libvirt 1.1.3.1 maintenance release is now available. This is
libvirt 1.1.3 with additional bugfixes that have accumulated
upstream since the initial release.
This release can be downloaded at:
http://libvirt.org/sources/stable_updates/libvirt-1.1.3.1.tar.gz
Changes in this version:
* Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs
* Fix race condition reconnecting to vms & loading configs
* Fix leak of objects when reconnecting to QEMU instances
* Don't update dom->persistent without lock held
* Block all use of libvirt.so in setuid programs
* Remove (nearly) all use of getuid()/getgid()
* Add stub getegid impl for platforms lacking it
* Don't allow remote driver daemon autostart when running setuid
* Only allow the UNIX transport in remote driver when setuid
* Block all use of getenv with syntax-check
* Remove all direct use of getenv
* Make virCommand env handling robust in setuid env
* Initialize threading & error layer in LXC controller
* Fix flaw in detecting log format
* Move virt-login-shell into libvirt-login-shell sub-RPM
* Set a sane $PATH for virt-login-shell
* remote: fix regression in event deregistration
* python: Fix Create*WithFiles filefd passing
* build: fix build of virt-login-shell on systems with older gnutls
* build: fix linking virt-login-shell
* Don't link virt-login-shell against libvirt.so (CVE-2013-4400)
* Close all non-stdio FDs in virt-login-shell (CVE-2013-4400)
* Only allow 'stderr' log output when running setuid (CVE-2013-4400)
* Add helpers for getting env vars in a setuid environment
* Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401)
* build: Add lxc testcase to dist list
* Convert uuid to a string before printing it
* LXC: Fix handling of RAM filesystem size units
* qemuMonitorJSONSendKey: Avoid double free
* rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X
* Remove use of virConnectPtr from all remaining nwfilter code
* Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct'
* Remove virConnectPtr arg from virNWFilterDefParse
* qemu: cgroup: Fix crash if starting nographics guest
* virNetDevBandwidthEqual: Make it more robust
* qemu_hotplug: Allow QoS update in qemuDomainChangeNet
* Adjust legacy max payload size to account for header information
For info about past maintenance releases, see:
http://wiki.libvirt.org/page/Maintenance_Releases
Thanks,
Cole