Oguz Bektas
9be61fa466
add fixes for intel MDS CVEs
...
fixes for:
* CVE-2018-12126
* CVE-2018-12127
* CVE-2018-12130
* CVE-2019-11091
adds the md-clear cpuflag.
Not included by default in any Intel CPU model.
Must be explicitly turned on for all Intel CPU models.
Requires the host CPU microcode to support this feature before it
can be used for guest CPUs.
Signed-off-by: Oguz Bektas <o.bektas@proxmox.com>
2019-06-05 14:21:44 +02:00
Thomas Lamprecht
7951909dad
remove outdated postinst, cruft from old times
...
It was for the switch from doing our QEMU/KVM build as 'qemu' to
'kvm', see
https://git.proxmox.com/?p=pve-qemu-kvm.git;a=commitdiff;h=8b7e35182aba87372ba5da5d322791557b744c15
Based on:
https://pve.proxmox.com/pipermail/pve-devel/2019-May/037153.html
Co-developed-by: Stoiko Ivanov <s.ivanov@proxmox.com>
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-27 19:34:06 +02:00
Thomas Lamprecht
fbbadb8b39
buildsys: switch upload dist over to buster
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-23 18:17:45 +02:00
Thomas Lamprecht
a862f375cb
bump version to 3.0.1-61
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 18:26:00 +02:00
Thomas Lamprecht
7392a9817d
fixup libspice* dependencies
...
we only corrected the build-dep, but not the installation one,
so fix this up and bump the version while we're at it - ensures we
have relevant security fixes available
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 18:26:00 +02:00
Thomas Lamprecht
0a321ffd50
buildsys: cleanup also older .deb files from prev. builds
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 18:06:57 +02:00
Thomas Lamprecht
6b0a3c0f45
bump version to 3.0.1-60
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht
7df330a978
add lintian overrides for shipped strange BLOBs
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht
edf1ab9a03
disable capstone support for now
...
would either need another submodule or a extra dependency, for now
disable.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht
6c69567d15
d/control: record missing build dependency libpixman
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:59:27 +02:00
Thomas Lamprecht
5c0cf1a177
d/control: use libspice-server-dev
...
we dropped the pve maintained version of this in spiceterm, the only
real user - which used a small patch to allow enabling SASL with this
libary - as it bring much more headache then it brings use we dropped
that support for PVE 6.0 and thus can use the Debian upstream version
here just fine.
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:58:05 +02:00
Thomas Lamprecht
0c02b38c72
d/control: fix priority-extra-is-replaced-by-priority-optional
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:12:42 +02:00
Thomas Lamprecht
06299321db
buildsys: use dpkg-dev makefile helpers for pkg info
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2019-05-22 17:12:12 +02:00
Wolfgang Bumiller
64be2e7557
bump version to 3.0.1-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-26 09:20:04 +02:00
Wolfgang Bumiller
c36c53f829
merge: make file locking optional also on creation
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-26 09:18:00 +02:00
Wolfgang Bumiller
0775f12b63
bump version to 3.0.1-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2019-04-19 10:32:03 +02:00
Dominik Csapak
4ba321f213
build qemu multithreaded
...
same as in pve-kernel where we have --jobs=auto
Signed-off-by: Dominik Csapak <d.csapak@proxmox.com>
2019-04-19 09:53:50 +02:00
Dietmar Maurer
583378ed06
build and include qemu-system-aarch64
...
Signed-off-by: Dietmar Maurer <dietmar@proxmox.com>
2019-04-19 09:53:44 +02:00
Wolfgang Bumiller
53e83913af
bump version to 3.0.0-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-09-07 14:52:23 +02:00
Wolfgang Bumiller
01363fa1ff
remove efi-roms-1182.tar.xz
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-08-30 15:02:34 +02:00
Wolfgang Bumiller
9b05d1d427
bump version to 2.11.2-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-07-09 10:06:27 +02:00
Wolfgang Bumiller
053dd5777e
bump version to 2.11.1-5
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-04-05 11:05:32 +02:00
Wolfgang Bumiller
e220dcddbc
merge: vma & rbd changes
...
vma: remove forced NO_FLUSH option
rbd: fix cache mode behavior
vma: add cache option to device map
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-04-05 11:04:11 +02:00
Wolfgang Bumiller
a7dac7e733
bump version to 2.11.1-4
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-03-21 15:35:50 +01:00
Alexandre Derumier
46598e97c3
qemu-img : add -n option to dd to skip destination image create
2018-03-21 15:34:39 +01:00
Fabian Grünbichler
8e326f3032
build: use 3.0 source format
...
instead of manually including and calling quilt. resulting binary debs
are identical.
Signed-off-by: Fabian Grünbichler <f.gruenbichler@proxmox.com>
2018-03-14 14:18:17 +01:00
Thomas Lamprecht
8fefb8827a
buildsys: remove new PPC specific files
...
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
2018-03-01 10:26:44 +01:00
Geert Stappers
426b89f032
debian/rules: don't disable Flat Device Tree
...
I don't know why fdt, Flat Device Tree, is disabled,
but that disabling blocks building e.g. qemu-system-aarch64.
It stops the build and yields this:
ERROR: fdt disabled but some requested targets require it.
You can turn off fdt only if you also disable all the system
emulation targets which need it
(by specifying a cut down --target-list).
Signed-off-by: Geert Stappers <stappers@stappers.it>
2018-03-01 08:13:41 +01:00
Geert Stappers
55b687225c
Makefile: git repository is moved
...
Signed-off-by: Geert Stappers <stappers@stappers.it>
2018-03-01 08:13:41 +01:00
Wolfgang Bumiller
d201635146
bump version to 2.11.1-3
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-23 10:33:56 +01:00
Wolfgang Bumiller
c854115a5f
merge: qemu-img dd: add isize parameter
...
to write small images from stdin to bigger destinations
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-23 10:33:09 +01:00
Wolfgang Bumiller
707e85d013
bump version to 2.11.1-2
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 17:15:45 +01:00
Wolfgang Bumiller
23f2c0ccb0
reapply: vma: add throttling options to drive mapping fifo protocol
...
This one got lost when rebasing
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 17:15:45 +01:00
Wolfgang Bumiller
6838f03890
bump version to 2.11.1-1
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-22 12:40:28 +01:00
Wolfgang Bumiller
db442fc8d3
bump version to 2.9.1-9
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:43:06 +01:00
Wolfgang Bumiller
507c6de3ce
merge EPYC and EPYC-IPBP cpu models
...
and a patch format cleanup round
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:40:26 +01:00
Wolfgang Bumiller
b07d2367db
vma: add throttling options to drive mapping fifo protocol
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:39:42 +01:00
Wolfgang Bumiller
23102ed6dc
patch cleanup
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-19 10:38:54 +01:00
Wolfgang Bumiller
84303d56d7
bump version to 2.9.1-8
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:16:07 +01:00
Alexandre Derumier
b45e13fe5c
fix qemu 2.9 drive mirroring to nbd target
...
cherry pick from qemu-kvm-ev-2.9.0-16.el7_4.11.1
https://cbs.centos.org/koji/buildinfo?buildID=21003
Tue Jun 13 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-10.el7
- kvm-nbd-make-it-thread-safe-fix-qcow2-over-nbd.patch [bz#1454582]
Tue Aug 15 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.4
- kvm-nbd-strict-nbd_wr_syncv.patch [bz#1467509]
- kvm-nbd-read_sync-and-friends-return-0-on-success.patch [bz#1467509]
- kvm-nbd-make-nbd_drop-public.patch [bz#1467509]
- kvm-nbd-server-get-rid-of-nbd_negotiate_read-and-friends.patch [bz#1467509]
Mon Oct 09 2017 Miroslav Rezanina <mrezanin@redhat.com> - rhev-2.9.0-16.el7_4.9
- kvm-nbd-client-Fix-regression-when-server-sends-garbage.patch [bz#1495474]
- kvm-fix-build-failure-in-nbd_read_reply_entry.patch [bz#1495474]
- kvm-nbd-client-avoid-spurious-qio_channel_yield-re-entry.patch [bz#1495474]
- kvm-nbd-client-avoid-read_reply_co-entry-if-send-failed.patch [bz#1495474]
- kvm-qemu-iotests-improve-nbd-fault-injector.py-startup-p.patch [bz#1495474]
- kvm-qemu-iotests-test-NBD-over-UNIX-domain-sockets-in-08.patch [bz#1495474]
- kvm-block-nbd-client-nbd_co_send_request-fix-return-code.patch [bz#1495474]
- Resolves: bz#1495474
2018-02-08 10:12:21 +01:00
Wolfgang Bumiller
db2a3b4757
bump version to 2.9.1-7
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:03:52 +01:00
Wolfgang Bumiller
22ea5045c3
fix #1642 : merge: ratelimit: don't align wait time with slices
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-02-08 10:03:10 +01:00
Wolfgang Bumiller
ec24bd7a23
bump version to 2.9.1-6
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-01-15 15:26:08 +01:00
Wolfgang Bumiller
3dcc8d3ba2
merge SPEC_CTRL MSR and -IBRS CPU model patches
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2018-01-15 15:26:07 +01:00
Wolfgang Bumiller
2bd9a6dd9e
bump version to 2.9.1-5
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 11:50:25 +01:00
Wolfgang Bumiller
e49090106b
merge gluster fixes
...
* block/gluster: glfs_lseek() workaround
https://bugzilla.redhat.com/show_bug.cgi?id=1425293
https://bugzilla.redhat.com/show_bug.cgi?id=1451191
* gluster: add support for PREALLOC_MODE_FALLOC
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 11:46:25 +01:00
Wolfgang Bumiller
18eb98f0a4
bump version to 2.9.1-4
...
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 09:06:59 +01:00
Wolfgang Bumiller
c25a222062
merge CVE-2017-17381 fix and backup race condition fix
...
* CVE-2017-17381: virtio: divide by zero exception while updating rings
* race condition when issuing a 'backup-stop' command
Signed-off-by: Wolfgang Bumiller <w.bumiller@proxmox.com>
2017-12-06 09:06:59 +01:00
Wolfgang Bumiller
d2494dd2ef
buildsys: fix GITVERSION
2017-11-29 10:28:04 +01:00
Wolfgang Bumiller
c53dfb5728
bump version to 2.9.1-3
2017-11-29 10:15:04 +01:00