[Libvirt-announce] ANNOUNCE: libvirt 1.2.18.1 maintenance release
by Cole Robinson
libvirt 1.2.18.1 is now available. This is a maintenance release of
libvirt 1.2.18 with additional bugfixes that have accumulated
upstream since the initial release.
This release can be downloaded at:
http://libvirt.org/sources/stable_updates/libvirt-1.2.18.1.tar.gz
Changes in this version:
* test driver: don't unlock pool after freeing it
* libxl: fix AttachDeviceConfig on hostdev type
* security_selinux: Take @privileged into account
* selinux: fix compile errors
* security_selinux: Add SetDirLabel support
* security: Add virSecurityDomainSetDirLabel
* security_selinux: Use proper structure to access socket data
* security_selinux: Replace SELinuxSCSICallbackData with proper struct
* virSecuritySELinuxSetSecurityAllLabel: drop useless
virFileIsSharedFSType
* virSecurityManager: Track if running as privileged
* qemu: hotplug: Properly clean up drive backend if frontend hotplug
fails
* xen: fix race in refresh of config cache
* libxl: don't end job for ephemeal domain on start failure
* conf: fix crash when parsing a unordered NUMA <cell/>
* qemu: Check virGetLastError return value for migration finish failure
* libxl: don't overwrite error from virNetSocketNewConnectTCP()
* domain-conf: escape string for socket attribute
* src: Check for symbols ordering in ADMIN_SYM_FILES
* src: Cleanup libvirt_admin.syms
* src: Check libvirt_admin.syms for exported symbols
* util: fallback to ioctl(SIOCBRDELBR) if netlink RTM_DELLINK fails
* util: fallback to ioctl(SIOCBRADDBR) if netlink RTM_NEWLINK fails
* libxl: acquire a job when receiving a migrating domain
* libxl: don't attempt to resume domain when suspend fails
* libxl: fix ref counting of libxlMigrationDstArgs
* libvirt_lxc: Claim success for --help
* virt-aa-helper: Improve valid_path
* qemu: Emit correct audit message for memory hot unplug
* qemu: Emit correct audit message for memory hot plug
* hostdev: skip ACS check when using VFIO for device assignment
* Start daemon only after filesystems are mounted
* virt-aa-helper: add NVRAM store file for read/write
* qemu: Update blkio.weight value after successful set
* Eliminate incorrect and unnecessary check for changed IP address
* virt-aa-helper: allow access to /usr/share/ovmf/
* virt-aa-helper: Simplify restriction logic
* virt-aa-helper: document --probing and --dry-run
* Add generated libvirt_admin.syms into .gitignore
* libvirt-admin: Generate symbols file
* daemon: Use $(NULL) for libvird_admin's flags
* qemu: Add check for invalid iothread_id in qemuDomainChgIOThread
* virsh: Reset global error after successfull domain lookup
* build: fix mingw build
* Detect location of qemu-bridge-helper
* Check if qemu-bridge-helper exists and is executable
* qemu: Use numad information when getting pin information
* qemu: Keep numad hint after daemon restart
* conf: Pass private data to Parse function of XML options
* qemu: Fix segfault when parsing private domain data
* domain: Fix crash if trying to live update disk <serial>
* virNetSocketCheckProtocols: handle EAI_NONAME as IPv6 unavailable
* util: don't overwrite stack when getting ethtool gfeatures
* conf: Don't try formating non-existing addresses
* admin: Drop 'internal.h' include from libvirt-admin.h
* qemu: fail on attempts to use <filterref> for non-tap network
connections
* network: validate network NAT range
* virNetDevBandwidthParseRate: Reject negative values
* network: verify proper address family in updates to <host> and <range>
* conf: more useful error message when pci function is out of range
* virDomainDefParseXML: Check for malicious cpu ids in <numa/>
* numa_conf: Introduce virDomainNumaGetMaxCPUID
* Allow vfio hotplug of a device to the domain which owns the iommu
* qemu: Forbid image pre-creation for non-shared storage migration
* virsh: fix domfsinfo output in quiet mode
* tests: extend workaround for gnutls private key loading failure
* qemu: fix some api cannot work when disable cpuset in conf
* storage: only run safezero if allocation is > 0
* qemu: command: Report stderr from qemu-bridge-helper
* qemu: Fix reporting of physical capacity for block devices
* remoteClientCloseFunc: Don't mangle connection object refcount
* storage: Correct the 'mode' check
* storage: Handle failure from refreshVol
* virfile: Introduce virFileUnlink
* Revert "LXC: show used memory as 0 when domain is not active"
For info about past maintenance releases, see:
http://wiki.libvirt.org/page/Maintenance_Releases
Thanks,
Cole
9 years, 3 months
[Libvirt-announce] LSN-2015-0003: CVE-2015-5247 denial of service through root-squash NFS storage pools
by Eric Blake
Libvirt Security Notice: LSN-2015-0003
======================================
Summary: denial of service through root-squash NFS storage
pools
Reported on: 20150814
Published on: 20150903
Fixed on: 20150903
Reported by: Han Han <hhan(a)redhat.com>
Patched by: John Ferlan <jferlan(a)redhat.com>
See also: CVE-2015-5247
Description
-----------
The virStorageVolCreateXML API had a bug where it could create a
volume on a root-squash NFS mount, but then fail to remove that
volume if later steps during the API encountered problems. This was
further compounded by code which used a wrong conditional on whether
the new volume needed to have permissions changed, making it more
likely to trigger the failed unlink attempt. Poor error handling
after a failed unlink left libvirt with an inconsistent view of the
storage volume that could then result in a libvirtd crash. While the
libvirtd crash might be delayed until by subsequent actions from a
read-only connection, the conditions that set up the crash can only
be triggered by a client with a read-write connection.
Impact
------
When using fine-grained Access Control Lists (ACL), the
virStorageVolCreateXML API only requires the storage_vol:create
permission. A client with this privilege but lacking the
more-powerful domain:write permission could exploit the API bugs to
cause a denial-of-service attack by taking down libvirtd through a
crash. It can also be argued that the ability to cause libvirt to
create files which it cannot delete can be used as a
denial-of-service attack on storage resources.
Workaround
----------
The problems with libvirt creating a file which it does not then
clean up on error is specific to root-squash NFS, so one mitigation
is avoiding the use of the root-squash option when exporting NFS
volumes for use by libvirt storage pools. Note that in general, the
use of root-squash NFS does not add any real security (it makes
certain tasks harder for a root user, but the root user can
trivially change ids to another user to still perform those tasks).
Furthermore, it is possible to prevent the denial of service attacks
by stopping the use of the fine grained access control mechanism
(while this does not prevent a crash, such a crash is no longer a
security problem as there is no longer a privilege boundary between
a user creating a volume and a user with full system access).
Affected product
----------------
Name: libvirt
Repository: git://libvirt.org/git/libvirt.git
http://libvirt.org/git/?p=libvirt.git
Branch: master
Broken in: v1.2.14
Broken in: v1.2.15
Broken in: v1.2.16
Broken in: v1.2.17
Broken in: v1.2.18
Broken in: v1.2.19
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89
Fixed by: db9277a39bc364806e8d3e08a08fc128d59b7094
Fixed by: 691dd388aee99f8b06177540303b690586d5f5b3
Fixed by: 35847860f65f92e444db9730e00cdaef45198e0c
Branch: v1.2.14-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Fixed by: 605b12068392d29beb44a8ab7d6ec176d6b05237
Fixed by: 454cb7c40dbcff84192094963d71369ac7d94546
Branch: v1.2.15-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Fixed by: 3c41b3ea5e68f391b8ff901082608bda5f7f3fbc
Fixed by: fe2cf73800e3be87d1d4d811facb3f2be48126e5
Branch: v1.2.16-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89
Fixed by: 9e48400f4606bac16b7e4db195f610928c3d5a04
Fixed by: 2f4b41861c1729ff4b754986782d7428ccdca455
Fixed by: 7f0505705c70f7eb1e435a2e7732d1a74abfadfd
Branch: v1.2.17-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89
Fixed by: d055989083df4bf68eb1388d327ebffb3501bb83
Fixed by: 98242f94cd181f0257535479369054f07f951b21
Fixed by: a3ee6885d95a2ce6fb7e58bb0737cfb1612e0fb7
Branch: v1.2.18-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89
Fixed by: e63b32e22dafd99547f82f5383fdbf58b5f651a1
Fixed by: 075eb526c9817d9d8e3a759e3fbe180d8d326dcf
Fixed by: 966cc922221be2b8cc6a9842ed0dc4cf1568a7b3
Branch: v1.2.19-maint
Broken by: 155ca616eb231181f6978efc9e3a1eb0eb60af8a
Broken by: 7c2d65dde2595c07d56aad1e043f7b1836592d89
Fixed by: e0025d2967bbe3f283937216c9e2c12b6e9d1010
Fixed by: 8b1d84e640f1a6e6ebb47caf23a664e2f651b32d
Fixed by: 3468542f06f6f5dc94defa1603c6a6adea3e2da8
--
Eric Blake eblake redhat com +1-919-301-3266
Libvirt virtualization library http://libvirt.org
9 years, 3 months
[Libvirt-announce] Release of libvirt-1.2.19
by Daniel Veillard
It's out ! Tagged in git, signed tarball and rpms are available from the
usual place:
ftp://libvirt.org/libvirt/
I also pushed the python bindings out at:
ftp://libvirt.org/libvirt/python
This is still a relatively small release at around 200 commits, but with
user noticeable features rolled in, as long with the usual set of bug
fixes and improvements:
Features:
- Big improvements on ppc64 support (Andrea Bolognani)
- New virDomainRename API (Tomas Meszaros)
- Support for QEMU new pci emulations (Laine Stump)
Documentation:
- Rename page about vz driver (Sergey Bronnikov)
- docs: Rename 'parallels' to 'vz' (Sergey Bronnikov)
- virDomainRename: Extend API documentation (Tomas Meszaros)
- virt-aa-helper: document --probing and --dry-run (Guido Günther)
- docs: Drop unused rule for internals/%.html.tmp target (Guido Günther)
- api: Adjust comment for virDomainAddIOThread (John Ferlan)
- fix typo in comments (Cao jin)
- virDomainCoreDumpWithFormat: Mention enum for @dumpformat (Michal Privoznik)
Portability:
- lxc: ensure setns() syscall is defined (Daniel P. Berrange)
- selinux: fix compile errors (Guido Günther)
- util: fix build without cgroup (Roman Bogorodskiy)
- build: fix mingw build (Eric Blake)
- protocol: Don't use rename as a variable name (Martin Kletzander)
- Remove static keyword from vshReadline when readline does not exist (Moshe Levi)
- Detect location of qemu-bridge-helper (Guido Günther)
- Check if qemu-bridge-helper exists and is executable (Guido Günther)
- nodeinfo: Fix build failure when KVM headers are not available (Andrea Bolognani)
Bug Fixes:
- apparmor: Adjust path to domain monitor socket (Guido Günther)
- util: fallback to ioctl(SIOCBRDELBR) if netlink RTM_DELLINK fails (Laine Stump)
- util: fallback to ioctl(SIOCBRADDBR) if netlink RTM_NEWLINK fails (Laine Stump)
- Revert "LXC: show used memory as 0 when domain is not active" (Jim Fehlig)
- libxl: acquire a job when receiving a migrating domain (Jim Fehlig)
- libxl: don't attempt to resume domain when suspend fails (Jim Fehlig)
- libxl: fix ref counting of libxlMigrationDstArgs (Jim Fehlig)
- libvirt_lxc: Claim success for --help (Michal Privoznik)
- util: Allow virProcessSetNamespaces() to have sparse FD list (Michal Privoznik)
- virt-aa-helper: Improve valid_path (Michal Privoznik)
- lxc: Resolve Coverity RESOURCE_LEAK (John Ferlan)
- qemu: Emit correct audit message for memory hot unplug (Luyao Huang)
- qemu: Emit correct audit message for memory hot plug (Luyao Huang)
- hostdev: skip ACS check when using VFIO for device assignment (Laine Stump)
- qemu: Label correct per-VM path when starting (Martin Kletzander)
- qemu: Update blkio.weight value after successful set (Luyao Huang)
- Eliminate incorrect and unnecessary check for changed IP address (Vasiliy Tolstov)
- storage: only run safezero if allocation is > 0 (Guido Günther)
- virt-aa-helper: allow access to /usr/share/ovmf/ (intrigeri)
- qemu: Fix access to auto-generated socket paths (Martin Kletzander)
- cpu: Move check for NULL CPU model inside the driver (Andrea Bolognani)
- qemu: Sync BlkioDevice values when setting them in cgroups (Martin Kletzander)
- lxc: Sync BlkioDevice values when setting them in cgroups (Martin Kletzander)
- qemuDomainRename: Don't leave a domain locked uppon fail (Michal Privoznik)
- qemu: Add check for invalid iothread_id in qemuDomainChgIOThread (John Ferlan)
- virsh: Reset global error after successfull domain lookup (Luyao Huang)
- libvirt-domain: forbid use virDomainRename in readonly connection (Luyao Huang)
- virsh: fix always return false in domrename (Luyao Huang)
- qemu: Resolve Coverity UNINIT (John Ferlan)
- qemu: Fix segfault when parsing private domain data (Martin Kletzander)
- conf: Check for hostdev conflicts when assign default disk address (John Ferlan)
- conf: Add SCSI hostdev check for disk drive address already in use (John Ferlan)
- Revert "qemu: Allow to plug virtio-net-pci into PCIe slot" (Laine Stump)
- domain: Fix crash if trying to live update disk <serial> (Cole Robinson)
- util: don't overwrite stack when getting ethtool gfeatures (Laine Stump)
- cpu: Fix segfault in the ppc64 driver (Andrea Bolognani)
- conf: Don't try formating non-existing addresses (Martin Kletzander)
- qemu: fail on attempts to use <filterref> for non-tap network connections (Laine Stump)
- network: validate network NAT range (Laine Stump)
- qemu: Enable ioeventfd usage for virtio-scsi controllers (Martin Kletzander)
- virNetDevBandwidthParseRate: Reject negative values (Michal Privoznik)
- network: verify proper address family in updates to <host> and <range> (Laine Stump)
- virDomainDefParseXML: Check for malicious cpu ids in <numa/> (Michal Privoznik)
- qemu: Fix reporting of physical capacity for block devices (Peter Krempa)
- qemu: Build correct command line for PCI NICs on ARM (Pavel Fedin)
- qemu: Forbid image pre-creation for non-shared storage migration (Peter Krempa)
- conf: Resolve Coverity FORWARD_NULL (John Ferlan)
- virsh: fix domfsinfo output in quiet mode (Luyao Huang)
- Avoid starting a PowerPC VM with floppy disk (Kothapally Madhu Pavan)
- Caps: Disable floppy disk for PowerPC VM (Kothapally Madhu Pavan)
- qemu: fix some api cannot work when disable cpuset in conf (Luyao Huang)
Improvements:
- src: Check for symbols ordering in ADMIN_SYM_FILES (Michal Privoznik)
- src: Cleanup libvirt_admin.syms (Michal Privoznik)
- src: Check libvirt_admin.syms for exported symbols (Michal Privoznik)
- lxc_container: Turn lxcAttachNS into calling virProcessSetNamespaces (Michal Privoznik)
- utils: Remove the logging of errors from virNetDevSendEthtoolIoctl (Moshe Levi)
- Start daemon only after filesystems are mounted (Martin Kletzander)
- virt-aa-helper: add NVRAM store file for read/write (Peter Kieser)
- Fix link to page for Virtuozzo driver (Sergey Bronnikov)
- lxc: Inherit namespace feature (ik.nitk)
- qemu: add a check for nodeset in qemuDomainSetNumaParamsLive (Luyao Huang)
- virt-aa-helper: Simplify restriction logic (Guido Günther)
- tests: Use qemuProcessPrepareMonitorChr in qemuxmlnstest (Martin Kletzander)
- security_dac: Add SetDirLabel support (Martin Kletzander)
- security_selinux: Add SetDirLabel support (Martin Kletzander)
- security_stack: Add SetDirLabel support (Martin Kletzander)
- security: Add virSecurityDomainSetDirLabel (Martin Kletzander)
- security_dac: Label non-listening sockets (Martin Kletzander)
- security_selinux: Use proper structure to access socket data (Martin Kletzander)
- locking: Remove redundant 'srv' element from virLockDaemon (Erik Skultety)
- tests: Add some compatibility-related cases to the CPU tests (Andrea Bolognani)
- cpu: Better support for ppc64 compatibility modes (Andrea Bolognani)
- cpu: Don't update host-model guest CPUs on ppc64 (Andrea Bolognani)
- Add generated libvirt_admin.syms into .gitignore (Martin Kletzander)
- conf: Check for attach disk usage of iothread=0 (John Ferlan)
- libvirt-admin: Generate symbols file (Guido Günther)
- daemon: Use $(NULL) for libvird_admin's flags (Guido Günther)
- virconf: correct code formatting (Cao jin)
- virConfWalk: fix the inconsistent name (Cao jin)
- qemu: Report better error message when renaming to existing domain name (Martin Kletzander)
- util: Add getters for cgroup block device I/O throttling (Martin Kletzander)
- util: Add virCgroupGetBlockDevString (Martin Kletzander)
- util: Add virStringGetFirstWithPrefix (Martin Kletzander)
- api: Remove check on iothread_id arg in virDomainPinIOThread (John Ferlan)
- qemuDomainAddCgroupForThread: Don't overwrite the error (Luyao Huang)
- virconf: fix the inconsistent name (Cao jin)
- qemuDomainRename: Explicitly check if domain is renaming to itself (Michal Privoznik)
- virHashAddEntry: Report error on duplicate key (Michal Privoznik)
- virHashAddOrUpdateEntry: Turn @new_name into void * (Michal Privoznik)
- tools: Introduce new client generic module vsh (Erik Skultety)
- qemu: Implement virDomainRename (Tomas Meszaros)
- Introduce new VIR_DOMAIN_EVENT_DEFINED_RENAMED event (Tomas Meszaros)
- domain_conf: Introducde virDomainObjListRenameAddNew() & virDomainObjListRenameRemove() (Tomas Meszaros)
- virsh: Implement "domrename" command (Tomas Meszaros)
- Introduce virDomainRename API (Tomas Meszaros)
- conf: Remove 'vmdef' from virDomainHostdevDefParseXML (John Ferlan)
- qemu: Use numad information when getting pin information (Martin Kletzander)
- qemu: Keep numad hint after daemon restart (Martin Kletzander)
- conf: Pass private data to Parse function of XML options (Martin Kletzander)
- conf: Create locals for virDomainDiskDefAssignAddress (John Ferlan)
- Drive hot-unplug: reliable parsing of HMP results (Frank Schreuder)
- cmdAttachInterface: Fully implement @floor support (Michal Privoznik)
- networkBandwidthGenericChecks: Drop useless check (Michal Privoznik)
- networkBandwidthUpdate: Don't blindly dereference pointers (Michal Privoznik)
- virsh: Refactor parseRateStr to avoid false-positive uninitialized variable (Peter Krempa)
- qemu: fix qemuDomainSupportsPCI() for ARM machines of "virt" machinetype (Laine Stump)
- virNetSocketCheckProtocols: handle EAI_NONAME as IPv6 unavailable (Guido Günther)
- qemu: Implement VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik)
- virsh: Implement VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik)
- Introduce VIR_DOMAIN_BANDWIDTH_IN_FLOOR (Michal Privoznik)
- virsh: Rework parseRateStr (Michal Privoznik)
- qemuDomainSetInterfaceParameters: Use new functions to update bandwidth (Michal Privoznik)
- bridge_driver: Introduce networkBandwidthUpdate (Michal Privoznik)
- bridge_driver: Introduce networkBandwidthChangeAllowed (Michal Privoznik)
- virNetDevBandwidthUpdateRate: turn class_id into integer (Michal Privoznik)
- virNetDevParseMcast: Avoid magic constant (Michal Privoznik)
- tests: Add a bunch of cpu test case for ppc64 (Andrea Bolognani)
- tests: Re-enable ppc64 cpu tests (Andrea Bolognani)
- cpu: Forbid model fallback in the ppc64 driver (Andrea Bolognani)
- cpu: Implement backwards compatibility in the ppc64 driver (Andrea Bolognani)
- cpu: Add POWER8NVL information to CPU map XML (Andrea Bolognani)
- cpu: Parse and use PVR masks in the ppc64 driver (Andrea Bolognani)
- cpu: Simplify ppc64 part of CPU map XML (Andrea Bolognani)
- cpu: Support multiple PVRs in the ppc64 driver (Andrea Bolognani)
- cpu: Align ppc64 CPU data with x86 (Andrea Bolognani)
- tests: Temporarily disable ppc64 cpu tests (Andrea Bolognani)
- cpu: Use ppc64Compute() to implement ppc64DriverCompare() (Andrea Bolognani)
- cpu: CPU model names have to match on ppc64 (Andrea Bolognani)
- cpu: Never skip CPU model name check in ppc64 driver (Andrea Bolognani)
- tests: Improve result handling in cpuTestGuestData() (Andrea Bolognani)
- cpu: Reorder functions in the ppc64 driver (Andrea Bolognani)
- cpu: Simplify ppc64ModelFromCPU() (Andrea Bolognani)
- cpu: Simplify NULL handling in ppc64 driver (Andrea Bolognani)
- cpu: Mark driver functions in ppc64 driver (Andrea Bolognani)
- admin: Drop 'internal.h' include from libvirt-admin.h (Erik Skultety)
- conf: Add ioeventfd option for controllers (Martin Kletzander)
- qemuMonitorOpenInternal: remove redundant code (Cao jin)
- rpc: Remove keepalive_required option (Martin Kletzander)
- qemu: support new pci controller model "pcie-switch-downstream-port" (Laine Stump)
- conf: new pcie-controller model "pcie-switch-downstream-port" (Laine Stump)
- qemu: add capabilities bit for device xio3130-downstream (Laine Stump)
- qemu: support new pci controller model "pcie-switch-upstream-port" (Laine Stump)
- conf: new pci controller model "pcie-switch-upstream-port" (Laine Stump)
- qemu: add capabilities bit for device x3130-upstream (Laine Stump)
- qemu: support new pci controller model "pcie-root-port" (Laine Stump)
- conf: new pci controller model "pcie-root-port" (Laine Stump)
- qemu: add capabilities bit for device ioh3420 (Laine Stump)
- qemu: implement <target chassisNr='n'/> subelement/attribute of <controller> (Laine Stump)
- conf: add new <target> subelement with chassisNr attribute to <controller> (Laine Stump)
- qemu: implement <model> subelement to <controller> (Laine Stump)
- conf: add new <model> subelement with name attribute to <controller> (Laine Stump)
- conf: more useful error message when pci function is out of range (Laine Stump)
- numa_conf: Introduce virDomainNumaGetMaxCPUID (Michal Privoznik)
- Allow vfio hotplug of a device to the domain which owns the iommu (Shivaprasad G Bhat)
- qemuDomainDefPostParse: Adjust indent (Michal Privoznik)
- bootstrap: Don't require python-config (Michal Privoznik)
- qemu: Allow to plug virtio-net-pci into PCIe slot (Pavel Fedin)
- qemu: Add PCI-Express root to ARM virt machine (Pavel Fedin)
- qemu: Introduce QEMU_CAPS_OBJECT_GPEX (Pavel Fedin)
- cpu: Indentation changes in the ppc64 driver (Andrea Bolognani)
- cpu: Rename {powerpc,ppc} => ppc64 (internal symbols) (Andrea Bolognani)
- cpu: Rename {powerpc,ppc} => ppc64 (exported symbols) (Andrea Bolognani)
- cpu: Rename {powerpc,ppc} => ppc64 (filesystem) (Andrea Bolognani)
- tests: extend workaround for gnutls private key loading failure (Daniel P. Berrange)
- conf: Allow error reporting in virDomainDiskSourceIsBlockType (John Ferlan)
- docs: Add Fibre Channel NPIV supported option for volume lun config (John Ferlan)
- conf: Change when virDomainDiskDefAssignAddress is called (John Ferlan)
- conf: Remove unused param from virDomainHostdevDefParseXML (John Ferlan)
- conf: Change when virDomainHostdevAssignAddress is called (John Ferlan)
- conf: Try controller add when searching hostdev bus for unit (John Ferlan)
- conf: Add check for host address type while checking in use (John Ferlan)
- conf: Add xmlopt to virDomainDeviceDefPostParseInternal (John Ferlan)
- conf: Move hostdev and disk address validations (John Ferlan)
- conf: Add 'bus' and 'target' to SCSI address conflict checks (John Ferlan)
- conf: Remove extraneous check in virDomainHostdevAssignAddress (John Ferlan)
- qemu: Remove double unlock for domains (Martin Kletzander)
- tests: Add subcores3 nodeinfo test (Andrea Bolognani)
- tests: Add subcores2 nodeinfo test (Andrea Bolognani)
- tests: Add subcores1 nodeinfo test (Andrea Bolognani)
- tests: Prepare for subcore tests (Shivaprasad G Bhat)
- nodeinfo: Fix output on PPC64 KVM hosts (Shivaprasad G Bhat)
- rpc: Fix slow volume download (virsh vol-download) (Ossi Herrala)
- There is no virDomainFindBy{ID, Name, UUID} anymore (Cao jin)
- Post-release version bump to 1.2.19 (Martin Kletzander)
- Fix a trailing space in spec file (Daniel Veillard)
Cleanups:
- Revert "lxc: ensure setns() syscall is defined" (Michal Privoznik)
- test: Replace tabs with spaces in virnetdaemondata json files (Erik Skultety)
- tests: Remove unused file (Andrea Bolognani)
- cpu: Remove ISA information from CPU map XML (Andrea Bolognani)
So thanks everybody for your contributions to this release, be it bug
reports, patches, new code, dcumentation, etc ...
Enjoy !
Daniel
--
Daniel Veillard | Open Source and Standards, Red Hat
veillard(a)redhat.com | libxml Gnome XML XSLT toolkit http://xmlsoft.org/
http://veillard.com/ | virtualization library http://libvirt.org/
9 years, 3 months