Skip to content
OpenAdvisories
Medium ELSA-2016-2577 3 CVEs

Moderate: libvirt security, bug fix, and enhancement update (Oracle Linux 7)

Published Nov 9, 2016 · Updated Nov 9, 2016

Summary

[2.0.0-10]
- virtlogd: Don't stop or restart along with libvirtd (rhbz#1372576)

[2.0.0-9]
- Add helper for removing transient definition (rhbz#1368774)
- qemu: Remove stale transient def when migration fails (rhbz#1368774)
- qemu: Don't use query-migrate on destination (rhbz#1374613)
- conf: allow hotplugging 'legacy PCI' device to manually addressed PCIe slot (rhbz#1337490)
- conf: Add support for virtio-net.rx_queue_size (rhbz#1366989)
- qemu_capabilities: Introduce virtio-net-*.rx_queue_size (rhbz#1366989)
- qemu: Implement virtio-net rx_queue_size (rhbz#1366989)
- audit: Audit information about shmem devices (rhbz#1218603)
- qemu: monitor: Use a more obvious iterator name (rhbz#1375783)
- qemu: monitor: qemuMonitorGetCPUInfoHotplug: Add iterator 'anycpu' (rhbz#1375783)
- qemu: monitor: Add vcpu state information to monitor data (rhbz#1375783)
- qemu: domain: Don't infer vcpu state (rhbz#1375783)

[2.0.0-8]
- util: storage: Properly set protocol type when parsing gluster json string (rhbz#1372251)
- conf: Add IOThread quota and period scheduler/cputune defs (rhbz#1356937)
- qemu: Add support to get/set IOThread period and quota cgroup values (rhbz#1356937)
- network: new network forward mode 'open' (rhbz#846810)
- virtlogd.socket: Tie lifecycle to libvirtd.service (rhbz#1372576)
- cpu_x86: Fix minimum match custom CPUs on hosts with CMT (rhbz#1365500)
- qemu: cgroup: Extract temporary relaxing of cgroup setting for vcpu hotplug (rhbz#1097930)
- qemu: process: Fix start with unpluggable vcpus with NUMA pinning (rhbz#1097930)

[2.0.0-7]
- qemu: caps: Always assume QEMU_CAPS_SMP_TOPOLOGY (rhbz#1097930)
- conf: Extract code formatting vCPU info (rhbz#1097930)
- conf: Rename virDomainVcpuInfoPtr to virDomainVcpuDefPtr (rhbz#1097930)
- conf: Don't report errors from virDomainDefGetVcpu (rhbz#1097930)
- tests: qemuxml2xml: Format status XML header dynamically (rhbz#1097930)
- conf: convert def->vcpus to a array of pointers (rhbz#1097930)
- conf: Add private data for virDomainVcpuDef (rhbz#1097930)
- qemu: domain: Add vcpu private data structure (rhbz#1097930)
- qemu: domain: Extract formating and parsing of vCPU thread ids (rhbz#1097930)
- qemu: Add cpu ID to the vCPU pid list in the status XML (rhbz#1097930)
- qemu: Store vCPU thread ids in vcpu private data objects (rhbz#1097930)
- Fix logic in qemuDomainObjPrivateXMLParseVcpu (rhbz#1097930)
- qemu: Add qemuProcessSetupPid() and use it in qemuProcessSetupIOThread() (rhbz#1097930)
- qemu: Use qemuProcessSetupPid() in qemuProcessSetupEmulator() (rhbz#1097930)
- qemu: Use qemuProcessSetupPid() in qemuProcessSetupVcpu() (rhbz#1097930)
- qemuBuildCpuCommandLine: Don't leak @buf (rhbz#1097930)
- conf: Make really sure we don't access non-existing vCPUs (rhbz#1097930)
- conf: Make really sure we don't access non-existing vCPUs again (rhbz#1097930)
- qemu: capabilities: Drop unused function virQEMUCapsGetMachineTypes (rhbz#1097930)
- qemu: caps: Sanitize storage of machine type related data (rhbz#1097930)
- qemu: cap: Refactor access to array in virQEMUCapsProbeQMPMachineTypes (rhbz#1097930)
- qemu: monitor: Add monitor API for device_add supporting JSON objects (rhbz#1097930)
- qemu: monitor: Add do-while block to QEMU_CHECK_MONITOR_FULL (rhbz#1097930)
- qemu: Improve error message in virDomainGetVcpus (rhbz#1097930)
- qemu: domain: Rename qemuDomainDetectVcpuPids to qemuDomainRefreshVcpuInfo (rhbz#1097930)
- qemu: monitor: Rename qemuMonitor(JSON|Text)GetCPUInfo (rhbz#1097930)
- qemu: domain: Improve vCPU data checking in qemuDomainRefreshVcpu (rhbz#1097930)
- qemu: domain: Simplify return values of qemuDomainRefreshVcpuInfo (rhbz#1097930)
- internal: Introduce macro for stealing pointers (rhbz#1097930)
- tests: qemucapabilities: Add data for qemu 2.7.0 (rhbz#1097930)
- qemu: setcpus: Report better errors (rhbz#1097930)
- qemu: setvcpus: Extract setting of maximum vcpu count (rhbz#1097930)
- qemu: driver: Extract setting of live vcpu count (rhbz#1097930)
- qemu: driver: Split out regular vcpu hotplug code into a function (rhbz#1097930)
- conf: Provide error on undefined vcpusched entry (rhbz#1097930)
- qemu: monitor: Return structures from qemuMonitorGetCPUInfo (rhbz#1097930)
- qemu: monitor: Return struct from qemuMonitor(Text|Json)QueryCPUs (rhbz#1097930)
- qemu: Add capability for query-hotpluggable-cpus command (rhbz#1097930)
- qemu: Forbid config when topology based cpu count doesn't match the config (rhbz#1097930)
- qemu: capabilities: Extract availability of new cpu hotplug for machine types (rhbz#1097930)
- qemu: monitor: Extract QOM path from query-cpus reply (rhbz#1097930)
- qemu: monitor: Add support for calling query-hotpluggable-cpus (rhbz#1097930)
- qemu: monitor: Add algorithm for combining query-(hotpluggable-)-cpus data (rhbz#1097930)
- tests: Add test infrastructure for qemuMonitorGetCPUInfo (rhbz#1097930)
- tests: cpu-hotplug: Add data for x86 hotplug with 11+ vcpus (rhbz#1097930)
- tests: cpu-hotplug: Add data for ppc64 platform including hotplug (rhbz#1097930)
- tests: cpu-hotplug: Add data for ppc64 out-of-order hotplug (rhbz#1097930)
- tests: cpu-hotplug: Add data for ppc64 without threads enabled (rhbz#1097930)
- qemu: domain: Extract cpu-hotplug related data (rhbz#1097930)
- qemu: domain: Prepare for VCPUs vanishing while libvirt is not running (rhbz#1097930)
- util: Extract and rename qemuDomainDelCgroupForThread to virCgroupDelThread (rhbz#1097930)
- conf: Add XML for individual vCPU hotplug (rhbz#1097930)
- qemu: migration: Prepare for non-contiguous vcpu configurations (rhbz#1097930)
- qemu: command: Add helper to convert vcpu definition to JSON props (rhbz#1097930)
- qemu: process: Copy final vcpu order information into the vcpu definition (rhbz#1097930)
- qemu: command: Add support for sparse vcpu topologies (rhbz#1097930)
- qemu: Use modern vcpu hotplug approach if possible (rhbz#1097930)
- qemu: hotplug: Allow marking unplugged devices by alias (rhbz#1097930)
- qemu: hotplug: Add support for VCPU unplug (rhbz#12

Fixed packages 20

ReleasePackageFixed in
Oracle Linux · 7 libvirt 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-client 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-config-network 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-config-nwfilter 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-interface 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-lxc 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-network 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-nodedev 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-nwfilter 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-qemu 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-secret 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-driver-storage 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-kvm 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-daemon-lxc 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-devel 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-docs 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-lock-sanlock 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-login-shell 0:2.0.0-10.el7
Oracle Linux · 7 libvirt-nss 0:2.0.0-10.el7

Vulnerabilities 3