[Libvirt-announce] ANNOUNCE: libvirt 1.1.3.1 maintenance release

[Cole Robinson]

libvirt 1.1.3.1 maintenance release is now available. This is
libvirt 1.1.3 with additional bugfixes that have accumulated
upstream since the initial release.

This release can be downloaded at:

http://libvirt.org/sources/stable_updates/libvirt-1.1.3.1.tar.gz

Changes in this version:

* Push RPM deps down into libvirt-daemon-driver-XXXX sub-RPMs
* Fix race condition reconnecting to vms & loading configs
* Fix leak of objects when reconnecting to QEMU instances
* Don't update dom->persistent without lock held
* Block all use of libvirt.so in setuid programs
* Remove (nearly) all use of getuid()/getgid()
* Add stub getegid impl for platforms lacking it
* Don't allow remote driver daemon autostart when running setuid
* Only allow the UNIX transport in remote driver when setuid
* Block all use of getenv with syntax-check
* Remove all direct use of getenv
* Make virCommand env handling robust in setuid env
* Initialize threading & error layer in LXC controller
* Fix flaw in detecting log format
* Move virt-login-shell into libvirt-login-shell sub-RPM
* Set a sane $PATH for virt-login-shell
* remote: fix regression in event deregistration
* python: Fix Create*WithFiles filefd passing
* build: fix build of virt-login-shell on systems with older gnutls
* build: fix linking virt-login-shell
* Don't link virt-login-shell against libvirt.so (CVE-2013-4400)
* Close all non-stdio FDs in virt-login-shell (CVE-2013-4400)
* Only allow 'stderr' log output when running setuid (CVE-2013-4400)
* Add helpers for getting env vars in a setuid environment
* Fix perms for virConnectDomainXML{To,From}Native (CVE-2013-4401)
* build: Add lxc testcase to dist list
* Convert uuid to a string before printing it
* LXC: Fix handling of RAM filesystem size units
* qemuMonitorJSONSendKey: Avoid double free
* rpc: fix getsockopt for LOCAL_PEERCRED on Mac OS X
* Remove use of virConnectPtr from all remaining nwfilter code
* Don't pass virConnectPtr in nwfilter 'struct domUpdateCBStruct'
* Remove virConnectPtr arg from virNWFilterDefParse
* qemu: cgroup: Fix crash if starting nographics guest
* virNetDevBandwidthEqual: Make it more robust
* qemu_hotplug: Allow QoS update in qemuDomainChangeNet
* Adjust legacy max payload size to account for header information

For info about past maintenance releases, see:

http://wiki.libvirt.org/page/Maintenance_Releases

Thanks,
Cole