[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]
Re: Xen 4.13.2 released
- To: Anthony Perard <anthony.perard@xxxxxxxxxx>
- From: George Dunlap <George.Dunlap@xxxxxxxxxx>
- Date: Fri, 6 Nov 2020 15:53:35 +0000
- Accept-language: en-US
- Arc-authentication-results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=citrix.com; dmarc=pass action=none header.from=citrix.com; dkim=pass header.d=citrix.com; arc=none
- Arc-message-signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector9901; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-SenderADCheck; bh=V07ZJB0BEyifSVhpjP+or0kueU0shHYYGhLPZwoP954=; b=mqA1pt4nqwb7+Oa20MmV8royN9c1uDHY7A4xCKojUdEwp7JTiDPaq9VrGb0wvz2IeSc1iYvWxeKquwnCU63QnwxsOdf/G9ZHcKlCoi+d/54GPgvSwsU4CE+hNySqg0Y2Yy5ARVeddbJ1Zs71b/Xd866sAl7fALwboQ6LYsQ987xBGYXn7fQcPCO7KIAcJKIpEJ/KrbuZTMQkP1civZdIKRZwme5Mqr+QoAqN070PDUQjucPAyqdq7/ktdxVX9erZn0LAqu57RoNRNLA0STjYlbguMkryiLYWFwwlLokziINZTRL74CmxRDvZPiC5Px2wPbou/lquSNe3LwUwAlUuTw==
- Arc-seal: i=1; a=rsa-sha256; s=arcselector9901; d=microsoft.com; cv=none; b=ahSJOP5cQSZOI8RTAjUnvAUYo3KgP2CIDcDyPNeOqRBNtMOY01dEexrIjXJe2a8T/+HzDUe6kHnzXNKzhOittYgZ/AIp9H9HmlOvi2exSrrAyt1BKDuK4ZB/2YJv928IUoShL6AiCk8883FzQJRpeUxrSRVgBQkSX445uqU0oWgoCYEkdNypvRK4kGLcPatqcMSVFmHZQOnOJJo5fhUTCSWICJujJWQh+3c0VmXukr3wQcJ0/lV1BhkZG4I4UNleVB1/pxqlG85GjXfVHrsMKFCXJDkrol9Sel+bKC9FTFJCttbKrDFRcpDi/zzhX5dn4RsxbOujTd1FjNlwAC3sgw==
- Authentication-results: esa6.hc3370-68.iphmx.com; dkim=pass (signature verified) header.i=@citrix.onmicrosoft.com
- Cc: Jan Beulich <jbeulich@xxxxxxxx>, Michael Young <m.a.young@xxxxxxxxxxxx>, Stefano Stabellini <sstabellini@xxxxxxxxxx>, "xen-devel@xxxxxxxxxxxxxxxxxxxx" <xen-devel@xxxxxxxxxxxxxxxxxxxx>
- Delivery-date: Fri, 06 Nov 2020 15:53:50 +0000
- Ironport-sdr: HCgbAj4jitrHQ2VE/poy3CMSJz/54i/jNTPPbiUgzQErZVO4Zxb6Oe56mVwNECEkUHoNKGePII 0paOZcPgP3MLUBYP0ZT6raXySfPTsmI3U/vwuk4nKu7cdhRZyf3ARKUHlHyg7irN9BbruKRpjc mjdfdaEsfQUjE4Lcxq4OW2VacQ8j+v+ViIsujl1yUIPESWo74wHiWQXHw5TRle1xNZEXEx49sM qQtc4JI3bFLz+l5bPB20e7uPCspN3GB3Mp9XhRxHC/Q2BBu331EK2A2PwKtPST4L93bbMrgP12 1bU=
- List-id: Xen developer discussion <xen-devel.lists.xenproject.org>
- Thread-index: AQHWsn7TXlZVtT/AC0iXjX7nX8Eg4Km7Q7sAgAABPQA=
- Thread-topic: Xen 4.13.2 released
> On Nov 6, 2020, at 3:49 PM, Anthony PERARD <anthony.perard@xxxxxxxxxx> wrote:
>
> On Wed, Nov 04, 2020 at 08:47:57AM +0100, Jan Beulich wrote:
>> On 04.11.2020 00:55, Michael Young wrote:
>>> On Tue, 3 Nov 2020, Jan Beulich wrote:
>>>> I am pleased to announce the release of Xen 4.13.2. This is available
>>>> immediately from its git repository
>>>> http://xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=refs/heads/stable-4.13
>>>> (tag RELEASE-4.13.2) or from the XenProject download page
>>>> https://xenproject.org/downloads/xen-project-archives/xen-project-4-13-series/xen-project-4-13-2/
>>>> (where a list of changes can also be found).
>>>
>>> Is the entry for XSA-335 correct on the download page? That was a qemu
>>> patch but I don't think it was included in 4.13.2.
>>
>> Interesting, thanks for pointing this out. The qemu-trad part,
>> albeit "just" a SUPPORT.md update, didn't even make it into
>> staging yet afaics. While this can perhaps be viewed as benign,
>> I'm concerned that the qemuu fix also doesn't look to have
>> landed in any of the branches yet, despite the version bump on
>> the staging/master branches just 5 days ago. Anthony, Stefano?
>
> I've pushed the fix now, to qemu-xen trees.
>
> Maybe George's script could check qemu-xen trees as well? Or someone in
> the security team could push the patchs or tell me about XSAs involving
> QEMU, otherwise that's going to happen again.
Making a script you could put into a cron job to tell you when a QEMU XSA comes
out should be fairly easy. (Although, of course in this case it wouldn’t have
worked because xsa.json didn’t have the correct information.)
Checking that it’s been applied would be a bit more work; it’s on my list of
things to do.
It’s all in Go, so maybe I should publish the packages; then maybe you could
send me a PR. :-)
-George
|