XCP-ng 8.3 updates announcements and testing

Andrew

@rzr Installed and running. Not expecting any issues because I'm not using SMB/CIFS, ice card, or CPU with affected microcode.

Rolling pool reboot failed me again... This time it got stuck evacuating a host with no VMs.

bufanda

@rzr Installed on my usual lab pool. No immediate issues seen.

ph7

@rzr

manilx

@Andrew I have the RPU failing most of the time now also. I have reported and opened a ticket. No solution so far. It's a hit and miss and beginning to be a PITA.

Pilow

@manilx yup, same here
we evacuate & roll patch manually because RPU is inconsistent in achieving a full pool update nowadays

maximum hosts in pools are 3, so it is still easy to process manually
thoses with 5-6+ hosts must be more painful

olivierlambert

That would be interesting to group your findings/issues on RPU in a dedicated topic, because I don't think the logic changed recently So it's an interesting investigation to make.

JeffBerntsen

@rzr
Seems to be working well on my test systems as well.

marcoi

update to latest test patches on 2nd pool. no issue. LACP worked, started UB26 VM on host 4 and live migrated to host 3.

MajorP93

@rzr Installed those security update candidates in my XCP-ng test environment.
So far no issues whatsoever. Basic operations all work. VMs running etc.

rzr

rzr said:

New security update candidates for XCP-ng 8.3 LTS (kernel)

Test window before official release of the updates

~3 days

The testing window is extended a bit, expect also a next batch (to be tested later this month).

It has been planned to group updates for the convenience of administrators (stay tuned in blog).

Meanwhile If you didn't notice yet, an updated xen package landed in testing repo, it addresses some low risk vulnerabilities as reported at:

VSA-2026-017 (XSA-491, CVE-2026-42487)
VSA-2026-018 (XSA-492, CVE-2026-42489 - CVE-2026-42490),
VSA-2026-019 (CVE-2025-10263, XSA-493)
VSA-2026-020 (CVE-2026-42488, XSA-494)

More to come soon