Release notes for the update from 190529 to 190730 Summary: Added Packages: 0 Removed Packages: 0 Modified Packages: 31 Updated Packages: libvirt-4.5.0-10.7.el7.bclinux.6 -------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-admin-4.5.0-10.7.el7.bclinux.6 -------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-bash-completion-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-client-4.5.0-10.7.el7.bclinux.6 --------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-4.5.0-10.7.el7.bclinux.6 --------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-config-network-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-config-nwfilter-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-interface-4.5.0-10.7.el7.bclinux.6 -------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-lxc-4.5.0-10.7.el7.bclinux.6 -------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-network-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-nodedev-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-nwfilter-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-qemu-4.5.0-10.7.el7.bclinux.6 --------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-secret-4.5.0-10.7.el7.bclinux.6 ----------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-core-4.5.0-10.7.el7.bclinux.6 ----------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-disk-4.5.0-10.7.el7.bclinux.6 ----------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-gluster-4.5.0-10.7.el7.bclinux.6 -------------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-iscsi-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-logical-4.5.0-10.7.el7.bclinux.6 -------------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-mpath-4.5.0-10.7.el7.bclinux.6 ------------------------------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-rbd-4.5.0-10.7.el7.bclinux.6 ---------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-driver-storage-scsi-4.5.0-10.7.el7.bclinux.6 ----------------------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-kvm-4.5.0-10.7.el7.bclinux.6 ------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-daemon-lxc-4.5.0-10.7.el7.bclinux.6 ------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-devel-4.5.0-10.7.el7.bclinux.6 -------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-docs-4.5.0-10.7.el7.bclinux.6 ------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-libs-4.5.0-10.7.el7.bclinux.6 ------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-lock-sanlock-4.5.0-10.7.el7.bclinux.6 --------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-login-shell-4.5.0-10.7.el7.bclinux.6 -------------------------------------------- * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715) libvirt-nss-4.5.0-10.7.el7.bclinux.6 ------------------------------------ * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.7.el7_6.6 - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (CVE-2019-10161) - api: disallow virDomainManagedSaveDefineXML on read-only connections (CVE-2019-10166) - api: disallow virConnectGetDomainCapabilities on read-only connections (CVE-2019-10167) - api: disallow virConnect*HypervisorCPU on read-only connections (CVE-2019-10168) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.6.el7_6.6 - virfile: added GPFS as shared fs (rhbz#1715867) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.5.el7_6.6 - virnwfilterbindingobj: Introduce and use virNWFilterBindingObjStealDef (rhbz#1702173) - admin: reject clients unless their UID matches the current UID (CVE-2019-10132) - locking: restrict sockets to mode 0600 (CVE-2019-10132) - logging: restrict sockets to mode 0600 (CVE-2019-10132) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.4.el7_6.6 - qemu: Don't cache microcode version (CVE-2018-12127, CVE-2018-12126, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.3.el7_6.6 - cpu_x86: Do not cache microcode version (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5 (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) - cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127, CVE-2018-12130) * Mon Jun 24 2019 Jidong Xia - 4.5.0-10.2.el7_6.6 - cputest: Add data for Intel(R) Xeon(R) CPU E5-2630 v4 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-7600U (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E7540 (rhbz#1687515) - cputest: Add data for Intel(R) Xeon(R) CPU E5-2650 (rhbz#1687515) - cputest: Add data for Intel(R) Core(TM) i7-8700 (rhbz#1687515) - cpu_x86: Separate signature parsing from x86ModelParse (rhbz#1687515) - cpu_x86: Add x86ModelCopySignatures helper (rhbz#1687515) - cpu_x86: Store CPU signature in an array (rhbz#1687515) - cpu_x86: Allow multiple signatures for a CPU model (rhbz#1687515) - cpu_map: Add hex representation of signatures (rhbz#1687515) - cpu_map: Add more signatures for Conroe CPU model (rhbz#1687515) - cpu_map: Add more signatures for Penryn CPU model (rhbz#1687515) - cpu_map: Add more signatures for Nehalem CPU models (rhbz#1687515) - cpu_map: Add more signatures for Westmere CPU model (rhbz#1687515) - cpu_map: Add more signatures for SandyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for IvyBridge CPU models (rhbz#1687515) - cpu_map: Add more signatures for Haswell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Broadwell CPU models (rhbz#1687515) - cpu_map: Add more signatures for Skylake-Client CPU models (rhbz#1687515) - cpu: Don't access invalid memory in virCPUx86Translate (rhbz#1687515) - cpu_x86: Log decoded CPU model and signatures (rhbz#1687515) - util: Modify virStorageFileGetSCSIKey return (rhbz#1687715) - storage: Rework virStorageBackendSCSISerial (rhbz#1687715) - util: Introduce virStorageFileGetNPIVKey (rhbz#1687715) - storage: Fetch a unique key for vHBA/NPIV LUNs (rhbz#1687715)