Hotfix XS71ECU2058 – For XenServer 7.1 Cumulative Update 2

Who Should Install This Hotfix?

This is a hotfix for customers running XenServer 7.1 Cumulative Update 2.

All customers who are affected by the issues described in CTX306565 – Citrix Hypervisor Multiple Security Updates should install this hotfix.

Note: This hotfix is available only to customers on the Customer Success Services program.

Information About this Hotfix

Component	Details
Prerequisite	None
Post-update tasks	Restart Host
Content live patchable**	No
Baselines for Live Patch	N/A
Revision History	Published on Mar 30, 2021
** Available to Enterprise Customers.

Issues Resolved In This Hotfix

This security hotfix addresses the vulnerabilities as described in the Security Bulletin above. In addition, it resolves the following issues:

On systems with a large number of CPUs, VMs can fail during live migration. This issue occurs when the VM consumes more than the available number of grant pages. This fix decreases the number of grant pages that are assigned to a VM by default.
Fixes a networking performance regression introduced in security hotfix XS71ECU2049 for CVE-2020-27673.

This hotfix also includes the following previously released hotfixes:

Installing the Hotfix

Customers should use either XenCenter or the XenServer Command Line Interface (CLI) to apply this hotfix. When the installation is complete, see the Post-update tasks in the table Information About this Hotfix for information about any post-update tasks you should perform for the update to take effect. As with any software update, back up your data before applying this update. Citrix recommends updating all hosts within a pool sequentially. Upgrading of hosts should be scheduled to minimize the amount of time the pool runs in a “mixed state” where some hosts are upgraded and some are not. Running a mixed pool of updated and non-updated hosts for general operation is not supported.

Note: The attachment to this article is a zip file. It contains the hotfix update package only. Log in to your Citrix account and click the following link to download the source code for any modified open source components XS71ECU2058-sources.iso. The source code is not necessary for hotfix installation: it is provided to fulfill licensing obligations. You must be logged in to access this link.

Installing the Hotfix by using XenCenter

Choose an Installation Mechanism

There are three mechanisms to install a hotfix:

Automated Updates
Download update from Citrix
Select update or Supplemental pack from disk

The Automated Updates feature is available for XenServer Enterprise Edition customers, or to those who have access to XenServer through their XenApp/XenDesktop entitlement. For information about installing a hotfix using the Automated Updates feature, see the Applying Automated Updates in the XenServer documentation.

For information about installing a hotfix using the Download update from Citrix option, see Applying an Update to a Pool in the XenServer documentation.

The following section contains instructions on option (3) installing a hotfix that you have downloaded to disk:

Follow the on-screen recommendations to resolve any update prechecks that have failed. If you want XenCenter to automatically resolve all failed prechecks, click Resolve All. When the prechecks have been resolved, click Next.

Note: If you click Cancel at this stage, the Install Update wizard reverts the changes and removes the update file from the host.

Download the hotfix to a known location on a computer that has XenCenter installed.
Unzip the hotfix zip file and extract the .iso file
In XenCenter, on the Tools menu, select Install Update. This displays the Install Update wizard.
Read the information displayed on the Before You Start page and click Next to start the wizard.
Click Browse to locate the iso file, select XS71ECU2058.iso and then click Open.
Click Next.
Select the pool or hosts you wish to apply the hotfix to, and then click Next.
The Install Update wizard performs a number of update prechecks, including the space available on the hosts, to ensure that the pool is in a valid configuration state. The wizard also checks whether the hosts need to be rebooted after the update is applied and displays the result.
Choose the Update Mode. Review the information displayed on the screen and select an appropriate mode.
Click Install update to proceed with the installation. The Install Update wizard shows the progress of the update, displaying the major operations that XenCenter performs while updating each host in the pool.
When the update is applied, click Finish to close the wizard.
If you chose to carry out the post-update tasks, do so now.

Installing the Hotfix by using the xe Command Line Interface

Download the hotfix file to a known location.
Extract the .iso file from the zip.
Upload the .iso file to the Pool Master by entering the following commands:

(Where -s is the Pool Master’s IP address or DNS name.)

xe -s <server> -u <username> -pw <password> update-upload file-name= <filename>XS71ECU2058.iso

XenServer assigns the update file a UUID which this command prints. Note the UUID.

4ae2ce9c-8adb-11eb-a18e-fb54ffaded27
Apply the update to all hosts in the pool, specifying the UUID of the update:

xe update-pool-apply uuid=4ae2ce9c-8adb-11eb-a18e-fb54ffaded27

Alternatively, if you need to update and restart hosts in a rolling manner, you can apply the update file to an individual host by running the following:

xe update-apply host= <host> uuid=4ae2ce9c-8adb-11eb-a18e-fb54ffaded27
Verify that the update was applied by using the update-list command.

xe update-list -s <server> -u root -pw <password> name-label=XS71ECU2058

If the update is successful, the hosts field contains the UUIDs of the hosts to which this patch was successfully applied. This should be a complete list of all hosts in the pool.
If the hotfix is applied successfully, restart each host in the pool, starting with the master.
Use the update-pool-clean command to remove the update files from all hosts in the pool. This command frees up space on shared storage and does not uninstall the update.

xe update-pool-clean uuid=4ae2ce9c-8adb-11eb-a18e-fb54ffaded27

Files

Hotfix File

Component	Details
Hotfix Filename	XS71ECU2058.iso
Hotfix File sha256	5d2c64692f5f7455fa38077e7de4ceeea81d2c671862236a58be4483e9d415ab
Hotfix Source Filename	XS71ECU2058-sources.iso
Hotfix Source File sha256	ed9a3294e700f0d0e625fb1d532af6d36e3ac12283e42967ea5030b8620a6c3d
Hotfix Zip Filename	XS71ECU2058.zip
Hotfix Zip File sha256	d3fab19cddca0e4e4dd23e92ec891199810f87619cfb40c1098d7966b5e197d0
Size of the Zip file	21.03 MB

Files Updated

kernel-4.4.27-600.1.21.x86_64.rpm

More Information

For more information, see XenServer Documentation.

If you experience any difficulties, contact Citrix Technical Support.

No Related Posts