RHBA-2011:0596 - Bug Fix Advisory

Topic

Updated libvirt packages that upgrade the libvirt library to upstream
version 0.8.7, fix a number of bugs, and add various enhancements and
new features are now available for Red Hat Enterprise Linux 6.

Description

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In
addition, libvirt provides tools for remotely managing virtualized
systems.

These updated packages upgrade the libvirt library for Red Hat
Enterprise Linux 6 to upstream version 0.8.7, which contains many
enhancements and bug fixes over the previous version. Further
details are provided in the Technical Notes:

http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html#libvirt

All users of libvirt are advised to upgrade to these updated packages,
which correct these issues and provide these enhancements.

Solution

Before applying this update, make sure all previously-released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 515692 - RFE: Use cgroups to enforce host RAM limit according to current memory balloon allocation
• BZ - 586124 - RFE: support IPv6 on virtual networks
• BZ - 589863 - Enable 'autostart' doesn't take effect actually
• BZ - 591703 - RFE: libvirt XML should allow to specify AIO mode
• BZ - 595350 - DOCS: /usr/sbin/libvirtd does not have a man page
• BZ - 596100 - device hotplug/update changes are not transient
• BZ - 602277 - Can 'virsh edit' append a '.xml' suffix to tempfile edited by vim?
• BZ - 605543 - virsh pool-list and vol-list commands could be improved to show more details
• BZ - 609463 - MAC address of virtual network bridge changes when TAP devices are added/removed
• BZ - 611443 - User can not delete the volume in a pool built on a mapper device.
• BZ - 611793 - Static only DHCP not supported in network configs.
• BZ - 611822 - libvirtd produces potentially misleading advice in error output for TLS failure
• BZ - 617439 - DOCS: virsh help: network can't be destroyed and dumped xml via id
• BZ - 622534 - DOCS: Documentation changes describing virsh operations on inactive guests
• BZ - 623166 - libvirtd daemon core dumps not working
• BZ - 624252 - Remote driver is not flushing event stream correctly, resulting in delayed event notification to applications
• BZ - 624403 - [vdsm] [libvirt] unexpected signal message produced (log) on the various operations
• BZ - 624507 - Network filter driver not handling driver reload (SIGHUP) correctly
• BZ - 625315 - Migrate fail with error "internal error unable to execute QEMU command 'migrate_set_speed' "
• BZ - 625859 - /etc/sysconfig/libvirt-guests has wrong permissions
• BZ - 626305 - [vdsm] [libvirt] RFE - libvirt should allow user to ask for force eject
• BZ - 626873 - pool creation fails if directory includes a broken symlink
• BZ - 627125 - RFE: attach-interface should allow to specify model type of virtual network interface
• BZ - 627143 - can't successfully start guest with a hot-plugging disk after stopping
• BZ - 628772 - Transient update device not take off effect after guest restart
• BZ - 628940 - libvirt should provide a way to pass through human monitor commands for debuging
• BZ - 629662 - RFE: Need support for virtio-net tuning option
• BZ - 630089 - RFE: Support p9fs virtual filesystem configuration
• BZ - 632750 - RFE: support for 802.1Qbg pre-associate request
• BZ - 632756 - RFE: Integration of misc upstream bugfixes to nwfilter code
• BZ - 633326 - Fails to reject unsupported graphics type such as 'sdl'
• BZ - 635353 - Break migration during migrating, VM cannot be operated on target host
• BZ - 635419 - RFE: Allow enable/disable ksm per VM
• BZ - 636349 - libvirt-0.8.4 fails to start VMs after upgrade
• BZ - 636483 - bug appearing on big endian systems makes nwfilter testcase fail
• BZ - 638285 - [libvirt] libvirt crash on multiple migration [Segmentation fault]
• BZ - 638968 - [6.0] 'virsh start' succeeds even if an invalid serial type is specified in an xml file
• BZ - 639587 - virsh freecell' prints the available amount of memory even if an invalid cellno is specified.
• BZ - 639595 - virsh reports an improper message when virt-domjobabort is run.
• BZ - 639603 - Unable to locate #virt-mem ( Documentation Bug)
• BZ - 640202 - [libvirt] [logs] libvirt logs should be improved
• BZ - 641187 - Any value that is out of range of cpu_shares can be specified.
• BZ - 643050 - RFE: control vhost-net on/off status
• BZ - 646895 - RFE: Explicit per-device ordering for bootable devices.
• BZ - 647058 - [abrt] libvirt-0.8.1-13.el6: virJSONValueObjectGet: Process /usr/sbin/libvirtd was killed by signal 11 (SIGSEGV)
• BZ - 647684 - (Documentation bug) : Documentation not available for #virsh commands
• BZ - 648486 - Provide to users some modern sound device like Intel HDA
• BZ - 649523 - bogus permissions on /var/lib/libvirt in libvirt spec file
• BZ - 652002 - libvirt rpm fails to build if libxenserver 5.6.0 is installed
• BZ - 652730 - Never forgets iscsi sessions & silently logs back in upon network activation
• BZ - 653293 - virsh vcpuinfo' doesn't report the number of CPU core of 'CPU Affinity' correctly on host with NUMA
• BZ - 653300 - Incorrect virtual network xml file cause libvirt crash.
• BZ - 653530 - virsh freecell does not offer a way to list free memory per node
• BZ - 653985 - libvirt need to be rebased in RHEL-6.1
• BZ - 655062 - use --dhcp-no-override option when using tftp
• BZ - 656248 - Support Westmere as a CPU model or included within existing models..
• BZ - 656795 - Start and shutdown domain lead to memory leak
• BZ - 656845 - [libvirt] kill qemu process using 'kill' behaves as user shutdown command and not as 'lost connection with qemu process'
• BZ - 658657 - libvirtd should use selabel_open rather than matchpathcon
• BZ - 659310 - [libvirt] deadlock on concurrent multiple bidirectional migration
• BZ - 659855 - libvirt crash on src/util/util.c in __virExec
• BZ - 660194 - clock offset='variable' not working correctly
• BZ - 660706 - do not start libvirt-guests on upgrade
• BZ - 661986 - with unsupported RDP graphic framebufferset kvm guest still start happily without error prompt
• BZ - 662245 - [Cisco 6.1 feat] libvirt 802.1Qbh: Add support for IFLA_VF_MAC
• BZ - 664406 - qemu process is spawned with no supplementary groups
• BZ - 665293 - RFE: Allow setting size of send buffer per TAP device in QEMU driver
• BZ - 665446 - libvirt virsh nodedev-dumpxml doesn't show SR-IOV details
• BZ - 666158 - domain suspension followed by two conflicting events
• BZ - 667091 - IB700 watchdog isn't PCI
• BZ - 667756 - [rhel6] [libvirt] unable to restore vm after hibernate when selinux is on (libvirtError: cannot close file: Bad file descriptor)
• BZ - 669069 - virsh memtune command displays bogus large values instead of indicating "unlimited"
• BZ - 670278 - guest system is paused after reboot
• BZ - 670399 - Libvirt should report an error when qemu-kvm doesn't support 'per-device boot order'
• BZ - 670529 - LVM storage pool creates smaller-than-expected volume
• BZ - 670848 - [Libvirt] Libvirt daemon crashes on virDomainDefFree at conf/domain_conf.c:793
• BZ - 671050 - Libvirt hot unplug the 1st guest nic silently when not specifying --mac
• BZ - 671319 - Improper error message for unsupported graphics type such as 'rdp', 'desktop'
• BZ - 671564 - libvirtd crash when exceeding 30 VMs
• BZ - 671567 - race condition in libvirt could lead to crash on event handling
• BZ - 672199 - Tunnelled migration failed with error 'internal error unknown migration protocol'
• BZ - 672226 - virDomainCreateXML over remote driver sometimes hangs
• BZ - 672449 - virsh managedsave shutoff guest cannot resolve symlink /var/lib/libvirt/qemu/save/guest.save
• BZ - 672725 - libvirt double-close bug in tight loop of save/restore [6.1]
• BZ - 673226 - Imprint libvirt logs with version number & RPM build details
• BZ - 673434 - Fix problems with p2p migrations
• BZ - 673588 - libvirt can deadlock from double-closing qemu monitors
• BZ - 674602 - [libvirt] [scale] increase ulimit depending on # of qemu running
• BZ - 675030 - misleading error message from libvirt on bad xml
• BZ - 675698 - libvirt dies a quickly - udevGetSCSIType:753 : Failed to find SCSI device type 12
• BZ - 676374 - cannot set spice's passwdValidTo
• BZ - 676563 - libvirtd refuses to start after an ancient qemu package is installed
• BZ - 676686 - virsh attach-interface regression
• BZ - 676908 - libvirt can't snapshot guest with space in name
• BZ - 676984 - Failed to create encryption volume as /usr/bin/qemu-img argument is changed
• BZ - 677231 - virsh vol-list only displays one of the multipath
• BZ - 677308 - missing > in the xml generated by libvirt for smartcard
• BZ - 677484 - virDomainMemoryStats can crash client
• BZ - 677493 - domxml-from-native can crash libvirtd
• BZ - 677547 - Virsh save a shutoff guest get 'error: cannot resolve symlink'
• BZ - 677709 - libvirt: Accessing incorrect union field when setting up SPICE password causes crash
• BZ - 677729 - Random failures starting a guest with VEPA
• BZ - 678139 - Request for inclusion of nwfilter patch [13e9ba7c2b83e2c4fb74c17a885ffa8722137554]
• BZ - 678826 - [Cisco 6.1] libvirt 802.1Qbh: Delay IFF_UP'ing interface until migration final stage
• BZ - 678833 - virsh --quiet option doesn't work with snapshot-list command together
• BZ - 678870 - don't overwrite useful error message with "failed to parse XML"
• BZ - 679153 - virt-pki-validate has missing dependency
• BZ - 679164 - memory bugs in libvirt
• BZ - 680190 - unable to set swap_hard_limit tunable by virsh memtune
• BZ - 680281 - off-by-one in virFileAbsPath can lead to memory corruption
• BZ - 680398 - Sound device major number mistakenly added to cgroups ACL with VNC/SPICE graphics
• BZ - 681459 - [Libvirt] When shutting down VM's and restarting libvirtd, libvirtd crash when trying to start.
• BZ - 681492 - virsh start guest got "Out of space while reading console log output" errors
• BZ - 681948 - Request for inclusion of nwfilter patch [912d170f87b3d147bfde987249a727f7a7c7f1d7]
• BZ - 682249 - more memory bugs in libvirt
• BZ - 682741 - error: Failed to disconnect from the hypervisor, 1 leaked reference(s)
• BZ - 684655 - virsh doesnt work as an unprivileged user
• BZ - 684712 - Creating a storage pool with unsupported format type makes libvirtd dead
• BZ - 684870 - [Cisco 6.1 Bug Fix] libvirt 802.1Qbh: Add support for PREASSOCIATE_RR
• BZ - 687291 - dnsmasq not started for networks with no dhcp range and no static hosts
• BZ - 687551 - Defining multiple libvirt networks causes dnsmasq to hit DHCP lease max prematurely
• BZ - 687896 - libvirt fails to setup dnsmasq to listen for DNS requests on IPv6 addresses
• BZ - 687993 - libvirt leaks a pci configfd file into qemu on pci hostdev hotplug failure
• BZ - 688723 - libvirtd crashes with poorly formatted command
• BZ - 688774 - libvirtd can hang or crash from reference counting bugs when qemu process dies
• BZ - 688957 - libvirt doesn't log an error if /usr/sbin/radvd doesn't exist
• BZ - 689001 - macvtap: nlComm function doesn't log certain errors, leading to "unspecified error" logs
• BZ - 689002 - guest with assigned nic got kernel panic when send system_reset signal in QEMU monitor
• BZ - 689030 - throw a better error if blkio cgroup controller is too old
• BZ - 689986 - Unable to seek to <int> in /var/log/libvirt/qemu/<name of VM>.log
• BZ - 690022 - libvirt say radvd not installed but radvd is already installed when start network supporting ipv6
• BZ - 690183 - hotplug of usb hostdev can crash libvirt
• BZ - 690737 - libvirt tries to restore security label for the path passed to "save" even if saving fails.
• BZ - 691514 - [Libvirt] When starting multiple vms using vdsm (sasl-authentication) virDomainCreateXML does not return.
• BZ - 692998 - data loss if restoring libvirt domain encounters transient error
• BZ - 693385 - Libvirtd crashes or hangs when trying to reconnect qemu-kvm domain
• BZ - 693701 - SystemTAP tapset installed in wrong location
• BZ - 693963 - [6.1] regression - virsh freecell shouldn't require "--cellno"
• BZ - 696660 - crash in libvirtd during brDeleteTap

CVEs

(none)

References

• http://libvirt.org/news.html
• http://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.1_Technical_Notes/index.html#libvirt