6:09 a.m.
I believe you most upgrade to 4.1 first, and then to 4.2.
On Jan 8, 2018 6:00 AM, "Marktvk" <marktvk(a)xs4all.nl> wrote:
Hello,
We have now running ovirt 4.0 for a specif reason we can not upgrade to
the new version.
If possible for 1 time to upgrade qemu-kvm to the new version for the
fix with processors today ?
I hope so.
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
8:27 a.m.
New subject: Ovirt 4.0
This is a multi-part message in MIME format.
--------------8C5AEC2E4CFAE1B50C2FB5B2
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
Hello Correct.
But i can not do this for a reason. I hope ovirt will bring a kvm
upgrade for 4.0 the security issue at this moment with CPU's ( intel)
I believe you most upgrade to 4.1 first, and then to 4.2.
On Jan 8, 2018 6:00 AM, "Marktvk" <marktvk(a)xs4all.nl
<mailto:marktvk@xs4all.nl>> wrote:
Hello,
We have now running ovirt 4.0 for a specif reason we can not
upgrade to
the new version.
If possible for 1 time to upgrade qemu-kvm to the new version for the
fix with processors today ?
I hope so.
_______________________________________________
Users mailing list
Users(a)ovirt.org <mailto:Users@ovirt.org>
http://lists.ovirt.org/mailman/listinfo/users
<http://lists.ovirt.org/mailman/listinfo/users>
--------------8C5AEC2E4CFAE1B50C2FB5B2
Content-Type: text/html; charset=utf-8
Content-Transfer-Encoding: 7bit
<html>
<head>
<meta http-equiv="Content-Type" content="text/html;
charset=utf-8">
</head>
<body text="#000000" bgcolor="#FFFFFF">
<div class="moz-cite-prefix">Hello Correct.<br>
<br>
But i can not do this for a reason. I hope ovirt will bring a kvm
upgrade for 4.0 the security issue at this moment with CPU's (
intel)</div>
<blockquote type="cite"
cite="mid:CAMgx0=wZ_UraCS6dV_MdJy+HoV0YhEnKzHAwO6Fx4pG4ZvUzmg@mail.gmail.com">
<div dir="auto">I believe you most upgrade to 4.1 first, and then
to 4.2.
<div dir="auto"><br>
</div>
<div dir="auto"><br>
</div>
</div>
<div class="gmail_extra"><br>
<div class="gmail_quote">On Jan 8, 2018 6:00 AM,
"Marktvk" <<a
href="mailto:marktvk@xs4all.nl"
moz-do-not-send="true">marktvk(a)xs4all.nl</a>&gt;
wrote:<br type="attribution">
<blockquote class="quote" style="margin:0 0 0
.8ex;border-left:1px #ccc solid;padding-left:1ex">Hello,<br>
<br>
<br>
We have now running ovirt 4.0 for a specif reason we can not
upgrade to<br>
the new version.<br>
<br>
If possible for 1 time to upgrade qemu-kvm to the new
version for the<br>
fix with processors today ?<br>
<br>
<br>
I hope so.<br>
<br>
<br>
______________________________<wbr>_________________<br>
Users mailing list<br>
<a href="mailto:Users@ovirt.org"
moz-do-not-send="true">Users(a)ovirt.org</a><br>
<a href="http://lists.ovirt.org/mailman/listinfo/users"
rel="noreferrer" target="_blank"
moz-do-not-send="true">http://lists.ovirt.org/<wbr>mai...
</blockquote>
</div>
<br>
</div>
</blockquote>
<p><br>
</p>
</body>
</html>
--------------8C5AEC2E4CFAE1B50C2FB5B2--
8:44 a.m.
New subject: Ovirt 4.0
On Mon, Jan 8, 2018 at 4:27 PM, Marktvk <marktvk(a)xs4all.nl> wrote:
Hello Correct.
But i can not do this for a reason. I hope ovirt will bring a kvm upgrade
for 4.0 the security issue at this moment with CPU's ( intel)
You could upgrade your CPU firmware and get up-to-date packages, but what
about the new CPU types for the guests?
There are no plans to backport the patch for them[1] to 4.0 (though I
assume you could patch your own engine with it!).
Y.
[1] https://gerrit.ovirt.org/#/c/85998/
I believe you most upgrade to 4.1 first, and then to 4.2.
On Jan 8, 2018 6:00 AM, "Marktvk" <marktvk(a)xs4all.nl> wrote:
Hello,
We have now running ovirt 4.0 for a specif reason we can not upgrade to
the new version.
If possible for 1 time to upgrade qemu-kvm to the new version for the
fix with processors today ?
I hope so.
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
8:59 a.m.
New subject: Ovirt 4.0
Hi,
On Mon, January 8, 2018 9:44 am, Yaniv Kaul wrote:
On Mon, Jan 8, 2018 at 4:27 PM, Marktvk <marktvk(a)xs4all.nl>
wrote:
> Hello Correct.
>
> But i can not do this for a reason. I hope ovirt will bring a kvm
> upgrade
> for 4.0 the security issue at this moment with CPU's ( intel)
>
You could upgrade your CPU firmware and get up-to-date packages, but what
about the new CPU types for the guests?
There are no plans to backport the patch for them[1] to 4.0 (though I
assume you could patch your own engine with it!).
Y.
[1] https://gerrit.ovirt.org/#/c/85998/
I've been only minimally following this discussion as I've had other
things on my plate, but I'm in a similar situation here -- I'm running 4.0
(on EL7.3) on a single host and would rather not upgrade my ovirt
infrastructure to 4.1/4.2 just to get the security fixes for these CPU
bugs.
I don't mind upgrading my host (or engine) to el7.4, provided I can
continue to use ovirt 4.0
But I don't understand what "new CPU types" would be here, or even why
they would be required, to fix these security issues. Perhaps I need a
more basic primer about what actually needs to be patched to fix an ovirt
system against these speculative execution bugs.
Obviously the host systems need to be patched, and KVM most likely needs
to be patched. But do I then need to patch each of my guests? Do I need
to reconfigure anything else?
Is there a minimalist "how to" here?
-derek
> I believe you most upgrade to 4.1 first, and then to 4.2.
>
>
>
> On Jan 8, 2018 6:00 AM, "Marktvk" <marktvk(a)xs4all.nl> wrote:
>
> Hello,
>
>
> We have now running ovirt 4.0 for a specif reason we can not upgrade to
> the new version.
>
> If possible for 1 time to upgrade qemu-kvm to the new version for the
> fix with processors today ?
>
>
> I hope so.
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
>
>
> _______________________________________________
> Users mailing list
> Users(a)ovirt.org
> http://lists.ovirt.org/mailman/listinfo/users
>
>
_______________________________________________
Users mailing list
Users(a)ovirt.org
http://lists.ovirt.org/mailman/listinfo/users
--
Derek Atkins 617-623-3745
derek(a)ihtfp.com www.ihtfp.com
Computer and Internet Security Consultant
2307
days inactive
2307
days old
3 comments
4 participants
participants (4)
-
Derek Atkins -
Marktvk -
Wesley Stewart -
Yaniv Kaul