# XCP-ng Blog News and articles on XCP-ng project This is one page of public article previews, not the complete archive. Follow Next page to continue. Summaries are not the original full articles. ## September 2026 Security Updates #1 for XCP-ng 8.3 LTS DevFeed: [September 2026 Security Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: David Morel Published: 2026-09-08T14:07:29Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [DDoS](), [Memory Leaks]() Tags: [2026](), [cve](), [lts](), [maintenance-updates](), [memory-leak](), [release](), [security](), [september-2026](), [updates](), [vulnerabilities]() ### AI overview This article announces September 2026 security updates for XCP-ng 8.3 LTS. The fixes address vulnerabilities in Xen, oxenstored, and Tapdisk, including memory leaks, denial-of-service conditions, and out-of-bounds accesses that could allow code execution with administrator privileges in dom0. One Xen issue does not affect supported XCP-ng 8.3 LTS installations and is deferred for defense in depth. ### Source excerpt New security and maintenance updates are available for XCP-ng 8.3 LTS. This includes update to Xen, oxenstored and blktap. ## Xen on RISC-V just ran on real hardware! DevFeed: [Xen on RISC-V just ran on real hardware!]() Original publisher: [Read original article]() Author: Baptiste Le Duc Published: 2026-09-03T08:00:27Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [RISC-V](), [virtualization](), [systems](), [ci](), [cpu](), [Emulator]() Tags: [ci](), [cpu](), [qemu](), [risc-v](), [systems](), [virtualization]() ### AI overview Xen now boots a guest domain on physical RISC-V hardware using a HiFive Premier P550. Supporting changes accommodate the board's pre-ratification hypervisor extension and add reproducible hardware-based CI that boots Xen and a Linux guest. ### Source excerpt Xen now boots a guest domain on physical RISC-V hardware, not just in QEMU. The board we used ships a CPU designed before the hypervisor extension was ratified, which turned out to be the whole challenge. ## August 2026 Updates #2 for XCP-ng 8.3 LTS DevFeed: [August 2026 Updates #2 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-08-27T14:03:02Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [migration](), [Disk image](), [Kubernetes]() Tags: [2026](), [bug](), [bug-fixes](), [disk-space](), [kubernetes](), [lts](), [migration](), [storage](), [update](), [updates]() ### AI overview This article announces cumulative maintenance updates for XCP-ng 8.3 LTS. The release fixes storage-management bugs, including QCOW2 leaf-coalesce failures and LVM metadata corruption, and improves sparse QCOW2 virtual disk migration by reducing transfers and preserving VDI tags. ### Source excerpt New updates published: bug fixes related to storage management. ## August 2026 Updates #1 for XCP-ng 8.3 LTS DevFeed: [August 2026 Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-08-18T16:22:04Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Disk image](), [cloud-infrastructure](), [Software]() Tags: [bug-fixes](), [lts](), [maintenance](), [maintenance-updates](), [openssh](), [performance](), [storage](), [update](), [updates]() ### AI overview This article announces maintenance updates for XCP-ng 8.3 LTS. It explains the required rolling update process and highlights storage improvements, including live leaf coalescing for QCOW2, faster QCOW2 storage repository scans, and improved responsiveness for LINSTOR storage repositories. ### Source excerpt Maintenance updates for XCP-ng: storage performance and fixes, configurable OpenSSH, and much more. ## XCP-ng 8.3 LTS: Refreshed Installation ISOs DevFeed: [XCP-ng 8.3 LTS: Refreshed Installation ISOs]() Original publisher: [Read original article]() Author: Gaël Duperrey Published: 2026-08-14T08:09:13Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [Server](), [Hardware](), [networking](), [Disk image]() Tags: [amd](), [drivers](), [hardware](), [improvements](), [installation](), [iso](), [linux](), [lts](), [networking](), [numa](), [performance](), [release](), [security](), [server](), [storage](), [update](), [updates]() ### AI overview XCP-ng 8.3 LTS has refreshed installation ISOs containing updates released since the previous installer, installer improvements, enhanced hardware support, and other fixes. The article notes that existing up-to-date hosts already include these changes. ### Source excerpt Refreshed ISOs for XCP-ng 8.3 LTS featuring the latest security updates, improvements, and QCOW2 support. ## July 2026 Updates #1 for XCP-ng 8.3 LTS DevFeed: [July 2026 Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Philippe Coval Published: 2026-07-28T14:32:38Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [Memory Leaks]() Tags: [2026](), [iso](), [leak](), [lts](), [regression](), [release](), [security](), [update](), [updates]() ### AI overview This release provides security and maintenance updates for XCP-ng 8.3 LTS. It updates Xen to address multiple security advisories, fixes a XAPI regression that caused VBD leaks, and includes minor changes needed to build an updated installer ISO. ### Source excerpt This release batch contains a security update for Xen. This update also brings a fix for a XAPI regression causing VBD leaks. Other minor changes were needed to build an updated XCP-ng 8.3 LTS installer (ISO). ## Behind the scenes: debugging a pool join failure DevFeed: [Behind the scenes: debugging a pool join failure]() Original publisher: [Read original article]() Author: Marc Pezin Published: 2026-07-20T09:48:38Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [debugging](), [TLS (Transport Layer Security)](), [DevOps](), [Server]() Tags: [analysis](), [contribution](), [debugging](), [devblog](), [error-reporting](), [ntp](), [root-cause-analysis](), [tls]() ### AI overview This article follows the investigation of an XCP-ng pool join failure after an upgrade from version 8.2 to 8.3. The debugging process reproduced the issue, ruled out common TLS causes, identified the root cause, and resulted in an upstream contribution that improved error reporting. ### Source excerpt A user reported a pool join failure after upgrading to XCP-ng 8.3. What started as a forum discussion led to a root-cause analysis, an upstream contribution, and a better error message for everyone. ## June 2026 Updates #2 for XCP-ng 8.3 LTS DevFeed: [June 2026 Updates #2 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Philippe Coval Published: 2026-06-23T17:00:15Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [Kernel](), [x86](), [Ethernet]() Tags: [2026](), [bug-fixes](), [ethernet](), [kernel](), [lts](), [release](), [security](), [update](), [updates](), [vulnerabilities](), [vulnerability](), [x86]() ### AI overview This release batch provides security and maintenance updates for XCP-ng 8.3 LTS. It fixes vulnerabilities in Xen, the Linux kernel, and the optional lldpd package, including issues that could cause denial of service, privilege escalation, information leaks, or a buffer over-read. The update also includes version updates, bug fixes, improvements, and a fix included for alignment with security standards. ### Source excerpt This release batch contains security fixes for Xen and kernel as well as version updates, bug fixes and some improvements. The fixed vulnerabilities are not considered critical and are fixed as defence-in-depth. ## June 2026 Updates #1 for XCP-ng 8.3 LTS DevFeed: [June 2026 Updates #1 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Philippe Coval Published: 2026-06-02T16:17:58Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [Linux](), [Vulnerabilities](), [Security](), [OpenSSH](), [UEFI](), [USB](), [io\_uring]() Tags: [2026](), [bugfixes](), [linux](), [linux-kernel](), [lts](), [maintenance-updates](), [openssh](), [release](), [security](), [security-vulnerabilities](), [uefi](), [update](), [updates](), [usb]() ### AI overview XCP-ng 8.3 LTS receives security and maintenance updates. The release fixes Linux kernel vulnerabilities in the control domain, including issues that could allow an unprivileged local user to gain root privileges, and rejects obsolete insecure OpenSSH clients. It also includes improvements for USB smartcard passthrough, QEMU memory mapping, UEFI booting and CPU limits, PXE booting, and dmidecode. ### Source excerpt Security vulnerabilities have been identified and fixed in the Linux kernel used by XCP-ng's control domain (dom0). Additional lower-priority maintenance updates are included in this release alongside these security fixes. ## Xen on RISC-V: Dom0 Boot, Hypercalls and Docker Toolchain DevFeed: [Xen on RISC-V: Dom0 Boot, Hypercalls and Docker Toolchain]() Original publisher: [Read original article]() Author: Baptiste Le Duc Published: 2026-05-22T08:30:21Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [RISC-V](), [Docker](), [Tooling](), [Command-line interface]() Tags: [asynchronous](), [boot](), [command-line](), [communication](), [docker](), [interrupt](), [memory](), [risc-v](), [tooling]() ### AI overview This first post in a series reports progress on bringing Xen guest-domain support to RISC-V. It describes Dom0 boot work, hypercall communication through SBI ecall, event-channel notifications, and a Docker environment for building and running the stack on an x86 laptop. ### Source excerpt Latest progress on Xen for RISC-V, including Dom0 boot, hypercalls and Docker-based tooling. ## May 2026 Updates #3 for XCP-ng 8.3 LTS DevFeed: [May 2026 Updates #3 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-05-21T15:29:19Z Content type: news Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [Linux](), [Kernel](), [cpu]() Tags: [2026](), [bugfixes](), [cpu](), [cve](), [exploits](), [firmware](), [hardware](), [improvements](), [intel](), [linux-kernel](), [lts](), [security](), [update](), [updates](), [vulnerabilities]() ### AI overview XCP-ng 8.3 LTS receives security and maintenance updates addressing vulnerabilities in Xen and the Linux kernel, including CPU opcode caching and local privilege-escalation issues. The update also includes Intel microcode, firmware guidance, storage and Xen bug fixes, NUMA fixes, and dependency upgrades. ### Source excerpt New security and maintenance updates are available for XCP-ng 8.3 LTS. Xen, Linux kernel, Intel Microcode... ## May 2026 Updates #2 for XCP-ng 8.3 LTS DevFeed: [May 2026 Updates #2 for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-05-07T17:32:25Z Content type: release Language: en Sources: [XCP-ng Blog]() Topics: [schema-evolution](), [API](), [Feathers]() Tags: [2026](), [api](), [compatibility](), [issue](), [lts](), [maintenance](), [maintenance-updates](), [storage](), [update](), [updates]() ### AI overview This release provides maintenance updates for XCP-ng 8.3 LTS, fixing a backward-compatibility issue that affected rolling pool updates using XOSTOR. ### Source excerpt Today's update addresses an issue with the rolling pool update process on pools using XOSTOR. ## QCOW2 is now GA in XCP-ng DevFeed: [QCOW2 is now GA in XCP-ng]() Original publisher: [Read original article]() Author: Damien Thenot Published: 2026-05-05T17:29:49Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Disk image](), [cloud-infrastructure]() Tags: [new-feature](), [news](), [production](), [qemu](), [release](), [standard](), [storage](), [test](), [update]() ### AI overview XCP-ng 8.3 makes QCOW2 production-ready for virtual disks up to 16 TiB, addressing the 2 TiB limit of VHD. VHD remains the default for smaller disks, while Xen Orchestra automatically selects QCOW2 for new disks larger than 2040 GiB. The release emphasizes stability, testing, and compatibility with existing storage repositories. ### Source excerpt QCOW2 is now GA in XCP-ng 8.3, supporting VM disks up to 16 TiB and replacing the 2 TiB VHD limit. Production-ready, stability-focused, with performance optimizations coming soon. ## May 2026 Security and Maintenance Updates for XCP-ng 8.3 LTS DevFeed: [May 2026 Security and Maintenance Updates for XCP-ng 8.3 LTS]() Original publisher: [Read original article]() Author: Samuel Verschelde Published: 2026-05-05T17:29:39Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [Security](), [Vulnerabilities](), [Linux]() Tags: [2026](), [linux](), [lts](), [maintenance](), [security](), [update](), [updates](), [vulnerabilities]() ### AI overview The article announces security and maintenance updates for XCP-ng 8.3 LTS. The updates address vulnerabilities in XAPI, the Linux kernel, and Windows guest tools, while also making the QCOW2 disk format generally available for virtual machine disks larger than 2 TiB. ### Source excerpt New security and maintenance updates are available for XCP-ng 8.3 LTS. This set of updates also marks the general availability of the QCOW2 disk format. ## Xen Spring Meetup 2026: a look back at the community in motion DevFeed: [Xen Spring Meetup 2026: a look back at the community in motion]() Original publisher: [Read original article]() Author: Clément Schilling Published: 2026-04-29T12:00:53Z Content type: article Language: en Sources: [XCP-ng Blog]() Topics: [virtualization](), [Open Source](), [Usability](), [Automation](), [networking]() Tags: [2026](), [automation](), [community](), [cost](), [event](), [infrastructure](), [networking](), [open-source](), [operations](), [performance](), [recap](), [storage](), [talks](), [usability](), [virtualization]() ### AI overview A recap of Xen Spring Meetup 2026, covering community discussions, technical talks, and real-world use of open virtualization platforms. The article highlights platform evolution, usability, automation, operations, performance, cost, storage, networking, and production infrastructure concerns. ### Source excerpt A recap of Xen Spring Meetup 2026 featuring key talks, community insights, and real-world virtualization discussions.