xen-system-amd64 version update

[Stefan Bader]

> From: *Éliás Tamás* <et at etit.hu <mailto:et at etit.hu>>
> Date: Sun, Mar 20, 2016 at 5:23 PM
> Subject: xen-system-amd64 version update
> To: ubuntu-devel-discuss at lists.ubuntu.com
> <mailto:ubuntu-devel-discuss at lists.ubuntu.com>
> 
> 
> Hi all.
> 
> May I request an update for the above package? I have installed several
> 16.04 LTS server versions both used for virtualization, these systems
> are planned to go into production soon, as soon as the LTS will be
> stable. But.
> 
> More then a month ago xen released 4.6.1 and they recently published
> CVE-2016-3157 / XSA-171 a critical security update. The 16.04 version is
> still 4.6.0.

Pre-release I would stick with 4.6.0 as that is the latest version in Debian.
Once the release is out there is a chance to do minor release updates. The
reasons for that are a bit complicated to explain but are due to packaging.

The current 4.6.0 version has all but the latest two security related patches
applied. One of those (CVE-2016-3157 / XSA-171) is actually a guest kernel
change. So it will come via a Linux kernel update, not from the Xen package.

-Stefan

> 
> Before I go into compiling my own version, I would be happier to keep a
> clear way for updating the systems.
> 
> Is it possible to request an update from you into the ubuntu system?
> 
> Thank you.
> 
> --
> 
> 
> Éliás Tamás
> Thomas Elias
> 
> ETIT[nwpro] KFT, Ügyvezető-Hálózatbiztonsági specialista
> ETIT[nwpro] Ltd, General Manager-Network security specialist
> 
> Tel. HU: +36/30-497-1626
> Tel. DE: +49/160-651-8723
> OpenPGP pubkey: http://etit.hu/doc/et-pub.asc
> 
> Okleveles mérnök-informatikus (MSC)
> Master of Science in Information Technology (MSC)
> 
> Kapcsolat: http://etit.hu/index.php/hu/kapcsolat
> Jogi nyilatkozat: http://etit.hu/disclaimer-email-hu.txt
> Contact: http://etit.hu/index.php/en/contact
> Disclaimer: http://etit.hu/disclaimer-email-en.txt
> 
> 
> --
> Ubuntu-devel-discuss mailing list
> Ubuntu-devel-discuss at lists.ubuntu.com <mailto:Ubuntu-devel-discuss at lists.ubuntu.com>
> Modify settings or unsubscribe at:
> https://lists.ubuntu.com/mailman/listinfo/ubuntu-devel-discuss
> 
> 


-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 836 bytes
Desc: OpenPGP digital signature
URL: <https://lists.ubuntu.com/archives/ubuntu-devel-discuss/attachments/20160321/97d1dec3/attachment.sig>