From mboxrd@z Thu Jan 1 00:00:00 1970 From: "=?utf-8?q?S=2E=C3=87a=C4=9Flar?= Onur" Subject: Re: Xen 3.1.3 and Linux Kernel 2.6.18.8 Date: Tue, 15 Jan 2008 23:41:39 +0200 Message-ID: <200801152341.40155.caglar@pardus.org.tr> References: <478D0A69.8020605@brandeis.edu> Reply-To: caglar@pardus.org.tr Mime-Version: 1.0 Content-Type: multipart/mixed; boundary="===============0049976158==" Return-path: In-Reply-To: <478D0A69.8020605@brandeis.edu> List-Unsubscribe: , List-Post: List-Help: List-Subscribe: , Mime-version: 1.0 Sender: xen-devel-bounces@lists.xensource.com Errors-To: xen-devel-bounces@lists.xensource.com To: xen-devel@lists.xensource.com List-Id: xen-devel@lists.xenproject.org --===============0049976158== Content-Type: multipart/signed; boundary="nextPart2598461.KFB0KnXzmN"; protocol="application/pgp-signature"; micalg=pgp-sha1 Content-Transfer-Encoding: 7bit --nextPart2598461.KFB0KnXzmN Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable Content-Disposition: inline Hi; 15 Oca 2008 Sal tarihinde, Joshua West =C5=9Funlar=C4=B1 yazm=C4=B1=C5=9Ft= =C4=B1:=20 > Currently, linux kernel 2.6.18 is used for Xen 3.1.x. > > Would it be possible (or advisable) to make kernel 2.6.18.8 the default > for Xen 3.1.3 - just as it was done with the Xen 3.0.x branch and > kernels like 2.6.16.26 & 2.6.16.33? There are quite a few security (and > regular) bugs fixed in the 2.6.18.x point releases. As i wrote long ago to list, just upgrading to plain .8 not solves all=20 security related issues of 2.6.18.x kernels, for example Pardus Xen package= s=20 currently top on .8 and we still have lots of CVEish patches in our package= =20 [1]. Please do not misunderstand but i really recommend stick with your distro=20 packages instead of xensource provided ones if you care about security.=20 [1]=20 http://svn.pardus.org.tr/pardus/devel/kernel-xen/dom0/kernel-dom0/files/CVE/ http://svn.pardus.org.tr/pardus/devel/kernel-xen/domU/kernel-domU/files/CVE/ Cheers =2D-=20 S.=C3=87a=C4=9Flar Onur http://cekirdek.pardus.org.tr/~caglar/ Linux is like living in a teepee. No Windows, no Gates and an Apache in hou= se! --nextPart2598461.KFB0KnXzmN Content-Type: application/pgp-signature; name=signature.asc Content-Description: This is a digitally signed message part. -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.4 (GNU/Linux) iD8DBQBHjSiUy7E6i0LKo6YRAg7CAKDRwLuit4/bYEkbP+W46VnzeVNjJACggdg6 Lfi66hyBE497WkV1tPkfOHU= =QnCo -----END PGP SIGNATURE----- --nextPart2598461.KFB0KnXzmN-- --===============0049976158== Content-Type: text/plain; charset="us-ascii" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Content-Disposition: inline _______________________________________________ Xen-devel mailing list Xen-devel@lists.xensource.com http://lists.xensource.com/xen-devel --===============0049976158==--