Xen and microcode security update (December 12th)

[stormi]

New update candidates are available for XCP-ng 8.0 and 7.6.

We will release them to everyone only once they have received sufficient testing, both internal and from users, so everyone's help is welcome, as fast as possible so that we can release it quickly (a few days).

They are mainly related to the following advisories from the Xen project:

• http://xenbits.xen.org/xsa/advisory-308.html
• http://xenbits.xen.org/xsa/advisory-309.html
• http://xenbits.xen.org/xsa/advisory-310.html
• http://xenbits.xen.org/xsa/advisory-311.html

Updated are: Intel CPU microcodes, and Xen.

Citrix Ref: https://support.citrix.com/article/CTX266932

What to test

Normal operation of things.

Install on XCP-ng 8.0

First update your hosts if they are not already up to date (no need to reboot yet)
Then:

yum update microcode_ctl xen-dom0-libs xen-dom0-tools xen-hypervisor xen-libs xen-tools --enablerepo=xcp-ng-testing

And reboot.

Install on XCP-ng 7.6

First update your hosts if they are not already up to date (no need to reboot yet)
Then:

yum update microcode_ctl xen-dom0-libs xen-dom0-tools xen-hypervisor xen-libs xen-tools --enablerepo=xcp-ng-updates_testing

And reboot.

[stormi]

Update published: https://xcp-ng.org/blog/2019/12/16/xen-and-intel-microcode-security-updates/