3 Commits

Author SHA256 Message Date
bd5d288caf Update to libvirt v12.0.0
Update SLFO:Main with libvirt v12.0.0. Includes implementation for
jsc#PED-14592, jsc#PED-14597, jsc#PED-14623 and jsc#PED-15320.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
2026-01-19 19:19:36 -07:00
294db76641 Update to libvirt 11.10.0
Update SLFO:Main with latest Factory libvirt package. Includes fixes for
CVE-2025-12748, CVE-2025-13193, and impl for jsc#PED-155.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
2025-12-15 16:53:26 -07:00
717eccd6e4 Sync changes to SLFO-1.2 branch 2025-08-20 09:45:21 +02:00
6 changed files with 75 additions and 45 deletions

View File

@@ -1,7 +1,7 @@
<services>
<service name="obs_scm" mode="manual">
<param name="scm">git</param>
<param name="url">https://github.com/openSUSE/libvirt.git</param>
<param name="url">https://gitlab.suse.de/virtualization/libvirt.git</param>
<param name="revision">factory</param>
<param name="extract">libvirt.spec</param>
<param name="extract">README.packaging.txt</param>

View File

@@ -1,3 +0,0 @@
version https://git-lfs.github.com/spec/v1
oid sha256:08b9a4bfd93a7bdfea1ef3f077dd3f14fe741be8f371a019d6d9bb90ee4c1065
size 143309326

BIN
libvirt-12.0.0.obscpio LFS Normal file

Binary file not shown.

View File

@@ -1,17 +1,70 @@
-------------------------------------------------------------------
Thu Jan 15 18:32:20 UTC 2026 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 12.0.0
- jsc#PED-14592, jsc#PED-14597, jsc#PED-14623, jsc#PED-15320
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v12-0-0-2026-01-15
-------------------------------------------------------------------
Tue Dec 16 00:33:28 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
- Deactive gluster backend, package is going away for being
unmaintained.
-------------------------------------------------------------------
Mon Dec 1 21:57:32 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.10.0
- build: drop userfaultfd_sysctl option
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-10-0-2025-12-01
-------------------------------------------------------------------
Wed Nov 19 03:10:14 UTC 2025 - James Fehlig <jfehlig@suse.com>
- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
external inactive snapshots
bsc#1253703
-------------------------------------------------------------------
Sat Nov 15 02:41:49 UTC 2025 - James Fehlig <jfehlig@suse.com>
- spec: Adjust dbus dependency
bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
bsc#1253278
-------------------------------------------------------------------
Wed Nov 5 18:33:48 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.9.0
- jsc#PED-155, bsc#1251789: By default, VMs are now confined by
the security framework (apparmor or selinux) active on the host
- bsc#1252958: Fix build with wireshark 4.6.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-9-0-2025-11-03
-------------------------------------------------------------------
Mon Oct 6 17:31:16 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.8.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-8-0-2025-10-01
-------------------------------------------------------------------
Tue Sep 2 17:04:02 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.7.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-7-0-2025-09-01
-------------------------------------------------------------------
Wed Aug 6 17:55:30 UTC 2025 - Cathy Hu <cathy.hu@suse.com>
- Set virt_hooks_unconfined boolean to true in libvirt-daemon-hooks
%post script (see comment 13 in bsc#1242998)
-------------------------------------------------------------------
Fri Aug 1 19:53:49 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.6.0
- Revert commit c2c165ea6c to fix build with old libattr in SLE15
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-6-0-2025-08-01
-------------------------------------------------------------------
Tue Jul 8 21:33:25 UTC 2025 - James Fehlig <jfehlig@suse.com>
@@ -19,13 +72,6 @@ Tue Jul 8 21:33:25 UTC 2025 - James Fehlig <jfehlig@suse.com>
to 'virtio-scsi'
bsc#1240762
-------------------------------------------------------------------
Tue Jul 1 23:00:51 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.5.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-5-0-2025-07-01
-------------------------------------------------------------------
Tue Jul 1 16:56:29 UTC 2025 - James Fehlig <jfehlig@suse.com>

View File

@@ -1,4 +1,4 @@
name: libvirt
version: 11.6.0
mtime: 1754467684
commit: b486f7a4e1a714138891ef391aeb618ca91667da
version: 12.0.0
mtime: 1768511279
commit: be8a9b1d10144a0ee37d228f7db2d2c04a445396

View File

@@ -33,12 +33,11 @@
# Stateful secondary host drivers that run in daemons
%define with_storage_rbd 0%{!?_without_storage_rbd:0}
# The gluster storage backend is built for both openSUSE and SLE, but it is
# not supported
%define with_storage_gluster 0%{!?_without_storage_gluster:1}
%define with_storage_iscsi_direct 0%{!?_without_storage_iscsi_direct:1}
%define with_apparmor 0%{!?_without_apparmor:1}
%define with_selinux_unconfined_daemon_hooks 0%{!?_without_selinux:1}
# The gluster storage backend is currently unmaintained in both openSUSE and SLE
%define with_storage_gluster 0%{!?_without_storage_gluster:0}
# The udev interface backend is the only one that works across SUSE distros.
# It supports just a handful of read-only operations, has a history of
# instability, and is insufficiently maintained. Completely disable the
@@ -54,7 +53,6 @@
%define with_numactl 0%{!?_without_numactl:1}
%define with_nwfilter 0%{!?_without_nwfilter:1}
%define with_modular_daemons 0%{!?_without_modular_daemons:1}
%define with_userfaultfd_sysctl 0%{!?_without_userfaultfd_sysctl:1}
%define with_firewalld_zone 0%{!?_without_firewalld_zone:1}
# A few optional bits off by default, we enable later
@@ -84,12 +82,6 @@
%define with_storage_rbd 0%{!?_without_storage_rbd:1}
%endif
# Tumbleweeed is new enough to support /dev/userfaultfd, which
# does not require enabling vm.unprivileged_userfaultfd sysct
%if 0%{?suse_version} > 1500
%define with_userfaultfd_sysctl 0
%endif
# numa-preplace (formerly numad) is used to manage the CPU and memory
# placement dynamically for qemu and lxc drivers
%if %{with_qemu} || %{with_lxc}
@@ -153,7 +145,7 @@
Name: libvirt
URL: https://libvirt.org/
Version: 11.6.0
Version: 12.0.0
Release: 0
Summary: Library providing a virtualization API
License: LGPL-2.1-or-later
@@ -345,7 +337,11 @@ Requires: dmidecode
# For service management
%{?systemd_requires}
# Daemons depend on the 'messagebus' service
%if 0%{?suse_version} < 1600
Requires: dbus-1
%else
Requires: dbus-service
%endif
Requires: group(libvirt)
# Needed by libvirt-guests init script.
Requires: gettext-runtime
@@ -952,11 +948,6 @@ Allows SSH into domains via VSOCK without need for network.
%else
%define arg_fuse -Dfuse=disabled
%endif
%if %{with_userfaultfd_sysctl}
%define arg_userfaultfd_sysctl -Duserfaultfd_sysctl=enabled
%else
%define arg_userfaultfd_sysctl -Duserfaultfd_sysctl=disabled
%endif
%if %{with_nbdkit}
%define arg_nbdkit -Dnbdkit=enabled
%else
@@ -1059,7 +1050,6 @@ Allows SSH into domains via VSOCK without need for network.
-Dstorage_vstorage=disabled \
%{?arg_numactl} \
%{?arg_numad} \
%{?arg_userfaultfd_sysctl} \
%{?arg_nbdkit} \
%{?arg_nbdkit_config_default} \
-Dssh_proxy=enabled \
@@ -1242,9 +1232,6 @@ fi
%preun daemon-common
%service_del_preun libvirt-guests.service
if [ $1 = 0 ]; then
rm -f /var/lib/%{name}/libvirt-guests
fi
%postun daemon-common
/sbin/ldconfig
@@ -1718,9 +1705,6 @@ fi
%if %{with_apparmor}
%config(noreplace) %{_sysconfdir}/apparmor.d/usr.sbin.virtqemud
%endif
%if %{with_userfaultfd_sysctl}
%config(noreplace) %{_prefix}/lib/sysctl.d/60-qemu-postcopy-migration.conf
%endif
%{_datadir}/augeas/lenses/virtqemud.aug
%{_datadir}/augeas/lenses/tests/test_virtqemud.aug
%{_unitdir}/virtqemud.service