes wrote: >> On 02/21/2017 11:47 AM, Johnny Hughes wrote: >>> >>> >>> Kevin, >>> >>> Please try the 4.9.11-22 kernel that I just released for CentOS-6 (along >>> with the newer linux-firmare packages and xfsprogs). >>> >>> If you enable

On 01/24/2017 09:10 AM, Konrad Rzeszutek Wilk wrote: > On Tue, Jan 24, 2017 at 09:29:39PM +0800, -=X.L.O.R.D=- wrote: >> Kevin Stange, >> It can be either kernel or update the NIC driver or firmware of the NIC >> card. Hope that helps! >> >> Xlord >> -----Original Message----- >> From: CentOS-virt [mailto:centos-virt-bounces at centos.org] On Behalf Of

On 02/24/2017 11:51 AM, Kevin Stange wrote: > On 02/21/2017 05:32 PM, Kevin Stange wrote: >> On 02/21/2017 11:50 AM, Johnny Hughes wrote: >>> On 02/21/2017 11:47 AM, Johnny Hughes wrote: >>>> >>>> >>>> Kevin, >>>> >>>> Please try the 4.9.11-22 kernel that I just released for CentOS-6 (along >>>> with the

On 12/12/19 8:25 AM, George Dunlap wrote: > On Mon, Dec 2, 2019 at 5:08 PM Kevin Stange <kevin at steadfast.net> wrote: >> I don't really think we should drop a release before its security >> support ends, unless we have *really clear* communication to repo users >> as to the life cycles of these builds in advance. > > Indeed, the purpose of this email is in

On 01/30/2017 06:41 PM, Kevin Stange wrote: > On 01/30/2017 06:12 PM, Adi Pircalabu wrote: >> On 31/01/17 10:49, Kevin Stange wrote: >>> You said 3.x kernels specifically. The kernel on Xen Made Easy now is a >>> 4.4 kernel. Any chance you have tested with that one? >> >> Not yet, however the future Xen nodes we'll deploy will run CentOS 7 and >>

On 01/30/2017 03:18 AM, Jinesh Choksi wrote: >>Are there other kernel options that might be useful to try? > > pci=nomsi > > https://bugs.launchpad.net/ubuntu/+source/linux/+bug/1521173/comments/13 Incidentally, already found that one and I'm trying it currently on one of the boxes. So far there's been no issues, but it's only been since Friday. Also, I found

The last few lines are NMI watchdog: disabled CPU0 hardware events not enabled NMI watchdog: shutting down hard lockup detector on all CPUS installing Xen timer for CPU1 installing Xen timer for CPU2 installing Xen timer for CPU3 installing Xen timer for CPU4 installing Xen timer for CPU5 installing Xen timer for CPU6 Here is the screen shot: https://goo.gl/photos/yNQqaQY9bJBWQ84X8 It stops at

On 02/12/2017 05:07 PM, Adi Pircalabu wrote: > On 11/02/17 06:29, Kevin Stange wrote: >> On 01/30/2017 06:41 PM, Kevin Stange wrote: >>> On 01/30/2017 06:12 PM, Adi Pircalabu wrote: >>>> On 31/01/17 10:49, Kevin Stange wrote: >>>>> You said 3.x kernels specifically. The kernel on Xen Made Easy now >>>>> is a >>>>> 4.4

On 01/26/2017 09:35 AM, Johnny Hughes wrote: > On 01/26/2017 09:32 AM, Johnny Hughes wrote: >> On 01/25/2017 11:49 AM, Kevin Stange wrote: >>> On 01/24/2017 11:16 AM, Kevin Stange wrote: >>>> On 01/24/2017 09:10 AM, Konrad Rzeszutek Wilk wrote: >>>>> On Tue, Jan 24, 2017 at 09:29:39PM +0800, -=X.L.O.R.D=- wrote: >>>>>> Kevin Stange,

On 03/25/2017 02:35 PM, Sarah Newman wrote: > On 03/16/2017 04:22 PM, Kevin Stange wrote: > >>> I still can't rest assured the NIC issue is fixed, but no 4.4 or 4.9 >>> server has yet had a NIC issue, with some being up almost a full month. >>> It looks promising! (I'm knocking on all the wood everywhere, though.) >> >> I'm ready to call

On 07/20/2017 03:14 PM, Piotr Gackiewicz wrote: > On Thu, 20 Jul 2017, Kevin Stange wrote: > >> On 07/20/2017 05:31 AM, Piotr Gackiewicz wrote: >>> On Wed, 19 Jul 2017, Johnny Hughes wrote: >>> >>>> On 07/19/2017 09:23 AM, Johnny Hughes wrote: >>>>> On 07/19/2017 04:27 AM, Piotr Gackiewicz wrote: >>>>>> On Mon, 17 Jul

On 01/18/2018 11:48 AM, Kevin Stange wrote: > Hi, > > I am very sorry to do this on short notice, but obviously Meltdown and > Spectre are a lot more than anyone was really expecting to come down the > pipeline. Xen 4.4 has been EOL upstream for about a year now and I have > personally been reviewing and backporting patches based on the 4.5 > versions made available

On Thu, Jan 18, 2018 at 11:48:35AM -0600, Kevin Stange wrote: > Hi, > Hi, > I am very sorry to do this on short notice, but obviously Meltdown and > Spectre are a lot more than anyone was really expecting to come down the > pipeline. Xen 4.4 has been EOL upstream for about a year now and I have > personally been reviewing and backporting patches based on the 4.5 > versions