Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Chuck Short
Revision Date: 2014-04-15 13:35:06 UTC

* New upstream release for the Ubuntu Cloud Archive.
* Add a dependency on the new apparmor to make sure we have the new
  parser around before we attempt to load a profile requiring the new
  stanza support. (LP: #1304167)

Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Serge Hallyn
Revision Date: 2013-04-29 07:38:07 UTC

debian/libvirt-bin.{dirs,install}: install dnsmasq.d-available/libvirt-bin
(LP: #1113821)

Author: Serge Hallyn
Revision Date: 2013-04-29 07:38:07 UTC

debian/libvirt-bin.{dirs,install}: install dnsmasq.d-available/libvirt-bin
(LP: #1113821)

Author: Marc Deslauriers
Revision Date: 2013-01-28 15:20:54 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  uninitialized pointer
  - debian/patches/CVE-2013-0170.patch: remove message from queue before
    freeing in src/rpc/virnetserverclient.c.
  - CVE-2013-0170

Author: Marc Deslauriers
Revision Date: 2013-01-28 15:20:54 UTC

* SECURITY UPDATE: denial of service and possible code execution via
  uninitialized pointer
  - debian/patches/CVE-2013-0170.patch: remove message from queue before
    freeing in src/rpc/virnetserverclient.c.
  - CVE-2013-0170

Author: Serge Hallyn
Revision Date: 2013-04-16 07:00:38 UTC

put libvirt-bin dnsmasq file into /etc/dnsmasq.d-available, and
create a symlink in /etc/dnsmasq.d, to avoid problems when removing
and re-installing libvirt-bin. (LP: #1113821)

Author: Marc Deslauriers
Revision Date: 2013-01-28 16:00:15 UTC

* SECURITY UPDATE: denial of service via invalid RPC call
  - debian/patches/CVE-2012-4423.patch: properly check func in
    src/rpc/virnetserverprogram.c.
  - CVE-2012-4423
* SECURITY UPDATE: denial of service and possible code execution via
  uninitialized pointer
  - debian/patches/CVE-2013-0170.patch: remove message from queue before
    freeing in src/rpc/virnetserverclient.c.
  - CVE-2013-0170

Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Chuck Short
Revision Date: 2013-05-02 10:21:49 UTC

* New upstream release:
  + Dropped patches:
    - debian/patches/fix-virterror-namechange
    - debian/patches/apparmor-use-apparmor-setfdlabel
    - debian/patches/prevent-lxc-shutdown-host.patch
    - debian/patches/apparmor-no-need-to-check-security-model
    - debian/patches/nonblock-fix.patch
   + Refreshed patches:
    - debian/patches/9002-better_default_uri_virsh.patch
    - debian/patches/enable-kvm-spice.patch
    - debian/patches/patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
 * debian/patches/Add-sanitytest.py.patch: Add patch to fix missing sanitytest.py
   when building the testsuite.
 * debian/libvirt-dev.install: dont't ship files for static linking.

Author: Serge Hallyn
Revision Date: 2013-04-18 10:43:26 UTC

debian/patches/nonblock-fix.patch: cherrypicked upstream patch to
not mark qemu migration fd non-blocking. This fixes tcp live
migration. (LP: #1157626)

Author: Serge Hallyn
Revision Date: 2013-02-21 08:38:35 UTC

[ Adam Conrad ]
* libvirt-bin.postinst: also put admin group members into the libvirtd
  group, to support systems installed before precise. (LP: #1124127)
* libvirt-bin.postinst: use getent group instead of grep /etc/group

[ Serge Hallyn ]
* Update README.Debian:
  - we use libvirtd, not libvirt group (LP: #1095140)
  - we add users from sudo, not admin group, to libvirtd.
* Handle two usb devices with same vendor/id (LP: #1082213)
  - ubuntu/qemu-Keep-list-of-USB-devices-attached-to-domains
  - ubuntu/usb-create-functions-to-search-usb-device
  - ubuntu/qemu-call-usb-search-function-for-hostdev

[ Andres Lagar-Cavilla ]
* Add RESUME event listener to qemu monitor (LP: #1097824)
  - ubuntu/handle_resume.patch

[ Kirill Zaborsky ]
* Add proper handling for EINTR signal (LP: #1092826)
  - ubuntu/fix-poll.patch

Author: Kirill Zaborsky
Revision Date: 2012-12-22 19:02:04 UTC

adds proper handling for EINTR signal (LP: #1092826)

Author: Sebastien Bacher
Revision Date: 2012-11-28 15:06:10 UTC

git_set_xdg_env.patch: correctly define the xdg environment,
otherwise the clients can fail to locate the service (lp: #1074418)

Author: Serge Hallyn
Revision Date: 2012-12-11 20:00:26 UTC

fix bad cut-pastes

Author: Serge Hallyn
Revision Date: 2012-11-27 22:12:13 UTC

Better comments in changelog and postinst.

Author: Stefan Bader
Revision Date: 2012-10-05 11:35:43 UTC

* Refresh fix-ubuntu-xen-qemu-dm-path.patch to only use executable
  names and let the toolchain find out the right paths (LP: #914788).
  Thanks George Dunlap.
* Refresh and re-activate xen_hypervisor-treat-missing-privcmd-file-
  as-temporary.patch (LP: #922486)

Author: Stefan Bader
Revision Date: 2012-10-05 09:45:17 UTC

* Refresh fix-ubuntu-xen-qemu-dm-path.patch to only use executable
  names and let the toolchain find out the right paths (LP: #914788).
  Thanks George Dunlap.
* Refresh and re-activate xen_hypervisor-treat-missing-privcmd-file-
  as-temporary.patch (LP: #922486)

Author: Serge Hallyn
Revision Date: 2012-06-11 21:42:51 UTC

debian/libvirt-bin.install, debian/rules: name the apport file
source_libvirt.py, not source_libvirt-bin.py. (LP: #1007405)

Author: Serge Hallyn
Revision Date: 2012-06-11 21:39:17 UTC

debian/libvirt-bin.install, debian/rules: name the apport file
source_libvirt.py, not source_libvirt-bin.py. (LP: #1007405)

Author: Serge Hallyn
Revision Date: 2012-06-11 21:42:51 UTC

debian/libvirt-bin.install, debian/rules: name the apport file
source_libvirt.py, not source_libvirt-bin.py. (LP: #1007405)

Author: Serge Hallyn
Revision Date: 2012-06-11 21:39:17 UTC

debian/libvirt-bin.install, debian/rules: name the apport file
source_libvirt.py, not source_libvirt-bin.py. (LP: #1007405)

Author: Serge Hallyn
Revision Date: 2012-04-16 11:30:47 UTC

debian/apparmor/usr.lib.libvirt.virt-aa-helper: add /**.qed r so qed
drives in non-standard locations can be used. (LP: #981571)

Author: Serge Hallyn
Revision Date: 2011-12-14 09:37:48 UTC

add parted to build-depends (LP: #697046)

Author: Serge Hallyn
Revision Date: 2011-11-01 18:00:51 UTC

lxc_controller: use our own unlocpt+grantpt rather than glibc's, which
can't handle opening a pty in a devpts not mounted at /dev/pts.
(LP: #863629)

Author: Serge Hallyn
Revision Date: 2011-11-15 08:06:57 UTC

New version of debian/patches/lxc-use-own-ptyfns.patch. Previous version
failed to build.

Author: Jamie Strandboge
Revision Date: 2011-07-26 07:14:53 UTC

* SECURITY UPDATE: integer overflow in virDomainGetVcpus()
  - debian/patches/9031-CVE-2011-2511.patch: use INT_MULTIPLY_OVERFLOW() to
    verify maxinfo * maplen < REMOTE_CPUMAPS_MAX
  - CVE-2011-2511

Author: Serge Hallyn
Revision Date: 2011-11-15 08:06:57 UTC

New version of debian/patches/lxc-use-own-ptyfns.patch. Previous version
failed to build.

Author: Serge Hallyn
Revision Date: 2012-02-24 19:25:49 UTC

tests/networkxml2argvdata/*.argv: update expected dnsmasq command lines
to include '-u libvirt-dnsmasq'.

Author: Serge Hallyn
Revision Date: 2011-10-03 14:39:05 UTC

Pull patches from upstream which prevent a race between lxc driver and
controller while a container is started, easily exposed by nova.
(LP: #842845)

Author: Serge Hallyn
Revision Date: 2011-09-15 14:12:20 UTC

Handle the case where lvm prefixes output with the command name.
(LP: #836329)

Author: Serge Hallyn
Revision Date: 2011-08-03 23:12:57 UTC

libvirt-bin.upstart: add a pre-stop script to shut down running VMs
before the host shuts down. (LP: #350936)

Author: Serge Hallyn
Revision Date: 2011-08-03 23:10:35 UTC

libvirt-bin.upstart: add a pre-stop script to shut down running VMs
before the host shuts down. (LP: #350936)

Author: Serge Hallyn
Revision Date: 2011-08-03 22:36:57 UTC

libvirt-bin.upstart: add a pre-stop script to shut down running VMs
before the host shuts down. (LP: #350936)

Author: Serge Hallyn
Revision Date: 2011-08-03 02:03:05 UTC

libvirt-bin.upstart: add a pre-stop script to shut down running VMs
before the host shuts down. (LP: #350936)

Author: Jamie Strandboge
Revision Date: 2011-07-26 07:13:43 UTC

* SECURITY UPDATE: integer overflow in virDomainGetVcpus()
  - debian/patches/9031-CVE-2011-2511.patch: use INT_MULTIPLY_OVERFLOW() to
    verify maxinfo * maplen < REMOTE_CPUMAPS_MAX
  - CVE-2011-2511

Author: Jamie Strandboge
Revision Date: 2011-07-26 07:12:28 UTC

* SECURITY UPDATE: integer overflow in virDomainGetVcpus()
  - debian/patches/9909-CVE-2011-2511.patch: use INT_MULTIPLY_OVERFLOW() to
    verify maxinfo * maplen < REMOTE_CPUMAPS_MAX
  - CVE-2011-2511

Author: Michael Gendelman
Revision Date: 2011-07-06 05:24:27 UTC

debian/patches/9028-fix-noipv6-fail.patch: Fix failure to start VM on a kernel

Author: Serge Hallyn
Revision Date: 2011-04-14 17:10:08 UTC

debian/patches/9029-lp750565.patch
Fix initialization error of controller in QEmu SCSI hotplug.
(LP: #750565)

Author: Serge Hallyn
Revision Date: 2011-04-14 16:03:38 UTC

git pull and remote update

Author: Serge Hallyn
Revision Date: 2011-04-12 17:50:26 UTC

* debian/patches/9028-allow-braddtap-to-create-down-tap-device.patch and
  debian/patches/9029-give-each-vbr-a-fixed-mac.patch: tie a tap device
  to each virtual bridge to tie it to a low mac address. (LP: #673705)
* debian/libvirt-bin.postinst: update any existing network configs which
  don't already have a macaddr defined, if we are updating from a libvirt
  version prior to 0.8.8-1ubuntu6.

Author: Serge Hallyn
Revision Date: 2011-04-12 16:30:28 UTC

debian/patches/9028-allow-braddtap-to-create-down-tap-device.patch and
debian/patches/9029-give-each-vbr-a-fixed-mac.patch: tie a tap device
to each virtual bridge to tie it to a low mac address. (LP: #673705)

Author: Chuck Short
Revision Date: 2011-04-12 01:42:59 UTC

debian/patches/allows-lxc-containers-with-lxcguest.patch:
Pass "libvirt" to lxc containers, so that libvirt can
work with lxcguest. (LP: #757752)

Author: Serge Hallyn
Revision Date: 2011-04-11 19:15:57 UTC

debian/patches/allows-lxc-containers-with-lxcguest.patch:
Pass "libvirt" to lxc containers, so that libvirt can
work with lxcguest. (LP: #757752)

Author: Chuck Short
Revision Date: 2011-04-11 13:44:03 UTC

debian/patches/allows-lxc-containers-with-lxcguest.patch:
Pass "libvirt" to lxc containers, so that libvirt can
work with lxcguest. (LP: #757752)

Author: Serge Hallyn
Revision Date: 2011-04-05 20:23:56 UTC

debian/patches/9028-change-locking-for-udev.patch: work around thread
safety issues with libpciaccess0 (LP: #726099)

Author: Serge Hallyn
Revision Date: 2011-04-05 19:52:30 UTC

add debian/patches/fix-tap-interfaces-mac-addrs.patch to prevent
network freezes due to badly chosen tap interface macaddrs.
(LP: #584048)

Author: Serge Hallyn
Revision Date: 2011-04-05 16:48:49 UTC

debian/patches/9029-lp750565.patch
Fix initialization error of controller in QEmu SCSI hotplug.
(LP: #750565)

Author: Serge Hallyn
Revision Date: 2011-04-04 20:54:59 UTC

debian/patches/9905-handle-no-ip.patch: Additional patch cherrypick
to handle no ip address in the network configuration. (LP: ##748834)

Author: Jamie Strandboge
Revision Date: 2011-03-15 16:23:44 UTC

* SECURITY UPDATE: debian/patches/9902-CVE-2011-1146.patch: Add missing
  checks for read only connections.
  - CVE-2011-1146

Author: Jamie Strandboge
Revision Date: 2011-03-15 16:23:44 UTC

* SECURITY UPDATE: debian/patches/9902-CVE-2011-1146.patch: Add missing
  checks for read only connections.
  - CVE-2011-1146

Author: Serge Hallyn
Revision Date: 2011-02-22 20:37:30 UTC

syntax error

Author: Serge Hallyn
Revision Date: 2011-02-19 03:15:41 UTC

fix a typo in original patch

Author: Serge Hallyn
Revision Date: 2011-02-04 15:21:44 UTC

Revert an upstream patch because it requires kernel and iptables
patches not in maverick.

Author: Serge Hallyn
Revision Date: 2011-02-04 14:52:34 UTC

Allocate lease file per dnsmasq process. (LP: #713071)

Author: Serge Hallyn
Revision Date: 2011-02-02 23:50:10 UTC

Add patch (not needed upstream) to only remove tftp rule if it was
added (LP: #668043)

Author: Serge Hallyn
Revision Date: 2011-01-31 13:52:44 UTC

Address feedback from Clint.

Have upstart job source /etc/default/libvirt-bin. This is only a
temporary fix until upstart provides proper default override support
through /etc/init/libvirt-bin.override (or any other mechanism).
(LP: #708172)

Author: Jamie Strandboge
Revision Date: 2010-11-16 20:59:58 UTC

[ Serge Hallyn ]
* Apply patch: 'build: cleanup declaration of xen tests.' to fix
  the FTBFS for ppc and arm (which are configured without xen).
[ Jamie Strandboge ]
* debian/patches/9023-vah-require-uuid.patch: require <uuid> in domain
  XML (LP: #672943)
* debian/libvirt-bin.cron.daily: use shell globbing to enumerate xml files.
  Based on patch thanks to Henryk Plotz (LP: #655176)

Author: Serge Hallyn
Revision Date: 2010-11-12 19:55:43 UTC

Apply patch: 'build: cleanup declaration of xen tests.' to fix
the FTBFS for ppc and arm (which are configured without xen).

Author: Jamie Strandboge
Revision Date: 2010-11-11 17:44:05 UTC

0.8.5 merge from Serge Hallyn

* New upstream release.
* Removed a slew of patches which have been
  applied upstream since 0.8.3.
  - 9012-apparmor-extra-tests.patch
  - 9013-apparmor-chardev.patch
  - 9015-Add-ubd-to-the-list-of-disk-prefixes.patch
  - 9016-Close-fd-s-of-persistent-tap-devices.patch
  - 9017-Make-sure-all-command-line-arguments-get-passed-to-U.patch
  - 9018-Make-umlConnectTapDevice-ask-brAddTap-for-a-persiste.patch
  - 9019-uml-fix-logic-bug-in-checking-reply-length.patch
  - 9021-Allow-chardev-of-type-file-for-UML-domains.patch
  - 9022-Rename-qemudShrinkDisks-to-virDomainDiskRemove-and-m.patch
  - 9023-Support-virDomainAttachDevice-and-virDomainDetachDev.patch
  - 9024-Explicitly-pass-uml_dir-argument-to-user-mode-linux.patch
  - 9025-Add-nwfilter-support-to-UML-driver.patch
  - 9026-Rebuild-network-filter-for-UML-guests-on-updates.patch
  - 9027-Make-newfilter-xml-transformations-endian-safe.patch
  - 9028-lp628055.patch
* Updated 9002-better_default_uri_virsh.patch to use vshStrdup,
  as now required in that file. (use of strdup now causes compilation
  to fail)
* Removed 9008-run-as-root-by-default.patch, which has not been
  applied for awhile now, with no ill effects.
* Simple refresh of:
  - 0001-remove-RHism.diff.patch
  - 0003-allow-libvirt-group-to-access-the-socket.patch
  - 0004-fix-Debian-specific-path-to-hvm-loader.patch
  - 0006-patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
  - 9000-delayed_iff_up_bridge.patch
  - 9001-dont_clobber_existing_bridges.patch
  - 9003-better-default-arch.patch
  - 9004-libvirtd-group-name.patch
  - 9005-increase-unix-socket-timeout.patch
  - 9006-default-config-test-case.patch
  - 9009-autodetect-nc-params.patch
  - 9010-dont-disable-ipv6.patch
  - 9011-move-ebtables-script.patch
  - 9014-skip-nodeinfotest.patch
  - 9020-lp545795.patch
* Create a patch to include stdint.h so lxc_container.h, which
  #includes linux/fs.h, doesn't trip up on undefined uint64_t.

Author: Serge Hallyn
Revision Date: 2010-11-05 21:54:33 UTC

* New upstream release: 0.8.5

(Addressed feedback from jdstrand on the previous merge request,
in lp:~serge-hallyn/ubuntu/natty/libvirt-0.8.5)

* Removed a slew of patches which have been
  applied upstream since 0.8.3.
  - 9012-apparmor-extra-tests.patch
  - 9013-apparmor-chardev.patch
  - 9015-Add-ubd-to-the-list-of-disk-prefixes.patch
  - 9016-Close-fd-s-of-persistent-tap-devices.patch
  - 9017-Make-sure-all-command-line-arguments-get-passed-to-U.patch
  - 9018-Make-umlConnectTapDevice-ask-brAddTap-for-a-persiste.patch
  - 9019-uml-fix-logic-bug-in-checking-reply-length.patch
  - 9021-Allow-chardev-of-type-file-for-UML-domains.patch
  - 9022-Rename-qemudShrinkDisks-to-virDomainDiskRemove-and-m.patch
  - 9023-Support-virDomainAttachDevice-and-virDomainDetachDev.patch
  - 9024-Explicitly-pass-uml_dir-argument-to-user-mode-linux.patch
  - 9025-Add-nwfilter-support-to-UML-driver.patch
  - 9026-Rebuild-network-filter-for-UML-guests-on-updates.patch
  - 9027-Make-newfilter-xml-transformations-endian-safe.patch
  - 9028-lp628055.patch
* Updated 9002-better_default_uri_virsh.patch to use vshStrdup,
  as now required in that file. (use of strdup now causes compilation
  to fail)
* Removed 9008-run-as-root-by-default.patch, which has not been
  applied for awhile now, with no ill effects.
* Simple refresh of:
  - 0001-remove-RHism.diff.patch
  - 0003-allow-libvirt-group-to-access-the-socket.patch
  - 0004-fix-Debian-specific-path-to-hvm-loader.patch
  - 0006-patch-qemuMonitorTextGetMigrationStatus-to-intercept.patch
  - 9000-delayed_iff_up_bridge.patch
  - 9001-dont_clobber_existing_bridges.patch
  - 9003-better-default-arch.patch
  - 9004-libvirtd-group-name.patch
  - 9005-increase-unix-socket-timeout.patch
  - 9006-default-config-test-case.patch
  - 9009-autodetect-nc-params.patch
  - 9010-dont-disable-ipv6.patch
  - 9011-move-ebtables-script.patch
  - 9014-skip-nodeinfotest.patch
  - 9020-lp545795.patch
* Create a patch to include stdint.h so lxc_container.h, which
  #includes linux/fs.h, doesn't trip up on undefined uint64_t.

Author: Serge Hallyn
Revision Date: 2010-11-05 21:48:22 UTC

Add list of simply refreshed patches to debian/changelog

Author: Jamie Strandboge
Revision Date: 2010-09-01 16:03:25 UTC

* SECURITY UPDATE: fix to disallow privileged users in guests from accessing
  privileged resources, such as NFS
  - debian/patches/9901-CVE-2010-2242.patch: set iptables masqerading rules
    to use ports 1024-65535
  - CVE-2010-2242

Author: Soren Hansen
Revision Date: 2010-10-07 09:02:50 UTC

releasing version 0.8.3-1ubuntu14.1~ppamaverick1

Author: Soren Hansen
Revision Date: 2010-10-07 08:41:28 UTC

releasing version 0.8.3-1ubuntu14~ppalucid2

Author: Soren Hansen
Revision Date: 2010-09-24 21:39:14 UTC

releasing version 0.8.3-1ubuntu14

Author: Jamie Strandboge
Revision Date: 2010-09-22 21:27:58 UTC

releasing version 0.8.3-1ubuntu13

Author: Soren Hansen
Revision Date: 2010-09-15 20:12:31 UTC

releasing version 0.8.3-1ubuntu11

Author: Jamie Strandboge
Revision Date: 2010-09-14 18:47:22 UTC

releasing version 0.8.3-1ubuntu10

Author: Soren Hansen
Revision Date: 2010-09-14 07:42:33 UTC

Add patch to make nwfilter updates happen immediately for UML guests,
too. (It already does so for the other drivers that support nwfilter).

Author: Soren Hansen
Revision Date: 2010-08-31 14:05:46 UTC

releasing version 0.8.3-1ubuntu9

Author: Jamie Strandboge
Revision Date: 2010-09-01 16:47:58 UTC

* SECURITY UPDATE: fix to disallow privileged users in guests from accessing
  privileged resources, such as NFS
  - debian/patches/CVE-2010-2242.patch: set iptables masqerading rules to
    use ports 1024-65535
  - CVE-2010-2242

Author: Jamie Strandboge
Revision Date: 2010-09-01 16:47:58 UTC

* SECURITY UPDATE: fix to disallow privileged users in guests from accessing
  privileged resources, such as NFS
  - debian/patches/CVE-2010-2242.patch: set iptables masqerading rules to
    use ports 1024-65535
  - CVE-2010-2242

Author: Jamie Strandboge
Revision Date: 2010-09-01 16:03:25 UTC

* SECURITY UPDATE: fix to disallow privileged users in guests from accessing
  privileged resources, such as NFS
  - debian/patches/9901-CVE-2010-2242.patch: set iptables masqerading rules
    to use ports 1024-65535
  - CVE-2010-2242

Author: Dustin Kirkland 
Revision Date: 2010-04-21 15:59:49 UTC

* debian/libvirt-bin.postinst: ensure that the convenience feature
  of adding users to the libvirtd group does cause package setup
  failure, LP: #565380
* debian/patches/9023-virt-pki-validate_fixes.patch: fix a bashism,
  a missing autoconf substitution, and an insufficient sed call, in
  order to get this working on Ubuntu, LP: #562266; patch submitted
  upstream

Author: Jamie Strandboge
Revision Date: 2009-11-09 22:12:32 UTC

* debian/patches/9093-lp460271.patch: require absolute path for dynamic
  added files (LP: #460271)
* debian/patches/9094-lp453335.patch: suppress confusing and misleading
  apparmor denied message when kvm/qemu tries to open a libvirt specified
  readonly file (such as a cdrom) with write permissions. libvirt uses the
  readonly attribute for the security driver only, and has no way of telling
  kvm/qemu that the device should be opened readonly. (LP: #453335)
* debian/apparmor/usr.sbin.libvirtd: allow 'inet dgram' for migration to
  work (LP: #461528)
* debian/apparmor/usr.sbin.libvirtd: properly support qemu+tcp:// by
  allowing 'inet6 stream' and 'inet6 dgram' (LP: #462000)

Author: J. Bruce Fields
Revision Date: 2008-10-05 20:13:50 UTC

* masquerade-only-outbound-traffic.patch:
  - Ensure masquerading rule only catches traffic leaving the virtual
    network, and not traffic inside it. (Backported from commit
    d175caad25a4e80800d5e7e7d8c9d920a88b78e1 of
    git://git.et.redhat.com/libvirt.git.) (LP: #227837).

Author: Jamie Strandboge
Revision Date: 2009-10-23 08:52:33 UTC

* allow save/restore to work in $HOME. This is a workaround until upstream
  https://bugzilla.redhat.com/show_bug.cgi?id=529363 is fixed. (LP: #457716)
* debian/libvirt-bin.cron.daily: don't comlain if no domain XML definitions
  or domain AppArmor profiles. Based on work by Loïc Minier. (LP: #457607)

Author: Dustin Kirkland 
Revision Date: 2009-09-14 15:46:11 UTC

* Backport from Jaunty
* debian/control: drop open-iscsi dep, adjust libparted dep
* debian/rules: configure without iscsi

Author: Dustin Kirkland 
Revision Date: 2009-09-07 14:56:15 UTC

Automated backport upload; no source changes.

Author: Dustin Kirkland 
Revision Date: 2009-07-16 18:45:28 UTC

debian/patches/event-handling-fix-rh499698-lp362288.patch: cherry pick
from upstream; fixes critical, destructive bug whereby calling
'virsh destroy foo' kills foo, plus another vm; LP: #362288

Author: Jamie Strandboge
Revision Date: 2008-10-22 10:13:12 UTC

debian/patches/0008-lp287533.patch: allow 16 VCPUs when using kvm
(LP: #287533)

Author: Soren Hansen
Revision Date: 2008-04-16 10:35:03 UTC

* disk-bus.patch:
  - Add bus attribute to disk/target tags. Allows you to create virtio disks.
    (LP: #213991)
* nic-model.patch:
  - Add <model type='foo'/> support to network interfaces. (LP: #213991)
* graceful_shutdown.patch:
  - Rather than pulling the power from virtual machines, send an ACPI power
    button event and let the OS handle it.
* better_default_uri_virsh.patch:
  - Updated patch: Output connection URI to stderr instead of stdout to avoid
    breaking scripts that use virsh.

Author: Soren Hansen
Revision Date: 2009-04-16 20:48:49 UTC

Fix logic error when applying %d bridge name rewriting. (LP: #350780)

Author: Jamie Strandboge
Revision Date: 2008-12-16 10:36:44 UTC

* SECURITY UPDATE: fix privilege escalation due to missing read only
  connection checks
  - debian/patches/0009-CVE-2008-5086.patch: update functions in
    src/libvirt.c to check against VIR_CONNECT_RO and return with operation
    denied error
  - CVE-2008-5086

Author: Jamie Strandboge
Revision Date: 2008-12-16 10:36:44 UTC

* SECURITY UPDATE: fix privilege escalation due to missing read only
  connection checks
  - debian/patches/0009-CVE-2008-5086.patch: update functions in
    src/libvirt.c to check against VIR_CONNECT_RO and return with operation
    denied error
  - CVE-2008-5086

Author: Jamie Strandboge
Revision Date: 2008-12-16 11:06:27 UTC

* SECURITY UPDATE: fix privilege escalation due to missing read only
  connection checks
  - update functions in src/libvirt.c to check against VIR_CONNECT_RO and
    return with operation denied error
  - CVE-2008-5086

Author: Jamie Strandboge
Revision Date: 2008-12-16 11:06:27 UTC

* SECURITY UPDATE: fix privilege escalation due to missing read only
  connection checks
  - update functions in src/libvirt.c to check against VIR_CONNECT_RO and
    return with operation denied error
  - CVE-2008-5086

Author: Fabio Massimo Di Nitto
Revision Date: 2007-07-16 12:10:41 UTC

Add lingnutls-dev Build-Dep.

Author: Matthias Klose
Revision Date: 2007-01-12 13:21:55 UTC

Rebuild for python2.5 as the default python version.