v0.20.0

firecracker-microvm/firecrackerv0.20.0Dec 18, 2019by serban300

AI Summary

This release adds GICv2 support for AArch64 architectures and addresses multiple security vulnerabilities and stability issues.

Key Highlights

Added support for GICv2.
Fixed CVE-2019-18960 - logical error in bounds checking on vsock virtio descriptors.
Fixed #1283 - Can't start a VM in AARCH64 with vcpus number more than 16.
Fixed #1088 - Panic backtrace printing.
Decreased release binary size by 10%.

New Features

GICv2 support.

Full Release Notes

### Added

- Added support for GICv2.

### Fixed

- Fixed CVE-2019-18960 - Fixed a logical error in bounds checking performed 
  on vsock virtio descriptors.
- Fixed #1283 - Can't start a VM in AARCH64 with vcpus number more than 16.
- Fixed #1088 - The backtrace are printed on `panic`, no longer causing a 
  seccomp fault.
- Fixed #1375 - Change logger options type from Value to Vec<LogOption> to
  prevent potential unwrap on None panics.
- Fixed #1436 - Raise interrupt for TX queue used descriptors
- Fixed #1439 - Prevent achieving 100% cpu load when the net device rx is 
  throttled by the ratelimiter
- Fixed #1437 - Invalid fields in rate limiter related API requests are 
  now failing with a proper error message.
- Fixed #1316 - correctly determine the size of a virtio device backed 
  by a block device.
- Fixed #1383 - Log failed api requests.

### Changed

- Decreased release binary size by 10%.