Rebased to version 1.1.3.9

CVE-2015-0236: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects (bz #1185769)
CVE-2014-8136: local denial of service in qemu/qemu_driver.c (bz #1176179)

libvirt.spec

@@ -15,8 +15,9 @@
 
 # A client only build will create a libvirt.so only containing
 # the generic RPC driver, and test driver and no libvirtd
-# Default to a full server + client build
-%define client_only        0
+# Default to a full server + client build, but with the possibility
+# of a command-line or ~/.rpmmacros override for client-only.
+%{!?client_only:%define client_only 0}
 
 # Now turn off server build in certain cases
 
@@ -50,11 +51,16 @@
 %define with_lxc           0%{!?_without_lxc:%{server_drivers}}
 %define with_uml           0%{!?_without_uml:%{server_drivers}}
 %define with_libxl         0%{!?_without_libxl:%{server_drivers}}
+%define with_vbox          0%{!?_without_vbox:%{server_drivers}}
 
 %define with_qemu_tcg      %{with_qemu}
 # Change if we ever provide qemu-kvm binaries on non-x86 hosts
 %if 0%{?fedora} >= 18
-    %define qemu_kvm_arches    %{ix86} x86_64 ppc64 s390x
+    %if 0%{?fedora} >= 20
+        %define qemu_kvm_arches    %{ix86} x86_64 ppc64 s390x %{arm}
+    %else
+        %define qemu_kvm_arches    %{ix86} x86_64 ppc64 s390x
+    %endif
 %else
     %define qemu_kvm_arches    %{ix86} x86_64
 %endif
@@ -67,7 +73,6 @@
 
 # Then the hypervisor drivers that run outside libvirtd, in libvirt.so
 %define with_openvz        0%{!?_without_openvz:1}
-%define with_vbox          0%{!?_without_vbox:1}
 %define with_vmware        0%{!?_without_vmware:1}
 %define with_phyp          0%{!?_without_phyp:1}
 %define with_esx           0%{!?_without_esx:1}
@@ -96,6 +101,9 @@
 %define with_numactl          0%{!?_without_numactl:%{server_drivers}}
 %define with_selinux          0%{!?_without_selinux:%{server_drivers}}
 
+# Just hardcode to off, since few people ever have apparmor RPMs installed
+%define with_apparmor         0%{!?_without_apparmor:0}
+
 # A few optional bits off by default, we enable later
 %define with_polkit        0%{!?_without_polkit:0}
 %define with_capng         0%{!?_without_capng:0}
@@ -130,6 +138,11 @@
     %define with_libxl 0
 %endif
 
+# vbox is available only on i386 x86_64
+%ifnarch %{ix86} x86_64
+    %define with_vbox 0
+%endif
+
 # Numactl is not available on s390[x] and ARM
 %ifarch s390 s390x %{arm}
     %define with_numactl 0
@@ -236,14 +249,19 @@
 %if 0%{?fedora} >= 16
     %define with_sanlock 0%{!?_without_sanlock:%{server_drivers}}
 %endif
-%if 0%{?rhel} >= 6
+%if 0%{?rhel} == 6
     %ifarch %{ix86} x86_64
         %define with_sanlock 0%{!?_without_sanlock:%{server_drivers}}
     %endif
 %endif
+%if 0%{?rhel} >= 7
+    %ifarch x86_64
+        %define with_sanlock 0%{!?_without_sanlock:%{server_drivers}}
+    %endif
+%endif
 
 # Enable libssh2 transport for new enough distros
-%if 0%{?fedora} >= 17 || 0%{?rhel} >= 6
+%if 0%{?fedora} >= 17
     %define with_libssh2 0%{!?_without_libssh2:1}
 %endif
 
@@ -338,9 +356,17 @@
 %endif
 
 
+# RHEL releases provide stable tool chains and so it is safe to turn
+# compiler warning into errors without being worried about frequent
+# changes in reported warnings
+%if 0%{?rhel}
+    %define enable_werror --enable-werror
+%endif
+
+
 Summary: Library providing a simple virtualization API
 Name: libvirt
-Version: 1.0.5.9
+Version: 1.1.3.9
 Release: 1%{?dist}%{?extra_release}
 License: LGPLv2+
 Group: Development/Libraries
@@ -376,6 +402,9 @@ Requires: libvirt-daemon-driver-uml = %{version}-%{release}
         %if %{with_xen}
 Requires: libvirt-daemon-driver-xen = %{version}-%{release}
         %endif
+        %if %{with_vbox}
+Requires: libvirt-daemon-driver-vbox = %{version}-%{release}
+        %endif
 
 Requires: libvirt-daemon-driver-interface = %{version}-%{release}
 Requires: libvirt-daemon-driver-secret = %{version}-%{release}
@@ -400,7 +429,7 @@ BuildRequires: python-devel
 %if %{with_systemd}
 BuildRequires: systemd-units
 %endif
-%if %{with_xen}
+%if %{with_xen} || %{with_libxl}
 BuildRequires: xen-devel
 %endif
 BuildRequires: libxml2-devel
@@ -410,7 +439,9 @@ BuildRequires: readline-devel
 BuildRequires: ncurses-devel
 BuildRequires: gettext
 BuildRequires: libtasn1-devel
+%if (0%{?rhel} && 0%{?rhel} < 7) || (0%{?fedora} && 0%{?fedora} < 19)
 BuildRequires: libgcrypt-devel
+%endif
 BuildRequires: gnutls-devel
 BuildRequires: libattr-devel
 %if %{with_libvirtd}
@@ -460,6 +491,9 @@ BuildRequires: avahi-devel
 %if %{with_selinux}
 BuildRequires: libselinux-devel
 %endif
+%if %{with_apparmor}
+BuildRequires: libapparmor-devel
+%endif
 %if %{with_network}
 BuildRequires: dnsmasq >= 2.41
 BuildRequires: iptables
@@ -623,31 +657,6 @@ Requires: avahi
 Requires: avahi-libs
         %endif
     %endif
-    %if %{with_network}
-Requires: dnsmasq >= 2.41
-Requires: radvd
-    %endif
-    %if %{with_network} || %{with_nwfilter}
-Requires: iptables
-Requires: iptables-ipv6
-    %endif
-    %if %{with_nwfilter}
-Requires: ebtables
-    %endif
-    %if %{with_netcf} && (0%{?fedora} >= 18 || 0%{?rhel} >= 7)
-Requires: netcf-libs >= 0.2.2
-    %endif
-# needed for device enumeration
-    %if %{with_hal}
-Requires: hal
-    %endif
-    %if %{with_udev}
-        %if 0%{?fedora} >= 18 || 0%{?rhel} >= 7
-Requires: systemd >= 185
-        %else
-Requires: udev >= 145
-        %endif
-    %endif
     %if %{with_polkit}
         %if 0%{?fedora} >= 12 || 0%{?rhel} >=6
 Requires: polkit >= 0.93
@@ -655,50 +664,6 @@ Requires: polkit >= 0.93
 Requires: PolicyKit >= 0.6
         %endif
     %endif
-    %if %{with_storage_fs}
-Requires: nfs-utils
-# For mkfs
-Requires: util-linux
-# For glusterfs
-        %if 0%{?fedora} >= 11
-Requires: glusterfs-client >= 2.0.1
-        %endif
-    %endif
-    %if %{with_qemu}
-# From QEMU RPMs
-Requires: /usr/bin/qemu-img
-# For image compression
-Requires: gzip
-Requires: bzip2
-Requires: lzop
-Requires: xz
-    %else
-        %if %{with_xen}
-# From Xen RPMs
-Requires: /usr/sbin/qcow-create
-        %endif
-    %endif
-    %if %{with_storage_lvm}
-# For LVM drivers
-Requires: lvm2
-    %endif
-    %if %{with_storage_iscsi}
-# For ISCSI driver
-Requires: iscsi-initiator-utils
-    %endif
-    %if %{with_storage_disk}
-# For disk driver
-Requires: parted
-Requires: device-mapper
-    %endif
-    %if %{with_storage_mpath}
-# For multipath support
-Requires: device-mapper
-    %endif
-    %if %{with_storage_sheepdog}
-# For Sheepdog support
-Requires: sheepdog
-    %endif
     %if %{with_cgconfig}
 Requires: libcgroup
     %endif
@@ -754,6 +719,10 @@ Network filter configuration files for cleaning guest traffic
 Summary: Network driver plugin for the libvirtd daemon
 Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
+Requires: dnsmasq >= 2.41
+Requires: radvd
+Requires: iptables
+Requires: iptables-ipv6
 
 %description daemon-driver-network
 The network driver plugin for the libvirtd daemon, providing
@@ -767,6 +736,9 @@ bridge capabilities.
 Summary: Nwfilter driver plugin for the libvirtd daemon
 Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
+Requires: iptables
+Requires: iptables-ipv6
+Requires: ebtables
 
 %description daemon-driver-nwfilter
 The nwfilter driver plugin for the libvirtd daemon, providing
@@ -780,6 +752,17 @@ iptables and ip6tables capabilities
 Summary: Nodedev driver plugin for the libvirtd daemon
 Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
+# needed for device enumeration
+            %if %{with_hal}
+Requires: hal
+            %endif
+            %if %{with_udev}
+                %if 0%{?fedora} >= 18 || 0%{?rhel} >= 7
+Requires: systemd >= 185
+                %else
+Requires: udev >= 145
+                %endif
+            %endif
 
 %description daemon-driver-nodedev
 The nodedev driver plugin for the libvirtd daemon, providing
@@ -793,6 +776,9 @@ capabilities.
 Summary: Interface driver plugin for the libvirtd daemon
 Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
+            %if %{with_netcf} && (0%{?fedora} >= 18 || 0%{?rhel} >= 7)
+Requires: netcf-libs >= 0.2.2
+            %endif
 
 %description daemon-driver-interface
 The interface driver plugin for the libvirtd daemon, providing
@@ -816,6 +802,45 @@ an implementation of the secret key APIs.
 Summary: Storage driver plugin for the libvirtd daemon
 Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
+            %if %{with_storage_fs}
+Requires: nfs-utils
+# For mkfs
+Requires: util-linux
+# For glusterfs
+                %if 0%{?fedora} >= 11
+Requires: glusterfs-client >= 2.0.1
+                %endif
+            %endif
+            %if %{with_storage_lvm}
+# For LVM drivers
+Requires: lvm2
+            %endif
+            %if %{with_storage_iscsi}
+# For ISCSI driver
+Requires: iscsi-initiator-utils
+            %endif
+            %if %{with_storage_disk}
+# For disk driver
+Requires: parted
+Requires: device-mapper
+            %endif
+            %if %{with_storage_mpath}
+# For multipath support
+Requires: device-mapper
+            %endif
+            %if %{with_storage_sheepdog}
+# For Sheepdog support
+Requires: sheepdog
+            %endif
+            %if %{with_qemu}
+# From QEMU RPMs
+Requires: /usr/bin/qemu-img
+            %else
+                %if %{with_xen}
+# From Xen RPMs
+Requires: /usr/sbin/qcow-create
+                %endif
+            %endif
 
 %description daemon-driver-storage
 The storage driver plugin for the libvirtd daemon, providing
@@ -831,6 +856,12 @@ Group: Development/Libraries
 Requires: libvirt-daemon = %{version}-%{release}
 # There really is a hard cross-driver dependency here
 Requires: libvirt-daemon-driver-network = %{version}-%{release}
+Requires: /usr/bin/qemu-img
+# For image compression
+Requires: gzip
+Requires: bzip2
+Requires: lzop
+Requires: xz
 
 %description daemon-driver-qemu
 The qemu driver plugin for the libvirtd daemon, providing
@@ -880,6 +911,19 @@ Xen
         %endif
 
 
+        %if %{with_vbox}
+%package daemon-driver-vbox
+Summary: VirtualBox driver plugin for the libvirtd daemon
+Group: Development/Libraries
+Requires: libvirt-daemon = %{version}-%{release}
+
+%description daemon-driver-vbox
+The vbox driver plugin for the libvirtd daemon, providing
+an implementation of the hypervisor driver APIs using
+VirtualBox
+        %endif
+
+
         %if %{with_libxl}
 %package daemon-driver-libxl
 Summary: Libxl driver plugin for the libvirtd daemon
@@ -1012,6 +1056,27 @@ Requires: xen
 Server side daemon and driver required to manage the virtualization
 capabilities of XEN
     %endif
+
+    %if %{with_vbox}
+%package daemon-vbox
+Summary: Server side daemon & driver required to run VirtualBox guests
+Group: Development/Libraries
+
+Requires: libvirt-daemon = %{version}-%{release}
+        %if %{with_driver_modules}
+Requires: libvirt-daemon-driver-vbox = %{version}-%{release}
+Requires: libvirt-daemon-driver-interface = %{version}-%{release}
+Requires: libvirt-daemon-driver-network = %{version}-%{release}
+Requires: libvirt-daemon-driver-nodedev = %{version}-%{release}
+Requires: libvirt-daemon-driver-nwfilter = %{version}-%{release}
+Requires: libvirt-daemon-driver-secret = %{version}-%{release}
+Requires: libvirt-daemon-driver-storage = %{version}-%{release}
+        %endif
+
+%description daemon-vbox
+Server side daemon and driver required to manage the virtualization
+capabilities of VirtualBox
+    %endif
 %endif # %{with_libvirtd}
 
 %package client
@@ -1022,7 +1087,7 @@ Requires: ncurses
 # So remote clients can access libvirt over SSH tunnel
 # (client invokes 'nc' against the UNIX socket on the server)
 Requires: nc
-# Needed by libvirt-guests init script.
+# Needed by /usr/libexec/libvirt-guests.sh script.
 Requires: gettext
 # Needed by virt-pki-validate script.
 Requires: gnutls-utils
@@ -1039,6 +1104,18 @@ Requires: cyrus-sasl-md5
 Shared libraries and client binaries needed to access to the
 virtualization capabilities of recent versions of Linux (and other OSes).
 
+%if %{with_lxc}
+%package login-shell
+Summary: Login shell for connecting users to an LXC container
+Group: Development/Libraries
+Requires: %{name}-client = %{version}-%{release}
+
+%description login-shell
+Provides the set-uid virt-login-shell binary that is used to
+connect a user to an LXC container when they login, by switching
+namespaces.
+%endif
+
 %package devel
 Summary: Libraries, includes, etc. to compile with the libvirt library
 Group: Development/Libraries
@@ -1221,6 +1298,10 @@ of recent versions of Linux (and other OSes).
     %define _without_selinux --without-selinux
 %endif
 
+%if ! %{with_apparmor}
+    %define _without_apparmor --without-apparmor
+%endif
+
 %if ! %{with_hal}
     %define _without_hal --without-hal
 %endif
@@ -1273,10 +1354,6 @@ of recent versions of Linux (and other OSes).
     %define init_scripts --with-init_script=redhat
 %endif
 
-%if 0%{?enable_autotools}
- autoreconf -if
-%endif
-
 %if %{with_selinux}
     %if 0%{?fedora} >= 17 || 0%{?rhel} >= 7
         %define with_selinux_mount --with-selinux-mount="/sys/fs/selinux"
@@ -1285,6 +1362,12 @@ of recent versions of Linux (and other OSes).
     %endif
 %endif
 
+# place macros above and build commands below this comment
+
+%if 0%{?enable_autotools}
+ autoreconf -if
+%endif
+
 %configure %{?_without_xen} \
            %{?_without_qemu} \
            %{?_without_openvz} \
@@ -1320,6 +1403,7 @@ of recent versions of Linux (and other OSes).
            %{?_without_netcf} \
            %{?_without_selinux} \
            %{?_with_selinux_mount} \
+           %{?_without_apparmor} \
            %{?_without_hal} \
            %{?_without_udev} \
            %{?_without_yajl} \
@@ -1334,6 +1418,8 @@ of recent versions of Linux (and other OSes).
            %{with_packager_version} \
            --with-qemu-user=%{qemu_user} \
            --with-qemu-group=%{qemu_group} \
+           %{?enable_werror} \
+           --enable-expensive-tests \
            %{init_scripts}
 make %{?_smp_mflags}
 gzip -9 ChangeLog
@@ -1393,12 +1479,6 @@ rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/libvirtd_lxc.aug
 rm -f $RPM_BUILD_ROOT%{_datadir}/augeas/lenses/tests/test_libvirtd_lxc.aug
 %endif
 
-%if ! %{with_python}
-rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/libvirt-python-%{version}
-%else
-rm -rf $RPM_BUILD_ROOT%{_datadir}/doc/libvirt-python-%{version}/examples
-%endif
-
 %if ! %{with_qemu}
 rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/libvirt/qemu.conf
 rm -rf $RPM_BUILD_ROOT%{_sysconfdir}/logrotate.d/libvirtd.qemu
@@ -1441,7 +1521,11 @@ do
   printf '#!/bin/sh\nexit 0\n' > $i
   chmod +x $i
 done
-make check
+if ! make check VIR_TEST_DEBUG=1
+then
+  cat test-suite.log || true
+  exit 1
+fi
 
 %if %{with_libvirtd}
 %pre daemon
@@ -1622,7 +1706,7 @@ fi
 /sbin/ldconfig
 %if %{with_systemd}
     %if %{with_systemd_macros}
-        %systemd_postun_with_restart libvirt-guests.service
+        %systemd_postun libvirt-guests.service
     %endif
 %triggerun client -- libvirt < 0.9.4
 %{_bindir}/systemd-sysv-convert --save libvirt-guests >/dev/null 2>&1 ||:
@@ -1630,9 +1714,8 @@ fi
 # If the package is allowed to autostart:
 /bin/systemctl --no-reload enable libvirt-guests.service >/dev/null 2>&1 ||:
 
-# Run these because the SysV package being removed won't do them
+# Run this because the SysV package being removed won't do them
 /sbin/chkconfig --del libvirt-guests >/dev/null 2>&1 || :
-/bin/systemctl try-restart libvirt-guests.service >/dev/null 2>&1 || :
 %endif
 
 %if %{with_sanlock}
@@ -1648,6 +1731,8 @@ fi
 
 %files docs
 %defattr(-, root, root)
+%doc AUTHORS ChangeLog.gz NEWS README TODO
+
 # Website
 %dir %{_datadir}/doc/libvirt-docs-%{version}
 %dir %{_datadir}/doc/libvirt-docs-%{version}/html
@@ -1664,7 +1749,6 @@ fi
 %files daemon
 %defattr(-, root, root)
 
-%doc AUTHORS ChangeLog.gz NEWS README COPYING.LIB TODO
 %dir %attr(0700, root, root) %{_sysconfdir}/libvirt/
 
     %if %{with_network}
@@ -1687,6 +1771,7 @@ fi
 %config(noreplace) %{_sysconfdir}/sysconfig/libvirtd
 %config(noreplace) %{_sysconfdir}/sysconfig/virtlockd
 %config(noreplace) %{_sysconfdir}/libvirt/libvirtd.conf
+%config(noreplace) %{_sysconfdir}/libvirt/virtlockd.conf
     %if 0%{?fedora} >= 14 || 0%{?rhel} >= 6
 %config(noreplace) %{_prefix}/lib/sysctl.d/libvirtd.conf
     %endif
@@ -1728,6 +1813,8 @@ fi
     %if %{with_qemu}
 %ghost %dir %attr(0700, root, root) %{_localstatedir}/run/libvirt/qemu/
 %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/
+%dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/channel/
+%dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/lib/libvirt/qemu/channel/target/
 %dir %attr(0750, %{qemu_user}, %{qemu_group}) %{_localstatedir}/cache/libvirt/qemu/
     %endif
     %if %{with_lxc}
@@ -1766,12 +1853,15 @@ fi
 
 %{_datadir}/augeas/lenses/libvirtd.aug
 %{_datadir}/augeas/lenses/tests/test_libvirtd.aug
+%{_datadir}/augeas/lenses/virtlockd.aug
+%{_datadir}/augeas/lenses/tests/test_virtlockd.aug
 %{_datadir}/augeas/lenses/libvirt_lockd.aug
 %{_datadir}/augeas/lenses/tests/test_libvirt_lockd.aug
 
     %if %{with_polkit}
         %if 0%{?fedora} >= 12 || 0%{?rhel} >= 6
 %{_datadir}/polkit-1/actions/org.libvirt.unix.policy
+%{_datadir}/polkit-1/actions/org.libvirt.api.policy
         %else
 %{_datadir}/PolicyKit/policy/org.libvirt.unix.policy
         %endif
@@ -1788,10 +1878,16 @@ fi
     %endif
 
 %attr(0755, root, root) %{_libexecdir}/libvirt_iohelper
+
+    %if %{with_apparmor}
+%attr(0755, root, root) %{_libexecdir}/virt-aa-helper
+    %endif
+
 %attr(0755, root, root) %{_sbindir}/libvirtd
 %attr(0755, root, root) %{_sbindir}/virtlockd
 
 %{_mandir}/man8/libvirtd.8*
+%{_mandir}/man8/virtlockd.8*
 
     %if %{with_driver_modules}
         %if %{with_network}
@@ -1868,6 +1964,12 @@ fi
 %defattr(-, root, root)
 %{_libdir}/%{name}/connection-driver/libvirt_driver_libxl.so
         %endif
+
+        %if %{with_vbox}
+%files daemon-driver-vbox
+%defattr(-, root, root)
+%{_libdir}/%{name}/connection-driver/libvirt_driver_vbox.so
+        %endif
     %endif # %{with_driver_modules}
 
     %if %{with_qemu_tcg}
@@ -1892,6 +1994,11 @@ fi
 
     %if %{with_xen} || %{with_libxl}
 %files daemon-xen
+%defattr(-, root, root)
+    %endif
+
+    %if %{with_vbox}
+%files daemon-vbox
 %defattr(-, root, root)
     %endif
 %endif # %{with_libvirtd}
@@ -1913,7 +2020,7 @@ fi
 
 %files client -f %{name}.lang
 %defattr(-, root, root)
-%doc AUTHORS ChangeLog.gz NEWS README COPYING.LIB TODO
+%doc COPYING COPYING.LESSER
 
 %config(noreplace) %{_sysconfdir}/libvirt/libvirt.conf
 %{_mandir}/man1/virsh.1*
@@ -1947,6 +2054,7 @@ fi
 %{_datadir}/libvirt/schemas/nwfilter.rng
 %{_datadir}/libvirt/schemas/secret.rng
 %{_datadir}/libvirt/schemas/storageencryption.rng
+%{_datadir}/libvirt/schemas/storagefilefeatures.rng
 %{_datadir}/libvirt/schemas/storagepool.rng
 %{_datadir}/libvirt/schemas/storagevol.rng
 
@@ -1966,6 +2074,13 @@ fi
 %config(noreplace) %{_sysconfdir}/sasl2/libvirt.conf
 %endif
 
+%if %{with_lxc}
+%files login-shell
+%attr(4755, root, root) %{_bindir}/virt-login-shell
+%config(noreplace) %{_sysconfdir}/libvirt/virt-login-shell.conf
+%{_mandir}/man1/virt-login-shell.1*
+%endif
+
 %files devel
 %defattr(-, root, root)
 
@@ -1993,83 +2108,185 @@ fi
 %files python
 %defattr(-, root, root)
 
-%doc AUTHORS NEWS README COPYING.LIB
 %{_libdir}/python*/site-packages/libvirt.py*
 %{_libdir}/python*/site-packages/libvirt_qemu.py*
 %{_libdir}/python*/site-packages/libvirt_lxc.py*
 %{_libdir}/python*/site-packages/libvirtmod*
-%doc python/tests/*.py
-%doc python/TODO
 %doc examples/python
 %doc examples/domain-events/events-python
 %endif
 
 %changelog
-* Thu Jan 16 2014 Cole Robinson <crobinso@redhat.com> - 1.0.5.9-1
-- Rebased to version 1.0.5.9
+* Sat Feb 07 2015 Cole Robinson <crobinso@redhat.com> - 1.1.3.9-1
+- Rebased to version 1.1.3.9
+- CVE-2015-0236: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save
+  images and snapshots objects (bz #1185769)
+- CVE-2014-8136: local denial of service in qemu/qemu_driver.c (bz #1176179)
+
+* Sat Nov 15 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.8-1
+- Rebased to version 1.1.3.8
+- CVE-2014-3633: out-of-bounds read in blockiotune (bz #1160823)
+- CVE-2014-3657: Potential deadlock in domain_conf (bz #1160824)
+- CVE-2014-7823: information leak with migratable flag (bz #1160822)
+
+* Thu Oct 30 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.6-2
+- Fix USB device descriptions (bz #1138887)
+
+* Mon Sep 08 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.6-1
+- Rebased to version 1.1.3.6
+- Fix memory leak in testDomainGenerateIfnames (bz 1135388)
+- Fix python bindings graphics event enum (bz 1113612)
+- Fix cflags in pkg-config --libs (bz 1134453)
+- Fix pci bus naming for PPC (bz 1119401)
+- Fix LXC user namespacess (bz 1105832)
+- Fix possible 'unknown error' reporting from vol-dumpxml (bz 1097067)
+
+* Mon May 19 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.5-2
+- Fix xen hvm VNC port (bz #1094262)
+- CVE-2014-0179: Unsafe XML parsing (bz #1094792, bz #1088290)
+- Fix failure to start xen instances (rackspace in particular) (bz #1098376)
+
+* Sat May 03 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.5-1
+- Rebased to version 1.1.3.5
+- Fix QXL PCI address conflict (bz #1016775)
+- Fix journald PRIORITY values (bz #1043550)
+- Fix crash with filterref and update-device (bz #1093301)
+- Fix 'cannot find session' error with iscsi (bz #1093791)
+- Fix bond XML issues (bz #1084702)
+
+* Tue Mar 18 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.4-4
+- Fix migration failure occurring with VIR_DOMAIN_XML_MIGRATABLE (bz #1075174)
+
+* Mon Mar 10 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.4-3
+- Escape XML characters in volume XML (bz #1074528)
+
+* Wed Mar 05 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.4-2
+- Fix libvirt-guests.service on host boot (bz #1031696)
+
+* Tue Feb 18 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.4-1
+- Rebased to version 1.1.3.4
+- Fix domain events when ACLs are used (bz #1058839)
+- CVE-2013-6456: unsafe usage of paths under /proc//root (bz #1048628, bz
+  #1048627)
+
+* Sat Feb 01 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.3-5
+- Rebuild again for openwsman soname bump
+
+* Thu Jan 30 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.3-4
+- Fix baselineCPU EXPAND_FEATURES (bz #1049391)
+
+* Mon Jan 27 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.3-3
+- Rebuild for openwsman soname bump
+
+* Mon Jan 20 2014 Richard W.M. Jones <rjones@redhat.com> - 1.1.3.3-2
+- Backport increase default qemu monitor timeout from 3 to 30
+  seconds (bz #987088)
+
+* Thu Jan 16 2014 Cole Robinson <crobinso@redhat.com> - 1.1.3.3-1
+- Rebased to version 1.1.3.3
 - Fix crash in virDBusAddWatch (bz #885445)
 - Cleanup migration ports when migration is cancelled (bz #1018530)
+- Fix virt-login-shell (bz #1054479)
 - CVE-2013-6458 libvirt: qemu: job usage issue in several APIs leading to
   libvirtd crash (bz #1054206, bz #1048631)
 - CVE-2013-6436 libvirt: crash in lxcDomainGetMemoryParameters (bz #1049136,
   bz #1042252)
+- CVE-2014-0028 libvirt: event registration bypasses domain:getattr ACL (bz
+  #1054203, bz #1048637)
 
-* Sat Dec 14 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.8-1
-- Rebased to version 1.0.5.8
-- Fix occasional libvirt-guests.service startup failure
+* Sat Dec 14 2013 Cole Robinson <crobinso@redhat.com> - 1.1.3.2-1
+- Rebased to version 1.1.3.2
+- Fix occasional libvirt-guests.service startup failure (bz #906009)
+- Fix hotplugging USB device to qemu VM (bz #1016511)
 - Fix return code of baselineCPU python API (bz #1033039)
 - Don't reload libvirt-guests when libvirt-client is updated (bz #962225)
 - Fix infinite loop in libvirt_lxc (bz #1005570)
 - Fix vdsm-tool segfault during vdsm startup (bz #1034312)
 
-* Sun Nov 17 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.7-2
+* Sun Nov 17 2013 Cole Robinson <crobinso@redhat.com> - 1.1.3.1-2
 - Fix attaching ISO from cifs filesystem (bz #1012085)
 - Fix crash with libxl driver and vcpu affinity (bz #1013045)
+- Fix managed save 'unexpected migration status' failure (bz #1015636)
+- Fix qemu deprecation warning in logs with tick options (bz #978719)
 
-* Wed Nov 06 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.7-1
-- Rebased to version 1.0.5.7
-- Fix memory limit to not incorrectly invoke OOM killer on qemu (bz #966939)
+* Wed Nov 06 2013 Cole Robinson <crobinso@redhat.com> - 1.1.3.1-1
+- Rebased to version 1.1.3.1
+- CVE-2013-4400: virt-login-shell arbitrary file overwrites vulnerability (bz
+  #1015228, bz #1025685)
+- Fix possible domain disappearance on libvirtd crash (bz #1015246)
+- Fix LXC container startup failure (bz #1014847)
+- Slim down libvirt LXC dependencies (bz #1012198)
 
-* Sun Oct 06 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.6-3
-- Fix virsh vol-resize (bz #1014874)
-- Fix nwfilter crash during firewalld install (bz #1014933)
+* Sun Oct 06 2013 Cole Robinson <crobinso@redhat.com> - 1.1.3-2
 - Allow QoS change with update-device (bz #1014200)
+- Fix nwfilter crash during firewalld install (bz #1014762)
+- Fix crash with nographics (bz #1014088)
 
-* Tue Sep 24 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.6-2
+* Tue Oct  1 2013 Daniel Veillard <veillard@redhat.com> - 1.1.3-1
+- VMware: Initial VMware Fusion support and various improvements
+- libvirt: add new public API virConnectGetCPUModelNames
+- various libxl driver improvements
+- LXC many container driver improvement
+- ARM cpu improvements
+- a lot of bug and leak fixes and various improvements
+
+* Tue Sep 24 2013 Cole Robinson <crobinso@redhat.com> - 1.1.2-4
 - Fix snapshot restore when VM has disabled usb support (bz #1011520)
 
-* Fri Sep 20 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.6-1
-- Rebased to version 1.0.5.6
-- Fix blockjobinfo python API (bz #999077)
+* Mon Sep 23 2013 Cole Robinson <crobinso@redhat.com> - 1.1.2-3
+- Sync with v1.1.2-maint
+- Rebuild for libswan soname bump (bz #1009701)
 - CVE-2013-4311: Insecure polkit usage (bz #1009539, bz #1005332)
 - CVE-2013-4296: Invalid free memory stats (bz #1006173, bz #1009667)
-- CVE-2013-4291: Supplementary groups handling (bz #1006509, bz #1006511)
-- CVE-2013-5651: virBitmapParse out-of-bounds (bz #1006493)
-- Fix virsh change-media with block disk type (bz #951192)
-- Fix changing VNC listen address (bz #1006697)
+- CVE-2013-4297: Invalid free in NBDDeviceAssociate (bz #1006505, bz #1006511)
+- Fix virsh block-commit abort (bz #1010056)
 
-* Thu Aug 01 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.5-1
-- Rebased to version 1.0.5.5
-- Really fix /dev/tty inside a container (bz #982317)
-- Fix possible deadlock from getpwuid_r (bz #964358)
+* Wed Sep 18 2013 Daniel P. Berrange <berrange@redhat.com> - 1.1.2-2
+- Rebuild for soname break in openswman package
 
-* Fri Jul 12 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.4-1
-- Rebased to version 1.0.5.4
-- Fix crash on migration
+* Mon Sep  2 2013 Daniel P. Berrange <berrange@redhat.com> - 1.1.2-1
+- Update to 1.1.2 release
 
-* Thu Jul 11 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.3-1
-- Rebased to version 1.0.5.3
-- Allow /dev/tty in LXC container (bz #982317)
-- Fix cpu hot-add with latest qemu (bz #979260)
-- Fix crash in udev logging (bz #969152)
+* Tue Aug 20 2013 Cole Robinson <crobinso@redhat.com> - 1.1.1-3
+- Fix launching ARM guests on x86 (patches posted upstream, F20 feature)
 
-* Wed Jun 12 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.2-1
-- Rebased to version 1.0.5.2
-- Don't error if disk resize isn't multiple of 512 (bz #951495)
-- Fix racey cgroup error at VM startup (bz #965169)
-- Fix crash in nwfilter at daemon shutdown (bz #967740)
-- Fix 'tray is locked' error on media eject (bz #967914)
-- Error on invalid combo of --tunnelled and --copy-storage (bz #968043)
+* Wed Aug 14 2013 Cole Robinson <crobinso@redhat.com> - 1.1.1-2
+- CVE-2013-4239: xen: memory corruption in legacy driver (bz #996241, bz
+  #996244)
+
+* Tue Jul 30 2013 Daniel P. Berrange <berrange@redhat.com> - 1.1.1-1
+- Update to 1.1.1 release
+
+* Sun Jul 28 2013 Dennis Gilmore <dennis@ausil.us> - 1.1.0-5
+- fix doc path in libvirt-python
+
+* Thu Jul 25 2013 Cole Robinson <crobinso@redhat.com> - 1.1.0-4
+- CVE-2013-4153: Fix double free of returned JSON (bz #986408, bz #986383)
+- CVE-2013-4154: Crash of libvirtd if guest agent not configured (bz #986386,
+  bz #986406)
+
+* Wed Jul 17 2013 Daniel P. Berrange <berrange@redhat.com> - 1.1.0-3
+- Rebuild for change in Xen library ABI/soname
+
+* Thu Jul 11 2013 Cole Robinson <crobinso@redhat.com> - 1.1.0-2
+- CVE-2013-2230 libvirt: multiple registered events crash
+
+* Mon Jul  1 2013 Daniel Veillard <veillard@redhat.com> - 1.1.0-1
+- CVE-2013-2218: Fix crash listing network interfaces with filters
+- Fine grained ACL support for the API
+- Extensible migration APIs
+- various improvements in the Xen driver
+- agent based vCPU hotplug support
+- various bug fixes and improvements including localizations
+
+* Fri Jun 14 2013 Peter Robinson <pbrobinson@fedoraproject.org> 1.0.6-3
+- Enable KVM support on ARM
+
+* Sat Jun 08 2013 Cole Robinson <crobinso@redhat.com> - 1.0.6-2
+- Drop bogus dep on vbox
+
+* Mon Jun  3 2013 Daniel P. Berrange <berrange@redhat.com> - 1.0.6-1
+- Update to 1.0.6 release
 
 * Sun May 19 2013 Cole Robinson <crobinso@redhat.com> - 1.0.5.1-1
 - Rebased to version 1.0.5.1

sources

@@ -1 +1 @@
-afa29733960ea46fd0c1294d87298923  libvirt-1.0.5.9.tar.gz
+e345a41ac10324cbb789387381f07564  libvirt-1.1.3.9.tar.gz