RHBA-2013:0725 - Bug Fix Advisory

Topic

Updated libvirt packages that fix two bugs are now available for Red Hat
Enterprise Linux 6.

Description

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In addition,
libvirt provides tools for remote management of virtualized systems.

This update fixes the following bugs:

• When SELinux was disabled on a host, or the qemu driver was configured not to

use it, and the domain XML configuration contained an explicit seclabel option,
the code parsed the seclabel option, but ignored it later on when it was
generating labels on domain start, and created a new and empty seclabel entry
[seclabeltype='none'/]. Consequently, a migration between two hosts running Red
Hat Enterprise Linux 6.4 failed with the following error message:

libvirtError: XML error: missing security model when using multiple labels

With this update, if a seclabel entry already exists, a new one is no longer
created, and the migration works as expected in the described scenario.
(BZ#928879)

• An ABI inconsistency in messages of the kernel netlink protocol between Red

Hat Enterprise Linux versions 6.3, 6.4, and 6.4.z was causing errors when
libvirt sent a netlink NLM_F_REQUEST message if the libvirt binary had been
built using kernel header files from a different version of the kernel than the
version on the machine running libvirt. Consequently, PCI passthrough device
assignments of SR-IOV network devices failed if they used the [interface
type='hostdev'] option, or if the libvirt network was set with the [forward
mode='hostdev'] option. In such a case, the following error message or a similar
one was returned:

error dumping (eth3) (3) interface: Invalid argument

With this update, libvirt retries the NLM_F_REQUEST message formatted
appropriately for all three versions of the kernel. Now, a single libvirt binary
successfully assigns SR-IOV network devices to a guest using PCI passthrough on
a host running any version of Red Hat Enterprise Linux 6 kernel. (BZ#928881)

Users of libvirt are advised to upgrade to these updated packages, which fix
these bugs. After installing the updated packages, libvirtd will be restarted
automatically.

Solution

Before applying this update, make sure all previously-released errata relevant
to your system have been applied.

This update is available via the Red Hat Network. Details on how to use the Red
Hat Network to apply this update are available at
https://access.redhat.com/knowledge/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 6.4 i386
• Red Hat Enterprise Linux Server - AUS 6.4 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 6.4 s390x
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 6.4 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Virtualization 3 for RHEL 6 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.4 x86_64
• Red Hat Enterprise Linux Server - Extended Update Support from RHUI 6.4 i386
• Red Hat Gluster Storage Server for On-premise 2.1 x86_64
• Red Hat Storage for Public Cloud (via RHUI) 2.1 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x

Fixes

• BZ - 928879 - RHEL-6.4: migration is failing: libvirtError: XML error: missing security model when using multiple labels

CVEs

(none)

References

(none)