Security and bugfix update (PCI passthrough, UEFI)

Security Nov 26, 2020

A security update is available for the two supported releases of XCP-ng: 8.1 and 8.2.

To update, follow this guide. You can also join the discussion on our community forum. Hosts reboot necessary after this update.

Security fix

A security issue in the Xen hypervisor may allow guest VMs with a PCI passthrough device to compromise the host.

Two issues have been fixed in the UEFI support for guests in XCP-ng 8.2:

Failure when attempting to clone a UEFI VM
In some situations, UEFI Windows VM restored from a backup made with XCP-ng 8.1 would fail to start.

Update

Update