[ol8_kvm_appstream] libvirt-daemon-driver-nwfilter-5.7.0-38.module+el8.7.0+20894+2d7709ab.x86_64

The nwfilter driver plugin for the libvirtd daemon, providing
an implementation of the firewall APIs using the ebtables,
iptables and ip6tables capabilities

Changelog (Show File list) (Show related packages)

• Thu Dec 01 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-38.el8

  - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758]
  - security: fix SELinux label generation logic (Daniel P. Berrangé) [Orabug: 34773029] {CVE-2021-3631}
  - qemu: Set default qdisc before setting bandwidth (Michal Privoznik) [Orabug: 34724925]
  - qemu: Taint cpu host-passthrough only after migration (Cole Robinson) [Orabug: 34724925]

• Tue Oct 18 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-37.el8

  - vNUMA: Auto adjust 'maxvcpus' for vCORE placement (Wim ten Have) [Orabug: 34670399]
  - qemu: support kvm-poll-control performance hint (Tim Wiederhake) [Orabug: 34695476]
  - qemu: fix EFI nvram removal on domain undefine (Pavel Mores) [Orabug: 34543837]
  - util: keep the pidfile locked (Marc-André Lureau) [Orabug: 34500172]
  - qemuProcessStartManagedPRDaemon: Don't pass -f pidfile to the daemon (Michal Privoznik) [Orbug: 34500172]
  - virCommand: Actually acquire pidfile instead of just writing it (Michal Privoznik) [Orbug: 34500172]
  - qemu: Don't explicitly remove pidfile after virPidFileForceCleanupPath() (Michal Privoznik) [Orbug: 34500172]
  - virPipeImpl: Don't overwrite error (Peter Krempa) [Orbug: 34500172]
  - src: introduce a wrapper for the pipe2() system call (Daniel P. Berrangé) [Orbug: 34500172]

• Thu Aug 18 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-36.el8

  - util: Netdev fixes for phys_port_id to get the ifname of a VF (Wim ten Have) [Orabug: 34417160]
  - qemuProcessStop: Don't try to remove QoS on already removed TAP (Michal Privoznik) [Orabug: 34206752]
  - virnetdevopenvswitch: Fix 'burst' value passed to ovs-vsctl (Michal Privoznik) [Orabug: 34206752]
  - util: Avoid null pointer dereference when setting QoS on OVS (Jiri Denemark) [Orabug: 34206752]
  - virnetdevopenvswitch: unify calculation of ovs and tc (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Fix qos cleaning residual on multi interfaces (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Introduce virNetDevOpenvswitchInterfaceClearTxQos and virNetDevOpenvswitchInterfaceClearRxQos (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Extract common code block to a single function (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Extract conversion parameters between virNetDevBandwidth and ovs (Jinsheng Zhang) [Orabug: 34206752]
  - virnetdevopenvswitch: Add vmuuid notes on virNetDevOpenvswitchInterfaceSetQos (Jinsheng Zhang) [Orabug: 34206752]
  - qemu: interface: check and use ovs command to set qos of ovs managed port (Jinsheng Zhang) [Orabug: 34206752]
  - qemu: interface: remove setting noqueue for ovs port (Jinsheng Zhang) [Orabug: 34206752]
  - virDomain: interface: add virNetDevOpenvswitchInterfaceSetQos and virNetDevOpenvswitchInterfaceClearQos (Jinsheng Zhang) [Orabug: 34206752]
  - virDomain: interface: add virDomainNetDefIsOvsport (Jinsheng Zhang) [Orabug: 34206752]
  - openvswitch: don't delete existing OVS port prior to recreating same port (Laine Stump) [Orabug: 34206752]
  - virnetdev: move virNetDevSetRootQDisc to virnetdevbandwidth (Pavel Hrdina) [Orabug: 34206752]
  - virnetdevbandwidth: Don't generate burst outside of boundaries (Michal Privoznik) [Orabug: 34206752]
  - qemu_hotplug: Don't dereference NULL pointer @newb in qemuDomainChangeNet() (Michal Privoznik) [Orabug: 34206752]
  - qemu: Restore default root qdisc when QoS is cleared out (Michal Privoznik) [Orabug: 34206752]
  - virnetdevopenvswitch: Simplify OVS_VSCTL cmd creation (Michal Privoznik) [Orabug: 34206752]
  - qemu: Set noqueue qdisc for TAP devices (Michal Privoznik) [Orabug: 34206752]
  - virnetdev: Introduce virNetDevSetRootQDisc() (Michal Privoznik) [Orabug: 34206752]
  - syntax-check: Don't forbid curly braces around single line condition body (Peter Krempa) [Orabug: 34206752]
  - src: util: rename some program macros (Pavel Hrdina) [Orabug: 34206752]
  - conf: rename virNetDevSupportBandwidth to virNetDevSupportsBandwidth (Ján Tomko) [Orabug: 34206752]
  - qemu: do not revert to NULL bandwidth (Ján Tomko) [Orabug: 34206752]
  - conf: return a const from virDomainNetGetActualVirtPortProfile (Laine Stump) [Orabug: 34206752]
  - qemu: move runtime netdev validation into a separate function (Laine Stump) [Orabug: 34206752]
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (Laine Stump) [Orabug: 34206752]

• Thu Jul 07 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-35.el8

  - util: add virNetDevGetPhysPortName (Moshe Levi) [Orabug: 34329649]
  - util: Add phys_port_name support on virPCIGetNetName (Dmytro Linkin) [Orabug: 34329649]

• Thu Jun 30 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-34.el8

  - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019]
  - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019]
  - qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa) [Orabug: 33091019]
  - qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa) [Orabug: 33091019]
  - qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33091019]
  - qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa) [Orabug: 33091019]
  - qemu: blockjob: Store 'flags' for all the block job types (Peter Krempa) [Orabug: 33091019]
  - qemu: blockjob: Store 'jobflags' with block job data (Peter Krempa) [Orabug: 33091019]
  - util: json: Introduce virJSONValueArrayConcat (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Add 'granularity' parameter for block-dirty-bitmap-add (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa) [Orabug: 33091019]
  - qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
  - qemu: block: enable the snapshot image deletion feature (Pavel Mores) [Orabug: 33091019]
  - qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores) [Orabug: 33091019]
  - qemu: checkpoint: fix NULL dereference at create time (Cole Robinson) [Orabug: 33091019]
  - qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa) [Orabug: 33091019]
  - util: consolidate on one free callback for hash data (Daniel P. Berrangé) [Orabug: 33091019]
  - conf: stop using hash key when free'ing hash entries (Daniel P. Berrangé) [Orabug: 33091019]
  - qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Fix rollback and access to unlocked 'vm' when deleting checkpoints (Peter Krempa) [Orabug: 33091019]
  - qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Split out checkpoint creation code (Peter Krempa) [Orabug: 33091019]
  - qemu: block: Don't query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa) [Orabug: 33091019]
  - qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa) [Orabug: 33091019]
  - util: hash: Introduce virHashHasEntry (Peter Krempa) [Orabug: 33091019]
  - util: hash: Add new constructor 'virHashNew' (Peter Krempa) [Orabug: 33091019]
  - util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa) [Orabug: 33091019]
  - conf: Introduce virDomainDiskByTarget (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Don't update current checkpoint until we are done (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa) [Orabug: 33091019]
  - qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
  - qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
  - qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa) [Orabug: 33091019]
  - qemu: checkpoint: Don't forbid checkpoint when VM is marked for autodestroy (Peter Krempa) [Orabug: 33091019]
  - Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have) [Orabug: 34256070]
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang) [Orabug: 34210159] {CVE-2021-3975}

• Tue May 03 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-33.el8

  - qemu: refresh vNUMA/SMT pinning (Wim ten Have) [Orabug: 34083505]
  - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have) [Orabug: 34023508]
  - nwfilter: fix crash when counting number of network filters (Daniel P. Berrangé) [Orabug: 33973639] {CVE-2022-0897}

• Fri Jan 28 2022 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-32.el8

  - qemu: Validate config->exadata before reaping guests (Wim ten Have) [Orabug: 33763967]
  - qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have) [Orabug: 33268059]
  - qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have) [Orabug: 33268059]
  - qemu: Label restore path outside of secdriver transactions (Michal Privoznik) [Orabug: 33351242]
  - security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Privoznik) [Orabug: 33351242]

• Fri Oct 08 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-31.el8

  - qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

• Fri Oct 01 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-30.el8

  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
  - qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
  - qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

• Mon Sep 06 2021 Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-29.el8

  - qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
  - qemu: Tell secdrivers which images are top parent (Michal Prívozník) [Orabug: 33086913]
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Prívozník) [Orabug: 33086913]