- Sun Jun 21 2020 neoclust <neoclust> 5.5.0-1.2.mga7
+ Revision: 1598174
- Add P2: Fix CVE-2019-20485 (mga#26816)
- Add P0 and P1 to fix CVE-2020-10703 and CVE-2020-12430 ( mga#26600 )
+ tv
- 5.5.0 security update -- https://libvirt.org/news.html#v5.5.0
o api: Prevent access to several APIs over read-only connections
Certain APIs give root-equivalent access to the host, and as such should be
limited to privileged users. CVE-2019-10161, CVE-2019-10166, CVE-2019-10167,
CVE-2019-10168.
- it also contains the security fixes from 5.4.0:
o cpu: Introduce support for the md-clear CPUID bit
This bit is set when microcode provides the mechanism to invoke a flush of
various exploitable CPU buffers by invoking the x86 VERW instruction.
CVE-2018-12126, CVE-2018-12127, CVE-2018-12130, CVE-2019-11091.
o Restrict user access to virt-admin, virtlogd and virtlockd
The intended users for these facilities are the root user and the libvirtd
service respectively, but these restrictions were not enforced correctly.
CVE-2019-10132. - Wed May 15 2019 tmb <tmb> 5.3.0-2.mga7
+ Revision: 1397846
- cputest: Add data for Intel(R) Xeon(R) CPU E3-1225 v5
- cpu_map: Define md-clear CPUID bit (CVE-2018-12126, CVE-2018-12127,
CVE-2018-12130, CVE-2019-11091) - Wed May 8 2019 tv <tv> 5.3.0-1.mga7
+ Revision: 1396772
- new release - Sun Apr 14 2019 tv <tv> 5.2.0-2.mga7
+ Revision: 1389971
- Rebuild against xen 4.12 - Wed Apr 3 2019 tv <tv> 5.2.0-1.mga7
+ Revision: 1385583
- 5.2.0 - Thu Mar 21 2019 tv <tv> 5.1.0-2.mga7
+ Revision: 1379414
- BR xfsprogs-devel for XFS reflink clone support
- Fix use of deprecated RBD features
- Avoid using firewalld if unprivileged
- Don't require ipv6 firewall support at startup (rhbz#1688968) - Tue Mar 5 2019 tv <tv> 5.1.0-1.mga7
+ Revision: 1371613
- fix wireshark plugin filelist
- fix compiling with wireshark 3
- new release - Thu Jan 24 2019 tv <tv> 5.0.0-2.mga7
+ Revision: 1360532
- temporary disable BR on ebtables as iptables is providing/conflicting with it
- new release - Mon Dec 3 2018 tv <tv> 4.10.0-1.mga7
+ Revision: 1338177
- 4.10.0
- requires iptables (mga#22213) - Tue Nov 13 2018 tv <tv> 4.9.0-1.mga7
+ Revision: 1329711
- new release - Sat Oct 13 2018 tv <tv> 4.8.0-2.mga7
+ Revision: 1319965
- fix nss library package name
- fix deps - Sun Oct 7 2018 tv <tv> 4.8.0-1.mga7
+ Revision: 1318410
- new release - Thu Sep 13 2018 tv <tv> 4.7.0-6.mga7
+ Revision: 1258922
- rebuild for new xen
+ wally
- fix typo in configure options on arm - Tue Sep 11 2018 wally <wally> 4.7.0-5.mga7
+ Revision: 1258451
- build without numad and numactl on arm - Tue Sep 11 2018 wally <wally> 4.7.0-4.mga7
+ Revision: 1258427
- don't BR zfs-fuse on arm and aarch64 - Mon Sep 10 2018 tv <tv> 4.7.0-3.mga7
+ Revision: 1258136
- enable extra 32bit firmwares (OVMF-ia32 & arm) - Thu Sep 6 2018 tv <tv> 4.7.0-2.mga7
+ Revision: 1257514
- enable nss & numad support
- enable support for numactl & nss
- enable ZFS support
- rebuild with libiscsi >= 1.18.0 for iscsi-direct support - Thu Sep 6 2018 tv <tv> 4.7.0-1.mga7
+ Revision: 1257450
- ignore testsuite failure on BS as it succeeds locally
- BR augparse for testsuite
- new release - Wed Aug 8 2018 tv <tv> 4.6.0-1.mga7
+ Revision: 1250365
- new release
- Fix regressions with chardev handling - Wed Jul 4 2018 tv <tv> 4.5.0-1.mga7
+ Revision: 1241665
- new release
