-
libvirt (1.2.9-9+deb8u5) jessie-security; urgency=high
* Switch gbp.conf to jessie
* Rediff patches
to avoid diff noise when using gbp-pq.
* CVE-2018-5748: qemu: avoid denial of service reading from QEMU monitor
(Closes: #887700)
* CVE-2018-1064: qemu: avoid denial of service reading from QEMU guest agent
-- Guido Günther <email address hidden> Mon, 12 Mar 2018 20:51:52 +0100
-
libvirt (1.2.9-9+deb8u4) jessie; urgency=medium
[ Guido Günther ]
* [7e378ce] Make sure the cgroup update notice is also shown in backports
* [bd11c4c] Unbreak compilation of qemuhelptest
[ Hilko Bengen ]
* [fffb132] Add patch to improve qemu v2.6+ compatibility (Closes: #841291)
-- Guido Günther <email address hidden> Fri, 17 Mar 2017 14:53:44 +0100
-
libvirt (1.2.9-9+deb8u3) jessie-security; urgency=high
* [9da83d8] CVE-2016-5008: qemu: Let empty default VNC password work as
documented.
* [27d6b02] Adjust gbp.conf for jessie-security
-- Guido Günther <email address hidden> Fri, 01 Jul 2016 16:31:36 +0200
-
libvirt (1.2.9-9+deb8u2) jessie; urgency=medium
[ Philipp Hahn ]
* [16e52e6] CVE-2015-5313: Don't allow allow '/' in filesystem volume
(Closes: #808273)
* [e69dd73] libvirt-daemon: Expect qemu-bridge-helper in /usr/lib/qemu
like we fixed #790935 in sid. (Closes: #816602)
[ Guido Günther ]
* [72db643] Allow autopkg tests to print to stderr
-- Guido Günther <email address hidden> Fri, 25 Mar 2016 11:19:45 +0100
-
libvirt (1.2.9-9+deb8u1) jessie; urgency=medium
[ Guido Günther ]
* [8e4cf5a] Teach virt-aa-helper to use TEMPLATE.qemu if the domain is kvm
or kqemu.
Thanks to Luke Faraone for the report (Closes: #786650)
* [ad1ff0b] Adjust gbp.conf for jessie
* [c830a54] Disable test suite due to libxml2 bug #781232 in jessie
* [be70aec] Fix crash on live migration
this supplements 07dbec0a64783f644854a22aa0355720f0328d17.
Thanks to Eckebrecht von Pappenheim (Closes: #788171)
[ Felix Geyer ]
* [9fb6c59] Allow access to libnl-3 configuration (Closes: #786652)
[ intrigeri ]
* Allow-access-to-libnl-3-config-files.patch: revert changes that are
unrelated to the bug this patch is meant to fix.
[ Daniel P. Berrange ]
* [afae69a] Report original error when QMP probing fails with new QEMU
(Closes: #780093)
-- Guido Günther <email address hidden> Thu, 13 Aug 2015 15:56:49 +0200
-
libvirt (1.2.9-9) unstable; urgency=medium
* [4c14b83] qemu: Don't try to parse -help for new QEMU.
Closes: #777138, #775773
Thanks to Mathieu Malaterre for the debugging
* [1addae5] Force capability refresh on upgrades. This makes sure we
refresh the capabilities at least once when upgrading from Wheezy.
(Closes: #731815)
-- Guido Günther <email address hidden> Fri, 06 Feb 2015 15:40:21 +0100
-
libvirt (1.2.9-8) unstable; urgency=medium
* [885f33d] Fix CVE-2015-0236.
Patches cherry-picked from upstream (Closes: #776065)
-- Guido Günther <email address hidden> Fri, 23 Jan 2015 19:01:40 +0100
-
libvirt (1.2.9-7) unstable; urgency=medium
* [d7df883] CVE-2014-8131: Fix possible deadlock and segfault in
qemuConnectGetAllDomainStats()
(Closes: #773858)
* [d0085e0] qemu: bulk stats: Fix logic in monitor handling
* [b5e081c] CVE-2014-8135: storage: fix crash caused by no check return
before set close
(Closes: #773855)
* [a5452de] CVE-2014-8136: qemu: migration: Unlock vm on failed ACL check in
protocol v2 APIs
(Closes: #773856)
* [5aaafc9] qemu: Fix crash in tunnelled migration (Closes: #773503)
* [87b3713] lxc: Fix crash when using interface type 'direct'
Thanks to Bastian Blank for the patch (Closes: #769600)
* [17807c0] Document surprises on CPU microcode updates (Closes: #773706)
* [66a3ca6] Install lock drivers (Closes: #773706)
* [f6ffda7] vbox: fix a bug in _machineStateInactive (Closes: #770202)
-- Guido Günther <email address hidden> Wed, 24 Dec 2014 10:33:31 +0100
-
libvirt (1.2.9-6) unstable; urgency=medium
* [9779548] Add a python build-dependency for the docs build
(Closes: #770775)
-- Guido Günther <email address hidden> Sun, 23 Nov 2014 18:47:42 +0100
-
libvirt (1.2.9-3) unstable; urgency=medium
* [28dd361] Remove obsolete conffiles in libvirt-bin too. Depending on the
upgrade path they can belong to either libvirt-bin or
libvirt-daemon-system. (Closes: #764679)
* [de9dcf9] Move polkit rule to /u/s/polkit-1/rules.d/
since /e/polkit-1 is for admin changes (Closes: #764826)
* [114d777] Remove unused python files. We split out libvirt-python ages
ago.
* [3a06d85] Add rules for older policy kit (as in jessie/sid).
Thanks to Török Edwin, Wolodja Wentland and Michael Biebl
(Closes: #765346)
-- Guido Günther <email address hidden> Tue, 14 Oct 2014 18:34:38 +0200
-
libvirt (1.2.8-3) unstable; urgency=medium
* [9e3d695] Don't ship the socket activation file until we switched to
polkit and we can therefore ignore socket permissions. (Closes: #762606)
* [a32e72e,4eb67f4] Clean up capabilities and possibly empty dirs
(Closes: #761131)
-- Guido Günther <email address hidden> Thu, 25 Sep 2014 12:08:51 +0200
-
libvirt (1.2.7-11) unstable; urgency=medium
* [6534478] Check status in a systemd 208 compatible way
systemd 204 returned 0 when trying to reload a not running service but
208 changed behaviour. So use status instead of is-enabled.
Thanks to Neutron Soutmun for his feedback (Closes: #758688)
-- Guido Günther <email address hidden> Sun, 24 Aug 2014 10:54:26 +0200
-
libvirt (1.2.7-10) unstable; urgency=medium
* [d319f15] Only reexec virtlockd if enabled (Closes: #758688)
-- Guido Günther <email address hidden> Thu, 21 Aug 2014 16:34:36 +0200
-
libvirt (1.2.4-3.2) unstable; urgency=medium
* Non-maintainer upload.
* Drop build-dep on hal-dev (closes: #710195; backported from experimental
git branch).
-- Colin Watson <email address hidden> Tue, 22 Jul 2014 08:07:31 +0100
-
libvirt (1.2.4-3) unstable; urgency=medium
* [b0b7359] Don't pretend kFreeBSD supports linux only features. So far we
worked around missing kFreeBSD features by creating empty dirs this looks
bad on the target systems and makes us maintain things in debian rules and
*.install. Explicitly invoke dh_install in debian/rules instead.
Closes: #747658
-- Guido Günther <email address hidden> Sat, 10 May 2014 22:23:06 +0200
-
libvirt (1.2.1-1) unstable; urgency=medium
* Upload to unstable
* [22e83d7] New upstream version 1.2.1.
Fixes CVE-2014-0028, CVE-2014-1447, CVE-2013-6457
(Closes: #735676)
-- Guido Günther <email address hidden> Fri, 17 Jan 2014 06:16:29 +0100
-
libvirt (1.2.0-2) unstable; urgency=medium
[ Guido Günther ]
* [949fae6] Suggest systemd since it improves thinks like e.g. cgroup
handling
* [96f9aae] Make mounted cgroups configurable via /etc/default/libvirt-bin
and check for memory cgroup on kernel command line. (Closes: #732666)
* [ce356fe] Really remove "memory" from default mount list. Thanks to phep
<email address hidden>
[ Laurent Bigonville ]
* [13052e4] Enable selinux driver (Closes: #688179)
* [a00df46] Switch LSB dependencies to avahi-daemon since only the later
exists as native systemd service. (Closes: #731612)
-- Guido Günther <email address hidden> Wed, 01 Jan 2014 20:24:37 +0100
-
libvirt (1.2.0-1) unstable; urgency=medium
* Upload to unstable
* [230609e] Depend on kmod instead of module-init-tools (Closes: #731451)
* [affb1ce] New upstream version 1.2.0
* [e9de7b2] Fix crashes in lxcDomain{S,G}etMemoryParameters.
This fixes CVE-2013-6436
-- Guido Günther <email address hidden> Wed, 18 Dec 2013 08:18:48 +0100
-
libvirt (1.1.4-2) unstable; urgency=low
* [78cadf5] Rados storage backend needs --with-storage-rbd not
--with-storage-rados
* [a384975] Explicitly disable phyp support so we can enable libssh2 uri
support.
* [9d8f3c5] Check correct dirs for existence (Closes: #729331)
* [1ede11d] Document new cgroup rrequirements (Closes: #707201)
* Acknowledge NMU, Thanks Julien Cristau (Closes: #730345)
-- Guido Günther <email address hidden> Sun, 01 Dec 2013 19:56:25 +0100
-
libvirt (0.9.12-11+deb7u4) stable-security; urgency=low
* [e91a86a] CVE-2013-4296: Fix crash in remoteDispatchDomainMemoryStats.
Thanks to "Daniel P. Berrange"
-- Guido Günther <email address hidden> Mon, 09 Sep 2013 13:12:45 +0200
-
libvirt (0.9.12-11+deb7u1) wheezy-proposed-updates; urgency=low
[ Guido Günther ]
* [af660e5] Allow xen toolstack to find it's binaries.
Thanks to George Dunlap for the patch. (Closes: #685749)
[ Luca Tettamanti ]
* [90d8287] Fix leak in virStorageBackendLogicalMakeVol
(Closes: #705205)
-- Guido Günther <email address hidden> Wed, 29 May 2013 13:42:44 +0200
-
libvirt (0.9.12-11) unstable; urgency=low
* [422c506] Use "getent passwd" instead of the non existing "getent user"
Thanks to again to Adam D. Barratt
-- Guido Günther <email address hidden> Wed, 06 Mar 2013 12:27:09 +0100
