Changelog for libvirt-daemon-driver-storage-scsi-4.5.0-23.3.module_el8.0.0+44+94c1b039.x86_64.rpm :

* Tue Jun 18 2019 Jiri Denemark - 4.5.0-23.3.el8- api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161)- api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166)- api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167)- api: disallow virConnect
*HypervisorCPU on read-only connections (CVE-2019-10168)
* Thu May 16 2019 Jiri Denemark - 4.5.0-23.2.el8- admin: reject clients unless their UID matches the current UID (CVE-2019-10132)- locking: restrict sockets to mode 0600 (CVE-2019-10132)- logging: restrict sockets to mode 0600 (CVE-2019-10132)
* Mon May 06 2019 Jiri Denemark - 4.5.0-23.1.el8- cpu_x86: Do not cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)- qemu: Don\'t cache microcode version (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)- cpu_map: Define md-clear CPUID bit (CVE-2018-12130, CVE-2018-12126, CVE-2018-11091, CVE-2018-12127)
* Fri Feb 15 2019 Jiri Denemark - 4.5.0-23- network: explicitly allow icmp/icmpv6 in libvirt zonefile (rhbz#1650320)
* Fri Feb 15 2019 Jiri Denemark - 4.5.0-22- util: fix memory leak in virFirewallDInterfaceSetZone() (rhbz#1650320)
* Fri Feb 08 2019 Jiri Denemark - 4.5.0-21- docs: Drop /dev/net/tun from the list of shared devices (rhbz#1665400)- qemu: conf: Remove /dev/sev from the default cgroup device acl list (rhbz#1665400)- qemu: cgroup: Expose /dev/sev/ only to domains that require SEV (rhbz#1665400)- qemu: domain: Add /dev/sev into the domain mount namespace selectively (rhbz#1665400)- security: dac: Relabel /dev/sev in the namespace (rhbz#1665400)- qemu: caps: Use CAP_DAC_OVERRIDE for probing to avoid permission issues (rhbz#1665400)- qemu: caps: Don\'t try to ask for CAP_DAC_OVERRIDE if non-root (rhbz#1665400)- Revert \"RHEL: Require firewalld-filesystem for firewalld rpm macros\" (rhbz#1650320)- Revert \"RHEL: network: regain guest network connectivity after firewalld switch to nftables\" (rhbz#1650320)- configure: change HAVE_FIREWALLD to WITH_FIREWALLD (rhbz#1650320)- util: move all firewalld-specific stuff into its own files (rhbz#1650320)- util: new virFirewallD APIs + docs (rhbz#1650320)- configure: selectively install a firewalld \'libvirt\' zone (rhbz#1650320)- network: set firewalld zone of bridges to \"libvirt\" zone when appropriate (rhbz#1650320)- network: allow configuring firewalld zone for virtual network bridge device (rhbz#1650320)- util: remove test code accidentally committed to virFirewallDZoneExists (rhbz#1650320)- qemu: command: Don\'t skip \'readonly\' and throttling info for empty drive (rhbz#1670337)
* Mon Jan 28 2019 Jiri Denemark - 4.5.0-20- RHEL: qemu: Fix crash trying to use iSCSI hostdev (rhbz#1669424)
* Thu Jan 24 2019 Jiri Denemark - 4.5.0-19- qemu: Fix logic error in qemuSetUnprivSGIO (rhbz#1666605)- tests: qemuxml2argv: Add test case for empty CDROM with cache mode (rhbz#1553255)- qemu: command: Don\'t format image properties for empty -drive (rhbz#1553255)
* Mon Jan 14 2019 Jiri Denemark - 4.5.0-18- conf: correct false boot order error during domain parse (rhbz#1630393)- qemu: Remove duplicated qemuAgentCheckError (rhbz#1665000)- qemu: require reply from guest agent in qemuAgentGetInterfaces (rhbz#1665000)- qemu: Filter non SCSI hostdevs in qemuHostdevPrepareSCSIDevices (rhbz#1665244)- util: remove const specifier from nlmsghdr arg to virNetlinkDumpCallback() (rhbz#1583131)- util: add a function to insert new interfaces to IPv6CheckForwarding list (rhbz#1583131)- util: use nlmsg_find_attr() instead of an open-coded loop (rhbz#1583131)- util: check accept_ra for all nexthop interfaces of multipath routes (rhbz#1583131)- util: make forgotten changes suggested during review of commit d40b820c (rhbz#1583131)
* Mon Jan 07 2019 Jiri Denemark - 4.5.0-17- virsh: Strip XML declaration when extracting CPU XMLs (rhbz#1659048)- RHEL: qemu: Add ability to set sgio values for hostdev (rhbz#1582424)- RHEL: qemu: Add check for unpriv sgio for SCSI generic host device (rhbz#1582424)- qemu: Alter AATTval usage in qemuSetUnprivSGIO (rhbz#1656362)- qemu: Alter qemuSetUnprivSGIO hostdev shareable logic (rhbz#1656362)
* Mon Dec 17 2018 Jiri Denemark - 4.5.0-16- util: Don\'t overflow in virRandomBits (rhbz#1655586)- virrandom: Avoid undefined behaviour in virRandomBits (rhbz#1655586)- spec: remove libcgroup and cgconfig (rhbz#1602407)- qemu: Drop duplicated code from qemuDomainDefValidateFeatures() (rhbz#1647822)- tests: Add capabilities data for QEMU 3.1.0 on ppc64 (rhbz#1647822)- qemu: Introduce QEMU_CAPS_MACHINE_PSERIES_CAP_NESTED_HV (rhbz#1647822)- conf: Parse and format nested-hv feature (rhbz#1647822)- qemu: Format nested-hv feature on the command line (rhbz#1647822)- qemu: Add check for whether KVM nesting is enabled (rhbz#1645139)- secret: Add check/validation for correct usage when LookupByUUID (rhbz#1656255)- cpu: Add support for \"stibp\" x86_64 feature (rhbz#1655032)
* Mon Dec 03 2018 Jiri Denemark - 4.5.0-15- virfile: Take symlink into account in virFileIsSharedFixFUSE (rhbz#1634782)- qemu: Ignore nwfilter binding instantiation issues during reconnect (rhbz#1648544)- qemu: Set identity for the reconnect all thread (rhbz#1648546)- Revert \"access: Modify the VIR_ERR_ACCESS_DENIED to include driverName\" (rhbz#1631608)- access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)- qemu: add vfio-ap capability (rhbz#1508146)- qemu: vfio-ap device support (rhbz#1508146)- qemu: Extract MDEV VFIO PCI validation code into a separate helper (rhbz#1508146)- conf: Move VFIO AP validation from post parse to QEMU validation code (rhbz#1508146)- qemu: Fix post-copy migration on the source (rhbz#1649169)
* Fri Nov 09 2018 Jiri Denemark - 4.5.0-14- storage: Remove secretPath from _virStorageBackendQemuImgInfo (rhbz#1645459)- storage: Allow for inputvol to have any format for encryption (rhbz#1645459)- storage: Allow inputvol to be encrypted (rhbz#1645459)- access: Modify the VIR_ERR_ACCESS_DENIED to include driverName (rhbz#1631608)- docs: Enhance polkit documentation to describe secondary connection (rhbz#1631608)- qemu: Don\'t ignore resume events (rhbz#1634758, rhbz#1643338)
* Thu Nov 01 2018 Jiri Denemark - 4.5.0-13- Revert \"spec: Temporarily drop gluster support\" (rhbz#1599339)
* Wed Oct 17 2018 Jiri Denemark - 4.5.0-12- RHEL: Require firewalld-filesystem for firewalld rpm macros (rhbz#1639932)
* Tue Oct 16 2018 Jiri Denemark - 4.5.0-11- virfile: fix cast-align error (rhbz#1634782)- virfiletest: Fix test name prefix for virFileInData test (rhbz#1634782)- virfiletst: Test virFileIsSharedFS (rhbz#1634782)- virFileIsSharedFSType: Detect direct mount points (rhbz#1634782)- virfile: Rework virFileIsSharedFixFUSE (rhbz#1634782)- RHEL: network: regain guest network connectivity after firewalld switch to nftables (rhbz#1638864)
* Mon Oct 08 2018 Jiri Denemark - 4.5.0-10- conf: Fix check for chardev source path (rhbz#1609723)- tests: Reuse qemucapabilities data for qemucaps2xml (rhbz#1629862)- tests: Add more tests to qemucaps2xml (rhbz#1629862)- qemu: Drop QEMU_CAPS_ENABLE_KVM (rhbz#1629862)- qemu: Avoid probing non-native binaries all the time (rhbz#1629862)- qemu: Clarify QEMU_CAPS_KVM (rhbz#1629862)- qemu: Don\'t check for /dev/kvm presence (rhbz#1629862)- tests: Follow up on qemucaps2xmldata rename (rhbz#1629862)- security: dac: also label listen UNIX sockets (rhbz#1634775)- spec: Set correct TLS priority (rhbz#1632269)- spec: Build ceph and gluster support everywhere (rhbz#1599546)- virsh: Require explicit --domain for domxml-to-native (rhbz#1634769)- virFileIsSharedFSType: Check for fuse.glusterfs too (rhbz#1634782)- qemu: fix up permissions for pre-created UNIX sockets (rhbz#1634775)- cpu_map: Add features for Icelake CPUs (rhbz#1527657, rhbz#1526625)- cpu_map: Add Icelake CPU models (rhbz#1526625)- qemu: Properly report VIR_DOMAIN_EVENT_RESUMED_FROM_SNAPSHOT (rhbz#1634758)- qemu: Report more appropriate running reasons (rhbz#1634758)- qemu: Pass running reason to RESUME event handler (rhbz#1634758)- qemu: Map running reason to resume event detail (rhbz#1634758)- qemu: Avoid duplicate resume events and state changes (rhbz#1634758)- conf: qemu: add support for Hyper-V frequency MSRs (rhbz#1589702)- conf: qemu: add support for Hyper-V reenlightenment notifications (rhbz#1589702)- conf: qemu: add support for Hyper-V PV TLB flush (rhbz#1589702)
* Wed Sep 05 2018 Jiri Denemark - 4.5.0-9- RHEL: Fix virConnectGetMaxVcpus output (rhbz#1582222)- storage: Add --shrink to qemu-img command when shrinking vol (rhbz#1622534)- access: Fix nwfilter-binding ACL access API name generation (rhbz#1622540)- conf: Add validation of input devices (rhbz#1591240)- tests: qemu: Remove disk from graphics-vnc-tls (rhbz#1598167)- tests: qemu: test more versions for graphics-vnc-tls (rhbz#1598167)- qemu: vnc: switch to tls-creds-x509 (rhbz#1598167)- qemu: mdev: Use vfio-pci \'display\' property only with vfio-pci mdevs (rhbz#1624740)- virDomainDefCompatibleDevice: Relax alias change check (rhbz#1603133)- virDomainDetachDeviceFlags: Clarify update semantics (rhbz#1603133)- virDomainNetDefCheckABIStability: Check for MTU change too (rhbz#1623158)- RHEL: spec: Require python3-devel on RHEL-8 (rhbz#1518446)- qemu: monitor: Remove qemuMonitorJSONExtractCPUArchInfo wrapper (rhbz#1598829)- qemu: monitor: Use \'target\' instead of \'arch\' in reply of \'query-cpus-fast\' (rhbz#1598829)
* Tue Aug 21 2018 Jiri Denemark - 4.5.0-8- tests: Add missing thread_siblings_list files (rhbz#1608479)- util: Rewrite virHostCPUCountThreadSiblings() (rhbz#1608479)- utils: Remove arbitrary limit on socket_id/core_id (rhbz#1608479)- tests: Add linux-high-ids test (rhbz#1608479)- qemu: hotplug: Fix asynchronous unplug of \'shmem\' (rhbz#1618680)- tests: rename hugepages to hugepages-default (rhbz#1615461)- tests: extract hugepages-numa-default-dimm out of hugepages-numa (rhbz#1615461)- tests: rename hugepages-numa into hugepages-numa-default (rhbz#1615461)- tests: remove unnecessary XML elements from hugepages-numa-default (rhbz#1615461)- tests: extract pages-discard out of hugepages-pages (rhbz#1615461)- tests: rename hugepages-pages into hugepages-numa-nodeset (rhbz#1615461)- tests: rename hugepages-pages2 into hugepages-numa-default-2M (rhbz#1615461)- tests: extract pages-discard-hugepages out of hugepages-pages3 (rhbz#1615461)- tests: rename hugepages-pages3 into hugepages-numa-nodeset-part (rhbz#1615461)- tests: rename hugepages-pages4 into hugepages-numa-nodeset-nonexist (rhbz#1615461)- tests: rename hugepages-pages5 into hugepages-default-2M (rhbz#1615461)- tests: rename hugepages-pages6 into hugepages-default-system-size (rhbz#1615461)- tests: rename hugepages-pages7 into pages-dimm-discard (rhbz#1615461)- tests: rename hugepages-pages8 into hugepages-nodeset-nonexist (rhbz#1615461)- tests: introduce hugepages-default-1G-nodeset-2M (rhbz#1615461)- tests: introduce hugepages-nodeset (rhbz#1615461)- conf: Move hugepage XML validation check out of qemu_command (rhbz#1615461)- conf: Move hugepages validation out of XML parser (rhbz#1615461)- conf: Introduce virDomainDefPostParseMemtune (rhbz#1615461)- tests: sev: Test launch-security with specific QEMU version (rhbz#1619150)- qemu: Fix probing of AMD SEV support (rhbz#1619150)- qemu: caps: Format SEV platform data into qemuCaps cache (rhbz#1619150)- conf: Parse guestfwd channel device info again (rhbz#1610072)
* Thu Aug 16 2018 Jiri Denemark - 4.5.0-7- qemu_migration: Avoid writing to freed memory (rhbz#1615854)
* Thu Aug 02 2018 Jiri Denemark - 4.5.0-6- qemu: Exempt video model \'none\' from getting a PCI address on Q35- conf: Fix a error msg typo in virDomainVideoDefValidate
* Tue Jul 31 2018 Jiri Denemark - 4.5.0-5- esx storage: Fix typo lsilogic -> lsiLogic- networkGetDHCPLeases: Don\'t always report error if unable to read leases file- nwfilter: Resolve SEGV for NWFilter Snoop processing- qemu: Remove unused bypassSecurityDriver from qemuOpenFileAs- qemuDomainSaveMemory: Don\'t enforce dynamicOwnership- domain_nwfilter: Return early if net has no name in virDomainConfNWFilterTeardownImpl- examples: Add clean-traffic-gateway into nwfilters
* Mon Jul 23 2018 Jiri Denemark - 4.5.0-4- qemu: hotplug: don\'t overwrite error message in qemuDomainAttachNetDevice- qemu: hotplug: report error when changing rom enabled attr for net iface- qemu: Fix setting global_period cputune element- tests: qemucaps: Add test data for upcoming qemu 3.0.0- qemu: capabilities: Add capability for werror/rerror for \'usb-device\' frontend- qemu: command: Move graphics iteration to its own function- qemu: address: Handle all the video devices within a single loop- conf: Introduce virDomainVideoDefClear helper- conf: Introduce virDomainDefPostParseVideo helper- qemu: validate: Enforce compile time switch type checking for videos- tests: Add capabilities data for QEMU 2.11 x86_64- tests: Update capabilities data for QEMU 3.0.0 x86_64- qemu: qemuBuildHostdevCommandLine: Use a helper variable mdevsrc- qemu: caps: Introduce a capability for egl-headless- qemu: Introduce a new graphics display type \'headless\'- qemu: caps: Add vfio-pci.display capability- conf: Introduce virDomainGraphicsDefHasOpenGL helper- conf: Replace \'error\' with \'cleanup\' in virDomainHostdevDefParseXMLSubsys- conf: Introduce new attribute \'display\'- qemu: command: Enable formatting vfio-pci.display option onto cmdline- docs: Rephrase the mediated devices hostdev section a bit- conf: Introduce new video type \'none\'- virt-xml-validate: Add schema for nwfilterbinding- tools: Fix typo generating adapter_wwpn field- src: Fix memory leak in virNWFilterBindingDispose
* Mon Jul 23 2018 Jiri Denemark - 4.5.0-3- qemu: hotplug: Do not try to add secret object for TLS if it does not exist- qemu: monitor: Make qemuMonitorAddObject more robust against programming errors- spec: Explicitly require matching libvirt-libs- virDomainConfNWFilterInstantiate: initialize AATTxml to avoid random crash- qemuProcessStartPRDaemonHook: Try to set NS iff domain was started with one- qemuDomainValidateStorageSource: Relax PR validation- virStoragePRDefFormat: Suppress path formatting for migratable XML- qemu: Wire up PR_MANAGER_STATUS_CHANGED event- qemu_monitor: Introduce qemuMonitorJSONGetPRManagerInfo- qemu: Fetch pr-helper process info on reconnect- qemu: Fix ATTRIBUTE_NONNULL for qemuMonitorAddObject- virsh.pod: Fix a command name typo in nwfilter-binding-undefine- docs: schema: Add missing to vsock device- virnetdevtap: Don\'t crash on !ifname in virNetDevTapInterfaceStats- tests: fix TLS handshake failure with TLS 1.3
* Mon Jul 09 2018 Jiri Denemark - 4.5.0-2- qemu: Add capability for the HTM pSeries feature- conf: Parse and format the HTM pSeries feature- qemu: Format the HTM pSeries feature- qemu: hotplug: Don\'t access srcPriv when it\'s not allocated- qemuDomainNestedJobAllowed: Allow QEMU_JOB_NONE- src: Mention DEVICE_REMOVAL_FAILED event in virDomainDetachDeviceAlias docs- virsh.pod: Drop --persistent for detach-device-alias- qemu: don\'t use chardev FD passing with standalone args- qemu: remove chardevStdioLogd param from vhostuser code path- qemu: consolidate parameters of qemuBuildChrChardevStr into flags- qemu: don\'t use chardev FD passing for vhostuser backend- qemu: fix UNIX socket chardevs operating in client mode- qemuDomainDeviceDefValidateNetwork: Check for range only if IP prefix set- spec: Temporarily drop gluster support
* Tue Jul 03 2018 Jiri Denemark - 4.5.0-1- Rebased to libvirt-4.5.0
* Fri May 25 2018 Jiri Denemark - 4.3.0-1- Rebased to libvirt-4.3.0
* Wed Mar 21 2018 Daniel P. Berrangé - 4.1.0-2- Fix systemd macro argument with line continuations (rhbz#1558648)
* Mon Mar 05 2018 Daniel Berrange - 4.1.0-1- Rebase to version 4.1.0
* Wed Feb 07 2018 Fedora Release Engineering - 4.0.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild
* Fri Jan 19 2018 Daniel P. Berrange - 4.0.0-1- Rebase to version 4.0.0
* Wed Dec 20 2017 Cole Robinson - 3.10.0-2- Rebuild for xen 4.10
* Tue Dec 05 2017 Daniel P. Berrange - 3.10.0-1- Rebase to version 3.10.0
* Fri Nov 03 2017 Daniel P. Berrange - 3.9.0-1- Rebase to version 3.9.0
* Wed Oct 04 2017 Daniel P. Berrange - 3.8.0-1- Rebase to version 3.8.0
* Mon Sep 04 2017 Daniel P. Berrange - 3.7.0-1- Rebase to version 3.7.0
* Wed Aug 02 2017 Daniel P. Berrange - 3.6.0-1- Rebase to version 3.6.0
* Sun Jul 30 2017 Florian Weimer - 3.5.0-4- Rebuild with binutils fix for ppc64le (#1475636)
* Tue Jul 25 2017 Daniel P. Berrange - 3.5.0-3- Disabled RBD on i386, arm, ppc64 (rhbz #1474743)
* Mon Jul 17 2017 Cole Robinson - 3.5.0-2- Rebuild for xen 4.9
* Thu Jul 06 2017 Daniel P. Berrange - 3.5.0-1- Rebase to version 3.5.0
* Fri Jun 02 2017 Daniel P. Berrange - 3.4.0-1- Rebase to version 3.4.0
* Mon May 08 2017 Daniel P. Berrange - 3.3.0-1- Rebase to version 3.3.0
* Mon Apr 03 2017 Daniel P. Berrange - 3.2.0-1- Rebase to version 3.2.0
* Fri Mar 03 2017 Daniel P. Berrange - 3.1.0-1- Rebase to version 3.1.0
* Fri Feb 10 2017 Fedora Release Engineering - 3.0.0-2- Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild
* Thu Jan 19 2017 Daniel P. Berrange - 3.0.0-1- Rebase to version 3.0.0