# Vates / XCP-ng 日跟踪 · 2026-09-09
> 日期：2026-09-09（Asia/Shanghai）。原料：archive/2026-09-09/vates/。上一日成功日跟踪 2026-09-08。

## 摘要
- **新稿 · September 2026 Security Updates #1 for XCP-ng 8.3 LTS（博客日 2026-09-08）**：修复 Xen / oxenstored / tapdisk 相关安全问题（XSA-509/510/512/513）；**Host reboots are necessary**；其中 **tapdisk OOB** 可导致恶意 guest 在 dom0 以 root 运行的 tapdisk 进程内取得代码执行（管理员权限级风险）。XSA-511（PV）评估为不影响 XCP-ng 8.3 LTS，本包未修、后续作 defence-in-depth。属 LTS 安全维护，非新 SKU。
- **续档仍有效**：Xen on RISC-V 真机 guest（2026-09-03，未上游）、August Updates #2、XO 原生 MCP、Veeam for XCP-ng、V2V（nbdkit+VDDK 旁注仍有效）。

## 原文摘录

### [September 2026 Security Updates #1 for XCP-ng 8.3 LTS](https://xcp-ng.org/blog/2026/09/08/september-2026-security-updates-1-for-xcp-ng-8-3-lts/)
- 来源：`vates/september-2026-security-updates-1-for-xcp-ng-8-3-lts-5e59866b.txt`
> New security updates are available for XCP-ng 8.3 LTS. Host reboots are necessary after this update.
> Security vulnerabilities have been detected and fixed in the xen hypervisor, oxenstored, and tapdisk.
> XSA-509: DMs may cause a memory leak by IRQ binding… XSA-510: Improper handling of HVM emulation return codes… XSA-512: Unbounded accumulation of watches… XSA-513: Out-of-bounds accesses in Tapdisk: Several bounds checks issues were found in tapdisk. These could allow a malicious guest to obtain code execution within the tapdisk process running as root in dom0 granting it administrator privileges on the dom0 (control domain).

### [Xen on RISC-V just ran on real hardware!](https://xcp-ng.org/blog/2026/09/03/xen-on-risc-v-just-ran-on-real-hardware/) · 续档
- 来源：`vates/xen-on-risc-v-just-ran-on-real-hardware-1b7663b5.txt`
> Big milestone for the Xen on RISC-V effort: Xen now boots a guest domain on physical RISC-V hardware, not just QEMU. … HiFive Premier P550… The series is not upstream yet.

## 对基础档案的影响
- **最近动态追加**：XCP-ng 8.3 LTS 2026-09 安全更新 #1（XSA-509/510/512/513，需主机重启；tapdisk→dom0 root 风险）。
- RISC-V / August 维护包 / MCP / Veeam 维持既有条目。