[ubuntu/saucy-security] libvirt 1.1.1-0ubuntu8.11 (Accepted)

[Marc Deslauriers]

libvirt (1.1.1-0ubuntu8.11) saucy-security; urgency=medium

  * SECURITY UPDATE: LXC driver unsafe path use under /proc/$PID/root
    - debian/patches/CVE-2013-6456.patch: refactor code in
      src/lxc/lxc_driver.c, src/util/virinitctl.c, src/util/virinitctl.h,
      added some new helpers to src/util/{virprocess.*,virfile.*,
      virstoragefile.c}, src/libvirt_private.syms, src/conf/domain_conf.c.
    - CVE-2013-6456
  * SECURITY UPDATE: denial of service via SPICE migration
    - debian/patches/CVE-2013-7336.patch: enter monitor asynchronously in
      src/qemu/qemu_migration.c.
    - CVE-2013-7336

libvirt (1.1.1-0ubuntu8.10) saucy-proposed; urgency=medium

  * remove lp1264465/* as it did not pass verification

libvirt (1.1.1-0ubuntu8.9) saucy-proposed; urgency=medium

  * fix badly applied patch
    0001-qemu-hotplug-only-label-hostdev-after-checking-device-conflicts

libvirt (1.1.1-0ubuntu8.8) saucy-proposed; urgency=medium

  [ Stefan Bader ]
  * debian/patches/ubuntu-xend-probe.patch: Fix search path for xen-toolstack
    command (LP: #1248025)
  * debian/patches/libxl-fix-dom0-detection.patch: Check contents of
    /proc/xen/capabilities to decide whether running in dom0. (LP: #1248025)

  [ Serge Hallyn ]
  * debian/libvirt-dev.install: add libvirt-lxc.so (LP: #1287232)

libvirt (1.1.1-0ubuntu8.7) saucy-proposed; urgency=medium

  * cherrypick d/p/add-a-mutex-to-serialize-updates-to-firewall from
    upstream to complete the concurrency issue fix (LP: #1228977)

libvirt (1.1.1-0ubuntu8.6) saucy-proposed; urgency=medium

  * Cherrypick upstream patches to fix concurrency race (LP: #1228977)

Date: 2014-05-05 18:44:12.756813+00:00
Changed-By: Marc Deslauriers <marc.deslauriers at canonical.com>
https://launchpad.net/ubuntu/saucy/+source/libvirt/1.1.1-0ubuntu8.11
-------------- next part --------------
Sorry, changesfile not available.