April 2021 1st Security And Bugfix Update
Security and bugfix updates are available, for the supported 8.2 release, and also one last time for XCP-ng 8.1 for which support ends today (see here).
To update, follow this guide. You can also join the discussion on our community forum. Hosts reboot necessary after this update.
Summary
The published batch of updates includes security fixes to the Linux kernel in dom0 and to openvswitch, in order to protect your hosts against DoS attacks that could be performed by attackers able to execute privileged code in a VM.
Reference: https://support.citrix.com/article/CTX306565.
It also fixes a memory leak in Intel's ixgbe driver, that has been identified by our forum users and has been especially hard to debug. Finding the exact cause of this issue that:
- we could not reproduce internally
- requires specific hardware and conditions to manifest itself
- and doesn't manifest instantly…
… has mobilized many of users and developers over the last months.
Finally, the updated kernel package also fixes spurious event-related warnings.
End of support for XCP-ng 8.1
XCP-ng 8.1 has reached its end of life date. After this last batch of updates, it will not receive any updates anymore. Upgrade to XCP-ng 8.2 LTS. It's not an April fools' joke!
