RHEA-2017:1846 - Product Enhancement Advisory

Topic

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Description

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.4 Release Notes linked from the References section.

Users of libvirt are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Virtualization 4 for RHEL 7 x86_64
• Red Hat Virtualization 3 for RHEL 7 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Virtualization for IBM Power LE 3 ppc64le
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.5 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.4 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Virtualization for IBM Power LE 4 for RHEL 7 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.4 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 822148 - libvirt should enforce guest CPU configuration
• BZ - 824989 - make sure guest CPU doesn't change when a domain is started on another host
• BZ - 1004676 - libvirt should forbid to define or start 'hostdev' network which contains PF pci addresses
• BZ - 1018251 - Enabling <cpu mode="host-model"> does not use correct cpuid level, causes kernel panics
• BZ - 1106416 - No internal snapshot should be created when guest xml with snapshot='no'
• BZ - 1106419 - No snapshot should be created when create external disk snapshot without specify disk while guest is shut off
• BZ - 1181659 - [RFE] Add support for QEMU notification of disk usage threshold exceeded
• BZ - 1189275 - Resuming a block device (dm) changes its selinux context
• BZ - 1191901 - live external disk-only snapshot deadlocks with lock manager
• BZ - 1207095 - host-passthrough model cpu with feature policy will be covered by host cpu after migrate/restore
• BZ - 1214369 - RFE: ability to configure file backed guest RAM with regular page sizes
• BZ - 1218603 - libvirt must audit resource information about ivshmem
• BZ - 1247005 - special characters in guest disk file name cannot pass virt-xml-validte
• BZ - 1257813 - Domain can not start with virtio console
• BZ - 1283207 - RFE: implement max_monitor option for qxl video
• BZ - 1283251 - [RFE] Libvirt - config Qemu to use IOMMU for Virtio
• BZ - 1300177 - Forbid using relative path or file name only as the destination of drive-mirror
• BZ - 1300769 - RFE: add support for native TLS encryption on migration TCP transport
• BZ - 1300776 - RFE: add support for native TLS encryption on chardev TCP transports
• BZ - 1302168 - blockjob --pivot failed with virtlockd on after blockcopy for os images
• BZ - 1302171 - [blockcopy] unknown error while virtlockd is on
• BZ - 1316774 - vm failed to start with mlock
• BZ - 1329090 - Provide proper error when setting pcie-switch-upstream-port controller's index >=257
• BZ - 1330024 - Under q35 libvirt auto-plugs virtio devices into pci-bridge
• BZ - 1332019 - RFE: storage: report volume <physical> size in XML
• BZ - 1335798 - target dev name will be ignored for network interface when interface type=direct
• BZ - 1335832 - add support to use unix sockets for SPICE graphics console
• BZ - 1336564 - Extend <iotune> for QEMU group I/O throttling
• BZ - 1343094 - e1000e network device should be assigned an address on a PCIe controller rather than legacy PCI
• BZ - 1343858 - Guest image owner changes to root:root if kill source libvirtd in migration confirm phase.
• BZ - 1346566 - [pool/volume]when set part_separator='yes', and use a bad volume name for vol-create-as, error returned, but new partition still created in backend.
• BZ - 1347049 - ivshmem-plain support in RHEL 7.3
• BZ - 1349441 - find-storage-pool-sources-as/find-storage-pool-sources doesn't work for gluster type pool
• BZ - 1349898 - Extend <iotune> for QEMU bps_max_length/iops_max_length
• BZ - 1350391 - Libvirt should check multifunction is enabled on function 0 for multi-functional devices
• BZ - 1354253 - virtlogd should fail to start when set max_clients larger than the maximum value of int type
• BZ - 1356769 - The integers in output of some virt-admin commands should not be signed
• BZ - 1356881 - "srv-list" still outputs extra informational messages in quiet mode
• BZ - 1357358 - Memory leaks when virt-admin client is disconnected forcely.
• BZ - 1357416 - [NPIV] memory leak when frequently nodedev-create/destroy virtual fc cards.
• BZ - 1358181 - virsh does not always respect -q/--quiet
• BZ - 1359135 - Libvirt fails to assign persistent DIMM slot addresses
• BZ - 1360533 - The error message need to improve when enable a perf event on a host which do not support it
• BZ - 1363586 - "pool-build --no-overwrite" still mkfs a partition even if the partition has existing filesystem
• BZ - 1364843 - libvirt should not reserve the port setting in the xml when vnc_auto_unix_socket takes effect
• BZ - 1365779 - libvirt show wrong vcpupin/emulatorpin configure on a guest which is automatic nodeset
• BZ - 1366088 - The graphics type changed after migration
• BZ - 1366108 - libvirt use wrong qmp command to hotplug a vhostuser network
• BZ - 1366460 - When "pool-build --overwrite" a block device as a whole partition with filesystem=ext2/ext3/ext4/vfat, it will fail because libvirt call "mkfs" command without "-F/-I"(Force)
• BZ - 1366505 - Failed to attach vhostuser network device with mult-queues.
• BZ - 1368351 - virsh migrate option --rdma-pin-all is missing in virsh man page
• BZ - 1368368 - Fail to update source of cdrom after restore
• BZ - 1368417 - update-device fail to update startupPolicy for hard disks with --persistent but successful with --live
• BZ - 1369633 - Virtio-gpu should be supported as secondary gpu in libvirt
• BZ - 1370357 - cold plug vcpu will make guest have broken settings
• BZ - 1370360 - libvirt report wrong vcpu order number
• BZ - 1371039 - CPU features with policy 'disable' should not be supported in the guest.
• BZ - 1371358 - Failed with unexpected error when doing post-copy migration with --tunnelled
• BZ - 1371617 - Libvirt passes unsupported "arat" flag to QEMU when using host-model
• BZ - 1371758 - RFE:Add json pseudo protocol support for rbd
• BZ - 1372580 - hotplug USB disk device miss drive_del on failure
• BZ - 1372581 - CPU feature xsaves is not work properly
• BZ - 1373184 - Use nec-xhci USB controller by default on ppc64
• BZ - 1373535 - smbios serial parameter insufficiently escaped when passed from XML to qemu-kvm
• BZ - 1373711 - pool-build with --overwrite doesn't work for logical pool
• BZ - 1373849 - CPU feature cmt/mbm_local/mbm_total don't work properly with custom mode and minimum match
• BZ - 1374126 - using polkit with virsh for non-root access does not work via ssh on a remote host
• BZ - 1374128 - Guest fails to start if some USB devices have no port in address but others have
• BZ - 1374718 - virsh save doesn't work after postcopy migration
• BZ - 1375268 - 'virsh setvcpus' fails on systems with no memory in some NUMA nodes
• BZ - 1375410 - Hot-plugged USB redirect device cannot generate address
• BZ - 1375417 - Libvirt should give the range for the configurable ports in nec-usb-xhci
• BZ - 1375524 - Failed to migrate guest back to rhel7.2 on host which support 'arat' with host-model
• BZ - 1375887 - volume xml's encryption info lost after pool refreshed
• BZ - 1375920 - libvirt show wrong vcpuinfo for a inactive guest with hotpluggable vcpu
• BZ - 1375939 - libvirt setvcpus doesn't work well with old qemu
• BZ - 1376009 - [RFE] allow setting of log level for gluster driver (libvirt)
• BZ - 1376083 - Spice migration can't finish when migrate a guest with spice listen on port '0' from RHEL7.2 to RHEL7.3
• BZ - 1377602 - hotplug of UDP chardev backends does not work properly
• BZ - 1377913 - Libvirt should refuse to start a Skylake-Client VM on a non-Skylake CPU.
• BZ - 1378290 - Libvirt didn't check Multiplication overflow when check if socket*core*thread equal maxvcpu number
• BZ - 1378401 - qemu-attach should not hang when execute the 2nd time
• BZ - 1378540 - Libvirt runtime modularization of the block layer
• BZ - 1378774 - some rpm verify issues of package libvirt-daemon-config-nwfilter.x86_64
• BZ - 1379196 - Provide proper error message if lun device + scsi bus does not work with qcow2 format
• BZ - 1379200 - ABI check error message is wrong when serial controller model does not match
• BZ - 1379212 - Command information of “echo” and “srv-list” are missing in virt-admin manual
• BZ - 1379895 - Virsh/virt-admin client doesn't write the history commands into file
• BZ - 1382079 - libvirt mistakenly allows only slot 0 to be used on pcie-expander-bus
• BZ - 1382640 - Rebase libvirt to current upstream release
• BZ - 1383039 - Guest xml changed after guest start failed when set vnc port='0'
• BZ - 1384007 - The lifecycle event for Guest OS Shutdown is not distinguishable from a qemu process that was quit with SIG_TERM
• BZ - 1386466 - Should fail to validate XML when setting two scsi/ide/sata virtual disks with duplicate address
• BZ - 1386976 - attaching a new multi-queue vhost-user interface to a running VM fails
• BZ - 1387665 - usb-serial hotplug crashes libvirtd
• BZ - 1387666 - USB addresses are not assigned on hotplug after libvirtd restart
• BZ - 1389313 - [DOC] Document that libvirt refuses to abort post-copy migrations
• BZ - 1393854 - The error info is not accurate when setting invalid VIRT_ADMIN_DEBUG
• BZ - 1395496 - Libvirt allow paths symbol in ivshmem-plain/ivshmem name and qemu can access file out of /dev/shm
• BZ - 1396597 - Libvirt should update device CGroups on hotplug
• BZ - 1397440 - port allocator allocates the same port for multiple guests (race condition)
• BZ - 1397940 - Gathers network statistics of openvswitch vhostuser interfaces
• BZ - 1398087 - libvirt client virsh pool-define-as build in help mismatches actual usage
• BZ - 1399260 - USB slots out of range are accepted by libvirt
• BZ - 1401054 - [RFE] Gracefully shutdown Virtual Machines on Host reboot/shutdown.
• BZ - 1402690 - maxvcpus failed with unable to find emulator error
• BZ - 1402726 - job unexpectedly failed when create memspec snapshot with snapshot_image_format = "raw" in qemu.conf
• BZ - 1403691 - Snapshot fail trying to add an existing sanlock lease
• BZ - 1404627 - OpenStack instances fail to boot with qemu-kvm-rhev 2.6.0 when virt_mode=qemu and cpu_mode=host-model in nova.conf
• BZ - 1404952 - udev rewrites permissions set by libvirt on block devices that are closed
• BZ - 1405269 - libvirtd crashes when attaching raw LUKS volumes
• BZ - 1406442 - libvirt no longer generates the cephx auth secret when hot plugging virtio-scsi devices
• BZ - 1406791 - Blacklist TSX feature from specific Intel CPU models
• BZ - 1408701 - Automatically instruct MTU to the guest
• BZ - 1408808 - PCIe: Add Generic PCIe Root Ports
• BZ - 1409511 - Better error on failure to acquire lease on run VM
• BZ - 1410188 - Virtual machines will not boot with more than 6 USB devices being passed through
• BZ - 1412834 - Handle empty <script path=""/> coming from guests generated on older Libvirt versions
• BZ - 1414393 - Device present in the domain XML after VIR_DOMAIN_EVENT_ID_DEVICE_REMOVED was received
• BZ - 1414404 - virt-xml-validate fail to validate interface xml
• BZ - 1414627 - Rx batching support for tun
• BZ - 1415609 - libvirt fails to remove guest mac from VFs of certain drivers
• BZ - 1417203 - pool-destroy command for file system pool type does not umount the filesystem
• BZ - 1420205 - For console device, default value of append attribute is not consistent with the document
• BZ - 1420668 - Hotplug of 'user' type interface is not supported any more unexpectedly
• BZ - 1420718 - libvirtd crashes when calling virConnectGetAllDomainStats on a VM which has empty cdrom drive
• BZ - 1420740 - new scsi pool with existing HBA's wwn autostarted when restart libvirtd
• BZ - 1421036 - Guest can not start with -chardev pty,id=charserial0 failure
• BZ - 1422318 - After update libvirt-daemon, user started virtual machine, error message logged messages file.
• BZ - 1425003 - virsh save doesn't work after canceled postcopy migration
• BZ - 1427005 - [RFE] libvirt support of VT-d protected device assignment
• BZ - 1428209 - When only parent wwnn(or wwpn) provided to create a npiv pool, libvirt should report an error like nodedev-create does
• BZ - 1428893 - domain definition is not updated after a delayed VCPU unplug by the guest
• BZ - 1428952 - Enhance libvirt to present virtual L3 cache info for vcpus
• BZ - 1429551 - Default FD limit prevents running more than ~470 VMs
• BZ - 1430258 - fails to start a VM: unable to execute QEMU command 'query-iothreads': The command query-iothreads has not been found
• BZ - 1430275 - cannot attach a virtual disk **with iothread enabled** to vm if pci address not provided
• BZ - 1430672 - report SATA bus in domain capabilities
• BZ - 1430679 - Increase the wipe of bytes when build a logical pool which already has a label on target volume device
• BZ - 1431793 - KVM-RT guests won't start anymore
• BZ - 1433180 - groupname is missing in the output of blkdeviotune when guest is running
• BZ - 1433183 - libvirtd crashed when querying persistent blkdeviotune config with groupname set
• BZ - 1434278 - libvirtd crash when hotplug a serial dev with --config
• BZ - 1434882 - Don't SIGSEGV on domain destroy
• BZ - 1436060 - Detailed error messages are not given when the log file set by daemon-log-outputs via virt-admin is under a non-existing directory
• BZ - 1436119 - the error information is not accurate when creating a vol with "--capacity -1"
• BZ - 1436999 - Repeatable double free when undefining storage pool
• BZ - 1437010 - use setvcpu command to cold unplug guest vcpu will make guest have broken settings
• BZ - 1437013 - libvirt don't check vcpu 0 status when try to hot-plug or unplug vcpu 0
• BZ - 1438431 - libvirt doesn't pass id= for mdev devices
• BZ - 1438682 - [RFE] add support for qemu-xhci
• BZ - 1439130 - unclear error report when migration start but failed with some reason
• BZ - 1439132 - when partition table in formats: dvh, bsd, pc98, disk pool cannot be started even if successfully built
• BZ - 1439452 - guest turned shut off after restart libvirtd during hot-unplug vcpu
• BZ - 1439736 - hyperv vendor_id causes unknown cpu feature error
• BZ - 1440683 - libvirt error "Unable to encode message payload" when using virConnectGetAllDomainStats API
• BZ - 1441165 - Operation failed when migrate VM back to source host unless restart libvirtd
• BZ - 1441291 - USB device passthrough can't be used due to bogus VFIO check
• BZ - 1441563 - [RFE] Indicate domain job kind in job stats
• BZ - 1441589 - libvirtd will crash when attaching an USB disk to a non-existed bus
• BZ - 1441646 - Level-2 guest boot crashes libvirtd due to NULL vendor field in 'qemu64' CPU model
• BZ - 1441662 - Cross migration failed between rhel7.4 and rhel7.3 with qemu added cpu features: 'hypervisor' 'x2apic'
• BZ - 1441934 - command query-migrate-parameters has not been found
• BZ - 1441964 - libvirt should hide IDE for Q35 machine type
• BZ - 1442344 - domblkinfo doesn't work for iscsi/rbd backend virtual disk
• BZ - 1442700 - The vm shutdown when restart libvirtd with no-autostart network destroyed
• BZ - 1443493 - Improve live block device job status reporting via virDomainBlockJobInfo()
• BZ - 1444408 - starting guest with graphics device set to listen on network crashes libvirtd
• BZ - 1444421 - Fail to start a domain which cpu part is generated by "cpu-baseline"
• BZ - 1445627 - Memory is leaked after re-starting a VM
• BZ - 1446205 - libvirtd crashes when migrate a transient domain created by 'virsh create' with --persistent option
• BZ - 1446455 - libvirtd crashes on domain shutdown after reconnecting to a domain with a mediated host device attached
• BZ - 1446980 - Regression: path='…' for channel type='unix' ignored
• BZ - 1447297 - Unable to use LUKS passphrase that is exactly 16 bytes long
• BZ - 1448806 - Missing doc of tls migrate in man virsh help
• BZ - 1449346 - Addition of host_mtu=XXXX changes PCI ioport size & addresses for virtio-net device
• BZ - 1449510 - libvirt will remove the host file after detach some device or attach failed when enable namespace
• BZ - 1449595 - Check CPU cache for ABI stability
• BZ - 1450072 - Libvirt provides a confusing error message on a mediated device hotplug
• BZ - 1450095 - sasl errors in systemd journal at libvirtd startup
• BZ - 1450349 - No ABI check for /memoryBacking/[source|access|allocation] in guest xml
• BZ - 1450960 - Libvirt's nodedev udev backend reports 'udev_monitor_receive_device returned NULL' when a great amount of device 'add' events are emitted by udev
• BZ - 1451251 - guest will shut down when libvirtd restart after hotplug vcpu with libvirtd restart
• BZ - 1451282 - Fail to start a q35 guest with vcpu > 255
• BZ - 1451394 - Can't use device name as 'top' device while merging active layer
• BZ - 1452045 - qemuDomainGetBlockInfo get error when execute domblkinfo and blockcommit in parallel for block device
• BZ - 1452072 - RFE: Add support for listing mediated devices to libvirt's node device driver
• BZ - 1452106 - libvirtd crash sometimes while doing 'virsh qemu-attach'
• BZ - 1452454 - libvirt attach nvdimm device with invalid access type
• BZ - 1452581 - libvirt sets duplicated pci address when hot-plug rng device on a specific condition
• BZ - 1453142 - libvirt does not change the namespace setting for the running guest after disabling namespaces in qemu.conf
• BZ - 1455017 - LnkCap speed='(null)' in the nodedev-dumpxml of wireless NIC
• BZ - 1455510 - libvirtd crashed when set blkdeviotune groupname together with some other parameters
• BZ - 1456793 - virsh nodecpumap shows wrong cpus present output
• BZ - 1457052 - "Unknown" operation is reported in domain job stats on the target host after migration
• BZ - 1459113 - [RFE] Add a flag for virDomainBlockCopy on persistent domains
• BZ - 1460952 - Migration with 'migratable xml' fails due to CPU check
• BZ - 1461303 - RHEL7.4:Live merge fails: libvirtError: Requested operation is not valid: can't keep relative backing relationship
• BZ - 1461638 - "blockjob --pivot" after shallow blockcommit get unexpected result

CVEs

(none)

References

• https://access.redhat.com/documentation/en-US/Red_Hat_Enterprise_Linux/7/html/7.4_Release_Notes/index.html