Team - Security

Private

Posts

  • RE: Epyc VM to VM networking slow

    @Forza By default XOA VM has 2 vcpus, how many vcpus do your ubuntu have? Althrough iperf isn't running multithreaded in your test, there is one queue on the kernel side of the VM per vcpu to process packets.

  • RE: Patch for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143

    It likely depends how they check:

    • if they use xl info they cannot know if it is the latest
    • if this is an automated SBOM scan, there is no database containing our version to assess it was patched

    At least that's the only ways I have in mind right now 🙂

    Could be interesting if you can get the info on how it is checked and where they expect to find the information.

  • RE: Patch for CVE-2025-27466, CVE-2025-58142, CVE-2025-58143

    Hello, the blog post you linked is our announcement that these have been fixed on our side. As you don't have any updates in XOA or yum commands, it means that you're on the latest version already.

    The reported version of xen through xl info il the base version, the .3 is our own patch or build iteration, therefore not reflected in that command.

    If you want to be sure, the best way is to compare the yum info xen-hypervisor version to the one present in the blog post.

Member List