v1.16.1

BITyia/DroneSplatv1.16.1Jul 2, 2026by not4s

Upgrading?

Release notes summary

This release addresses critical stability and security issues. It reverts a symlink restriction for the jailer and fixes vsock connection timeouts that occurred after restoring snapshots with in-flight descriptors.

Key Highlights

  • Reverted O_NOFOLLOW to allow symlinks in jailer paths
  • Fixed vsock guest-to-host timeout after snapshot restore
  • Restored TX queue notification handling for in-flight descriptors

Full Release Notes

## Fixed

* [#5959](https://github.com/firecracker-microvm/firecracker/pull/5959): Reverted the use of `O_NOFOLLOW` for the jailer's cgroup and network namespace file operations, so symlinks are again allowed in these paths.
* [#5958](https://github.com/firecracker-microvm/firecracker/pull/5958): Fixed a bug that caused vsock guest-to-host connections to time out after snapshot restore, triggered by taking a snapshot with a TX descriptor in-flight. On restore the device now replays the TX queue notification so in-flight TX descriptors are re-processed and notification suppression is re-armed.

Related Repositories