RHBA-2014:1374 - Bug Fix Advisory

Topic

Updated libvirt packages that fix numerous bugs and add various enhancements are
now available for Red Hat Enterprise Linux 6.

Description

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems. In addition,
libvirt provides tools for remote management of virtualized systems.

These updated libvirt packages include numerous bug fixes and enhancements.
Space precludes documenting all of these changes in this advisory. Users are
directed to the Red Hat Enterprise Linux 6.6 Technical Notes for information on
the most significant of these changes:

https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/libvirt.html#RHBA-2014-1374

Users of libvirt are advised to upgrade to these updated packages, which fix
these bugs and add these enhancements. After installing the updated packages,
libvirtd will be restarted automatically.

Solution

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

This update is available via the Red Hat Network. Details on how to
use the Red Hat Network to apply this update are available at
https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 6 x86_64
• Red Hat Enterprise Linux Server 6 i386
• Red Hat Enterprise Linux Workstation 6 x86_64
• Red Hat Enterprise Linux Workstation 6 i386
• Red Hat Enterprise Linux Desktop 6 x86_64
• Red Hat Enterprise Linux Desktop 6 i386
• Red Hat Enterprise Linux for IBM z Systems 6 s390x
• Red Hat Enterprise Linux Server from RHUI 6 x86_64
• Red Hat Enterprise Linux Server from RHUI 6 i386
• Red Hat Virtualization 3 for RHEL 6 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 6 i386
• Red Hat Enterprise Linux for Power, big endian 6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 6 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension 6 i386
• Red Hat Enterprise Linux Server - Extended Life Cycle Support Extension (for IBM z Systems) 6 s390x

Fixes

• BZ - 744967 - vm will not boot up when migration during vm reboot
• BZ - 748282 - libvirt should skip not activated/suspended volumes during pool-create/pool-refresh for logical pools
• BZ - 786408 - [RFE] Need ability to configure system entropy source for qemu
• BZ - 807023 - libvirt does not check for successful device_del
• BZ - 808463 - document that transient hotplugged devices don't persist through s4 state
• BZ - 844378 - error messages may not be propagated properly during failed migration
• BZ - 851411 - Error message is unclear when attempting to restore a domain from a non-existent file
• BZ - 851413 - need clear error message when virsh connect to an invalid URI
• BZ - 857312 - Failed to run numatune with specified node
• BZ - 869053 - per-VM DAC labeling needs to impact how root-squashed NFS files are opened
• BZ - 880521 - virsh snapshot-create error message is not correct when add --disk-only and --memspec together
• BZ - 884382 - list_all_interfaces can not list any interfaces with default flag
• BZ - 884926 - it should give better error message when fail to create external system check point snapshot
• BZ - 885963 - memory image of external system checkpoint is retained even if the command fails
• BZ - 890457 - virsh snapshot-info get incorrect info
• BZ - 892508 - snapshot-create-as --print-xml creates an incomplete xml
• BZ - 893273 - virt-xml-validate pass but pool can not be defined by the xml
• BZ - 902652 - Libvirt can't handle the varible of vcpu properly
• BZ - 903480 - Error messages produced in libvirtd.log when destroy the domain which has network filter
• BZ - 905280 - Lockfailure action Ignore will lead to sanlock rem_lockspace stuck
• BZ - 906639 - libvirt should clean and revert env after fail to create snapshot with a bad img using --reuse-external
• BZ - 911996 - spelling issue in error message from virt-top when libvirtd is stopped
• BZ - 923125 - block copy can't cancel if the exist file does not have enough space
• BZ - 927160 - bandwidth limit for block copy/pull will fail if the value reach to 17592186044415
• BZ - 927497 - redundant ")" after --change-protection option in virsh help migrate
• BZ - 947974 - virDomainGetCPUStats returns binary data in error message when domain doesn't exist
• BZ - 948821 - wrong measurement units in the documentation
• BZ - 949776 - A typo in manual about net-list option of virsh command
• BZ - 950830 - The error message is wrong while migrating with incorrect parallel port in the xml
• BZ - 952938 - virsh doesn't properly handle invalid values for send-key --holdtime option
• BZ - 953126 - <graphics type="spice" defaultMode="secure"/> should require spice_tls=1 and tlsPort to be set
• BZ - 953721 - Can not login the spice guest with password set in qemu.conf
• BZ - 954245 - Improve base label handle in dynamic labeling mode
• BZ - 955539 - help info description for vol-upload is incorrect
• BZ - 956968 - redundant command "nodedev-dettach" while running "virsh help nodedev"
• BZ - 961655 - The error message is wrong when the vcpu count in xml is different with guest during migration
• BZ - 963881 - virDomainBlockInfo is failing on NFS when root_squash is enabled (Permission denied)
• BZ - 977706 - virsh pool-refresh will remove the pool if remove volume in the processing
• BZ - 980350 - Issues with inbound and outbound elements under bandwidth and peak attribute of outbound element
• BZ - 983018 - RFE: add support for new -spice disable-agent-file-xfer qemu commandline option
• BZ - 996840 - The display format of "nodedev-reattach" should be improved in the man help
• BZ - 999454 - blockJobInfo python API run success but return None
• BZ - 1000357 - vcpu hotplug without <acpi> feature fail but vcpucount updated
• BZ - 1000890 - met error when run virt-sanlock-clean.
• BZ - 1002813 - block_resize returns undefined error
• BZ - 1006699 - need add "interface" to virt-xml-validate manual page
• BZ - 1012834 - the virtual interface can't be hotpluged with command "attach-interface" while the guest contains VF
• BZ - 1012846 - libvirtd do not pin vcpu process according numad returned
• BZ - 1018695 - qemu live migration port conflicts with other users of ephemeral port(s)
• BZ - 1019926 - Virtual machine does not start if CD is not in drive
• BZ - 1020372 - regression in event deregistration
• BZ - 1022872 - In man page of virsh, a typo 'COMMMANDS' displays three times
• BZ - 1022924 - hosted engine | two qemu processes with the same VM ID runs on two different machines. Also the sanlock resource taken on two machines on the same storage.
• BZ - 1024159 - pool-info get the wrong 'Allocation' and 'Availabe' after vol-create-as failed
• BZ - 1027096 - Running domain may disappear after libvirtd is restarted when selinux security driver is disabled and didn't enable the model='selinux' in guest's xml
• BZ - 1029299 - session libvirtd crashes on nwfilter-define
• BZ - 1030736 - libvirtd crash when create/destroy VM repeatedly
• BZ - 1035109 - Implement the error message while plug more CPUs than set in "current" using the guest agent
• BZ - 1035134 - Stable guest ABI doesn't check ram value of video
• BZ - 1035190 - libvirt wrong parse of usbredir alias name
• BZ - 1035529 - Stable guest ABI doesn't check redirected usb device
• BZ - 1040507 - Inconsistent blockInfo values when the VM is finalizing live migration
• BZ - 1043069 - CVE-2013-6458 libvirtd crashes when swapping disks in qemu guest multiple times - qemuMonitorJSONGetBlockStatsInfo segfault [rhel-6.6]
• BZ - 1044790 - Doc bug: Only the image that can be listed by vol-list can be removed by undefined with option remove-all-storage
• BZ - 1045833 - Fail migration when VM get paused due to EIO
• BZ - 1047659 - bidirectional VMs migration between 2 hosts fail on VM doesn't exist / fatal error
• BZ - 1051364 - libvirt monitor socket didn't show up sometimes
• BZ - 1057321 - QoS settings not applied to libvirt bridged network
• BZ - 1060557 - VMs with names longer than 48 characters can be created but not started
• BZ - 1064831 - Have upstream network hooks available in 6.6
• BZ - 1067062 - virt-manager: could not build physical interface via libvirt
• BZ - 1073227 - Peer-to-peer migration fails if migrate_uri is set and includes both IP address and port
• BZ - 1076719 - libvirtd crashes if VM crashes or is destroyed while hot-attaching disks
• BZ - 1078328 - backport upstream qemu: Don't require a block or file when looking for an alias ro RHEL6
• BZ - 1078589 - use of tls with libvirt.so can leave zombie processes
• BZ - 1081032 - RFE: QEMU: export the live disk snapshot capabilities
• BZ - 1083238 - Migration of a VM fails if another API allowed during migration takes a long time to finish
• BZ - 1083483 - The guest migrate very slow while set the migrate-speed to -1
• BZ - 1084477 - [BUG] Quality of service does just apply to protocol "ip" instead of the device
• BZ - 1088034 - VM migration in RHEV environment failed due to libvirt error "Failed to inquire lock: No such process"
• BZ - 1088165 - libvirtd crashed after hot-unplug the vcpus which is pined to host cpus
• BZ - 1088703 - libvirt loses track of hotplugged vcpus after daemon restart
• BZ - 1088748 - [Doc] fail to hot-plug vcpus while guest is in booting phase
• BZ - 1089389 - Virt-v2v from VMWare VM to RHEV fails when virtualHW.version is '10'
• BZ - 1092412 - The error message is not correct while hot-plug/unplug vcpus with flag "--guest" and "--config"
• BZ - 1092882 - vol-list get volume which actually does not exist
• BZ - 1095135 - can't use iso images on readonly nfs filesystem
• BZ - 1095774 - virsh iface-dumpxml or virt-manager reports "bond interface misses the bond element" for inactive bond interfaces
• BZ - 1097969 - libvirt-python API baselineCPU doesn't generate exception
• BZ - 1098833 - After migration failed in last phase, didn't resume VM on source host
• BZ - 1100173 - Get some invalid read reports from valgrind while connect the hypervisor using TLS with SASL via ipv4
• BZ - 1105397 - libvirt fails to log the stderr the hook returns
• BZ - 1105954 - Fail to start guest while disable the default security labeling
• BZ - 1108590 - Libvirtd will crash while start a guest which DAC's seclabel type='none' in guest's xml
• BZ - 1109120 - [LXC] Segmentation fault occurs when start lxc guest
• BZ - 1111455 - libvirtd crash when hotplug a nic from macvtap-passthrough network with specified 'pf'
• BZ - 1112066 - libvirt failed to start a domain with unix+guestfwd channel
• BZ - 1113316 - python bindings for graphics event have wrong value for address type
• BZ - 1113860 - The guest will disappear after restart the libvirtd service while set seclabel type='static' model='none' relabel='yes'/> in guest's xml.
• BZ - 1114619 - registerCloseCallback doesn't work in libvirt-python
• BZ - 1115039 - [vdsm] libvirtError: argument unsupported: QEMU driver does not support <metadata> element
• BZ - 1116741 - Failed to start pool with iscsi storage
• BZ - 1116754 - [RHEL6.6]libvirtd will crash after create two network by virsh command
• BZ - 1119385 - The default behavor of abort block job with pivot flag isn't sync
• BZ - 1122205 - 'virsh desc $dom blah' doesn't survive libvirtd restart
• BZ - 1122819 - Cannot use blkdeviotune to set limit for a shut off guest
• BZ - 1137011 - DHCP static assignments are broken
• BZ - 1138222 - Fail to managedsave while configure <cpu mode='host-model'> in the guest's xml

CVEs

(none)

References

• https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/6/html/6.6_Technical_Notes/libvirt.html#RHBA-2014-1374