[CentOS-virt] XSAs 170 and 154, repository layouts, and centos-release-xen 8-1

Wed Feb 17 13:04:08 UTC 2016
George Dunlap <dunlapg at umich.edu>

On Wed, Feb 17, 2016 at 12:30 PM, George Dunlap <dunlapg at umich.edu> wrote:
> I have the following packages going through the CBS:
> * A CentOS 7 xen-4.6.1-2, with XSAs 170 and 154
> * A CentOS 6 xen-4.6.1-2, with XSAs 170 and 154
> * A CentOS 6 xen-4.4.3-11, with XSAs 170
> All these should show up in mirrors hopefully sometime later today.
> As usual, please report any problems here.
> Xen 4.4 only has XSA 170 because at the time the embargo was lifted, I
> didn't have a suitable backport of XSA-154.  It's only applicable when
> PCI-passthrough is in effect, so it's not that critical.

I now have a build of Xen 4.4 with XSA-154 going through the build
system.  For users who need it, it should be available on buildlogs
(via centos-virt-xen-testing) sometime later this afternoon.  The
signed version on mirrors may be delayed until tomorrow.

And that really will be the last Xen 4.4 XSA update I personally port. :-)

However, if anyone wants to push any further changes to 4.4, feel free
to send a pull request to this tree:


And I'll be happy to review it and push it through the CBS.  I've made
a detailed how-to, so hopefully it shouldn't be too difficult.