libvirt-0.10.2-29.5.0.1.AXS4

Libvirt is a C toolkit to interact with the virtualization capabilities of recent versions of Linux (and other OSes). The main package includes the libvirtd server exporting the virtualization support.

Security issues fixed with this release:

• CVE-2013-6458
Multiple race conditions in the (1) virDomainBlockStats, (2) virDomainGetBlockInf, (3) qemuDomainBlockJobImpl, and (4) virDomainGetBlockIoTune functions in libvirt before 1.2.1 do not properly verify that the disk is attached, which allows remote read-only attackers to cause a denial of service (libvirtd crash) via the virDomainDetachDeviceFlags command.

• CVE-2014-1447
Race condition in the virNetServerClientStartKeepAlive function in libvirt before 1.2.1 allows remote attackers to cause a denial of service (libvirtd crash) by closing a connection before a keepalive response is sent.

Fixed bugs:

• Previously, the VLAN tag for a hostdev-based network was not set properly in the hardware device. This has been fixed and VLAN tags set in the network definition are now transferred to devices as they are assigned to guests.

• A previous fix left cases where locks were not cleaned up. This could make libvirtd crash when migrating to a file. This has been fixed.

• Made the libvirt-guests init script LSB compliant so that scripts relying on the service status run as expected.

• Previously, the virDomainDeviceUpdateFlags() function in libvirt allowed to update some configuration on a running domain. But a missing implementation prevented the QoS to be changed when updating the Network Interface Controller. This has been fixed.

• Previously, libvirt sometimes failed to detect that a domain had already been started so when two clients tried to start the same transient domain, more than one QEMU process could run for the same domain. this has been fixed and only one QEMU process will run for the same domain.

• Fixed a regression in event de-registration that triggered the following error message:

Error "libvirt: XML-RPC error : internal error: domain event 0 not registered"

• Previously, the libvirt python bindings did not distinguish between a block job status returning an error and no status available. This led to a python exception. This bug has been fixed and bindings are now more reliable when managing block jobs.

• Fixed a race condition leading to a crash when two threads were working over the same domain. This has been fixed.

• Previously, if not SCSI controller model, or no controller at all were specified, libvirt failed to find a suitable SCSI controller. This has been fixed: libvirt now checks virtio-scsi when searching for suitable model.

• Fixed a race condition between a thread starting a virtual machine with a guest agent configured and a thread that was killing the VM process (or the process crashing).

• Added a check for transient domain to prevent some applications to take an incorrect action when a guest had been migrated but before its removal.

• Changed the default for forwardPlainNames to "Yes".

• libvirt now only prevents the forwarding of DNS requests for unqualified names.

• sanlock daemon's limit of 48 characters on the lock owner name prevented domains with names longer than 48 characters from starting. This has been fixed, libvirt now truncates the domain name if needed when sending it to sanlock.