-
libvirt (0.9.2-4ubuntu15.3) oneiric-proposed; urgency=low
* debian/libvirt-bin.install, debian/rules: name the apport file
source_libvirt.py, not source_libvirt-bin.py. (LP: #1007405)
-- Serge Hallyn <email address hidden> Mon, 11 Jun 2012 21:42:51 -0500
-
libvirt (0.9.2-4ubuntu15.2) oneiric-proposed; urgency=low
* Don't override local removal of default network autostart on upgrades
(LP: #372001)
- re-enable debian/Don-t-enable-default-network-on-boot.patch
- debian/libvirt-bin.preinst: note if the symlink exists
- debian/libvirt-bin.postinst: if symlink existed, OR if we are upgrading
from one of the broken versions, then recreate the symlink. (Continue
to create the symlink on new installs.)
-- Serge Hallyn <email address hidden> Mon, 23 Jan 2012 11:12:51 -0600
-
libvirt (0.9.2-4ubuntu15.1) oneiric-proposed; urgency=low
* lxc_controller: use our own unlocpt+grantpt rather than glibc's, which
can't handle opening a pty in a devpts not mounted at /dev/pts.
(LP: #863629)
-- Serge Hallyn <email address hidden> Tue, 01 Nov 2011 17:52:53 +0000
-
libvirt (0.9.2-4ubuntu15) oneiric; urgency=low
* Pull patches from upstream which prevent a race between lxc driver and
controller while a container is started, easily exposed by nova.
(LP: #842845)
-- Serge Hallyn <email address hidden> Mon, 03 Oct 2011 14:39:05 -0500
-
libvirt (0.9.2-4ubuntu14) oneiric; urgency=low
* debian/patches/lp832507.patch: update virt-aa-helper to use the correct
paths for character devices that are pipes. This can be removed in
0.9.7. (LP: #832507)
-- Jamie Strandboge <email address hidden> Tue, 27 Sep 2011 13:18:28 -0500
-
libvirt (0.9.2-4ubuntu13) oneiric; urgency=low
* debian/patches/arm-startup-fies.patch: Fix typo in patch.
(LP: #845764)
-- Chuck Short <email address hidden> Fri, 09 Sep 2011 14:41:53 -0400
-
libvirt (0.9.2-4ubuntu12) oneiric; urgency=low
[Serge Hallyn]
* do not rely on 'ip' or 'ifconfig' commands inside container (LP: #828211)
Reported and fixed by Scott Moser <email address hidden>.
* make ptmx a bind mount rather than a symlink (LP: #832123)
[Chuck Short]
* debian/arm-startup-fixes.patch: Dont detect DMI information on non-intel
compatible arches.
-- Serge Hallyn <email address hidden> Thu, 01 Sep 2011 09:25:51 -0500
-
libvirt (0.9.2-4ubuntu11) oneiric; urgency=low
* debian/patches/Autodetect-if-the-remote-nc-command-supports-the-q-o.patch:
updated to support target systems where the grep utility has no -q
option. (LP: #792985)
-- Marc Deslauriers <email address hidden> Tue, 16 Aug 2011 13:30:14 -0400
-
libvirt (0.9.2-4ubuntu10) oneiric; urgency=low
* Source /etc/default/libvirt-bin at the upstart 'start' section (LP: #823638)
-- Serge Hallyn <email address hidden> Mon, 15 Aug 2011 13:00:41 -0500
-
libvirt (0.9.2-4ubuntu9) oneiric; urgency=low
* Fix build failure on ARM, working around a GCC issue. LP: #823711.
-- Matthias Klose <email address hidden> Mon, 15 Aug 2011 16:00:53 +0200
-
libvirt (0.9.2-4ubuntu8) oneiric; urgency=low
* Port to libnl3.
-- Colin Watson <email address hidden> Tue, 09 Aug 2011 11:36:08 +0100
-
libvirt (0.9.2-4ubuntu7) oneiric; urgency=low
* libvirt-bin.upstart: add a pre-stop script to shut down running VMs
before the host shuts down. (LP: #350936)
-- Serge Hallyn <email address hidden> Tue, 02 Aug 2011 19:49:40 -0500
-
libvirt (0.9.2-4ubuntu6) oneiric; urgency=low
* SECURITY UPDATE: integer overflow in virDomainGetVcpus()
- debian/patches/CVE-2011-2511.patch: use INT_MULTIPLY_OVERFLOW() to
verify maxinfo * maplen < REMOTE_CPUMAPS_MAX
- this can be dropped in 0.9.2-7/0.9.3
- CVE-2011-2511
-- Jamie Strandboge <email address hidden> Tue, 19 Jul 2011 08:20:20 -0500
-
libvirt (0.9.2-4ubuntu5) oneiric; urgency=low
* debian/libvirt-bin.apport: use new apport MAC function instead of
parsing and attaching AppArmor events here.
-- Marc Deslauriers <email address hidden> Fri, 15 Jul 2011 08:36:56 -0400
-
libvirt (0.9.2-4ubuntu4) oneiric; urgency=low
* debian/apparmor/libvirt-qemu: adjust for /dev/shm -> /run/shm transition
* debian/patches/lp810270.patch: adjust AppArmor profile for /var/run ->
/run
- LP: #810270
-- Jamie Strandboge <email address hidden> Thu, 14 Jul 2011 08:46:32 -0500
-
libvirt (0.9.2-4ubuntu3) oneiric; urgency=low
* Fix /etc/init/libvirt-bin.conf start on to wait until networking.conf
has stopped with success, meaning ifup -a completed successfully and
all auto-started network devices are up. (LP: #495394)
-- Serge Hallyn <email address hidden> Thu, 07 Jul 2011 10:23:25 -0500
-
libvirt (0.9.2-4ubuntu2) oneiric; urgency=low
[ Scott Moser ]
* 9028-linux-3-0-no-micro.patch: support running libvirt with lxc on linux
3.0 (LP: #802977)
[ Jamie Strandboge ]
* debian/apparmor/usr.sbin.libvirtd: allow ipc_lock
-- Scott Moser <email address hidden> Tue, 28 Jun 2011 10:00:54 -0400
-
libvirt (0.9.2-4ubuntu1) oneiric; urgency=low
* Merge from debian unstable. Remaining changes:
- debian/control:
* set X-Python-Version to 2.7, as 2.6 is not in oneiric.
* set ubuntu maintainer
* Build-Depends:
- remove [linux-any] from all dependencies
- remove [!linux-any] deps
- swap qemu to qemu-kvm and open-iscsi to
open-iscsi-utils in Build-Depends
- remove virtualbox-ose Build-Depends
- add parted and libapparmor-dev Build-Depends
* convert Vcs-Git to Xs-Debian-Vcs-Git
* libvirt-bin Depends: move netcat-openbsd, bridge-utils, dnsmasq-base
(>= 2.46-1), and iptables from Recommends to Depends
* libvirt-bin Recommends: move qemu to Suggests
* libvirt-bin Suggests: add apparmor
* libvirt0 Recommands: move lvm2 to Suggests
- keep debian/libvirt-bin.apport
- keep debian/libvirt-bin.cron.daily
- debian/libvirt-bin.dirs:
* add apparmor, cron.daily, and apport dirs
- debian/libvirt-bin.examples:
* add debian/libvirt-suspendonreboot
- debian/libvirt-bin.install:
* add /etc/apparmor.d files
* add apport hook
- debian/libvirt-bin.manpages:
* add debian/libvirt-migrate-qemu-disks.1
- debian/libvirt-bin.postinst:
* replace libvirt groupname with libvirtd
* add each admin user to libvirtd group
* call apparmor_parser on usr.sbin.libvirtd and
usr.lib.libvirt.virt-aa-helper
* call 'libvirt-migrate-qemu-disks -a' after
libvirt-bin has started if migrating from
older than 0.8.3-1ubuntu1
- debian/libvirt-bin.postrm:
* replace libvirt groupname with libvirtd
* remove usr.sbin.libvirtd and
usr.lib.libvirt.virt-aa-helper
- keep added files under debian/:
* libvirt-bin.upstart
* libvirt-migrate-qemu-disks
* libvirt-migrate-qemu-disks.1
* libvirt-suspendonreboot
* apparmor profiles
- debian/README.Debian:
* add 'Apparmor Profile' section
* add 'Disk migration' section
- debian/rules:
* move include of debhelper.mk to top of file so DEB_HOST_ARCH_OS
is defined.
* don't build with vbox since virtualbox-ose is in universe
- remove WITH_VBOX, add explicit --without-vbox
* add --with-apparmor to DEB_CONFIGURE_EXTRA_FLAGS
* set DEB_DH_INSTALLINIT_ARGS to '--upstart-only'
* remove unneeded binary-install/libvirt-bin:: and clean::
sections (they only deal with sysvinit stuff)
* add build/libvirt-bin:: section to install
- apparmor files
- apport hooks
- libvirt-migrate-qemu-disks
* debian/patches/series:
- don't apply Debian-specific Debianize-libvirt-guests.patch (sysvinit only)
- don't apply Disable qemu-disable-network.diff.patch
* debian/patches:
- dropped patches:
* 9022-allows-lxc-containers-with-lxcguest.patch (applied upstream)
* 9023-disable-test-poll.patch
* 9024-ftbfs-with-arm.patch (doesnt really fix arm just yet)
* 9025-CVE-2011-2178.patch (applied upstream)
- keep patches:
* 9000-delayed_iff_up_bridge.patch
* 9001-dont_clobber_existing_bridges.patch
* 9002-better_default_uri_virsh.patch
* 9003-better-default-arch.patch
* 9004-libvirtd-group-name.patch
* 9005-increase-unix-socket-timeout.patch
* 9006-default-config-test-case.patch
* 9011-move-ebtables-script.patch
* 9014-skip-nodeinfotest.patch
* 9020-lp545795.patch
* 9021-fix-uint64_t.patch
* 9026-lp795800.patch
[ Jamie Strandboge ]
* 9027-move-apparmor-load-to-genlabel.patch: 0.9.2 introduced a change that
caused aa_change_profile() to be called before the profile was loaded into
the kernel. Adjust AppArmorGenSecurityLabel() in
src/security/security_apparmor.c to load the profile itself, and adjust
AppArmorSetSecurityAllLabel() to reload the profile when stdin_fn is
specified. This patch can be removed in 0.9.3. (LP: #801569)
libvirt (0.9.2-4) unstable; urgency=low
* [398a4dd] New patch Split-out-dlopen-detection.patch. Explicitly pass
-ldl since the lock manager needs it.
* [3be22be] New patch Update-generated-autoconf-files.patch. Update
generated autoconf files
libvirt (0.9.2-3) unstable; urgency=low
* [008e65d] New patch Skip-nodeinfo-test-on-non-intel-architectures.patch:
Skip nodeinfo test on non intel architectures since the testfiles assume a
/proc/cpuinfo specific to this architecture.
libvirt (0.9.2-2) unstable; urgency=low
* [17570fc] Enable OpenVZ on Linux only (Closes: #630099)
* [31a35bc] New patch nodeinfo-remove-superfluous-braces.patch
nodeinfo: remove superfluous braces to fix compilation on non intel
architectures
libvirt (0.9.2-1) unstable; urgency=low
* [c6187ec] New upstream version 0.9.2
* [368375a] Update netcat detection to new code
* [e3319ee] Drop security-plug-regression-introduced-in-disk-probe-lo.patch
applied upstream
* [a1428a7] Refresh patches
* [77590ee] Update symbols
* [0626972] Depend on iproute
* [a1b211d] Version dependency on iptables and drop
Disable-CHECKSUM-rule.patch (Closes: #627595)
libvirt (0.9.1-2) unstable; urgency=high
* [4fbc990] New patch security-plug-regression-introduced-in-disk-probe-lo.
patch (Closes: #629128)
- Fixes: CVE-2011-2178
-- Chuck Short <email address hidden> Wed, 22 Jun 2011 11:09:15 -0400
-
libvirt (0.9.1-1ubuntu4) oneiric; urgency=low
* SECURITY UPDATE: 0.8.8 regression which reopens disk probing
(CVE-2010-2238). This can be dropped in 0.9.2.
- 9025-CVE-2011-2178.patch: use correct pointer address in
virSecurityManagerGetPrivateData()
- CVE-2011-2178
* fix virsh save when AppArmor driver is enabled
- 9026-lp795800.patch: src/security/security_apparmor.c: implement
AppArmorSetFDLabel(), which is now used by qemuMigrationToFile() if
our version of qemu supports fd migraton. This can be dropped in 0.9.3.
- LP: #795800
-- Jamie Strandboge <email address hidden> Thu, 16 Jun 2011 14:16:00 -0500
-
libvirt (0.9.1-1ubuntu3) oneiric; urgency=low
* debian/patches/9024-ftbfs-with-arm.patch: Fix FTBFS with arm.
-- Chuck Short <email address hidden> Tue, 14 Jun 2011 21:33:15 -0400
-
libvirt (0.9.1-1ubuntu2) oneiric; urgency=low
* Depend on libxen-dev rather than libxen3-dev.
-- Chuck Short <email address hidden> Mon, 13 Jun 2011 12:48:52 -0400
-
libvirt (0.9.1-1ubuntu1) oneiric; urgency=low
* Resynchronize and merge from Debian unstable (LP: #794378). Remaining
changes:
- debian/control:
* set X-Python-Version to 2.7, as 2.6 is not in oneiric.
* set ubuntu maintainer
* Build-Depends:
- remove [linux-any] from all dependencies
- remove [!linux-any] deps
- swap libxen to libxen3, qemu to qemu-kvm, and open-iscsi to
open-iscsi-utils in Build-Depends
- remove virtualbox-ose Build-Depends
- add parted and libapparmor-dev Build-Depends
* convert Vcs-Git to Xs-Debian-Vcs-Git
* libvirt-bin Depends: move netcat-openbsd, bridge-utils, dnsmasq-base
(>= 2.46-1), and iptables from Recommends to Depends
* libvirt-bin Recommends: move qemu to Suggests
* libvirt-bin Suggests: add apparmor
* libvirt0 Recommands: move lvm2 to Suggests
- keep debian/libvirt-bin.apport
- keep debian/libvirt-bin.cron.daily
- debian/libvirt-bin.dirs:
* add apparmor, cron.daily, and apport dirs
- debian/libvirt-bin.examples:
* add debian/libvirt-suspendonreboot
- debian/libvirt-bin.install:
* add /etc/apparmor.d files
* add apport hook
- debian/libvirt-bin.manpages:
* add debian/libvirt-migrate-qemu-disks.1
- debian/libvirt-bin.postinst:
* replace libvirt groupname with libvirtd
* add each admin user to libvirtd group
* call apparmor_parser on usr.sbin.libvirtd and
usr.lib.libvirt.virt-aa-helper
* call 'libvirt-migrate-qemu-disks -a' after
libvirt-bin has started if migrating from
older than 0.8.3-1ubuntu1
- debian/libvirt-bin.postrm:
* replace libvirt groupname with libvirtd
* remove usr.sbin.libvirtd and
usr.lib.libvirt.virt-aa-helper
- keep added files under debian/:
* libvirt-bin.upstart
* libvirt-migrate-qemu-disks
* libvirt-migrate-qemu-disks.1
* libvirt-suspendonreboot
* apparmor profiles
- debian/README.Debian:
* add 'Apparmor Profile' section
* add 'Disk migration' section
- debian/rules:
* move include of debhelper.mk to top of file so DEB_HOST_ARCH_OS
is defined.
* don't build with vbox since virtualbox-ose is in universe
- remove WITH_VBOX, add explicit --without-vbox
* add --with-apparmor to DEB_CONFIGURE_EXTRA_FLAGS
* set DEB_DH_INSTALLINIT_ARGS to '--upstart-only'
* remove unneeded binary-install/libvirt-bin:: and clean::
sections (they only deal with sysvinit stuff)
* add build/libvirt-bin:: section to install
- apparmor files
- apport hooks
- libvirt-migrate-qemu-disks
* debian/patches/series:
- don't apply Disable-CHECKSUM-rule.patch: our iptables can do this
- don't apply Debian-specific Debianize-libvirt-guests.patch (sysvinit only)
- don't apply Disable qemu-disable-network.diff.patch
* debian/patches:
- drop 9007-fix-daemon-conf-ftbfs.patch (looks like it may be fixed)
- drop patches applied upstream:
* 9022-drop-booton-when-kernel-specified.patch
* 9023-fix-lxc-console-hangup.patch
* 9024-fix-broken-commandtest.patch
* 9025-Pass-virSecurityManagerPtr-to-virSecurityDAC-Set-Res.patch
* 9026-security-avoid-memory-leak.patch
* 9027-CVE-2011-1146.patch
- keep patches:
* 9000-delayed_iff_up_bridge.patch
* 9001-dont_clobber_existing_bridges.patch
* 9002-better_default_uri_virsh.patch
* 9003-better-default-arch.patch
* 9004-libvirtd-group-name.patch
* 9005-increase-unix-socket-timeout.patch
* 9006-default-config-test-case.patch
* 9011-move-ebtables-script.patch (refreshed)
* 9014-skip-nodeinfotest.patch (modified to make it apply)
* 9020-lp545795.patch (modified to make it still apply)
* 9021-fix-uint64_t.patch
* 9022-allows-lxc-containers-with-lxcguest.patch (renamed, modified
to make it still apply, and added DEP-3 tags).
- new patches:
* 9023-disable-test-poll.patch - don't run broken test-poll
libvirt (0.9.1-1) unstable; urgency=low
* [1546b8c] New upstream version 0.9.1
* [2418ebf] Rediff patches
* [d4e2b71] Drop Make-sure-DNSMASQ_STATE_DIR-exists.patch: applied upstream
* [0fef693] libvirt0: Update symbols
* [b4ff149] Bump standards version to 3.9.2
libvirt (0.9.0-2) unstable; urgency=low
* [3a8e07f] New patch Make-sure-DNSMASQ_STATE_DIR-exists.patch
(Closes: #623536)
libvirt (0.9.0-1) unstable; urgency=low
* [a91c8f6] New upstream version 0.9.0
* [1608a8c] Drop patch Make-macros-work-as-rvalues.patch, fixed upstream
* [85c3f78] Fix test failure caused by our libvirtd.conf changes
* [0defeee] Fix crashes due to missing initialization of the error system
* [0a63618] Disable daemon start test for now
* [1c29d34] Enable testsuite
* [cf3a26f] Build for Python 2.6 only
libvirt (0.9.0~rc2-2) experimental; urgency=low
* [7da1fd9] New patch Make-macros-work-as-rvalues.patch fixes kFreeBSD build
* [08c4915] Add support for kFreeBSD (Closes: #612238)
libvirt (0.9.0~rc2-1) experimental; urgency=low
* [77fc1c5] New upstream version 0.9.0~rc2
* [30ceba5] Drop superflous build-dep on dpkg-dev.
The affected versions are neither in Lenny, Squeeze nor Sid.
* [5845bed] Switch to dh_python2 (Closes: #616874)
libvirt (0.9.0~rc1-1) experimental; urgency=low
* [02daf0b] New upstream version 0.9.0~rc1
* [b4a05a1] Update patches. Drop patches applied upstream:
Do-not-add-drive-boot-on-param-when-a-kernel-is-spec.patch
Don-t-pass-empty-arguments-to-dnsmasq.patch
Make-sure-the-rundir-is-accessible-by-the-user.patch
upstream/Add-missing-checks-for-read-only-connections.patch
* [7ff8e58] Update symbols for 0.9.0~rc1
libvirt (0.8.8-3) unstable; urgency=low
* [28df435] Don't create the rundir in the init script. The daemon does this
now.
* [7302aff] New patch Make-sure-the-rundir-is-accessible-by-the-user.patch.
Make sure the rundir is accessible by the user (Closes: #614210)
* [6dde59d] Recommend dmidecode used by the qemu driver
* [235f893] Add missing checks for read only connections.
As pointed on CVE-2011-1146, some API forgot to check the read-only
status of the connection for entry point which modify the state
of the system or may lead to a remote execution using user data.
The entry points concerned are:
- virConnectDomainXMLToNative
- virNodeDeviceDettach
- virNodeDeviceReAttach
- virNodeDeviceReset
- virDomainRevertToSnapshot
- virDomainSnapshotDelete
src/libvirt.c: fix the above set of entry points to error on read-only
connections (Closes: #617773)
libvirt (0.8.8-2) unstable; urgency=low
* [f5fa0d3] initscript: depend on $local_fs (Closes: #616162)
* [f503698] README.Debian: Mention netcat.openbsd. Thanks to Luca Capello
for the patch.
* [9d1ceb0] New patch:
Do-not-add-drive-boot-on-param-when-a-kernel-is-spec.patch.
Do not add drive 'boot=on' param when a kernel is specified
Thanks to Jim Fehlig and Wolfgang Frisch (Closes: #615013)
-- Serge Hallyn <email address hidden> Wed, 11 May 2011 12:29:51 -0500
-
libvirt (0.8.8-1ubuntu8) oneiric; urgency=low
* Force rebuild to find brctl in its new location. (LP: #780896)
-- Serge Hallyn <email address hidden> Wed, 11 May 2011 09:41:42 -0500
-
libvirt (0.8.8-1ubuntu7) oneiric; urgency=low
* add parted to build-depends (LP: #697046)
-- Serge Hallyn <email address hidden> Wed, 04 May 2011 19:54:43 -0500
-
libvirt (0.8.8-1ubuntu6) natty; urgency=low
* debian/patches/allows-lxc-containers-with-lxcguest.patch:
Pass "libvirt" to lxc containers, so that libvirt can
work with lxcguest. (LP: #757752)
-- Chuck Short <email address hidden> Mon, 11 Apr 2011 13:44:03 -0400
