Just to let people know what’s going on:
The embargo for XSA-135 lifted today at 1400 UTC. The embargoes for XSAs 134 and 136 lift tomorrow at 1200 UTC.
XSA-135 only affects guests which have been assigned a PCNET emulated NIC, which is not the default; as such, it doesn’t seem terribly urgent to push the fix today.
So rather than push one fix today and another tomorrow, our plan is just to do a single update with all the XSAs tomorrow once the embago lifts.