RHEA-2018:0704 - Product Enhancement Advisory

Topic

An update for libvirt is now available for Red Hat Enterprise Linux 7.

Description

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

For detailed information on changes in this release, see the Red Hat Enterprise Linux 7.5 Release Notes linked from the References section.

Users of libvirt are advised to upgrade to these updated packages.

Solution

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Virtualization 4 for RHEL 7 x86_64
• Red Hat Gluster Storage Server for On-premise 3 for RHEL 7 x86_64
• Red Hat Virtualization for IBM Power LE 4 for RHEL 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian 7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.7 ppc64le
• Red Hat Enterprise Linux for Power, little endian - Extended Update Support 7.6 ppc64le
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux for ARM 64 7 aarch64
• Red Hat Enterprise Linux for Power 9 7 ppc64le
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.7 ppc64le
• Red Hat Enterprise Linux Server for Power LE - Update Services for SAP Solutions 7.6 ppc64le
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for IBM System z (Structure A) 7 s390x
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, little endian 7 ppc64le

Fixes

• BZ - 815702 - RFE: generate man pages to describe valid keycodes
• BZ - 838070 - host cpu offline then online, vcpupin guest vcpu to the online cpu will fail
• BZ - 1075520 - RFE: libvirt should let you set usernet network address
• BZ - 1225339 - Libvirt should check if hostdev address matching with device type
• BZ - 1233129 - Libvirt should check if source device is used by a disk pool when defining a logical pool, vice versa
• BZ - 1242801 - Libvirtd restart does not remove transient pool when pool source is unavailable
• BZ - 1254971 - RFE: support setting 'reconnect' parameter on TCP chardev backends (for USB redir and all other chardev users)
• BZ - 1282859 - RFE: Improve streams / virStorageVolUpload/Download to efficiently transfer sparseness.
• BZ - 1289368 - [RFE] libvirt support for CAT
• BZ - 1308743 - [RFE] PAPR Hash Page Table (HPT) resizing (libvirt)
• BZ - 1316370 - libvirtd crash when guest has a authentication volume cdrom with startupPolicy.
• BZ - 1325066 - The description of --timeout should be updated in libvirtd manpage
• BZ - 1335534 - Unexpected warning appears when start a guest with non-exists rom file and cpu fea-ture defined together in the xml
• BZ - 1343919 - Error MAC info when detach device from guest without designated MAC address
• BZ - 1352529 - Guest failed to start when VNC unix socket path contains '='
• BZ - 1366446 - vol-resize with --shrink and --allocate behaves strangely
• BZ - 1368753 - manual about the --validate flag of create and define commands was not updated
• BZ - 1371892 - vol-info get incorrect size info for luks encrypted volume
• BZ - 1373783 - Warn users against setting memory hard limit too high or too low when used for rdma-pin-all
• BZ - 1373859 - Sys::Virt::CLOSE_REASON_EOF in perl-Sys-Virt can not be triggered any more
• BZ - 1378242 - QEMU image file locking (libvirt)
• BZ - 1379218 - libvirtd crashes after qemu-attach in qemuDomainMachineIsPSeries
• BZ - 1379603 - RFE: support hotplugging virtio input devices
• BZ - 1395248 - [RFE] Kernel address space layout randomization [KASLR] support (virsh)
• BZ - 1401173 - Target host in nova DB got updated to new compute while migration failed and qemu-kvm process was still running on source host.
• BZ - 1419395 - Failed to force clone a guest with ISO file
• BZ - 1427049 - [RFE] encrypted volumes support on logical storage pool
• BZ - 1430988 - Permission denied when reloading virtlogd
• BZ - 1431112 - Failure to start guest when /dev contains a mount point that is a file rather than directory
• BZ - 1434451 - [RFE] allow to set device alias at XML define time
• BZ - 1436042 - "virsh connect --readonly" enters readwrite mode when no name is given.
• BZ - 1436065 - Persistent gluster pool will be in inactive status after libvirtd restarts
• BZ - 1436574 - the gluster pool source list is not right when the glusterfs server has more than 1 volumes
• BZ - 1437797 - Volume's format should be updated automatically after it is wiped
• BZ - 1439991 - Suggest to disable update "boot order" in interface by update-device
• BZ - 1442947 - "virtlogd --verbose" doesn't output verbose messages
• BZ - 1443434 - when starting a guest with "dir" type disk/floppy,the error info is not accurate
• BZ - 1445325 - virsh numatune --config returns automatic nodeset
• BZ - 1445598 - LUKS encrypted img not supported by "domblkthreshold"
• BZ - 1445600 - destroy "paused guest" will output error info,but actually destroy successfully
• BZ - 1447618 - update-device failed to update the mtu of interface but return as succeed
• BZ - 1448268 - "virsh list" hangs when executing domain async operation
• BZ - 1448766 - When the vm name is non-acsii, and the truncation happens to be on a multi-byte character, then vm will be unmanaged after daemon restarted.
• BZ - 1449265 - Libvirt uses a bad QEMU device for the <serial> XML tag on s390x
• BZ - 1449712 - [RFE] Support max_outputs option for virtio video
• BZ - 1449715 - Offline migration should not fail with error "Migration may lead to data corruption if disks use cache != none"
• BZ - 1450317 - "cpu-baseline" command doesn't deal with "cmt" fea-ture
• BZ - 1451557 - Update json parsing in libvirt
• BZ - 1451983 - libvirt gives wrong info when try to hot-plug vcpu 0 for inactive guest
• BZ - 1452053 - libvirt should pass node-id property if it's reported by qemu when hotplugging cpu
• BZ - 1452441 - Libvirt doesn't bind to specified port when attach rng device of udp type without host attribute
• BZ - 1453194 - Guest with 247-characters name-length failed to start
• BZ - 1454671 - libvirt reports a strange error when hotplugging an rng device with connect host attribute missing
• BZ - 1455023 - Give a warning when using --timeout-postcopy without --postcopy
• BZ - 1455819 - Guest failed to start if memory device is backed by hugepages and no memoryBacking is set
• BZ - 1455825 - Host attribute for bind mode of udp-backend rng device is missing in dumpxml if service attribute is not specified.
• BZ - 1457610 - libvirt should give a nicer error message when intremap='split' in iommu device
• BZ - 1458146 - Cannot start pool with <format type='mac'>
• BZ - 1458630 - The comments for {spice,vnc,migrate,chardev}_tls_x509_cert_dir are misleading
• BZ - 1458638 - Guest can not be started with the guest memory is to be mapped as "shared"
• BZ - 1458708 - Cannot destroy a fc scsi pool if set its parent device to a non-HBA device
• BZ - 1459091 - virsh domiflist return NULL for the vhostuser interface name and source
• BZ - 1459592 - error : Unable to move /dev/log mount to /var/run/libvirt/qemu/instance-00000002.log: No such file or directory
• BZ - 1459785 - guest will have invalid config after use setvcpu to enable vcpu 0
• BZ - 1460086 - No basic check for the cpu flag name for tcg or cpu mode is host-passthrough guest
• BZ - 1460602 - Error info for PIIX3 USB controller at index is 0 with incorrect PCI address should be clearer
• BZ - 1460623 - There are differences between downloaded data from the given volume and the original volume content
• BZ - 1460677 - [RFE] Enable dynamic configuration of powercycle event actions
• BZ - 1460962 - vm cannot be started if it has a corrupted managedsave file
• BZ - 1461214 - RFE: Enhance libvirt to allow existing file for memoryBacking type file
• BZ - 1461270 - virsh domifstat tx_drop value is not correct for openvswitch vhostuser interfaces
• BZ - 1461301 - unknown error occurred when attach a disk with a pci address already occupied in guest while virtlockd is enabled
• BZ - 1462060 - Failed to attach disk with source file in the /dev/ dir
• BZ - 1462092 - The first time to hot-unplug vcpu failed after restart libvirtd during hotplug vcpu
• BZ - 1463168 - can't update the cdrom after ejecting cdrom in the guest and then doing save/restore operation
• BZ - 1463285 - mediated devices are not shown in nodedev-list --cap mdev output
• BZ - 1463957 - [UPDATES] Target CPU mode custom does not match source host-model
• BZ - 1464300 - libvirt crashed with SIGSEGV after applying update
• BZ - 1464313 - Failed to activate the disk pool if host reboots or libvirtd restarts
• BZ - 1464821 - libvirt is unable to parse unflattened "server" structure in json backing file
• BZ - 1464832 - host-model CPU with check='full' does not work well when the host-model cpu contains more fea-tures in the qemu
• BZ - 1464975 - can not hotplug a disk with the same WWN which already used in the guest
• BZ - 1465833 - Permission denied when hotplug the chardev with source path as "dev/ttyS0" to the guest
• BZ - 1467245 - nvram file will not be deleted if use virsh to undefine a running uefi guest with --nvram option
• BZ - 1467826 - RHEL7.4: virDomainGetBlockInfo always returns alloc=0 on block storage
• BZ - 1471225 - pessimistic taint for passthrough cdrom
• BZ - 1472263 - Rebase libvirt to current upstream release
• BZ - 1472277 - An attempt to start a vHBA storage pool backed by an already pre-created vHBA returns unknown cause error
• BZ - 1475227 - 'pool-build' event can not be listened by 'pool-event'
• BZ - 1475250 - schema for the pool field in <disk type=volume> does not accept all possible pool names
• BZ - 1476775 - RFE: pool-define-as and pool-create-as better to have a **--secret-uuid** parameter when authentication involved
• BZ - 1477880 - can't use default LUN of iscsi protocol used in network type virtual disk when don't specify the LUN
• BZ - 1481252 - Add support for AMD EPYC processors
• BZ - 1481309 - VM does not start after snapshot revert with error "Property '.cmt' not found"
• BZ - 1484230 - update-device can not update the tx_queue_size or rx_queue_size in interface section while the command report successfully
• BZ - 1484234 - suggested to document that tx_queue_size in interface section only support 256 for interface types other than vhostuser
• BZ - 1484341 - Should fail to save guest xml when adding ib700 model watchdog with address
• BZ - 1485022 - Guest CPU in an offline snapshot changes from host-model to custom
• BZ - 1487499 - Libvirt tries to create a wrong QEMU device for the <parallel> XML tag on s390x
• BZ - 1490279 - vol-resize a luks encrypted image will get unexpected result virtual size
• BZ - 1490826 - Cannot shallow blockcopy a vm disk backing chain to a block device (whose format=raw)
• BZ - 1491217 - blockPeek() return wrong contents of a domain's disk device.
• BZ - 1494327 - Cannot set vm's block threshold by 'virsh domblkthreshold'
• BZ - 1494400 - Run virsh domxml-to-native successfully with extra param
• BZ - 1495171 - Post libvirt upgrade to 3.2.0-14, migration fails with -- "can't apply global Haswell-noTSX-x86_64-cpu.cmt=off: Property '.cmt' not found"
• BZ - 1495511 - Guest could not start with hugepages
• BZ - 1497396 - suggest improve the error message and document for domifstat, domifaddr commands
• BZ - 1497410 - domifstat outputs for macvtap is reversed, and suggest to improve document
• BZ - 1501715 - Run 'virsh managedsave' with '--bypass-cache' flag failed.
• BZ - 1506494 - Use pause-before-switchover migration capability
• BZ - 1509110 - backingStore element disappear after restart libvirtd
• BZ - 1509151 - Improve the error message when improper number set for vcpu current number
• BZ - 1509866 - Couldn't open event file when execute device_add for virtio-input-host-pci
• BZ - 1510323 - libvirtd crash when update cdrom device two times
• BZ - 1510781 - libvirtd crashes in qemuDomainHasBlockjob after qemu-attach
• BZ - 1511407 - listen type changed to 'none' after managedsave/restore guest with spice listening on an auto-generated unix socket
• BZ - 1511421 - Incorrect <target type='isa-serial'/> for <serial> element of pSeries guests
• BZ - 1511480 - refuse to allow <shareable/> disks in combination with non-raw image formats
• BZ - 1512929 - Incorrect <target type='isa-serial'/> for <serial> element of mach-virt guests
• BZ - 1512934 - Incorrect device used for <serial> with type usb-serial or pci-serial on pSeries
• BZ - 1514930 - The doc of the matrix about configuration file handling in migration is not correct.
• BZ - 1517372 - nodedev-dumpxml PCI node devices don't get device details
• BZ - 1518148 - Fail to attach interface after libvirtd restart
• BZ - 1519745 - Wrongly recognize 'XXX[1]' as active layer when blockcommit
• BZ - 1519759 - Fix memory leaks
• BZ - 1521202 - libvirt change the running guest cpu model after upgrade from 7.3
• BZ - 1522682 - libvirtd crashes when start a guest with non-existing disk source and driver type='raw'
• BZ - 1522879 - Fix crash listing nwfilters for unprivileged daemon
• BZ - 1523036 - "virsh domjobinfo --completed" prints "Expected downtime" instead of "Total downtime"
• BZ - 1523070 - Documentation of the <disk>'s 'snapshot' attribute is misleading
• BZ - 1523261 - block commit with --keep-relative does not work after libvirtd restart
• BZ - 1524837 - virtio input device still in the live xml after hotunplug from the guest with q35 machine type
• BZ - 1525182 - Should rebuild QEMU capabilities on KVM hosts if kernel version changes
• BZ - 1528572 - libvirtd crash when running perl-Sys-Virt api list_node_device_names
• BZ - 1529338 - VM network is blocked when using "CTRL_IP_LEARNING" and "DHCPSERVER" filters
• BZ - 1529663 - No backing file info in the output of 'virsh vol-dumpxml' for images created by qemu-img
• BZ - 1532980 - guest shutoff after upgrade from 7.3 to 7.5 on skylake host
• BZ - 1533125 - Libvirt may prefer $CPUModel over $CPUModel-IBRS when reporting host CPU model
• BZ - 1536351 - libvirtd crash on the target host when do migration with --offline and --persistent options
• BZ - 1536461 - Libvirtd hangs when shutting down domains
• BZ - 1540022 - Fail to dump vol xml of json backing images
• BZ - 1540290 - libvirt needs to tolerate JSON backing store strings containing fields described as 'int' being a string in various cases
• BZ - 1540780 - Libvirtd crashed when try to start a guest with cachetune after remount resctrl/
• BZ - 1540817 - Libvirt should ignore the cachetune element which have invalid vcpus

CVEs

• CVE-2017-5715

References

• https://access.redhat.com/documentation/en-US/red_hat_enterprise_linux/7/html/7.5_release_notes/index.html