Re: [ANNOUNCE] Third release candidates for 4.0.4 and 4.1.3

[Keir Fraser <keir@xen.org>]

All of XSA-7 through XSA-11 are fixed in 4.1.3 and 4.0.4. So there's a good
security argument for everyone to upgrade, quite apart from the various
other fixes (e.g., there are over 100 patches in 4.1 branch since 4.1.2) --
libxl bug fixes, and a bunch of hypervisor stuff, fixing for particular
systems, or particular minority usage cases, for example... There's no
broader generalisation than that to be made really, each patch fixes some
usually fairly minor issue, but they add up to a big bag of small fixes!

XSA-7 to XSA-11 *are* called out explicitly in their respective changeset
comments in both 4.0 and 4.1 repositories by the way. If you can't see them
you may not be looking at the right thing. ;-)

 -- Keir

On 10/08/2012 12:49, "Lars Kurth" <lars.kurth@xen.org> wrote:

> Keir,
> do we have a list of what has gone into these (worth highlighting). I
> can't see any CVE and XSA numbers and the check-in descriptions don't
> tell me an awful lot
> Lars
> 
> On 22/07/2012 16:42, Keir Fraser wrote:
>> Folks,
>> 
>> I have just tagged 3rd release candidates for 4.0.4 and 4.1.3:
>> 
>> http://xenbits.xen.org/staging/xen-4.0-testing.hg (tag 4.0.4-rc3)
>> http://xenbits.xen.org/staging/xen-4.1-testing.hg (tag 4.1.3-rc3)
>> 
>> Please test! Assuming nothing crops up, we will make these the official
>> point releases at the end of this month.
>> 
>>   -- Keir
>> 
>> 
>> 
>> _______________________________________________
>> Xen-devel mailing list
>> Xen-devel@lists.xen.org
>> http://lists.xen.org/xen-devel
> 
> 
> _______________________________________________
> Xen-devel mailing list
> Xen-devel@lists.xen.org
> http://lists.xen.org/xen-devel