[PATCH] NEWS: Mention CVE-2023-3750 and BeeGFS migration support

Peter Krempa posted 1 patch 9 months, 1 week ago
Patches applied successfully (tree, apply log)
git fetch https://github.com/patchew-project/libvirt tags/patchew/5b2f9a67dd0a90e4f43a7469f0d2f130c9660422.1690812975.git.pkrempa@redhat.com
NEWS.rst | 12 ++++++++++++
1 file changed, 12 insertions(+)
[PATCH] NEWS: Mention CVE-2023-3750 and BeeGFS migration support
Posted by Peter Krempa 9 months, 1 week ago
Signed-off-by: Peter Krempa <pkrempa@redhat.com>
---
 NEWS.rst | 12 ++++++++++++
 1 file changed, 12 insertions(+)

diff --git a/NEWS.rst b/NEWS.rst
index 8f0c67f779..e31448e829 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -13,6 +13,13 @@ v9.6.0 (unreleased)

 * **Security**

+  * ``CVE-2023-3750``: Fix race condition in storage driver leading to a crash
+
+   In **libvirt-8.3** a bug was introduced which in rare cases could cause
+   ``libvirtd`` or ``virtstoraged`` to crash if multiple clients attempted to
+   look up a storage volume by key, path or target path, while other clients
+   attempted to access something from the same storage pool.
+
 * **Removed features**

 * **New features**
@@ -38,6 +45,11 @@ v9.6.0 (unreleased)
     Users no longer need to specify guest NUMA node in the domain XML when
     enabling memory hotplug, libvirt automatically adds one when it is missing.

+  * qemu: Consider ``BeeGFS`` as a shared filesystem
+
+    Allow migration with non-shared storage for VMs accessing storage via
+    ``BeeGFS``.
+
 * **Bug fixes**

   * qemu: Adapt to new way of specifying PC speaker
-- 
2.41.0
Re: [PATCH] NEWS: Mention CVE-2023-3750 and BeeGFS migration support
Posted by Martin Kletzander 9 months, 1 week ago
On Mon, Jul 31, 2023 at 04:16:15PM +0200, Peter Krempa wrote:
>Signed-off-by: Peter Krempa <pkrempa@redhat.com>

Reviewed-by: Martin Kletzander <mkletzan@redhat.com>

>---
> NEWS.rst | 12 ++++++++++++
> 1 file changed, 12 insertions(+)
>
>diff --git a/NEWS.rst b/NEWS.rst
>index 8f0c67f779..e31448e829 100644
>--- a/NEWS.rst
>+++ b/NEWS.rst
>@@ -13,6 +13,13 @@ v9.6.0 (unreleased)
>
> * **Security**
>
>+  * ``CVE-2023-3750``: Fix race condition in storage driver leading to a crash
>+
>+   In **libvirt-8.3** a bug was introduced which in rare cases could cause
>+   ``libvirtd`` or ``virtstoraged`` to crash if multiple clients attempted to
>+   look up a storage volume by key, path or target path, while other clients
>+   attempted to access something from the same storage pool.
>+
> * **Removed features**
>
> * **New features**
>@@ -38,6 +45,11 @@ v9.6.0 (unreleased)
>     Users no longer need to specify guest NUMA node in the domain XML when
>     enabling memory hotplug, libvirt automatically adds one when it is missing.
>
>+  * qemu: Consider ``BeeGFS`` as a shared filesystem
>+
>+    Allow migration with non-shared storage for VMs accessing storage via
>+    ``BeeGFS``.
>+
> * **Bug fixes**
>
>   * qemu: Adapt to new way of specifying PC speaker
>-- 
>2.41.0
>