RHBA-2011:1513 - Bug Fix Advisory

Topic

Updated libvirt packages that fix multiple bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In addition,
libvirt provides tools for remote management of virtualized systems.

These updated libvirt packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.2 Technical Notes for information on
the most significant of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/libvirt.html#RHSA-2011-1513

All users of libvirt are advised to upgrade to these updated packages, which
provide numerous bug fixes and enhancements.

Solution

Before applying this update, make sure that all previously-released errata
relevant to your system have been applied.

This update is available via Red Hat Network. Details on how to use the Red Hat
Network to apply this update are available at
https://access.redhat.com/kb/docs/DOC-11259

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 587276 - [LXC] can't connect to a OS container via console, and print any key expect "CTRL + ]" will make the container shutoff
• BZ - 589922 - permission denied error for NFS image, should libvirt error message mention virt_use_nfs?
• BZ - 590807 - libvirt: getvcpu errors logged to /var/log/messages when virt-manager starts
• BZ - 591058 - [LXC] the minimum limit of setmem need be improved.
• BZ - 591974 - RFE: seamless SPICE migration does not work with TUNNELLED flag
• BZ - 592170 - [LXC] The related process still exist after os container has been shutdown.
• BZ - 603039 - Reattach a pci device which is using by guest to host output wrong info
• BZ - 607526 - [LXC] Can not connect to fedora guest in LXC
• BZ - 609650 - Improve SCSI/ISCSI storage pools key and name field formats
• BZ - 611442 - Unclear error message is seen when try to start a pool with a non-existent source path.
• BZ - 632760 - RFE: Support for network QoS
• BZ - 639591 - A value of cpu_shares can't be set by virsh correctly.
• BZ - 643947 - RFE: Support a logical network switch abstraction
• BZ - 658713 - virsh attach-disk --persistent unsupported on kvm
• BZ - 664629 - Can't start guest with "disallow-dhcp-server" network filter
• BZ - 667620 - libvirt: adapt to spice qmp event changes
• BZ - 667624 - libvirt: adapt to set password monitor command changes
• BZ - 667631 - libvirt: spice client migration monitor command update
• BZ - 669586 - No expected error prompt when compress guest core dump to invalid format
• BZ - 673814 - [RFE] Add external API to change migration speed
• BZ - 674537 - Restarting libvirtd resets current snapshot
• BZ - 677220 - Live migration with non-shared storage for kvm
• BZ - 678027 - libvirtd: error: udevGetDMIData:1489 : Failed to get udev device for syspath ...
• BZ - 678548 - Replace exec: migration with fd: migration for domain save
• BZ - 679668 - virsh dommemstat returns a empty result
• BZ - 682121 - virsh help iface-name bug on Japanese Environment
• BZ - 682237 - Add support for configuring Spice compression options
• BZ - 682953 - terminate migration with ctrl-c; migrating the same guest again fails
• BZ - 683005 - libvirt ignores disk target parameter
• BZ - 684848 - virsh connect URI mistakenly tries to open default connection
• BZ - 688859 - no "shutdown" operation of daemon hook script is called when the libvirt daemon is restarted at first time
• BZ - 689388 - connect with UNIX sockets will ignore "server" part
• BZ - 689416 - Storage driver should flush host cache after cloning volumes to avoid possible data loss
• BZ - 689761 - (null) in generated '-chardev udp' line if XML omits parameters
• BZ - 690175 - [Libvirt][qemu-kvm] Split-brain when migrating vm and restarting libvirtd.
• BZ - 691830 - RFE: Add console screenshot support
• BZ - 692355 - Unable to add graphics console device after installing with --nographics option by virt-install
• BZ - 692663 - [Libvirt] Libvirtd hangs when qemu processes are unresponsive
• BZ - 692745 - RFE: Enhance the amount of debug available from libvirt in case of crash
• BZ - 693203 - Avoid virsh list hang when qemu becomes unresponsive
• BZ - 693661 - RFE: Add support for spice disable-copy-paste option
• BZ - 694382 - bridges created by libvirtd fail to start when the bridge device name is > 11 characters
• BZ - 694516 - [6.2 FEAT] Event logging framework for libvirt
• BZ - 695653 - [patch] Implement BOOT_TIMEOUT
• BZ - 696596 - tight loop of attach-device/detach-device fails because libvirt not using drive_del correctly
• BZ - 697650 - on disk xml should warn that it is autogenerated
• BZ - 697742 - libvirt: remove managedsave data when a domain is undefined
• BZ - 697841 - --verbose does not work well with tunnelled migration
• BZ - 698071 - Failed to start lxc guest with 'Unknown failure'
• BZ - 698133 - valid host subject is not passed to the spice-client during migration
• BZ - 698197 - 'Out of memory' error from libvirt on bad xml
• BZ - 698208 - libvirtd cannot start on s390x machine
• BZ - 698340 - [RFE] Add support for setting IOeventFD for virtio block
• BZ - 698490 - [6.1] The options of virsh dump are not checked properly.
• BZ - 698861 - starting domain leaks memory
• BZ - 699847 - [RHEL 6.1] "man virsh" says that "URI" is optional in connect option.
• BZ - 701305 - [RHEL 6] 'Mpath Storage Pool' refresh issues with libvirt.
• BZ - 701394 - [RFE] libvirt should report the elapsed time waiting for a response from a qemu process
• BZ - 702044 - Can't attach iso from readonly filesystem to VM because it can't be chowned
• BZ - 702411 - libvirt fails to save VM into NFS - "Unknown error 255"
• BZ - 703851 - LIBVIRT [RFE] [displayNetwork]- There should be a method to specify a symbolic network name, to be evaluated to IP on the destination host
• BZ - 704124 - [RFE] Allow read-only commands during qemu migration
• BZ - 704836 - Serial console is not disconnected automatically when a guest OS is shut down.
• BZ - 705405 - Libvirt: libvirt kills VM when SD connectivity is blocked on destination during VM migration
• BZ - 706869 - SR-IOV does not work, allegedly due to lack of ACS
• BZ - 706883 - libvirt virDomainMemoryPeek (memsave) command fails because of permissions problems on temporary file
• BZ - 706966 - python bindings free invalid pointers
• BZ - 707155 - Libvirt is taking 2.4G of memory after running 62 domains for 5 days
• BZ - 707173 - [Libvirt] virsh save changes file ownership while configured to dynamic_ownership=0
• BZ - 707212 - support connected paramater in set_password
• BZ - 707257 - libvirt fails to save VM into NFS
• BZ - 707439 - Video device can not be removed from guest
• BZ - 707530 - volDelete returns VIR_ERR_INTERNAL_ERROR if volume is still being allocated
• BZ - 707894 - [Libvirt] When restarting libvirtd just after creating a domain the new process is not properly tracked
• BZ - 709576 - lxc driver trys to connect to inactive domain's monitor.
• BZ - 710150 - Auditing of QEMU driver disk hotunplug events logs is missing and/or incorrect
• BZ - 710489 - RFE: Add support for taking screenshots of secondary monitors
• BZ - 711151 - libvirt regression with creating encrypted volume
• BZ - 711206 - [libvirt] [logs] null dereference while preparing libvirt logs
• BZ - 712050 - Hotplug disk fail with error: drive hotplug is not supported
• BZ - 713697 - Failed to load driver back after reattach node device
• BZ - 714752 - [Libvirt] virDomainSave should open destination file with O_DIRECT flag
• BZ - 715184 - when compiling libvirt src rpmball, it generates warning: 'ret' may be used uninitialized in 'qemuMonitorJSONAddDrive'
• BZ - 716393 - libvirtd crash/hang at virFDStreamEvent when qemu guest shuts down
• BZ - 716478 - Libvirt changes volume permissions when migrating to file
• BZ - 716826 - [libvirt] Cannot insert CD (update device) to VM when LIVE constant is not used in updateDeviceFlags command
• BZ - 716888 - RFE: Keep consistence between code and documentation on log level and usage
• BZ - 718143 - pool-define and pool-define-as ingores the --source-name and --source-format
• BZ - 719838 - error : virNetTLSContextLoadCredentials:162 : Unable to set x509 key and certificate
• BZ - 720269 - Convert KVM migration to use fd: instead of tcp: protocol
• BZ - 720889 - libvirt does not report error when attach device with wrong xml
• BZ - 721335 - Defects revealed by Coverity scan
• BZ - 721411 - [libvirt] When migrating domain libvirt start logging the error " virNetSocketReadWire:826 : Cannot recv data: Input/output error" ~8000 times a sec
• BZ - 722738 - Segmentation fault in _gnutls_string_resize
• BZ - 722748 - Segfault during peer2peer migration
• BZ - 722806 - virsh net-info command exists memory leak
• BZ - 722862 - [doc]confusion of iface-mac & iface-name in man page
• BZ - 723442 - connect to hypervisor with unconfigured tls/tcp connection reports wrong message
• BZ - 723447 - [libvirt] libvirtd (0.9.3-6) fails to start with rhevm's cert configured : 'cert_file="/etc/pki/vdsm/certs/vdsmcert.pem" # by vdsm'
• BZ - 723535 - pci-stub driver is lost after an attempt to boot a VM with a PCI device assigned to other VM
• BZ - 723811 - [libvirt] libvirt crash when running large number of domains and vdsm is restarted
• BZ - 723843 - [libvirt] virsh list produced segmentation fault when libvirtd is not running
• BZ - 723862 - "isolated" network is not actually isolated due to dns-tunneling via dnsmasq
• BZ - 725322 - memory leak when setting blkiotune weight value of guest
• BZ - 725673 - do not fail migration if destination does not see ejected cdrom
• BZ - 725702 - libvirtd should delete its UNIX domain sockets after remove libvirt package
• BZ - 725935 - memory leak when run virsh vol-path command
• BZ - 725950 - memory leak when run virsh vol-upload command
• BZ - 726304 - Error output for blkiotune command when set invalid weight number
• BZ - 726398 - libvirt-0.8.7-18.el6 doesn't correctly log failed hook scripts
• BZ - 726616 - View libvirt host lists via avahi failed using virt-manager
• BZ - 726650 - Pause a domain while being migrated will cause migration error
• BZ - 727047 - domjobabort works abnormal on libvirt-0.9.4-0rc2.el6
• BZ - 727071 - libvirtd crashes if client quits unexpectedly
• BZ - 727088 - Directory shouldn't be listed as type 'file' with vol-list command
• BZ - 727094 - Error return value and output for memtune command when use --min-guarantee option
• BZ - 727249 - managedsave can crash libvirt
• BZ - 727474 - creating libvirt storage pools fails for lvm volume groups with striped volumes
• BZ - 727502 - Error output for virsh blockjob/blockpull command
• BZ - 727982 - /var/lib/libvirt/dnsmasq/default.hostsfile lags behind changes
• BZ - 728153 - libvirtd returns wrong error msg when using service instead of initctl
• BZ - 728203 - PCI device can not be auto reassigned to host after detach with managed=yes
• BZ - 728428 - hotplug disk/device and then restart libvirtd, the disk/device will be attached permanently
• BZ - 728654 - libvirtd.conf error causes libvirtd to exit silently
• BZ - 728835 - lxc guest can not start
• BZ - 728992 - Libvirt broken large file support [6.2]
• BZ - 729198 - fix sasl session relocking intead of unlocking it
• BZ - 729567 - Out of memory when DNS resolving fails during migration
• BZ - 729714 - libvirt managedsave incompatible with transient domains
• BZ - 729874 - SSL spice session can't be kept during migration
• BZ - 729945 - nwfilter: tolerate disappearing interfaces while instantiating filter
• BZ - 730101 - console is not properly released in interactive virsh
• BZ - 730244 - libvirt error message should show the uri content but not (null)
• BZ - 730428 - libvirt lost SIGHUP reloading behavior
• BZ - 730600 - Bugfix: Check stdoutWatch before removing the handler.
• BZ - 730615 - avoid crash on process attach
• BZ - 730750 - libvirt error in restoring domain with corrupt managedsave image
• BZ - 730753 - support for seamless SPICE migration - botched patch in rhel 6.2 libvirt build
• BZ - 730909 - setting disk with error_policy=enospace will cause error when install guest
• BZ - 731157 - Libvirt connections leak File Descriptors in v0.9.3
• BZ - 731243 - Migration failed with unable to execute QEMU command 'getfd'
• BZ - 731579 - exiting console in interactive virsh causes subsequent commands to fail
• BZ - 731583 - garbled console in interactive virsh session
• BZ - 731584 - exiting the console during output causes subsequent commands to fail
• BZ - 731673 - virsh # start domain1 --console hang there at the third time
• BZ - 732893 - connect libvirt via qemu+tls failed
• BZ - 733499 - memory leak and bogus snapshot listing on failed libvirt snapshots
• BZ - 733529 - virsh snapshot-delete --children is broken
• BZ - 733597 - sending a bad keycode to guest can crash libvirt
• BZ - 733762 - problems with libvirt start and snapshot resume with paused domains
• BZ - 733806 - libvirt should reject snapshots of autodestroy domains
• BZ - 733998 - Migrate will fail with --tunnelled
• BZ - 735008 - memory leak on volume creation with non-existent backing file
• BZ - 735011 - virsh hang up with autodestroy domains after doing save operation fail
• BZ - 735441 - Incorrect hardcoded sector size in disk storage pool
• BZ - 735442 - Sanlock socket is incorrectly labelled for SELinux
• BZ - 735443 - Incorrect path length check on sanlock lockspace limits directory name length to 47 characters
• BZ - 735457 - libvirt should not leave stale snapshot metadata behind after domain disappears
• BZ - 735495 - virsh should have better snapshot support
• BZ - 735498 - libvirt undefine on running guest should allow transition from persistent to transient
• BZ - 735553 - libvirt should check for ABI compatibility of snapshots
• BZ - 735650 - memory leak on virNetTLSContextCheckCertificate and testTLSSessionInit
• BZ - 736214 - PCI device can not be reattach to host automatically if attach-device failed with "managed=yes"
• BZ - 736297 - Typo of virsh send-key.
• BZ - 736603 - [libvirt][domblkinfo] libvirtd crash on domblkinfo.
• BZ - 736682 - snapshot-create can not work
• BZ - 737010 - libvirtd crash when executing "virsh snapshot-create-as" command sometimes
• BZ - 737176 - SSH GSSAPI login broken
• BZ - 737881 - After issue "event-test.py qemu:///system", opening virt-viewer will kill service libvirtd
• BZ - 738095 - Need an xml switch to disable rombar of assigned devices
• BZ - 738314 - missing requirement of libvirt-lock-sanlock package
• BZ - 738388 - Unable to passthrough multifunction PCI devices to KVM guests
• BZ - 738411 - doc: typo errors on virsh help snapshot-create-as
• BZ - 738439 - missing functions on remote libvirt give wrong error
• BZ - 738534 - virt-sanlock-cleanup command doesn't work
• BZ - 738778 - libvirtd crash during restart if running guest has <filterref>
• BZ - 739518 - License incompatibility due to use of GPLv2-only sanlock library
• BZ - 739704 - Coverity found several mem leaks in libvirt
• BZ - 740168 - virsh send-key and qemu-monitor-command does not work
• BZ - 740478 - [Regression]no output when set character device type to pipe
• BZ - 740508 - [virsh command]The option --paused and --running belong to command save-image-define don't work.
• BZ - 740533 - Migration with --dname failed with error
• BZ - 740686 - virsh nodedev-* commands are undocumented
• BZ - 740899 - [qemu-kvm][scalability] qemu could not open disk error at 256 devices
• BZ - 741217 - KVM guest install fails with libvirtError: cannot send monitor command '{"execute":"query-balloon"}': Connection reset by peer
• BZ - 741337 - Client blocks indefinitely on virStream API
• BZ - 742277 - Daemon crashes during migration and dumpxml
• BZ - 742410 - Output need be improved for virsh snapshot-parent
• BZ - 742615 - libvirt snapshot revert should require force in some risky cases
• BZ - 742646 - libvirtd fails to start - Failed to find group record for name 'qemu'
• BZ - 743176 - bandwidth info in <portgroup> isn't used if forward mode='nat|route|bridge|none'
• BZ - 743817 - [libvirt][events] sometimes after migrating a large number of domains, Events does not arrive to the client side.
• BZ - 743843 - Deadlock if client sends an RPC message with unknown program
• BZ - 744071 - virsh snapshot-edit can't edit disk snapshots
• BZ - 744548 - Attaching to a nonexistent PID causes libvirtd to crash
• BZ - 744724 - virsh snapshot-edit allow to change snapshot name and create a new fake snapshot with the new name
• BZ - 745734 - Check for domain being active on successful job acquire
• BZ - 746075 - screenshot leaks pipe fd
• BZ - 747516 - Coverity scan revealed defects

CVEs

(none)

References

• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.2_Technical_Notes/libvirt.html#RHSA-2011-1513