Fixed

* Fixed race between vcpu initialization and emulation thread which could
  potentially lead to segmentation faults.
* Fixed the SSBD mitigation not being enabled on `aarch64` with the provided
  `prod-host-setup.md`, by force-enabling it.

Changed

* Changed Docker images repository from DockerHub to Amazon ECR.

Fixed

* Snapshot related host files (vm-state, memory, block backing files) are now
  flushed to their backing mediums as part of the CreateSnapshot operation.
* Fixed race between vcpu initialization and emulation thread which could
  potentially lead to segmentation faults.
* Fixed the SSBD mitigation not being enabled on `aarch64` with the provided
  `prod-host-setup.md`, by force-enabling it.

Changed

* Changed Docker images repository from DockerHub to Amazon ECR.

Fixed

* Snapshot related host files (vm-state, memory, block backing files) are now
  flushed to their backing mediums as part of the CreateSnapshot operation.
* Fixed ballooning API definition by renaming all fields which mentioned "MB"
  to use "MiB" instead.

Added

* The jailer can now be configured to enter a preexisting network namespace,
and to run as a daemon.
* Enabled PATCH operations on /drives resources.

Changed

* The microVM id supplied to the jailer may now contain alphanumeric characters
and hyphens, up to a maximum length of 64 characters.
* Replaced the permissions property of /drives resources with a boolean.
* Removed the state property of /drives resources.

Fixed

* Fixed the SIGPIPE signal handler so Firecracker no longer exits. The signal
is still recorded in metrics and logs.

Fixed

* Fixed the SIGPIPE signal handler so Firecracker no longer exits. The signal
is still recorded in metrics and logs.

Fixed

* Fixed the reported used bytes for any virtio-block request.
* Fixed all virtio-block read/write operations to valid guest addresses
  with buffer length of 0 to result in no-op.

Fixed

* Fixed off-by-one error in virtio-block descriptor address validation.

Fixed

* Fixed off-by-one error in virtio-block descriptor address validation.

Fixed

* Fixed off-by-one error in virtio-block descriptor address validation.