RHBA-2012:0746 - Bug Fix Advisory

Topic

Updated qemu-kvm packages that fix multiple bugs and add various enhancements
are now available for Red Hat Enterprise Linux 6.

Description

KVM (Kernel-based Virtual Machine) is a full virtualization solution for Linux
on AMD64 and Intel 64 systems. qemu-kvm is the user-space component for running
virtual machines using KVM.

These updated qemu-kvm packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.3 Technical Notes for information on
the most significant of these changes:

https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/qemu-kvm.html#RHBA-2012-0746

All users of qemu-kvm are advised to upgrade to these updated packages, which
fix these bugs and add these enhancements.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64

Fixes

• BZ - 582475 - RFE: Support live migration of storage (live streaming)
• BZ - 594654 - Random read/write /dev/port [vga] caused 'invalid parameters' error
• BZ - 638055 - Allow qemu-img re-base with undersized backing files
• BZ - 653779 - [RFE] VNC server ignore shared-flag during client init
• BZ - 674583 - qemu-kvm build fails without --enable-spice
• BZ - 676484 - There is no indication of full preallocation mode in qemu-img man page
• BZ - 688586 - Errors in man page: [un]supported tls-channels for Spice
• BZ - 698936 - Migrate failed from RHEL6.1 host to RHEL6.3 host with -M rhel6.1.0 (qxl and usb device related)
• BZ - 719269 - No -redhat-disable-KSM introduction in man page
• BZ - 723754 - Update qemu-kvm -global option man page
• BZ - 725636 - The memory value is initialized to the original max value after hot plug the second virtio balloon
• BZ - 725748 - Update qemu-img convert/re-base/commit -t man page
• BZ - 728385 - attempting to take a screenshot of a VM with no graphics crashes qemu
• BZ - 736942 - qcow2:Segment fault when rebase snapshot on iscsi disk but do no create the qcow2 file on it
• BZ - 737879 - Qemu-kvm fails to exit when given invalid "-drive" option name or option value
• BZ - 738519 - Core dump when hotplug/hotunplug usb controller more than 1000 times
• BZ - 739944 - CD-ROMs cannot be ejected in virtualized Fedora 16
• BZ - 740504 - SCSI INQUIRY (opcode 0x12) to virtio devices in the KVM guest returns success even when the underlying host devices have failed.
• BZ - 743251 - segfault on monitor command "info spice" when no "-spice" option given
• BZ - 745758 - Segmentation fault occurs after hot unplug virtio-serial-pci while virtio-serial-port in use
• BZ - 747010 - ksmtuned uses "vsz" instead of "rsz" when calculating qemu-kvm mem usage ( KSM turn on too early )
• BZ - 747011 - Taking screenshot hangs Spice display when a client is connected
• BZ - 748810 - qemu crashes if screen dump is called when the vm is stopped
• BZ - 749820 - Use after free in acl_reset
• BZ - 750738 - Segmentation fault if -chardev without backend
• BZ - 750739 - Work around valgrind choking on our use of memalign()
• BZ - 752049 - windows guest hangs when booting with usb stick passthrough
• BZ - 754565 - Fix device assignment Coverity issues
• BZ - 757132 - QEMU console underline causes read beyond static array, draws crap pixels
• BZ - 757142 - Invalid command line option -device '?=x' crashes
• BZ - 757713 - File name completion in monitor can append '/' when it shouldn't
• BZ - 758194 - Coverity omnibus
• BZ - 761439 - Add command to put guest into hibernation to qemu-ga
• BZ - 766303 - [RFE] Resume VM from s3 as a response for monitor/keyboard/mouse action
• BZ - 767499 - windows 2k8 hit BSOD while booting guest with usb device [tracing win2k8 and win7]
• BZ - 769142 - Qemu-kvm core dumped when connecting to listening vnc with "reverse"
• BZ - 769745 - Released usb stick after passthrough fails to be reused on host
• BZ - 769760 - Formatting of usb-storage disk attached on usb-hub fails to end
• BZ - 770512 - Virtio serial chardev will be still in use even failed to hot plug a serial port on it
• BZ - 781920 - rtl8139: prevent unlimited send buffer allocated for guest descriptors.
• BZ - 782161 - pci-assign: Fix multifunction support
• BZ - 782825 - backport isa-debugcon
• BZ - 783950 - RFE: Backport corountine-based block layer
• BZ - 785683 - A live snapshot shouldn't reconfigure the backing file path in the new image
• BZ - 785963 - keys left pressed on the vncserver when closing the connection
• BZ - 787974 - Spice Client mouse loss after live migrate windows guest with spice vmc channel and inactive guest service
• BZ - 788027 - Spice and vnc connection buffer keyboard and mouse event after guest stopped
• BZ - 789417 - Fix memory leak in register save load due to xsave support
• BZ - 790083 - qxl: primary surface not saved on migration when the qxl is in COMPAT mode
• BZ - 790350 - qemu-img hits core dumped with error "qcow2_cache_destroy: Assertion" when does "qemu-img convert ........"
• BZ - 790421 - exit with error when tls-port is not specified but tls is enabled by tls-channel or x509* options
• BZ - 791200 - Character device consumers can miss OPENED events
• BZ - 795652 - Inappropriate __com.redhat_spice_migrate_info error handler causes qemu monitor hanging
• BZ - 796118 - qemu hits core dump when boot guest with 2 pass-though usb devices under 1.1 controller
• BZ - 796575 - qemu-kvm wakes up 66 times a second
• BZ - 797186 - QMP: Backport the I/O status feature
• BZ - 798857 - pkill qemu-kvm appear block I/O error after live snapshot for multiple vms in parallelly
• BZ - 798936 - enable architectural PMU cpuid leaf for kvm
• BZ - 800710 - migration crashes on the source after hot remove of virtio-scsi controller
• BZ - 801416 - virtio-scsi: use local image as guest disk can not configure the multipath
• BZ - 803219 - virtio-scsi:after eject virtio-scsi CD-ROM tray-open's value still be 0
• BZ - 803344 - qemu-img convert doesn't print errno strings on I/O errors
• BZ - 805362 - guest kernel call trace when hotplug vcpu
• BZ - 807313 - qemu-kvm core dumped while booting guest with usb-storage running on uhci
• BZ - 807512 - qemu exit and Segmentation fault when hotplug vcpus with bigger value
• BZ - 807878 - Cannot hear sound when passthrough a USB speaker into RHEL guest
• BZ - 807898 - guest quit or device hot-unplug during streaming fails
• BZ - 807916 - boot from the USB storage core dumped after press "ctrl-alt-delete"
• BZ - 810471 - boot fails while starting guest with sockets>62 and cores=1 and threads=1 option and 10 virtio disks
• BZ - 810507 - prepare virtio-scsi migration format for multiqueue
• BZ - 810983 - QAPI may double free on errors
• BZ - 811228 - block streaming reverts image to auto-probe backing file format
• BZ - 812085 - use the name block-job-cancel to indicate async cancel support
• BZ - 812328 - qemu-kvm aborted when using multiple usb storage on Win2003 guest
• BZ - 812705 - Installing guest with cluster_size=4096, failed
• BZ - 812833 - qcow2 converting error when -o cluster_size <= 2048
• BZ - 813810 - plug small race window at the end of block_stream command
• BZ - 813862 - post-snap1 fixups to live block copy aka mirroring
• BZ - 813953 - block-job-set-speed is racy with block-stream/drive-mirror
• BZ - 814617 - NFS performance regression in large file sequential writes.
• BZ - 816471 - qemu-kvm is not closing the merged images files (mirroring with "full"=true)
• BZ - 818226 - Weird check for null pointer in mirror_abort()
• BZ - 818876 - streaming to stable iscsi path names (with colons) fails to close backing file
• BZ - 819562 - SMEP is enabled unconditionally

CVEs

(none)

References

• https://docs.redhat.com/docs/en-US/Red_Hat_Enterprise_Linux/6/html/6.3_Technical_Notes/qemu-kvm.html#RHBA-2012-0746