Re: openssl / CVE-2016-2177.patch

2016-06-21 Thread Brian May
Brian May writes: > It might be worth somebody else testing it, just in case this is > something specific to my build. > > Will continue investigating. Looks like the test certificates may have expired. https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1581084 Most likely reason anyway. -

Re: Xen i386 support on Debian wheezy-LTS

2016-06-21 Thread Bastian Blank
On Mon, Jun 20, 2016 at 05:38:33PM +1000, Brian May wrote: > According to Bastian Blank the the fix for XSA 173 breaks i386 > support. The HVM domains die immediately due to a triple fault. His > working theory is that invalid bits slip into the initial page table of > the domain. He is recommendi

Re: openssl / CVE-2016-2177.patch

2016-06-21 Thread Brian May
Brian May writes: > Looks like the test certificates may have expired. > > https://bugs.launchpad.net/ubuntu/+source/openssl/+bug/1581084 Yes, builds fine now after applying the patch from the above link. -- Brian May

Re: Security update of Gosa

2016-06-21 Thread Mike Gabriel
Hi Markus, On Di 21 Jun 2016 01:15:17 CEST, Markus Koschany wrote: Hello Michael, you are still listed in dla-needed.txt as the owner of Gosa. Apparently you already prepared a debdiff and sent it to the security team but it was never released. Would it be possible to share it with us? Or can

Re: xen_4.1.6.1-1+deb7u2.dsc

2016-06-21 Thread Stephan Helas
Hello, i just want to inform you, that i had a very serios regession after upgrading to 4.1.6. Live-Migration of XEN-HVM guests ends in a dom0 crash or CPU Stuck Error. Dom0 and Domu are Wheezy amd64. -- Best Regards Stephan Helas

Re: xen_4.1.6.1-1+deb7u2.dsc

2016-06-21 Thread Brian May
Stephan Helas writes: > i just want to inform you, that i had a very serios regession after > upgrading to 4.1.6. Live-Migration of XEN-HVM guests ends in a dom0 > crash or CPU Stuck Error. Dom0 and Domu are Wheezy amd64. Just to be clear; you replied to the thread on version xen_4.1.6.1-1+deb7u

Re: xen_4.1.6.1-1+deb7u2.dsc

2016-06-21 Thread Stephan Helas
Hi, On 06/21/2016 01:22 PM, Brian May wrote: > Stephan Helas writes: > >> i just want to inform you, that i had a very serios regession after >> upgrading to 4.1.6. Live-Migration of XEN-HVM guests ends in a dom0 >> crash or CPU Stuck Error. Dom0 and Domu are Wheezy amd64. > > Just to be clear;

Re: xen_4.1.6.1-1+deb7u2.dsc

2016-06-21 Thread Brian May
Hello Bastian Blank, It appears that we need an extra patch to get the fix for xsa97 working properly. See the linked Ubuntu bug report. https://bugs.launchpad.net/ubuntu/+source/xen/+bug/1515145 Just wondering if you included this in version 4.1.6.1-1+deb7u2 by any chance? Thanks Stephan Hel

Re: Xen i386 support on Debian wheezy-LTS

2016-06-21 Thread Simon Iremonger (debian)
On 2016-06-20 07:38, Brian May wrote: > According to Bastian Blank the the fix for XSA 173 breaks i386 > support. The HVM domains die immediately due to a triple fault. > His working theory is that invalid bits slip into the initial > page table of the domain. He is recommending that we drop suppor