ELSA-2015-0323 - libvirt security, bug fix, and enhancement update
Type:
SECURITY
Severity:
LOW
Release Date:
2015-03-11
Description
[1.2.8-16.0.1] - Replace docs/et.png in tarball with blank image
[1.2.8-16] - qemu: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094) - lxc: don't setup cpuset.mems if memory mode in numatune is not 'strict' (rhbz#1186094)
[1.2.8-15] - qemu: Add missing goto error in qemuRestoreCgroupState (rhbz#1161540)
[1.2.8-14] - virNetworkDefUpdateIPDHCPHost: Don't crash when updating network (rhbz#1182486) - Format CPU features even for host-model (rhbz#1182448) - util: Add function virCgroupHasEmptyTasks (rhbz#1161540) - util: Add virNumaGetHostNodeset (rhbz#1161540) - qemu: Remove unnecessary qemuSetupCgroupPostInit function (rhbz#1161540) - qemu: Save numad advice into qemuDomainObjPrivate (rhbz#1161540) - qemu: Leave cpuset.mems in parent cgroup alone (rhbz#1161540) - qemu: Fix hotplugging cpus with strict memory pinning (rhbz#1161540) - util: Fix possible NULL dereference (rhbz#1161540) - qemu_driver: fix setting vcpus for offline domain (rhbz#1161540) - qemu: migration: Unlock vm on failed ACL check in protocol v2 APIs (CVE-2014-8136) - CVE-2015-0236: qemu: Check ACLs when dumping security info from save image (CVE-2015-0236) - CVE-2015-0236: qemu: Check ACLs when dumping security info from snapshots (CVE-2015-0236) - Check for domain liveness in qemuDomainObjExitMonitor (rhbz#1161024) - Mark the domain as active in qemuhotplugtest (rhbz#1161024) - Fix vmdef usage while in monitor in qemuDomainHotplugVcpus (rhbz#1161024) - Fix vmdef usage while in monitor in BlockStat* APIs (rhbz#1161024) - Fix vmdef usage while in monitor in qemu process (rhbz#1161024) - Fix vmdef usage after domain crash in monitor on device detach (rhbz#1161024) - Fix vmdef usage after domain crash in monitor on device attach (rhbz#1161024)
[1.2.8-13] - conf: Fix memory leak when parsing invalid network XML (rhbz#1180136) - qxl: change the default value for vgamem_mb to 16 MiB (rhbz#1181052) - qemuxml2argvtest: Fix test after change of qxl vgamem_mb default (rhbz#1181052) - conf: fix crash when hotplug a channel chr device with no target (rhbz#1181408) - qemu: forbid second blockcommit during active commit (rhbz#1135339) - qemu_monitor: introduce new function to get QOM path (rhbz#1180574) - qemu_process: detect updated video ram size values from QEMU (rhbz#1180574)
[1.2.8-12] - Fix hotplugging of block device-backed usb disks (rhbz#1175668) - qemu: Create memory-backend-{ram, file} iff needed (rhbz#1175397) - conf: Don't format actual network definition in migratable XML (rhbz#1177194)
[1.2.8-11] - virsh: vol-upload disallow negative offset (rhbz#1087104) - storage: fix crash caused by no check return before set close (rhbz#1087104) - qemu: Fix virsh freeze when blockcopy storage file is removed (rhbz#1139567) - security: Manage SELinux labels on shared/readonly hostdev's (rhbz#1082521) - nwfilter: fix crash when adding non-existing nwfilter (rhbz#1169409) - conf: Fix libvirtd crash matching hostdev XML (rhbz#1174053) - qemu: Resolve Coverity REVERSE_INULL (rhbz#1172570) - CVE-2014-8131: Fix possible deadlock and segfault in qemuConnectGetAllDomainStats() (CVE-2014-8131) - qemu: bulk stats: Fix logic in monitor handling (rhbz#1172570) - qemu: avoid rare race when undefining domain (rhbz#1150505) - Do not format CPU features without a model (rhbz#1151885) - Ignore CPU features without a model for host-passthrough (rhbz#1151885) - Silently ignore MAC in NetworkLoadConfig (rhbz#1156367) - Generate a MAC when loading a config instead of package update (rhbz#1156367) - qemu: move setting emulatorpin ahead of monitor showing up (rhbz#1170484) - util: Introduce flags field for macvtap creation (rhbz#1081461) - network: Bring netdevs online later (rhbz#1081461) - qemu: always call qemuInterfaceStartDevices() when starting CPUs (rhbz#1081461) - qemu: add a qemuInterfaceStopDevices(), called when guest CPUs stop (rhbz#1081461) - conf: replace call to virNetworkFree() with virObjectUnref() (rhbz#1099210) - util: new functions for setting bridge and bridge port attributes (rhbz#1099210) - util: functions to manage bridge fdb (forwarding database) (rhbz#1099210) - conf: new network bridge device attribute macTableManager (rhbz#1099210) - network: save bridge name in ActualNetDef when actualType==network too (rhbz#1099210) - network: store network macTableManager setting in NetDef actual object (rhbz#1099210) - network: setup bridge devices for macTableManager='libvirt' (rhbz#1099210) - qemu: setup tap devices for macTableManager='libvirt' (rhbz#1099210) - qemu: add/remove bridge fdb entries as guest CPUs are started/stopped (rhbz#1099210) - virsh: document block.n.allocation stat (rhbz#1041569) - getstats: avoid memory leak on OOM (rhbz#1041569) - getstats: improve documentation (rhbz#1041569) - getstats: start giving offline block stats (rhbz#1041569) - getstats: add block.n.path stat (rhbz#1041569) - qemuMonitorJSONBlockStatsUpdateCapacity: Don't skip disks (rhbz#1041569) - getstats: prepare monitor collection for recursion (rhbz#1041569) - getstats: perform recursion in monitor collection (rhbz#1041569) - getstats: prepare for dynamic block.count stat (rhbz#1041569) - getstats: add new flag for block backing chain (rhbz#1041569) - getstats: split block stats reporting for easier recursion (rhbz#1041569) - getstats: crawl backing chain for qemu (rhbz#1041569) - logical: Add '--type snapshot' to lvcreate command (rhbz#1166592)
[1.2.8-10] - qemu: add the missing jobinfo type in qemuDomainGetJobInfo (rhbz#1167883) - network: Fix upgrade from libvirt older than 1.2.4 (rhbz#1167145) - qemu: fix domain startup failing with 'strict' mode in numatune (rhbz#1168866) - qemu: Don't track quiesced state of FSs (rhbz#1160084) - qemu: fix block{commit,copy} abort handling (rhbz#1135169)
[1.2.8-9] - doc: fix mismatched ACL attribute name (rhbz#1161358) - qemu: monitor: Rename and improve qemuMonitorGetPtyPaths (rhbz#1146944) - conf: Add channel state for virtio channels to the XML (rhbz#1146944) - qemu: Add handling for VSERPORT_CHANGE event (rhbz#1146944) - qemu: chardev: Extract more information about character devices (rhbz#1146944) - qemu: process: Refresh virtio channel guest state when connecting to mon (rhbz#1146944) - event: Add guest agent lifecycle event (rhbz#1146944) - examples: Add support for the guest agent lifecycle event (rhbz#1146944) - qemu: Emit the guest agent lifecycle event (rhbz#1146944) - internal: add macro to round value to the next closest power of 2 (rhbz#1076098) - video: cleanup usage of vram attribute and update documentation (rhbz#1076098) - QXL: fix setting ram and vram values for QEMU QXL device (rhbz#1076098) - caps: introduce new QEMU capability for vgamem_mb device property (rhbz#1076098) - qemu-command: use vram attribute for all video devices (rhbz#1076098) - qemu-command: introduce new vgamem attribute for QXL video device (rhbz#1076098)
[1.2.8-8] - qemu: Fix crash in tunnelled migration (rhbz#1147331) - qemu: Really fix crash in tunnelled migration (rhbz#1147331) - qemu: Update fsfreeze status on domain state transitions (rhbz#1160084) - qemuPrepareNVRAM: Save domain conf only if domain's persistent (rhbz#1026772) - docs: Document NVRAM behavior on transient domains (rhbz#1026772) - Fix build in qemu_capabilities (rhbz#1165782) - qemu: Support OVMF on armv7l aarch64 guests (rhbz#1165782) - qemu: Drop OVMF whitelist (rhbz#1165782) - storage: Fix issue finding LU's when block doesn't exist (rhbz#1152382) - storage: Add thread to refresh for createVport (rhbz#1152382) - storage: qemu: Fix security labelling of new image chain elements (rhbz#1151718) - virsh: sync domdisplay help and manual (rhbz#997802) - docs: domain: Move docs for storage hosts under the
This page is generated automatically and has not been checked for errors or omissions. For clarification
or corrections please contact the Oracle Linux ULN team