<div dir="ltr"><br><div class="gmail_extra"><br><div class="gmail_quote">2018-05-24 13:38 GMT+02:00 Karanbir Singh <span dir="ltr"><<a href="mailto:kbsingh@redhat.com" target="_blank">kbsingh@redhat.com</a>></span>:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"><div class="HOEnZb"><div class="h5">On 24/05/18 11:53, Karanbir Singh wrote:<br>
> On 24/05/18 11:18, Sandro Bonazzola wrote:<br>
>><br>
>><br>
>> 2018-05-24 3:18 GMT+02:00 Karanbir Singh <<a href="mailto:kbsingh@redhat.com">kbsingh@redhat.com</a><br>
>> <mailto:<a href="mailto:kbsingh@redhat.com">kbsingh@redhat.com</a>>>:<br>
>><br>
>> On 23/05/18 06:56, Sandro Bonazzola wrote:<br>
>> > CentOS Errata and Security Advisory 2018:1655 Important<br>
>> > <br>
>> > Upstream details at: <a href="https://access.redhat.com/errata/RHSA-2018:1655" rel="noreferrer" target="_blank">https://access.redhat.com/<wbr>errata/RHSA-2018:1655</a><br>
>> <<a href="https://access.redhat.com/errata/RHSA-2018:1655" rel="noreferrer" target="_blank">https://access.redhat.com/<wbr>errata/RHSA-2018:1655</a>><br>
>> > <br>
>> > This is the qemu-kvm-ev side of the CVE-2018-3639 mitigation.<br>
>> > <br>
>> > qemu-kvm-ev-2.10.0-21.el7_5.3.<wbr>1<br>
>> > <<a href="http://cbs.centos.org/koji/buildinfo?buildID=22813" rel="noreferrer" target="_blank">http://cbs.centos.org/koji/<wbr>buildinfo?buildID=22813</a><br>
>> <<a href="http://cbs.centos.org/koji/buildinfo?buildID=22813" rel="noreferrer" target="_blank">http://cbs.centos.org/koji/<wbr>buildinfo?buildID=22813</a>>> has been<br>
>> tagged for<br>
>> > release yesterday morning and should land on mirrors this morning.<br>
>> > Johnny, Brian, Karanbir, please cross check it's being published, I<br>
>> > would have expected it to be already on mirrors.<br>
>> > <br>
>> > Thanks,<br>
>> > -- <br>
>> > <br>
>> > SANDRO BONAZZOLA<br>
>> > <br>
>> > ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D<br>
>> > <br>
>> > Red Hat EMEA <<a href="https://www.redhat.com/" rel="noreferrer" target="_blank">https://www.redhat.com/</a>><br>
>> ><br>
>> > <a href="mailto:sbonazzo@redhat.com">sbonazzo@redhat.com</a> <mailto:<a href="mailto:sbonazzo@redhat.com">sbonazzo@redhat.com</a>><br>
>> <mailto:<a href="mailto:sbonazzo@redhat.com">sbonazzo@redhat.com</a> <mailto:<a href="mailto:sbonazzo@redhat.com">sbonazzo@redhat.com</a>>> <br>
>> ><br>
>> > <<a href="https://red.ht/sig" rel="noreferrer" target="_blank">https://red.ht/sig</a>> <br>
>> > <<a href="https://redhat.com/summit" rel="noreferrer" target="_blank">https://redhat.com/summit</a>><br>
>> ><br>
>><br>
>> With all the noise around this specific package, i went and looked and<br>
>> its in the queue for push, should be in the packages for Thu 24th<br>
>><br>
>><br>
>> Looks like it's not yet published.<br>
>> Also altarch is still broken <a href="https://bugs.centos.org/view.php?id=14835" rel="noreferrer" target="_blank">https://bugs.centos.<wbr>org/view.php?id=14835</a><br>
>><br>
>><br>
>><br>
>> <br>
>><br>
> <br>
> yeah, this is down to how the various arch bits were pushed out of sync;<br>
> we got cut both ways, either if we do x86_64 on its own or we dont,<br>
> <br>
> i am working on sig content right now, so let me go look at this as well<br>
> <br>
> <br>
<br>
</div></div>the sign runs are now running cleanly for altarch as well, it looks like<br>
the mirrors caught up in sync with those in the last day or so. its<br>
going to run for a bit though, I'll keep an eye on things.<br>
<br>
w.r.t the CVE note - just want to point out that I've been told that<br>
lacking the vendor supplied microcode this fix's in this code do not<br>
really help much. And there is no vendor microcode as yet. Is that an<br>
accurate state of play ?<br></blockquote><div><br></div><div>AFAIK Intel released a beta microcode to OEMs so individual hardware vendors should be providing it through their support pages after testing with their hardware.</div><div><br></div><div> </div><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div class="HOEnZb"><div class="h5"><br>
<br>
-- <br>
Karanbir Singh <<a href="mailto:kbsingh@redhat.com">kbsingh@redhat.com</a>> | London, UK<br>
Project Lead, The CentOS Project<br>
Consulting Engineer, <a href="https://openshift.io/" rel="noreferrer" target="_blank">https://openshift.io/</a><br>
<br>
</div></div></blockquote></div><br><br clear="all"><div><br></div>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div><div dir="ltr"><div dir="ltr"><div dir="ltr"><div dir="ltr"><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-weight:bold;margin:0px;padding:0px;font-size:14px;text-transform:uppercase"><span>SANDRO</span> <span>BONAZZOLA</span></p><p style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:10px;margin:0px 0px 4px;text-transform:uppercase"><span>ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D</span><span style="color:rgb(170,170,170);margin:0px"></span></p><p style="font-family:overpass,sans-serif;margin:0px;font-size:10px;color:rgb(153,153,153)"><a href="https://www.redhat.com/" style="color:rgb(0,136,206);margin:0px" target="_blank">Red Hat <span>EMEA</span></a></p><p style="font-family:overpass,sans-serif;margin:0px 0px 6px;font-size:10px;color:rgb(153,153,153)"><span style="margin:0px;padding:0px"><a href="mailto:sbonazzo@redhat.com" style="color:rgb(0,136,206);margin:0px" target="_blank">sbonazzo@redhat.com</a> </span></p><table border="0" style="color:rgb(0,0,0);font-family:overpass,sans-serif;font-size:medium"><tbody><tr><td width="100px"><a href="https://red.ht/sig" target="_blank"><img src="https://www.redhat.com/files/brand/email/sig-redhat.png" width="90" height="auto"></a></td><td style="font-size:10px"><div><a href="https://redhat.com/summit" target="_blank"><img width="70px" height="auto" src="https://www.redhat.com/files/brand/email/sig-summit.png" style="outline:0px"></a></div></td></tr></tbody></table></div></div></div></div></div></div></div></div></div></div></div></div></div></div></div>
</div></div>