ubuntu/+source/libvirt:debian/buster

Last commit made on 2020-02-08
Get this branch:
git clone -b debian/buster https://git.launchpad.net/ubuntu/+source/libvirt
Members of Ubuntu Server Dev import team can upload to this branch. Log in for directions.

Branch merges

Branch information

Name:
debian/buster
Repository:
lp:ubuntu/+source/libvirt

Recent commits

4721657... by Guido Günther on 2019-12-05

Import patches-unapplied version 5.0.0-4+deb10u1 to debian/buster

Imported using git-ubuntu import.

Changelog parent: 064d6048481b8b8af9202787529ba68b66f272ac

New changelog entries:
  [ Tobias Wolter ]
  * [711f612] apparmor: Allow one to run pygrub
  [ Guido Günther ]
  * [3bcbf56] Don't render osxsave, ospke into QEMU comman line.
    This helps newer QEMU with some configs generated by virt-install.
    Thanks to Michal Arbet for digging out the patches (Closes: #944248)

064d604... by Guido Günther on 2019-06-17

Import patches-unapplied version 5.0.0-4 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 6ca3ade124ceebde6ceb9c3c193995fc54da208d

New changelog entries:
  * [0fdc2af] Fix multiple CVEs related to privilege escalations on R/O
    connections.
    - CVE-2019-10161:
      CVE-2019-10161-api-disallow-virDomainSaveImageGetXMLDesc-.patch
    - CVE-2019-10166:
      api-disallow-virDomainManagedSaveDefineXML-on-read-only-c.patch
    - CVE-2019-10167:
      api-disallow-virConnectGetDomainCapabilities-on-read-only.patch
    - CVE-2019-10168:
      api-disallow-virConnect-HypervisorCPU-on-read-only-connec.patch
  * Include /etc/pki/qemu in apparmor (Closes: #930100)

6ca3ade... by Guido Günther on 2019-05-22

Import patches-unapplied version 5.0.0-3 to debian/sid

Imported using git-ubuntu import.

Changelog parent: d76da061c7c1f485612dcb82b6671b34605ce807

New changelog entries:
  [ Guido Günther ]
  * [6bc6e60] CVE-2019-10132: Fix vir{lock,log}d socket access.
    All patches were cherry-picked from upstream's v5.0-maint branch.
    (Closes: #929334)
  * [09016dd] d/patches: Move security fixes into security/
  [ Joachim Falk ]
  * [5d96699] lxc: Fix killing of lxc containers if cgroup backend v2 is
    unavailable.
    (Closes: #926999)
  * [ea7a491] lxc: Fix container shutdown and host reboot
    (Closes: #927310, #897394)

d76da06... by Salvatore Bonaccorso on 2019-05-19

Import patches-unapplied version 5.0.0-2.1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: ee6a9f48749a043a182e05516948a8392b391ffe

New changelog entries:
  * Non-maintainer upload.
  [ Guido Günther ]
  * [3a9c65c] d/control: Fix typo
  * [b9935e5] d/control: Drop Debian revision on iptables build-dep.
    Any version greater than 1.8.1 will do.
  [ Salvatore Bonaccorso ]
  * [b811e38] cpu_map: Define md-clear CPUID bit (CVE-2018-12126,
    CVE-2018-12127, CVE-2018-12130, CVE-2019-11091)
    (Closes: #929154)

ee6a9f4... by Guido Günther on 2019-04-07

Import patches-unapplied version 5.0.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: c5844716a3e6ee945a71994e8cda76461a9c38d5

New changelog entries:
  [ Laurent Bigonville ]
  * [76e2cb7] Don't recommend ebtables. It's part of the iptables package now.
    (Closes: #918472)
  [ intrigeri ]
  * [d7a7218] Fix virtio-gpu + virgl support by cherry-picking upstream
    commits virt-manager in current sid still creates new VMs with QXL
    graphics by default, so this bug only affects users who opt in for
    virtio-gpu 3D acceleration. Still, the option for virtio-gpu + 3D
    acceleration is offered in the virt-manager GUI, so having it broken by
    default is an important problem.
    (Closes: #916587)
  [ Christian Ehrhardt ]
  * [3997186] d/libvirt-daemon-system.maintscript: remove obsolete conffile
    /etc/logrotate.d/libvirtd.uml became obsolete since UML was dropped in
    libvirt 5.0 (Closes: #920574)
  * [c64d020] d/libvirt-daemon-system.libvirtd.default: clarify libvirtd_opts
    example (Closes: #921713)
  [ Guido Günther ]
  * [790365e] CVE-2019-3886: Don't allow unprivileged users to use the guest
    agent. Apply upstream patches
    remote-enforce-ACL-write-permission-for-getting-guest-tim.patch
    api-disallow-virDomainGetHostname-for-read-only-connectio.patch
    (Closes: #926418)

c584471... by Guido Günther on 2019-01-16

Import patches-unapplied version 5.0.0-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 28df4f650230d6e675d5671f3dbed53368f4424c

New changelog entries:
  * [7346f30] New upstream version 5.0.0
  * [1c46a4c] Drop sheepdog support (Closes: #908071)
  * [b88175f] Bump symbol versions
  * [c13a8da] Rediff patches

28df4f6... by Guido Günther on 2018-12-18

Import patches-unapplied version 4.10.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 523e2beeeedb3e0bc9965ba747bd4221a7102b2a

New changelog entries:
  [ Marcin Juszkiewicz ]
  * [d143d3c] update Vcs-git tags to point to salsa.debian.org
  * [96995c1] Fix versions in *.NEWS files
  * [8e8286d] Don't mark bash completion as executable
  * [72f8ed3] Use multiarch layout.
    Based on the on what Ubuntu does (Closes: #813062)
  * [9b52c21] Use dpkg-buildflags on configure
    to e.g. get the proper hardening flags.
  [ Andrea Bolognani ]
  * [684bb89] Move data files from libvirt-daemon to libvirt0.
    These files are used internally by the library, so they
    should be shipped along with it rather than with the daemon.
    This is consistent with the upstream libvirt.spec file.
    The pattern is partially expanded in the libvirt0.install
    file to avoid having to remove a specific subset of data
    files later on as part of debian/rules.
  [ Guido Günther ]
  * [a6cbf92] cpu_map is now a directory.
    It used to be a single XML file

523e2be... by Guido Günther on 2018-12-13

Import patches-unapplied version 4.10.0-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 7b40f3c60eb639ab7154e5255c34026301f497e4

New changelog entries:
  * [0cde44d] Remove bridge-utils from recommends. We don't use brctl since
    ages. Thanks to Andreas Henriksson
  * [3c22e06] Drop debian/remove-RHism.diff.patch.
    Debian has /usr/bin/service since quiet some time now.
    Thanks to Andrea Bolognani
  * [54a5cdb] New upstream version 4.10.0
  * [87f075c] Rediff patches
  * [f798585] Bump symbol versions
  * [3bfd881] Depend on sensible-utils

7b40f3c... by Guido Günther on 2018-09-09

Import patches-unapplied version 4.7.0-1 to debian/sid

Imported using git-ubuntu import.

Changelog parent: fde7bad4af22384550d79c2aad35921e85605dc9

New changelog entries:
  * [8ff38ac] New upstream version 4.7.0
    (Closes: #908341)
  * [afdd147] Bump symbol versions
  * [41fa8f5] Rediff patches.
    Drop all jansson related patches. Fixed ustream.

fde7bad... by Guido Günther on 2018-08-14

Import patches-unapplied version 4.6.0-2 to debian/sid

Imported using git-ubuntu import.

Changelog parent: 5095ee419938bece57eb866491201e228a85fe75

New changelog entries:
  * [c33faee] Drop dwarves dependency.
    Unmaintained and only used in the test suite. (Closes: #905700)
  * [43da5ad] Don't use jansson for JSON encoding.
    It has borken integer parsing. This adds new patches:
        Revert-m4-Introduce-STABLE_ORDERING_JANSSON.patch
        Revert-Remove-virJSONValueNewStringLen.patch
        Revert-build-undef-WITH_JANSSON-for-SETUID_RPC_CLIENT.patch
        Revert-tests-qemucapsprobe-Fix-output-after-switching-to-.patch
        Revert-build-require-Jansson-if-QEMU-driver-is-enabled.patch
        Revert-util-jsoncompat-Stub-out-virJSONInitialize-when-co.patch
        Revert-Switch-from-yajl-to-Jansson.patch
        Revert-remote-daemon-Make-sure-that-JSON-symbols-are-prop.patch
        Revert-build-remove-references-to-WITH_YAJL-for-SETUID_RP.patch
        Revert-build-add-with-jansson.patch
        Revert-Remove-functions-using-yajl.patch
        Revert-build-switch-with-qemu-default-from-yes-to-check.patch
        Revert-tests-also-skip-qemuagenttest-with-old-jansson.patch
        Revert-util-avoid-symbol-clash-between-json-libraries.patch
    (Closes: #906116)