virt January 2018

virt@lists.centos.org

20 participants
13 discussions

CentOS-virt - Kernel Side-Channel Attacks
by rikske＠deds.nl 09 Jan '18

09 Jan '18

Please patch the CentOS-virt Kernel to fix the Kernel Side-Channel Attacks vulnerabilities. The latest CentOS-virt kernel was released in November, as seen below. kernel-4.9.63-29.el7.x86_64.rpm 2017-11-21 13:30 https://access.redhat.com/security/vulnerabilities/speculativeexecution http://mirror.centos.org/centos/7/virt/x86_64/xen/

6 5

Centos 6 2.6.32-696.18.7.el6.x86_64 does not boot in Xen PV mode
by Sarah Newman 06 Jan '18

06 Jan '18

Problems start before any of the kaiser code executes, though it could still be related to CONFIG_KAISER since that has effects beyond kaiser.c. --- (early) Initializing cgroup subsys cpuset (early) Initializing cgroup subsys cpu (early) Linux version 2.6.32-696.18.7.el6.x86_64 (mockbuild(a)c1bl.rdu2.centos.org) (gcc version 4.4.7 20120313 (Red Hat 4.4.7-18) (GCC) ) #1 SMP Thu Jan 4 17:31:22 UTC 2018 (early) Command line: ro console=hvc0 rootflags=barrier=0 crashkernel=auto SYSFONT=latarcyrheb-sun16 LANG=en_US.UTF-8 KEYTABLE=us earlyprintk=xen (early) KERNEL supported cpus: (early) Intel GenuineIntel (early) AMD AuthenticAMD (early) Centaur CentaurHauls (early) 1 multicall(s) failed: cpu 0 (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1 (early) Call Trace: (early) [<ffffffff81004843>] ? xen_mc_flush+0x1c3/0x250 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006fcd>] ? xen_set_pmd_hyper+0x9d/0xc0 (early) [<ffffffff81c5e8ac>] ? early_ioremap_init+0x98/0x133 (early) [<ffffffff81c45221>] ? setup_arch+0x40/0xca6 (early) [<ffffffff8107e0ee>] ? vprintk_default+0xe/0x10 (early) [<ffffffff8154b0cd>] ? printk+0x4f/0x52 (early) [<ffffffff81c3fdda>] ? start_kernel+0xdc/0x43b (early) [<ffffffff81c47eb0>] ? reserve_early+0x30/0x39 (early) [<ffffffff81c3f33a>] ? x86_64_start_reservations+0x125/0x129 (early) [<ffffffff81c4309c>] ? xen_start_kernel+0x4fe/0x505 (early) ------------[ cut here ]------------ (early) WARNING: at arch/x86/xen/multicalls.c:182 xen_mc_flush+0x21f/0x250() (Not tainted) (early) Modules linked in: (early) Pid: 0, comm: swapper Not tainted 2.6.32-696.18.7.el6.x86_64 #1 (early) Call Trace: (early) [<ffffffff8107ce81>] ? warn_slowpath_common+0x91/0xe0 (early) [<ffffffff8100762f>] ? __raw_callee_save_xen_restore_fl+0x11/0x1e (early) [<ffffffff8107ceea>] ? warn_slowpath_null+0x1a/0x20 (early) [<ffffffff8100489f>] ? xen_mc_flush+0x21f/0x250 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006b9e>] ? xen_extend_mmu_update+0xde/0x1b0 (early) [<ffffffff81006fcd>] ? xen_set_pmd_hyper+0x9d/0xc0 (early) [<ffffffff81c5e8ac>] ? early_ioremap_init+0x98/0x133 (early) [<ffffffff81c45221>] ? setup_arch+0x40/0xca6 (early) [<ffffffff8107e0ee>] ? vprintk_default+0xe/0x10 (early) [<ffffffff8154b0cd>] ? printk+0x4f/0x52 (early) [<ffffffff81c3fdda>] ? start_kernel+0xdc/0x43b (early) [<ffffffff81c47eb0>] ? reserve_early+0x30/0x39 (early) [<ffffffff81c3f33a>] ? x86_64_start_reservations+0x125/0x129 (early) [<ffffffff81c4309c>] ? xen_start_kernel+0x4fe/0x505 (early) ---[ end trace a7919e7f17c0a725 ]--- (early) ACPI in unprivileged domain disabled (early) released 0 pages of unused memory (early) BIOS-provided physical RAM map: (early) Xen: 0000000000000000 - 00000000000a0000 (usable) (early) Xen: 00000000000a0000 - 0000000000100000 (reserved) (early) Xen: 0000000000100000 - 0000000020000000 (usable) (early) bootconsole [xenboot0] enabled

3 4

[CVE-2017-5715] qemu-kvm-ev-2.9.0-16.el7_4.13.1 is now available for testing
by Sandro Bonazzola 05 Jan '18

05 Jan '18

Hi, qemu-kvm-ev-2.9.0-16.el7_4.13.1 <https://cbs.centos.org/koji/buildinfo?buildID=21119> is now available for testing. I'm testing it right now in oVirt CI, if nothing shows up, I'll tag it for release in a few hours. Here's the changelog: * Thu Jan 04 2018 Sandro Bonazzola <sbonazzo(a)redhat.com> - ev-2.9.0-16.el7_4.13.1 - Removing RH branding from package name * Thu Dec 14 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.13 - Fix CVE-2017-5715 * Thu Nov 16 2017 Miroslav Rezanina <mrezanin(a)redhat.com> - rhev-2.9.0-16.el7_4.12 - kvm-util-async-use-atomic_mb_set-in-qemu_bh_cancel.patch [bz#1513362] - Resolves: bz#1513362 (QEMU's AIO subsystem gets stuck inhibiting all I/O operations on virtio-blk-pci devices [rhel-7.4.z]) -- SANDRO BONAZZOLA ASSOCIATE MANAGER, SOFTWARE ENGINEERING, EMEA ENG VIRTUALIZATION R&D Red Hat EMEA <https://www.redhat.com/> <https://red.ht/sig> TRIED. TESTED. TRUSTED. <https://redhat.com/trusted>

1 1

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

virt January 2018