7d975d9810
CVE-2015-8619: Fix sendkey out of bounds (bz #1292757 )
...
CVE-2016-1981: infinite loop in e1000 (bz #1299995 )
Fix Out-of-bounds read in usb-ehci (bz #1300234 , bz #1299455 )
CVE-2016-2197: ahci: null pointer dereference (bz #1302952 )
Fix gdbstub for VSX registers for ppc64 (bz #1304377 )
Fix qemu-img vmdk images to work with VMware (bz #1299185 )
2016-02-15 17:05:41 -05:00
95a588650f
- Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild
2016-02-04 21:38:06 +00:00
b24b7f1644
CVE-2015-8567: net: vmxnet3: host memory leakage (bz #1289818 )
...
CVE-2016-1922: i386: avoid null pointer dereference (bz #1292766 )
CVE-2015-8613: buffer overflow in megasas_ctrl_get_info (bz #1284008 )
CVE-2015-8701: Buffer overflow in tx_consume in rocker.c (bz #1293720 )
CVE-2015-8743: ne2000: OOB memory access in ioport r/w functions (bz #1294787 )
CVE-2016-1568: Use-after-free vulnerability in ahci (bz #1297023 )
Fix modules.d/kvm.conf example syntax (bz #1298823 )
2016-01-20 20:17:04 -05:00
78f4db5d1d
Fix virtio 9p thread pool usage
...
CVE-2015-8558: DoS by infinite loop in ehci_advance_state (bz #1291309 )
Re-add dist tag
2016-01-09 12:35:08 -05:00
2a77992272
spec: Re-add dist tag
2016-01-09 11:18:17 -05:00
e8a6e4f833
Replace %define usage with %global
2016-01-09 11:16:52 -05:00
c9396159e8
oops, it is now 2016
2016-01-07 21:07:39 +01:00
15489f4108
fix previous commit
2016-01-07 21:04:45 +01:00
0d5e9f6618
add 0001-virtio-9p-use-accessor-to-get-thread-pool.patch
2016-01-07 20:57:53 +01:00
dda6c386a5
add /etc/modprobe.d/kvm.conf
2016-01-07 20:57:53 +01:00
6176f1d7e2
Reabsed to version 2.5.0
2015-12-23 17:49:55 -05:00
89aacd5f7a
Rebased to version 2.5.0-rc3
2015-12-08 10:29:09 -05:00
6baf84acf1
Rebased to version 2.5.0-rc2
2015-11-30 18:00:49 -05:00
191c302918
qemu 2.5.0 rc1
2015-11-20 22:24:11 -05:00
7bf1a680e6
Drop needless ksm dep on qemu-common
2015-11-20 21:04:54 -05:00
48e07c5c6e
spec: code movement for clarity
...
- Order packages consistently across sections
- Group all %post sections
2015-11-18 10:28:10 -05:00
88b3793f29
2.5.0 rc0 wip
2015-11-18 10:20:33 -05:00
4f68392c26
Rebased to version 2.4.1
2015-11-04 15:48:36 -05:00
86d7b9f29b
Rebuild for xen 4.6
2015-10-11 16:08:44 -04:00
b448bfad34
Rebased to version 2.4.0.1
...
CVE-2015-7295: virtio-net possible remote DoS (bz #1264393 )
drive-mirror: Fix coroutine reentrance (bz #1266936 )
2015-10-08 13:38:49 -04:00
1ae1f09f33
spec: Fix builddep on libepoxy
2015-09-29 17:09:48 -04:00
cf8819083b
CVE-2015-6815: net: e1000: infinite loop issue (bz #1260225 )
...
CVE-2015-6855: ide: divide by zero issue (bz #1261793 )
CVE-2015-5278: Infinite loop in ne2000_receive() (bz #1263284 )
CVE-2015-5279: Heap overflow vulnerability in ne2000_receive() (bz #1263287 )
2015-09-21 18:01:46 -04:00
c5e57685f9
Fix emulation of various instructions, required by libm in F22 ppc64 guests.
2015-09-20 10:23:16 +01:00
8211390ac8
CVE-2015-5255: heap memory corruption in vnc_refresh_server_surface (bz #1255899 )
2015-08-31 20:18:31 -04:00
74717053dc
Rebased to version 2.4.0
...
Support for virtio-gpu, 2D only
Support for virtio-based keyboard/mouse/tablet emulation
x86 support for memory hot-unplug
ACPI v5.1 table support for 'virt' board
2015-08-11 18:08:40 -04:00
d5417f465c
Drop perl-Storable requires, texinfo rawhide is fixed now
2015-08-10 10:31:45 -04:00
6ac2a80eae
Add temporary dep on perl-Storable
...
see https://bugzilla.redhat.com/show_bug.cgi?id=1251766 for more info
2015-08-09 15:07:58 -04:00
4c6dc5b3d6
CVE-2015-3209: pcnet: multi-tmd buffer overflow in the tx path (bz #1230536 )
...
CVE-2015-3214: i8254: out-of-bounds memory access (bz #1243728 )
CVE-2015-5158: scsi stack buffer overflow (bz #1246025 )
CVE-2015-5154: ide: atapi: heap overflow during I/O buffer memory access (bz #1247141 )
CVE-2015-5165: rtl8139 uninitialized heap memory information leakage to guest (bz #1249755 )
CVE-2015-5166: BlockBackend object use after free issue (bz #1249758 )
CVE-2015-5745: buffer overflow in virtio-serial (bz #1251160 )
2015-08-09 13:08:31 -04:00
de4550957e
Rebased to v2.4.0-rc0
2015-07-14 17:12:37 -04:00
61ce511be4
Bump and rebuild.
2015-07-03 19:23:12 +01:00
74ab99f1a6
Revert "Enable -fPIC and -fPIE on every architecture (rhbz 1232499)."
...
This reverts commit 77b7d81b2bhttps://bugzilla.redhat.com/show_bug.cgi?id=1232499#36
2015-07-03 19:20:51 +01:00
77b7d81b2b
Enable -fPIC and -fPIE on every architecture (rhbz 1232499).
2015-07-03 18:45:22 +01:00
bcb37b2ec0
Fix conditional in previous commit
2015-07-03 17:22:51 +01:00
d4803feead
Use explicit --(enable,disable)-spice args (rhbz #1239102 )
2015-07-03 15:02:57 +01:00
1ec8e52bb2
Build aarch64 with -fPIC (rhbz 1232499)
2015-07-02 16:32:23 +01:00
806ecbe49c
Disable stack protection for AArch64. F23's GCC thinks that it is available but F23's glibc does not support it.
2015-07-01 11:26:59 +01:00
749c3c43c3
Rebuild for libiscsi soname bump
2015-06-26 11:10:12 +02:00
260c0ac680
Re-enable tcmalloc on arm
2015-06-19 12:03:04 +02:00
6626651b28
- Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild
2015-06-18 21:39:31 +00:00
94a40ce774
- gperftools not available on s390(x)
2015-06-10 22:28:01 +02:00
6fc6504bd8
CVE-2015-4037: insecure temporary file use in /net/slirp.c (bz #1222894 )
2015-06-05 19:55:57 -04:00
d43799b0b3
spec: Drop now unused kvm_target and kvm_archs globals
2015-06-05 18:21:57 -04:00
7bf3158612
Fix conditional enablement of tcmalloc
...
Opps, cant have comments in the middle of multi-line continuations.
2015-06-01 14:43:36 +01:00
aa972b9106
Disable broken tcmalloc on arm and re-enable tests
2015-06-01 14:12:15 +01:00
198e142c7d
Disable _all_ tests on arm, since they are all currently hanging
2015-05-21 14:07:03 -04:00
31085aa400
Temporarily disable hanging test on arm
2015-05-20 16:51:14 -04:00
7c5a423647
Remove %autopatch macro from changelog
2015-05-13 23:15:28 -04:00
18eddd1631
Backport upstream 2.4 patch to link with tcmalloc, enable it
...
CVE-2015-3456: (VENOM) fdc: out-of-bounds fifo buffer memory access (bz #1221152 )
2015-05-13 18:39:05 -04:00
af53ec630c
Backport upstream 2.4 patch to link with tcmalloc, enable it
2015-05-13 15:33:19 +02:00
343c57952d
Fix ksm.service (bz 1218814)
2015-05-06 12:52:09 -04:00
5059f25c8e
- Require libseccomp only when built with it
2015-05-05 17:03:52 +02:00
41aca9586f
Rebased to version 2.3.0 GA
...
Another attempt at fixing default /dev/kvm permissions (bz 950436)
2015-04-27 13:33:41 -04:00
b26fb5a551
qemu: Drop kvm.modules
...
Looked into this because recent packaging changes broke kvm.modules
installation, see https://bugzilla.redhat.com/show_bug.cgi?id=1212328
But nowadays this isn't even required I don't think. According to
comments here:
https://bugzilla.redhat.com/show_bug.cgi?id=963198
The reason for shipping it is missing devname:kvm for ppc and s390 kvm
modules. But those have been in upstream kernel.git since late 2013,
so it should be safe to drop entirely.
2015-04-16 09:11:00 -04:00
9b9ad7bb74
Rebased to version 2.3.0-rc3
2015-04-14 14:51:42 -04:00
c61e67e86b
Rebased to version 2.3.0-rc2
...
Don't install ksm services as executable (bz #1192720 )
Skip hanging tests on s390 (bz #1206057 )
CVE-2015-1779 vnc: insufficient resource limiting in VNC websockets decoder
(bz #1205051 , bz #1199572 )
2015-04-03 10:21:46 -04:00
c2770435bf
Big specfile cleanup
...
- Drop all the crazy kvmonly and separate_kvm bits
- Drop outdates conditionals
- Drop old style things like defattr and RPM_BUILD_ROOT
- Readability improvements
2015-03-27 17:08:26 -04:00
355b03ef5c
Rebased to version 2.3.0-rc1
2015-03-25 08:48:20 -04:00
8055ee2da9
Rebase to qemu-2.3.0-rc0
2015-03-22 11:06:24 -04:00
5a454effcf
Revert "- Enable seccomp on ARM (thanks: Peter Robinson)."
...
This reverts commit 76a74e853f
2015-02-17 15:07:06 +00:00
76a74e853f
- Enable seccomp on ARM (thanks: Peter Robinson).
2015-02-17 13:37:05 +00:00
6c3741c276
- Add -fPIC flag to build to avoid
...
'relocation R_X86_64_PC32 against undefined symbol' errors.
- Add a hopefully temporary hack so that -fPIC is used to build
NSS files in libcacard.
2015-02-17 13:35:59 +00:00
391fb81c16
Add UEFI support for aarch64.
2015-02-04 15:54:41 +00:00
f287dc5662
Re-enable SPICE after previous build fixes circular dep
2015-02-03 14:05:24 +00:00
fc57f44566
Stop libcacard linking against the entire world
2015-02-03 11:36:06 +00:00
cad2bcb6a1
Temporarily disable SPICE to break circular build-dep on libcacard
2015-02-03 10:57:50 +00:00
0716c2e68a
Rebuild for changed xen soname
2015-02-03 09:25:11 +00:00
10fa62ffc3
Set pkgversion when running configure
2015-01-28 13:25:27 +00:00
c88cc7e403
Rebased to version 2.2.0
2014-12-09 16:25:38 -05:00
1be48f0df6
Update to qemu-2.2.0-rc3
2014-11-30 17:19:56 -05:00
259393612c
Update to qemu-2.2.0-rc1
2014-11-15 20:39:24 -05:00
725f84b743
CVE-2014-7815 vnc: insufficient bits_per_pixel from the client sanitization (bz #1157647 , bz #1157641 )
...
CVE-2014-3689 vmware_vga: insufficient parameter validation in rectangle functions (bz #1153038 , bz #1153035 )
2014-10-29 15:58:32 -04:00
145f8dccfa
Fix dep on numactl-devel to be build time not install time
...
Signed-off-by: Daniel P. Berrange <berrange@redhat.com>
2014-10-24 16:38:01 +01:00
fbbbab2c57
Fix PPC virtio regression (bz #1144490 )
2014-10-06 12:32:22 -04:00
215b584050
fix typo
2014-09-30 16:48:14 +02:00
3a39bf78f1
add ppc64le to KVM arches
2014-09-30 16:46:25 +02:00
6c2b2d8a11
Fix date in changelog
2014-09-26 12:51:48 -04:00
6ce0be8333
Add Requires seabios >= 1.7.5, otherwise Windows virtio booting does not work.
2014-09-26 16:56:20 +01:00
46f3a5c276
Rebased to version 2.1.2
...
CVE-2014-3640 qemu: slirp: NULL pointer (bz #1144821 , bz #1144818 )
2014-09-26 10:26:35 -04:00
e84b901375
Fix crash on migration/snapshot (bz #1144490 )
2014-09-21 12:42:19 -04:00
2f5a0ef6e6
qemu: Fix building without usbredir
...
The comparison checks if have_usbredir is defined, which it always is.
Check if it's defined and set to 1 instead.
2014-09-15 10:51:00 +01:00
723d95470d
Rebased to version 2.1.1
...
CVE-2014-5388: out of bounds memory access (bz #1132962 , bz #1132956 )
CVE-2014-3615 crash when guest sets high resolution (bz #1139121 , bz #1139115 )
2014-09-11 15:58:04 -04:00
87bbaebdd6
Remember to update Release field this time.
2014-09-03 11:28:38 +01:00
f2a088a4af
Add upstream patches to:
...
* Fix crash in curl driver.
* Add curl timeout option.
* Add curl cookie option.
- Add upstream commit hashes to patches.
2014-09-03 11:27:07 +01:00
e144c654aa
Forgot to update Release field ...
2014-08-20 22:35:42 +01:00
4ced99fb02
Add patch for aarch64 which uncompresses -kernel parameter (in arm.next).
2014-08-20 22:28:16 +01:00
592e6889a5
- Don't fail build due failing tests on s390 ( #1100971 )
2014-08-19 08:36:38 +02:00
bc6fc976b4
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild
2014-08-17 22:22:32 +00:00
a6c45000fe
Drop optimization flags when compiling on aarch64 (see RHBZ#1126199).
2014-08-03 14:17:35 +01:00
bcd9d80d1a
Update to qemu 2.1.0 final released version.
2014-08-03 13:27:19 +01:00
cc110b43ed
Update to qemu-2.1.0-rc3
2014-07-25 15:02:38 -04:00
3561d33ea5
Update to qemu 2.1.0-rc2
2014-07-16 13:05:09 -04:00
d35cbd0d7e
Build qemu-system-aarch64 on all arches, Run check on ARM arches, just don't fail the build ATM
2014-07-15 17:46:17 +01:00
b440863c6b
Update to qemu-2.1.0-rc1
...
Enable SDL2 frontend, it's improved recently
Fix drive-mirror segfaults if source size is not cluster-aligned (bz #1114791 )
Fix crash with virtio-blk hotunplug (bz #1117181 )
2014-07-09 11:53:36 -04:00
ad339ad339
Update to qemu 2.1-rc0
2014-07-04 15:08:59 -04:00
0410ae29c0
Don't use libtool on dtrace, fixes rawhide build (bz #1106968 )
2014-06-15 17:58:34 -04:00
200da9cdce
- Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild
2014-06-07 20:00:11 -05:00
12cd546161
QCOW1 validation CVEs: CVE-2014-0222, CVE-2014-0223 (bz #1097232 , bz #1097238 , bz #1097222 , bz #1097216 )
...
CVE-2014-3461: Issues in USB post load checks (bz #1097260 , bz #1096821 )
2014-05-31 20:49:56 -04:00
660494c491
- Disable tests on s390 ( #1100971 )
2014-05-24 19:47:47 +02:00
70114f9e56
Migration CVEs: CVE-2014-0182 etc.
2014-05-11 19:07:44 -04:00
5461c5246c
Fix aarch64 build by adding aarch64 to kvm_archs
2014-04-30 22:17:24 +01:00
762d9e1463
Re-enable test suite on arm, works with a scratch build now
2014-04-26 13:46:26 -04:00
21cd6fac34
Don't use SDL2 API support, it's incomplete
...
Build qemu-system-aarch64 only on aarch64 for now
2014-04-21 20:35:15 -04:00
269942c0fd
Update to 2.0.0 GA
2014-04-17 12:25:50 -04:00
f03d6d0588
Sigh, fix %setup
2014-04-15 12:33:04 -04:00
17908043da
Update to qemu 2.0-rc3
...
Fix crash when restoring from snapshot (bz #1085632 )
2014-04-15 11:37:22 -04:00
75f0c8715a
Change gtk quit accelerator to ctrl+shift+q (bz #1062393 )
...
Fix mouse with spice
Enable xen support for xen 4.4
2014-03-24 13:20:43 -04:00
1560ff70e8
spec: Disable check on arm just to get the build out
2014-03-24 13:16:27 -04:00
3400e70a32
Enable xen support for xen 4.4
2014-03-24 09:15:34 -04:00
ac843bf3ce
Update to qemu 2.0 rc0
2014-03-18 14:25:31 -04:00
755ac92dbf
Better to quote the argument to test.
2014-02-18 17:10:08 +00:00
5b4ee6cf96
Run qemu-sanity-check on x86 and armv7 too. The results are still only advisory.
2014-02-18 11:42:46 -05:00
aa1e9b6b3f
Disable make check on aarch64.
2014-01-13 10:12:15 +00:00
e65bbe3b55
spec: Fix some --without conditionals (bz 1048476)
2014-01-06 12:35:34 -05:00
c4896d008b
Add libcacard ldconfig %post* scriptlets.
2013-12-21 20:30:28 +02:00
c4025101e7
Add kill() to seccomp whitelist, fix AC97 with -sandbox on (bz #1043521 )
...
Changing streaming mode default to off for spice (bz #1038336 )
Fix guest scsi verify command (bz #1001617 )
2013-12-18 12:11:24 -05:00
cf5f9d239e
Clarify chrpath comment
2013-12-04 18:13:23 -05:00
bacd9b0468
Fix qemu-img create with NBD backing file (bz #1034433 )
...
Rebase to qemu-1.7 GA
New monitor command blockdev-add for full featured block device hotplug.
Performance and functionality improvements for USB 3.0.
Many VFIO improvements
ACPI tables can be generated by QEMU and can be used by firmware directly.
Support creating and writing .vhdx images.
qemu-img map: dump detailed image file metadata
2013-12-03 06:36:52 -05:00
dd16baaeb5
Run chrpath on binaries, so qemu can be built using rpmbuild.
2013-11-29 13:36:26 +00:00
45bdef1ab0
Update to qemu-1.7.0-rc1
2013-11-21 16:20:05 -05:00
4b57421a2c
Fix drive discard options via libvirt (bz #1029953 )
...
Fix process exit with -sandbox on (bz #1027421 )
2013-11-17 17:32:44 -05:00
acbc4a5d3a
Reduce CPU usage when audio is playing (bz #1017644 )
...
Base on qemu 1.6.1 tarball
ksmtuned: Fix matching qemu w/o set_process_name (bz #1012604 )
ksmtuned: Fix committed_memory when no qemu running (bz #1012610 )
Make sure bridge helper is setuid (bz #1017660 )
2013-11-05 19:42:39 -05:00
0c698d13b9
Fix migration from qemu <= 1.5
2013-10-09 13:38:07 -04:00
2983660f65
Rebase to pending 1.6.1 stable
...
CVE-2013-4377: Fix crash when unplugging virtio devices (bz #1012633 , bz #1012641 )
Fix 'new snapshot' slowness after the first snap (bz #988436 )
Fix 9pfs xattrs on kernel 3.11 (bz #1013676 )
CVE-2013-4344: buffer overflow in scsi_target_emulate_report_luns (bz #1015274 , bz #1007330 )
2013-10-06 14:33:55 -04:00
840b28a1f8
Fix -vga qxl with -display vnc (bz #948717 )
...
Fix USB crash when installing reactos (bz #1005495 )
Don't ship x86 kvm wrapper on arm (bz #1005581 )
2013-09-24 10:17:48 -04:00
52cf04624c
- Enable TCG interpreter for s390 as the native backend supports 64-bit only
...
- Don't require RDMA on s390(x)
2013-09-12 19:09:51 +02:00
9e0a86718c
Fix qmp capabilities calls on i686 (bz #1003162 )
...
Fix crash with -M isapc -cpu Haswell (bz #986790 )
Fix crash in lsi_soft_reset (bz #1000947 )
Fix initial /dev/kvm permissions (bz #993491 )
2013-09-03 14:49:39 -04:00
81ec822962
Only dependy on qemu-sanity-check where it's currently available
2013-08-29 12:26:19 -04:00
54891983e0
Enable qemu-sanity-check, however do not fail the build if it fails.
2013-08-28 15:22:29 +01:00
89d8790801
Only build against libssh2 on F20+ to fix virt-preview
2013-08-28 08:36:13 -04:00
bfefcc20b8
Require newer libssh2 to fix missing libssh2_sftp_fsync (bz #999161 )
2013-08-21 09:48:54 +01:00
f950cd7985
Require newer ceph-libs to fix symbol error (bz #995883 )
2013-08-20 14:13:58 -04:00
64e123aeee
Try to rebuild since previous i686 build was broken (RHBZ#998722).
...
- In build, qemu -help just to check the binary is not broken.
2013-08-20 12:34:22 +01:00
76dcac38f6
Rebased to version 1.6.0
...
Support for live migration over RDMA
TCG target for aarch64.
Support for auto-convergence in live migration ("CPU stunning")
The XHCI (USB 3.0) controller supports live migration.
New device "nvme" provides a PCI device that implements the NVMe
standard.
ACPI hotplug of devices behind a PCI bridge is supported
2013-08-16 14:20:08 -04:00
54ffecd5cf
re-enable spice support
2013-08-04 08:02:10 -05:00
2ed53bed7d
try another way to disable spice
2013-08-03 08:12:44 -05:00
558d4c194e
build without spice support to build against new libiscsi
...
- spice requires parts of qemu
2013-08-02 21:47:40 -05:00
1c81baa208
Rebuild for libiscsi soname bump
2013-08-02 17:38:43 +02:00
67ad330b45
Rebased to version 1.5.2
...
Fix mouse display with spice and latest libvirt (bz #981094 )
2013-07-29 14:24:38 -04:00
b6a83a54d0
Update to work with seabios 1.7.3
2013-07-09 10:33:08 -04:00
bc2c95de5f
Remove BuildRequires: check-devel, not needed for a while
2013-07-01 11:21:43 -04:00
8a0cce2bab
Rebased to version 1.5.1
2013-06-28 20:11:02 -04:00
81a3da8be9
Don't install conflicting binfmt handler on arm (bz #974804 )
...
Use upstream patch for libfdt build fix
2013-06-19 10:35:19 -04:00
09747c8a31
Put ARM kvm bits in right sub package
2013-06-15 17:41:18 +01:00
562b652dea
Fix build with both new and old fdt
2013-06-13 14:57:15 -04:00
05409c7381
Fix build with rawhide libfdt
2013-06-12 12:37:46 -04:00
e1f7cc577f
Fix rtl8139 + windows 7 + large transfers (bz #970240 )
2013-06-11 16:56:15 -04:00
441340007b
build qemu-kvm on ARMv7
2013-06-01 23:30:46 +01:00
f81e73803f
- Install the qemu-kvm.1 man page only on arches with kvm
2013-05-27 14:30:37 +02:00
979ec18948
Alias qemu-system-* man page to qemu.1 (bz #907746 )
...
Drop execute bit on service files (bz #963917 )
Conditionalize KSM service on host virt support (bz #963681 )
Split out KSM package, make it not pulled in by default
2013-05-25 14:54:03 -04:00
b9a8d04040
Add BuildRequires: gettext
2013-05-21 14:51:10 -04:00
Cole Robinson
Fedora Release Engineering
Paolo Bonzini
Richard W.M. Jones
Daniel P. Berrange
Peter Robinson
Dennis Gilmore
Dan Horák
poma
Ruben Kerkhof
Peter Robinson
Ville Skyttä