Re: Xen security updates on Wheezy

2016-04-07 Thread Antoine Beaupré
On 2016-03-26 01:36:43, Brian May wrote: > Antoine Beaupré writes: > >> They seem to hold, although I have yet to test them in production. One >> thing I noticed is that they don't seem to fix CVE-2015-8104 and >> CVE-2015-5307, ie. that the patches you posted in >> <87d1qvvzhi@prune.linuxpeng

Re: Xen security updates on Wheezy

2016-03-25 Thread Brian May
Antoine Beaupré writes: > They seem to hold, although I have yet to test them in production. One > thing I noticed is that they don't seem to fix CVE-2015-8104 and > CVE-2015-5307, ie. that the patches you posted in > <87d1qvvzhi@prune.linuxpenguins.xyz> were not factored into the > package.

Re: Xen security updates on Wheezy

2016-03-25 Thread Moritz Mühlenhoff
On Thu, Mar 24, 2016 at 01:37:19PM -0400, Antoine Beaupré wrote: > (Opening a new thread to clarify topic.) > > Brian, I have tested the packages you have proided here: > > https://people.debian.org/~bam/wheezy/xen/amd64/ > > They seem to hold, although I have yet to test them in production. One

Xen security updates on Wheezy

2016-03-24 Thread Antoine Beaupré
(Opening a new thread to clarify topic.) Brian, I have tested the packages you have proided here: https://people.debian.org/~bam/wheezy/xen/amd64/ They seem to hold, although I have yet to test them in production. One thing I noticed is that they don't seem to fix CVE-2015-8104 and CVE-2015-5307