2 Commits

Author SHA256 Message Date
bd5d288caf Update to libvirt v12.0.0
Update SLFO:Main with libvirt v12.0.0. Includes implementation for
jsc#PED-14592, jsc#PED-14597, jsc#PED-14623 and jsc#PED-15320.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
2026-01-19 19:19:36 -07:00
294db76641 Update to libvirt 11.10.0
Update SLFO:Main with latest Factory libvirt package. Includes fixes for
CVE-2025-12748, CVE-2025-13193, and impl for jsc#PED-155.

Signed-off-by: Jim Fehlig <jfehlig@suse.com>
2025-12-15 16:53:26 -07:00
6 changed files with 76 additions and 37 deletions

View File

@@ -2,7 +2,7 @@
<service name="obs_scm" mode="manual">
<param name="scm">git</param>
<param name="url">https://gitlab.suse.de/virtualization/libvirt.git</param>
<param name="revision">v11.4.0-sle16.0</param>
<param name="revision">factory</param>
<param name="extract">libvirt.spec</param>
<param name="extract">README.packaging.txt</param>
<param name="extract">libvirt-supportconfig</param>

Binary file not shown.

BIN
libvirt-12.0.0.obscpio LFS Normal file

Binary file not shown.

View File

@@ -1,3 +1,64 @@
-------------------------------------------------------------------
Thu Jan 15 18:32:20 UTC 2026 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 12.0.0
- jsc#PED-14592, jsc#PED-14597, jsc#PED-14623, jsc#PED-15320
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v12-0-0-2026-01-15
-------------------------------------------------------------------
Tue Dec 16 00:33:28 UTC 2025 - Jan Engelhardt <jengelh@inai.de>
- Deactive gluster backend, package is going away for being
unmaintained.
-------------------------------------------------------------------
Mon Dec 1 21:57:32 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.10.0
- build: drop userfaultfd_sysctl option
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-10-0-2025-12-01
-------------------------------------------------------------------
Wed Nov 19 03:10:14 UTC 2025 - James Fehlig <jfehlig@suse.com>
- CVE-2025-13193: qemu: Set umask for 'qemu-img' when creating
external inactive snapshots
bsc#1253703
-------------------------------------------------------------------
Sat Nov 15 02:41:49 UTC 2025 - James Fehlig <jfehlig@suse.com>
- spec: Adjust dbus dependency
bsc#1253642
- CVE-2025-12748: Check ACLs before parsing the whole domain XML
bsc#1253278
-------------------------------------------------------------------
Wed Nov 5 18:33:48 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.9.0
- jsc#PED-155, bsc#1251789: By default, VMs are now confined by
the security framework (apparmor or selinux) active on the host
- bsc#1252958: Fix build with wireshark 4.6.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-9-0-2025-11-03
-------------------------------------------------------------------
Mon Oct 6 17:31:16 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.8.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-8-0-2025-10-01
-------------------------------------------------------------------
Tue Sep 2 17:04:02 UTC 2025 - James Fehlig <jfehlig@suse.com>
- Update to libvirt 11.7.0
- Many incremental improvements and bug fixes, see
https://libvirt.org/news.html#v11-7-0-2025-09-01
-------------------------------------------------------------------
Wed Aug 6 17:55:30 UTC 2025 - Cathy Hu <cathy.hu@suse.com>

View File

@@ -1,4 +1,4 @@
name: libvirt
version: 11.4.0
mtime: 1754586400
commit: 928b3bdae2dda843fd673ce15839eba3b4c11d61
version: 12.0.0
mtime: 1768511279
commit: be8a9b1d10144a0ee37d228f7db2d2c04a445396

View File

@@ -33,12 +33,11 @@
# Stateful secondary host drivers that run in daemons
%define with_storage_rbd 0%{!?_without_storage_rbd:0}
# The gluster storage backend is built for both openSUSE and SLE, but it is
# not supported
%define with_storage_gluster 0%{!?_without_storage_gluster:1}
%define with_storage_iscsi_direct 0%{!?_without_storage_iscsi_direct:1}
%define with_apparmor 0%{!?_without_apparmor:1}
%define with_selinux_unconfined_daemon_hooks 0%{!?_without_selinux:1}
# The gluster storage backend is currently unmaintained in both openSUSE and SLE
%define with_storage_gluster 0%{!?_without_storage_gluster:0}
# The udev interface backend is the only one that works across SUSE distros.
# It supports just a handful of read-only operations, has a history of
# instability, and is insufficiently maintained. Completely disable the
@@ -54,7 +53,6 @@
%define with_numactl 0%{!?_without_numactl:1}
%define with_nwfilter 0%{!?_without_nwfilter:1}
%define with_modular_daemons 0%{!?_without_modular_daemons:1}
%define with_userfaultfd_sysctl 0%{!?_without_userfaultfd_sysctl:1}
%define with_firewalld_zone 0%{!?_without_firewalld_zone:1}
# A few optional bits off by default, we enable later
@@ -84,12 +82,6 @@
%define with_storage_rbd 0%{!?_without_storage_rbd:1}
%endif
# Tumbleweeed is new enough to support /dev/userfaultfd, which
# does not require enabling vm.unprivileged_userfaultfd sysct
%if 0%{?suse_version} > 1500
%define with_userfaultfd_sysctl 0
%endif
# numa-preplace (formerly numad) is used to manage the CPU and memory
# placement dynamically for qemu and lxc drivers
%if %{with_qemu} || %{with_lxc}
@@ -153,7 +145,7 @@
Name: libvirt
URL: https://libvirt.org/
Version: 11.4.0
Version: 12.0.0
Release: 0
Summary: Library providing a virtualization API
License: LGPL-2.1-or-later
@@ -235,12 +227,6 @@ BuildRequires: polkit >= 0.112
%if %{with_nbdkit}
BuildRequires: libnbd-devel
%endif
# For mount/umount in FS driver
BuildRequires: util-linux
# For LVM drivers
BuildRequires: lvm2
# For pool type=iscsi
BuildRequires: open-iscsi
%if %{with_storage_iscsi_direct}
# For pool type=iscsi-direct
BuildRequires: libiscsi-devel
@@ -351,7 +337,11 @@ Requires: dmidecode
# For service management
%{?systemd_requires}
# Daemons depend on the 'messagebus' service
%if 0%{?suse_version} < 1600
Requires: dbus-1
%else
Requires: dbus-service
%endif
Requires: group(libvirt)
# Needed by libvirt-guests init script.
Requires: gettext-runtime
@@ -498,7 +488,7 @@ Summary: Storage driver plugin including base backends for the libvirtd d
Requires: %{name}-daemon-common = %{version}-%{release}
Requires: %{name}-libs = %{version}-%{release}
Recommends: nfs-utils
# For mkfs
# For mkfs and mount/unmount
Requires: util-linux
%if %{with_qemu}
# From QEMU RPMs
@@ -958,11 +948,6 @@ Allows SSH into domains via VSOCK without need for network.
%else
%define arg_fuse -Dfuse=disabled
%endif
%if %{with_userfaultfd_sysctl}
%define arg_userfaultfd_sysctl -Duserfaultfd_sysctl=enabled
%else
%define arg_userfaultfd_sysctl -Duserfaultfd_sysctl=disabled
%endif
%if %{with_nbdkit}
%define arg_nbdkit -Dnbdkit=enabled
%else
@@ -1065,7 +1050,6 @@ Allows SSH into domains via VSOCK without need for network.
-Dstorage_vstorage=disabled \
%{?arg_numactl} \
%{?arg_numad} \
%{?arg_userfaultfd_sysctl} \
%{?arg_nbdkit} \
%{?arg_nbdkit_config_default} \
-Dssh_proxy=enabled \
@@ -1248,9 +1232,6 @@ fi
%preun daemon-common
%service_del_preun libvirt-guests.service
if [ $1 = 0 ]; then
rm -f /var/lib/%{name}/libvirt-guests
fi
%postun daemon-common
/sbin/ldconfig
@@ -1724,9 +1705,6 @@ fi
%if %{with_apparmor}
%config(noreplace) %{_sysconfdir}/apparmor.d/usr.sbin.virtqemud
%endif
%if %{with_userfaultfd_sysctl}
%config(noreplace) %{_prefix}/lib/sysctl.d/60-qemu-postcopy-migration.conf
%endif
%{_datadir}/augeas/lenses/virtqemud.aug
%{_datadir}/augeas/lenses/tests/test_virtqemud.aug
%{_unitdir}/virtqemud.service