QSB #41: Speculative register leakage from lazy FPU context switching (XSA-267)
https://www.qubes-os.org/news/2018/06/13/qsb-41/
Dear Qubes Community,
We have just published Qubes Security Bulletin (QSB) #41: Speculative
register leakage from lazy FPU context switching (XSA-267). The text of
this QSB is reproduced below. This QSB and its accompanying signatures
will always be available in the Qubes Security Pack (qubes-secpack).
View QSB #41 in the qubes-secpack:
https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-041-2018.txt
Learn about the qubes-secpack, including how to obtain, verify, and read
it:
https://www.qubes-os.org/security/pack/
View all past QSBs:
https://www.qubes-os.org/security/bulletins/
View XSA-267 in the XSA Tracker:
https://www.qubes-os.org/security/xsa/#267
---===[ Qubes Security Bulletin #41 ]===---
2018-06-13
Speculative register leakage from lazy FPU context switching (XSA-267)
Summary
========
On 2018-06-13, the Xen Security Team published Xen Security Advisory
267 (CVE-2018-3665 / XSA-267) [1] with the following denoscription:
| x86 has a hardware mechanism for lazy FPU context switching. On a
| task switch, %cr0.ts (Task Switched) gets set, and the next
| instruction to touch floating point state raises an #NM (No Math,
| later known as Device Not Available) exception.
|
| Traditionally, FPU state has been large in comparison to available
| bandwidth (and therefore slow to switch) and not used as frequently as
| cpu tasks tend to switch. This mechanism allows the OS to only switch
| FPU when necessary, which in turn increases performance.
|
| Some CPUs however speculate past an #NM exception, allowing register
| content to be leaked by a side-channel.
|
| An attacker can read x87/MMX/SSE/AVX/AVX-512 register state belonging
| to another vCPU previously scheduled on the same processor. This can
| be state belonging a different guest, or state belonging to a
| different thread inside the same guest.
This is yet another CPU hardware bug related to speculative execution.
Patching
=========
To resolve this issue, the Xen Project has provided patches disabling
lazy FPU context switching on affected systems.
The specific packages that resolve the problems discussed in this
bulletin are as follows:
For Qubes 3.2:
- Xen packages, version 4.6.6-42
For Qubes 4.0:
- Xen packages, version 4.8.3-9
The packages are to be installed in dom0 via the Qubes VM Manager or via
the qubes-dom0-update command as follows:
For updates from the stable repository (not immediately available):
$ sudo qubes-dom0-update
For updates from the security-testing repository:
$ sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing
A system restart will be required afterwards.
These packages will migrate from the security-testing repository to the
current (stable) repository over the next two weeks after being tested
by the community.
If you use Anti Evil Maid, you will need to reseal your secret
passphrase to new PCR values, as PCR18+19 will change due to the new
Xen binaries.
Credits
========
See the original Xen Security Advisory.
References
===========
[1] https://xenbits.xen.org/xsa/advisory-267.html
--
The Qubes Security Team
https://www.qubes-os.org/security/
https://www.qubes-os.org/news/2018/06/13/qsb-41/
Dear Qubes Community,
We have just published Qubes Security Bulletin (QSB) #41: Speculative
register leakage from lazy FPU context switching (XSA-267). The text of
this QSB is reproduced below. This QSB and its accompanying signatures
will always be available in the Qubes Security Pack (qubes-secpack).
View QSB #41 in the qubes-secpack:
https://github.com/QubesOS/qubes-secpack/blob/master/QSBs/qsb-041-2018.txt
Learn about the qubes-secpack, including how to obtain, verify, and read
it:
https://www.qubes-os.org/security/pack/
View all past QSBs:
https://www.qubes-os.org/security/bulletins/
View XSA-267 in the XSA Tracker:
https://www.qubes-os.org/security/xsa/#267
---===[ Qubes Security Bulletin #41 ]===---
2018-06-13
Speculative register leakage from lazy FPU context switching (XSA-267)
Summary
========
On 2018-06-13, the Xen Security Team published Xen Security Advisory
267 (CVE-2018-3665 / XSA-267) [1] with the following denoscription:
| x86 has a hardware mechanism for lazy FPU context switching. On a
| task switch, %cr0.ts (Task Switched) gets set, and the next
| instruction to touch floating point state raises an #NM (No Math,
| later known as Device Not Available) exception.
|
| Traditionally, FPU state has been large in comparison to available
| bandwidth (and therefore slow to switch) and not used as frequently as
| cpu tasks tend to switch. This mechanism allows the OS to only switch
| FPU when necessary, which in turn increases performance.
|
| Some CPUs however speculate past an #NM exception, allowing register
| content to be leaked by a side-channel.
|
| An attacker can read x87/MMX/SSE/AVX/AVX-512 register state belonging
| to another vCPU previously scheduled on the same processor. This can
| be state belonging a different guest, or state belonging to a
| different thread inside the same guest.
This is yet another CPU hardware bug related to speculative execution.
Patching
=========
To resolve this issue, the Xen Project has provided patches disabling
lazy FPU context switching on affected systems.
The specific packages that resolve the problems discussed in this
bulletin are as follows:
For Qubes 3.2:
- Xen packages, version 4.6.6-42
For Qubes 4.0:
- Xen packages, version 4.8.3-9
The packages are to be installed in dom0 via the Qubes VM Manager or via
the qubes-dom0-update command as follows:
For updates from the stable repository (not immediately available):
$ sudo qubes-dom0-update
For updates from the security-testing repository:
$ sudo qubes-dom0-update --enablerepo=qubes-dom0-security-testing
A system restart will be required afterwards.
These packages will migrate from the security-testing repository to the
current (stable) repository over the next two weeks after being tested
by the community.
If you use Anti Evil Maid, you will need to reseal your secret
passphrase to new PCR values, as PCR18+19 will change due to the new
Xen binaries.
Credits
========
See the original Xen Security Advisory.
References
===========
[1] https://xenbits.xen.org/xsa/advisory-267.html
--
The Qubes Security Team
https://www.qubes-os.org/security/
Qubes Canary #16
https://www.qubes-os.org/news/2018/06/14/canary-16/
Dear Qubes Community,
We have published Qubes Canary #16. The text of this canary is
reproduced below. This canary and its accompanying signatures will
always be available in the Qubes Security Pack (qubes-secpack).
View Qubes Canary #16 in the qubes-secpack:
https://github.com/QubesOS/qubes-secpack/blob/master/canaries/canary-016-2018.txt
Learn about the qubes-secpack, including how to obtain, verify, and read
it:
https://www.qubes-os.org/security/pack/
View all past canaries:
https://www.qubes-os.org/security/canaries/
---===[ Qubes Canary #16 ]===---
Statements
-----------
The Qubes core developers who have digitally signed this file [1]
state the following:
1. The date of issue of this canary is June 14, 2018.
2. There have been 41 Qubes Security Bulletins published so far.
3. The Qubes Master Signing Key fingerprint is:
427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494
4. No warrants have ever been served to us with regard to the Qubes OS
Project (e.g. to hand out the private signing keys or to introduce
backdoors).
5. We plan to publish the next of these canary statements in the first
two weeks of October 2018. Special note should be taken if no new canary
is published by that time or if the list of statements changes without
plausible explanation.
Special announcements
----------------------
None.
Disclaimers and notes
----------------------
We would like to remind you that Qubes OS has been designed under the
assumption that all relevant infrastructure is permanently
compromised. This means that we assume NO trust in any of the servers
or services which host or provide any Qubes-related data, in
particular, software updates, source code repositories, and Qubes ISO
downloads.
This canary scheme is not infallible. Although signing the declaration
makes it very difficult for a third party to produce arbitrary
declarations, it does not prevent them from using force or other
means, like blackmail or compromising the signers' laptops, to coerce
us to produce false declarations.
The news feeds quoted below (Proof of freshness) serves to demonstrate
that this canary could not have been created prior to the date stated.
It shows that a series of canaries was not created in advance.
This declaration is merely a best effort and is provided without any
guarantee or warranty. It is not legally binding in any way to
anybody. None of the signers should be ever held legally responsible
for any of the statements made here.
Proof of freshness
-------------------
$ date -R -u
Thu, 14 Jun 2018 07:47:57 +0000
$ feedstail -1 -n5 -f '{noscript}' -u https://www.spiegel.de/international/index.rss
Rise of the Autocrats: Liberal Democracy Is Under Attack
Economic Trumpism: U.S. President Makes Life Tough for German Companies
The G-7 Fiasco: It's Time to Isolate Donald Trump
Finance Minister Olaf Scholz: 'Germany Has a Special Responsibility'
Trapped in the Past: Increasing Headwinds for Angela Merkel
$ feedstail -1 -n5 -f '{noscript}' -u https://rss.nytimes.com/services/xml/rss/nyt/World.xml
Trump Sees End to North Korea Threat Despite Unclear Path Forward
Humanitarian Crisis Worsens in Yemen After Attack on Port
Who Is Behind Trump’s Links to Arab Princes? A Billionaire Friend
Trump-Kim Summit Creates New Anxieties for Asian Allies
New Delhi Dispatch: The Personal Wake-Up Call to Prayers, a Ramadan Tradition, Is Endangered
$ feedstail -1 -n5 -f '{noscript}' -u https://feeds.bbci.co.uk/news/world/rss.xml
North Korea sanctions remain until complete denuclearisation, says US
London Breed becomes San Francisco's first black female mayor
Chile police raid Catholic Church offices amid sex abuse scandal
Yemen war: Fighting rages over vital port of Hudaydah
Apple to close iPhone security loophole used by police
$ feedstail -1 -n5 -f '{noscript}' -u http://feeds.reuters.com/reuters/worldnews
https://www.qubes-os.org/news/2018/06/14/canary-16/
Dear Qubes Community,
We have published Qubes Canary #16. The text of this canary is
reproduced below. This canary and its accompanying signatures will
always be available in the Qubes Security Pack (qubes-secpack).
View Qubes Canary #16 in the qubes-secpack:
https://github.com/QubesOS/qubes-secpack/blob/master/canaries/canary-016-2018.txt
Learn about the qubes-secpack, including how to obtain, verify, and read
it:
https://www.qubes-os.org/security/pack/
View all past canaries:
https://www.qubes-os.org/security/canaries/
---===[ Qubes Canary #16 ]===---
Statements
-----------
The Qubes core developers who have digitally signed this file [1]
state the following:
1. The date of issue of this canary is June 14, 2018.
2. There have been 41 Qubes Security Bulletins published so far.
3. The Qubes Master Signing Key fingerprint is:
427F 11FD 0FAA 4B08 0123 F01C DDFA 1A3E 3687 9494
4. No warrants have ever been served to us with regard to the Qubes OS
Project (e.g. to hand out the private signing keys or to introduce
backdoors).
5. We plan to publish the next of these canary statements in the first
two weeks of October 2018. Special note should be taken if no new canary
is published by that time or if the list of statements changes without
plausible explanation.
Special announcements
----------------------
None.
Disclaimers and notes
----------------------
We would like to remind you that Qubes OS has been designed under the
assumption that all relevant infrastructure is permanently
compromised. This means that we assume NO trust in any of the servers
or services which host or provide any Qubes-related data, in
particular, software updates, source code repositories, and Qubes ISO
downloads.
This canary scheme is not infallible. Although signing the declaration
makes it very difficult for a third party to produce arbitrary
declarations, it does not prevent them from using force or other
means, like blackmail or compromising the signers' laptops, to coerce
us to produce false declarations.
The news feeds quoted below (Proof of freshness) serves to demonstrate
that this canary could not have been created prior to the date stated.
It shows that a series of canaries was not created in advance.
This declaration is merely a best effort and is provided without any
guarantee or warranty. It is not legally binding in any way to
anybody. None of the signers should be ever held legally responsible
for any of the statements made here.
Proof of freshness
-------------------
$ date -R -u
Thu, 14 Jun 2018 07:47:57 +0000
$ feedstail -1 -n5 -f '{noscript}' -u https://www.spiegel.de/international/index.rss
Rise of the Autocrats: Liberal Democracy Is Under Attack
Economic Trumpism: U.S. President Makes Life Tough for German Companies
The G-7 Fiasco: It's Time to Isolate Donald Trump
Finance Minister Olaf Scholz: 'Germany Has a Special Responsibility'
Trapped in the Past: Increasing Headwinds for Angela Merkel
$ feedstail -1 -n5 -f '{noscript}' -u https://rss.nytimes.com/services/xml/rss/nyt/World.xml
Trump Sees End to North Korea Threat Despite Unclear Path Forward
Humanitarian Crisis Worsens in Yemen After Attack on Port
Who Is Behind Trump’s Links to Arab Princes? A Billionaire Friend
Trump-Kim Summit Creates New Anxieties for Asian Allies
New Delhi Dispatch: The Personal Wake-Up Call to Prayers, a Ramadan Tradition, Is Endangered
$ feedstail -1 -n5 -f '{noscript}' -u https://feeds.bbci.co.uk/news/world/rss.xml
North Korea sanctions remain until complete denuclearisation, says US
London Breed becomes San Francisco's first black female mayor
Chile police raid Catholic Church offices amid sex abuse scandal
Yemen war: Fighting rages over vital port of Hudaydah
Apple to close iPhone security loophole used by police
$ feedstail -1 -n5 -f '{noscript}' -u http://feeds.reuters.com/reuters/worldnews
Pompeo says North Korea sanctions to remain until complete denuclearization
Saudi-led coalition keeps up Hodeidah assault before U.N. meeting
Italy still waiting for apology from France's Macron: deputy PM
In boost for Australian PM, right-wing party loses power to block his bills
'Where is Singapore?': Trump-Kim summit a PR coup for tiny city-state
$ curl -s 'https://blockchain.info/blocks/?format=json'
$ python3 -c 'import sys, json; print(json.load(sys.stdin)['\''blocks'\''][10]['\''hash'\''])'
000000000000000000212905769ee24bbb82122b44d6413974673a122a7cdaa8
Footnotes
----------
[1] This file should be signed in two ways: (1) via detached PGP
signatures by each of the signers, distributed together with this
canary in the qubes-secpack.git repo, and (2) via digital signatures
on the corresponding qubes-secpack.git repo tags. [2]
[2] Don't just trust the contents of this file blindly! Verify the
digital signatures!
Saudi-led coalition keeps up Hodeidah assault before U.N. meeting
Italy still waiting for apology from France's Macron: deputy PM
In boost for Australian PM, right-wing party loses power to block his bills
'Where is Singapore?': Trump-Kim summit a PR coup for tiny city-state
$ curl -s 'https://blockchain.info/blocks/?format=json'
$ python3 -c 'import sys, json; print(json.load(sys.stdin)['\''blocks'\''][10]['\''hash'\''])'
000000000000000000212905769ee24bbb82122b44d6413974673a122a7cdaa8
Footnotes
----------
[1] This file should be signed in two ways: (1) via detached PGP
signatures by each of the signers, distributed together with this
canary in the qubes-secpack.git repo, and (2) via digital signatures
on the corresponding qubes-secpack.git repo tags. [2]
[2] Don't just trust the contents of this file blindly! Verify the
digital signatures!
Marek Marczykowski-Górecki to speak at the Xen Developer and Design Summit 2018
https://www.qubes-os.org/news/2018/06/17/marek-marczykowski-gorecki-xen-summit-2018/
Marek Marczykowski-Górecki (https://www.qubes-os.org/team/#marek-marczykowski-g%C3%B3recki) will be speaking at this year’s Xen Developer and
Design Summit (https://www.lfasiallc.com/events/xensummit2018/). The summit will take place in Nanjing Jiangning, China from June
20–22, 2018. Marek will present on linux-based device model stubdomains in
Qubes OS. For more information about the summit, please see the announcement on
the Xen blog (https://blog.xenproject.org/2018/05/03/xen-project-announces-schedule-for-its-annual-developer-and-design-summi/).
https://www.qubes-os.org/news/2018/06/17/marek-marczykowski-gorecki-xen-summit-2018/
Marek Marczykowski-Górecki (https://www.qubes-os.org/team/#marek-marczykowski-g%C3%B3recki) will be speaking at this year’s Xen Developer and
Design Summit (https://www.lfasiallc.com/events/xensummit2018/). The summit will take place in Nanjing Jiangning, China from June
20–22, 2018. Marek will present on linux-based device model stubdomains in
Qubes OS. For more information about the summit, please see the announcement on
the Xen blog (https://blog.xenproject.org/2018/05/03/xen-project-announces-schedule-for-its-annual-developer-and-design-summi/).
Improving the Stealthiness of Virtual Machine Introspection on Xen
https://blog.xenproject.org/2018/06/21/improving-the-stealthiness-of-virtual-machine-introspection-on-xen/
This blog post comes from Stewart Sentanoe of the University of Passau. Stewart is an Assistant Professor of Security in Information Systems at the Faculty of Computer Science and Mathematics. He was recently a Google Summer of Code Intern working on the Honeynet Project. Project Introduction Virtual Machine Introspection Virtual Machine Introspection (VMI) is the process of examining and […]
https://blog.xenproject.org/2018/06/21/improving-the-stealthiness-of-virtual-machine-introspection-on-xen/
This blog post comes from Stewart Sentanoe of the University of Passau. Stewart is an Assistant Professor of Security in Information Systems at the Faculty of Computer Science and Mathematics. He was recently a Google Summer of Code Intern working on the Honeynet Project. Project Introduction Virtual Machine Introspection Virtual Machine Introspection (VMI) is the process of examining and […]
XSA-264, XSA-265, and XSA-266 do not affect the security of Qubes OS
https://www.qubes-os.org/news/2018/06/27/xsa-264-265-266-qubes-not-affected/
The Xen Project has published Xen Security Advisories 264, 265 and 266
(XSA-264, XSA-265, and XSA-266, respectively). These XSAs do not
affect the security of Qubes OS, and no user action is necessary.
These XSAs have been added to the XSA Tracker (https://www.qubes-os.org/security/xsa/):
https://www.qubes-os.org/security/xsa/#264
https://www.qubes-os.org/security/xsa/#265
https://www.qubes-os.org/security/xsa/#266
https://www.qubes-os.org/news/2018/06/27/xsa-264-265-266-qubes-not-affected/
The Xen Project has published Xen Security Advisories 264, 265 and 266
(XSA-264, XSA-265, and XSA-266, respectively). These XSAs do not
affect the security of Qubes OS, and no user action is necessary.
These XSAs have been added to the XSA Tracker (https://www.qubes-os.org/security/xsa/):
https://www.qubes-os.org/security/xsa/#264
https://www.qubes-os.org/security/xsa/#265
https://www.qubes-os.org/security/xsa/#266
Comment on Stealthy monitoring with Xen altp2m by Improving the Stealthiness of Virtual Machine Introspection on Xen | Xen Project Blog
https://blog.xenproject.org/2016/04/13/stealthy-monitoring-with-xen-altp2m/#comment-518
[…] There are two ways to set a breakpoint implemented by DRAKVUF using INT3 (0xCC opcode) and Xen altp2m. […]
https://blog.xenproject.org/2016/04/13/stealthy-monitoring-with-xen-altp2m/#comment-518
[…] There are two ways to set a breakpoint implemented by DRAKVUF using INT3 (0xCC opcode) and Xen altp2m. […]
Xen Project 4.7.6 is available!
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/
I am pleased to announce the release of the Xen 4.7.6. Xen Project maintenance releases are released in line with our Maintenance Release Policy. We recommend that all users of the 4.7 stable series update to the latest point release. The release is available from its git repositories xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=refs/heads/stable-4.7 (tag RELEASE-4.7.6) or from the Xen […]
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/
I am pleased to announce the release of the Xen 4.7.6. Xen Project maintenance releases are released in line with our Maintenance Release Policy. We recommend that all users of the 4.7 stable series update to the latest point release. The release is available from its git repositories xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=refs/heads/stable-4.7 (tag RELEASE-4.7.6) or from the Xen […]
What’s New in the Xen Project Hypervisor 4.11
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/
I am pleased to announce the release of the Xen Project Hypervisor 4.11. One of our long-term development goals since the introduction of Xen Project Hypervisor 4.8 has been to create a cleaner architecture for core technology, less code and a smaller computing base for security and performance. The Xen 4.11 release has followed this […]
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/
I am pleased to announce the release of the Xen Project Hypervisor 4.11. One of our long-term development goals since the introduction of Xen Project Hypervisor 4.8 has been to create a cleaner architecture for core technology, less code and a smaller computing base for security and performance. The Xen 4.11 release has followed this […]
Comment on What’s New in the Xen Project Hypervisor 4.11 by ?Re-engineering Xen: The important open-source hypervisor gets remodeled - IT AND US
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-521
[…] VM products from Citrix, Huawei, Inspur, and Oracle. But, with the release of its latest edition, Xen Project Hypervisor 4.11, there are major changes under the […]
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-521
[…] VM products from Citrix, Huawei, Inspur, and Oracle. But, with the release of its latest edition, Xen Project Hypervisor 4.11, there are major changes under the […]
Comment on What’s New in the Xen Project Hypervisor 4.11 by ?Re-engineering Xen: The important open-source hypervisor gets remodeled | BuzzNews10
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-522
[…] from Citrix, Huawei, Inspur, and Oracle. However, with the discharge of its newest version, Xen Project Hypervisor 4.11, there are main adjustments underneath the […]
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-522
[…] from Citrix, Huawei, Inspur, and Oracle. However, with the discharge of its newest version, Xen Project Hypervisor 4.11, there are main adjustments underneath the […]
Comment on What’s New in the Xen Project Hypervisor 4.11 by ?Re-engineering Xen: The important open-source hypervisor gets remodeled | Longevity Technology
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-523
[…] VM products from Citrix, Huawei, Inspur, and Oracle. But, with the release of its latest edition, Xen Project Hypervisor 4.11, there are major changes under the […]
https://blog.xenproject.org/2018/07/10/whats-new-in-the-xen-project-hypervisor-4-11/#comment-523
[…] VM products from Citrix, Huawei, Inspur, and Oracle. But, with the release of its latest edition, Xen Project Hypervisor 4.11, there are major changes under the […]
Comment on Xen Project 4.7.6 is available! by Xen four.eleven debuts new ‘PVH’ guest kind, for the sake of security • The Register - Servers Maintenance
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/#comment-524
[…] wait around, there’s a lot more! The Xen Task on Monday released Xen four.seven.6, a maintenance launch that fixes 21 security concerns and one hundred eighty other […]
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/#comment-524
[…] wait around, there’s a lot more! The Xen Task on Monday released Xen four.seven.6, a maintenance launch that fixes 21 security concerns and one hundred eighty other […]
Comment on Xen Project 4.7.6 is available! by Xen 4.11 debuts new ‘PVH’ guest type, for the sake of security • The Register - RareTechNews
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/#comment-525
[…] wait, there’s more! The Xen Project on Monday released Xen 4.7.6, a maintenance release that fixes 21 security issues and 180 other issues. Downloads and […]
https://blog.xenproject.org/2018/07/09/xen-project-4-7-6-is-available/#comment-525
[…] wait, there’s more! The Xen Project on Monday released Xen 4.7.6, a maintenance release that fixes 21 security issues and 180 other issues. Downloads and […]
Xen Project 4.8.4 is available!
https://blog.xenproject.org/2018/07/12/xen-project-4-8-4-is-available/
I am pleased to announce the release of the Xen 4.8.4. Xen Project maintenance releases are released in line with our Maintenance Release Policy. We recommend that all users of the 4.8 stable series update to the latest point release. The release is available from its git repositories xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=refs/heads/stable-4.8 (tag RELEASE-4.8.4) or from the Xen […]
https://blog.xenproject.org/2018/07/12/xen-project-4-8-4-is-available/
I am pleased to announce the release of the Xen 4.8.4. Xen Project maintenance releases are released in line with our Maintenance Release Policy. We recommend that all users of the 4.8 stable series update to the latest point release. The release is available from its git repositories xenbits.xen.org/gitweb/?p=xen.git;a=shortlog;h=refs/heads/stable-4.8 (tag RELEASE-4.8.4) or from the Xen […]
Xen Project Hypervisor: Virtualization and Power Management are Coalescing into an Energy-Aware Hypervisor
https://blog.xenproject.org/2018/07/12/xen-project-hypervisor-virtualization-and-power-management-are-coalescing-into-an-energy-aware-hypervisor/
Power management in the Xen Project Hypervisor historically targets server applications to improve power consumption and heat management in data centers reducing electricity and cooling costs. In the embedded space, the Xen Project Hypervisor faces very different applications, architectures and power-related requirements, which focus on battery life, heat, and size. Although the same fundamental principles […]
https://blog.xenproject.org/2018/07/12/xen-project-hypervisor-virtualization-and-power-management-are-coalescing-into-an-energy-aware-hypervisor/
Power management in the Xen Project Hypervisor historically targets server applications to improve power consumption and heat management in data centers reducing electricity and cooling costs. In the embedded space, the Xen Project Hypervisor faces very different applications, architectures and power-related requirements, which focus on battery life, heat, and size. Although the same fundamental principles […]