Hotfix package name:XS55EU2001.xsupdate
For: XenServer 5.5
Replaces: None
Date: June, 2010
Language supported: English (US)
Readme version: 1.00
Who Should Install This Hotfix?

All users that are affected by the issues raised in CTX125319 Vulnerability in Citrix XenServer Could Result in Denial of Service and CTX123359 Transport Layer Security Renegotiation Vulnerability should install this hotfix.
Issue Resolved In This Hotfix
Issue Resolved In This Security Hotfix

This security hotfix address the vulnerabilities as described in the Security Bulletins above.
Installing the Hotfix

Customers should use either XenCenter or the CLI to install this update. Once the update has been installed, in order for it to take effect, the server must be restarted. As with any software update, please back up your data before applying this hotfix.
Installing the update using XenCenter

1. Download the update to a known location on a computer that has XenCenter installed.
2. In XenCenter, on the Tools menu, select Install New Update.
3. Select the servers you wish to update. Citrix advises customers to update all hosts in a pool within a short space of time. Running a mixed pool of updated and non-updated hosts for general operation is not supported. Click Next to proceed in the wizard.
4. Enter the path to browse to the downloaded update file. Click Next and the update will be uploaded to the pools and servers you chose to update.
5. Click Finish. (You will need to use manual mode as this update does not support automatic modes.) The update will now be applied to each server.
6. After the hotfix is installed on all servers then reboot each server in turn.

Installing the update using the off-host CLI

1. Download the hotfix to a known location on a computer that has the XenServer CLI installed.
2. Upload the hotfix to the pool or host you wish to apply it to:

xe -s -u root -pw patch-upload file-name=

This causes the hotfix identifier to be printed to the screen:

B7616953-53E2-414E-B93A-EE817AC8655A

3. Apply the hotfix to the pool, specifying the UUID of the hotfix, as given by the upload command in the previous step:

xe -s -u root -pw patch-pool-apply \
uuid=B7616953-53E2-414E-B93A-EE817AC8655A

4. In order to complete the application of the hotfix, restart each of the hosts in the pool in turn.

Files
Hotfix File
Hotfix file name File md5sum
XS55EU2001.xsupdate f53ca5d870aca48ebe485c7f960f07b8
Files Updated
RPM file
xen-hypervisor-3.3.1-5.5.0.392.18703.i686.rpm
openssl-0.9.8e-12.el5_4.6.i686.rpm

to download go to http://support.citrix.com/article/CTX125519