libvirt 1.1.3.1 maintenance release is now available. This is libvirt 1.1.3 with additional bugfixes that have accumulated upstream since the initial release. This release can be downloaded at: http://libvirt.org/sources/stable_updates/libvirt-1.1.3.1.tar.gz Changes in this version: * Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs * Fix race condition reconnecting to vms & loading configs * Fix leak of objects when reconnecting to QEMU instances * Don't update dom->persistent without lock held * Block all use of libvirt.so in setuid programs * Remove (nearly) all use of getuid()/getgid() * Add stub getegid impl for platforms lacking it * Don't allow remote driver daemon autostart when running setuid * Only allow the UNIX transport in remote driver when setuid * Block all use of getenv with syntax-check * Remove all direct use of getenv * Make virCommand env handling robust in setuid env * Initialize threading & error layer in LXC controller * Fix flaw in detecting log format * Move virt-login-shell into libvirt-login-shell sub-RPM * Set a sane $PATH for virt-login-shell * remote: fix regression in event deregistration * python: Fix Create*WithFiles filefd passing * build: fix build of virt-login-shell on systems with older gnutls * build: fix linking virt-login-shell * Don't link virt-login-shell against libvirt.so (CVE-2013-4400) * Close all non-stdio FDs in virt-login-shell (CVE-2013-4400) * Only allow 'stderr' log output when running setuid (CVE-2013-4400) * Add helpers for getting env vars in a setuid environment * Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401) * build: Add lxc testcase to dist list * Convert uuid to a string before printing it * LXC: Fix handling of RAM filesystem size units * qemuMonitorJSONSendKey: Avoid double free * rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X * Remove use of virConnectPtr from all remaining nwfilter code * Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct' * Remove virConnectPtr arg from virNWFilterDefParse * qemu: cgroup: Fix crash if starting nographics guest * virNetDevBandwidthEqual: Make it more robust * qemu_hotplug: Allow QoS update in qemuDomainChangeNet * Adjust legacy max payload size to account for header information For info about past maintenance releases, see: http://wiki.libvirt.org/page/Maintenance_Releases Thanks, Cole