RHSA-2015:0323 - Security Advisory

Topic

Updated libvirt packages that fix two security issues, several bugs, and
add various enhancements are now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having Low security
impact. Common Vulnerability Scoring System (CVSS) base scores, which give
detailed severity ratings, are available for each vulnerability from the
CVE links in the References section.

Description

The libvirt library is a C API for managing and interacting with the
virtualization capabilities of Linux and other operating systems.

It was found that QEMU's qemuDomainMigratePerform() and
qemuDomainMigrateFinish2() functions did not correctly perform a domain unlock
on a failed ACL check. A remote attacker able to establish a connection to
libvirtd could use this flaw to lock a domain of a more privileged user, causing
a denial of service. (CVE-2014-8136)

It was discovered that the virDomainSnapshotGetXMLDesc() and
virDomainSaveImageGetXMLDesc() functions did not sufficiently limit the usage of
the VIR_DOMAIN_XML_SECURE flag when fine-grained ACLs were enabled. A remote
attacker able to establish a connection to libvirtd could use this flaw to
obtain certain sensitive information from the domain XML file. (CVE-2015-0236)

The CVE-2015-0236 issue was found by Luyao Huang of Red Hat.

Bug fixes:

• The libvirtd daemon previously attempted to search for SELinux contexts even

when SELinux was disabled on the host. Consequently, libvirtd logged "Unable to
lookup SELinux process context" error messages every time a client connected to
libvirtd and SELinux was disabled. libvirtd now verifies whether SELinux is
enabled before searching for SELinux contexts, and no longer logs the error
messages on a host with SELinux disabled. (BZ#1135155)

• The libvirt utility passed incomplete PCI addresses to QEMU. Consequently,

assigning a PCI device that had a PCI address with a non-zero domain to a guest
failed. Now, libvirt properly passes PCI domain to QEMU when assigning PCI
devices, which prevents the described problem. (BZ#1127080)

• Because the virDomainSetMaxMemory API did not allow changing the current

memory in the LXC driver, the "virsh setmaxmem" command failed when attempting
to set the maximum memory to be lower than the current memory. Now, "virsh
setmaxmem" sets the current memory to the intended value of the maximum memory,
which avoids the mentioned problem. (BZ#1091132)

• Attempting to start a non-existent domain caused network filters to stay

locked for read-only access. Because of this, subsequent attempts to gain
read-write access to network filters triggered a deadlock. Network filters are
now properly unlocked in the described scenario, and the deadlock no longer
occurs. (BZ#1088864)

• If a guest configuration had an active nwfilter using the DHCP snooping

feature and an attempt was made to terminate libvirtd before the associated
nwfilter rule snooped the guest IP address from DHCP packets, libvirtd became
unresponsive. This problem has been fixed by setting a longer wait time for
snooping the guest IP address. (BZ#1075543)

Enhancements:

• A new "migrate_host" option is now available in /etc/libvirt/qemu.conf, which

allows users to set a custom IP address to be used for incoming migrations.
(BZ#1087671)

• With this update, libvirt is able to create a compressed memory-only crash

dump of a QEMU domain. This type of crash dump is directly readable by the GNU
Debugger and requires significantly less hard disk space than the standard crash
dump. (BZ#1035158)

• Support for reporting the NUMA node distance of the host has been added to

libvirt. This enhances the current libvirt capabilities for reporting NUMA
topology of the host, and allows for easier optimization of new domains.
(BZ#1086331)

• The XML file of guest and host capabilities generated by the "virsh

capabilities" command has been enhanced to list the following information, where
relevant: the interface speed and link status of the host, the PCI Express
(PCIe) details, the host's hardware support for I/O virtualization, and a report
on the huge memory pages. (BZ#1076960, BZ#1076957, BZ#1076959, BZ#1076962)

These packages also include a number of other bug fixes and enhancements. For
additional details, see the "Bugs Fixed" section below.

Solution

All libvirt users are advised to upgrade to these updated packages, which
contain backported patches to correct these issues and add these
enhancements. After installing the updated packages, libvirtd will be
restarted automatically.

Before applying this update, make sure all previously released errata
relevant to your system have been applied.

For details on how to apply this update, refer to:

https://access.redhat.com/articles/11258

Affected Products

• Red Hat Enterprise Linux Server 7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.5 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Extended Update Support 7.3 x86_64
• Red Hat Enterprise Linux Server - AUS 7.7 x86_64
• Red Hat Enterprise Linux Server - AUS 7.6 x86_64
• Red Hat Enterprise Linux Server - AUS 7.4 x86_64
• Red Hat Enterprise Linux Server - AUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support 7 x86_64
• Red Hat Enterprise Linux Workstation 7 x86_64
• Red Hat Enterprise Linux Desktop 7 x86_64
• Red Hat Enterprise Linux for IBM z Systems 7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.7 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.6 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.5 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.4 s390x
• Red Hat Enterprise Linux for IBM z Systems - Extended Update Support 7.3 s390x
• Red Hat Enterprise Linux for Power, big endian 7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.7 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.6 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.5 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.4 ppc64
• Red Hat Enterprise Linux for Power, big endian - Extended Update Support 7.3 ppc64
• Red Hat Enterprise Linux for Scientific Computing 7 x86_64
• Red Hat Enterprise Linux Server from RHUI 7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.7 x86_64
• Red Hat Enterprise Linux Server - TUS 7.6 x86_64
• Red Hat Enterprise Linux Server - TUS 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support (for IBM z Systems) 7 s390x
• Red Hat Enterprise Linux EUS Compute Node 7.7 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.6 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.5 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.4 x86_64
• Red Hat Enterprise Linux EUS Compute Node 7.3 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.7 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.6 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.4 x86_64
• Red Hat Enterprise Linux for x86_64 - Update Services for SAP Solutions 7.3 x86_64
• Red Hat Enterprise Linux Server - Extended Life Cycle Support for IBM Power, big endian 7 ppc64

Fixes

• BZ - 706887 - [TestOnly] qemu truncates JSON numbers >= 0x8000_0000_0000_0000
• BZ - 765733 - Error reporting when qemu terminates unexpectedly is inconsistent and sometimes unhelpful
• BZ - 823535 - Libvirt is sensitive to the order in which the video devices are passed
• BZ - 872628 - List available LXC consoles using container_ttys env variable
• BZ - 874418 - clear the error message when dump a guest with pass-through device
• BZ - 876829 - create external checkpoint snapshot will change the guest pmsuspended state and guest hang forever
• BZ - 877244 - Virsh command will delay a long time if restart libvirtd with many virtual networks running
• BZ - 878394 - virsh iface-dumpxml or virt-manager reports "bond interface misses the bond element" for inactive bond interfaces
• BZ - 880483 - Guest can use inactive macvtap-passthrough network
• BZ - 921094 - Missing auditing for serial, parallel, channel, console and smartcard devices
• BZ - 924853 - blockcopy to cifs fails
• BZ - 956506 - virsh snapshot-delete --children-only bypasses safety check for deleting disk-only children
• BZ - 957293 - support libiscsi for SCSI passthrough devices
• BZ - 963817 - Stable SCSI host addressing
• BZ - 964177 - virConnectDomainEventRTCChangeCallback returns wrong offset
• BZ - 967493 - Lockfailure action Ignore will lead to sanlock rem_lockspace stuck
• BZ - 967494 - Lockfailure action Restart can shutdown the guest but fail to start it
• BZ - 972964 - WWN option for Hot Attaching SCSI Disks
• BZ - 983350 - The running Guest was paused while cancel the migration on the third machine
• BZ - 985782 - Some flag values of method are missing in libvirt-python bindings
• BZ - 985980 - virsh vcpuinfo output is difficult to read with large cpu counts
• BZ - 990418 - Provide option to enable/disable 64-bit PCI hole
• BZ - 991290 - Fail to modify the name attribute of ipv6 dhcp host via virsh net-update
• BZ - 992980 - Separate limits for anonymous and authenticated users
• BZ - 994731 - Documentation for virDomainLookupBy* should mention caller's responsibility to free virDomainPtr
• BZ - 995377 - Domain without autostart can't be resumed by the libvirt-guests script after rebooting the host
• BZ - 997802 - domdisplay should show all URI if config both vnc and spice in guest
• BZ - 999926 - Policy denies libvirtd the permission to relabel unix domain sockets
• BZ - 1006700 - need add "interface" to virt-xml-validate manual page
• BZ - 1007698 - The cpu_shares value of domain xml should be consistent with return value of schedinfo.
• BZ - 1007759 - libvirt should forbid to attach a device with boot order for the first time if the os/boot element exists
• BZ - 1021703 - [RFE] Support for qemu-kvm's "-boot splash_time" parameter
• BZ - 1022874 - In man page of virsh, a typo 'COMMMANDS' displays three times
• BZ - 1023366 - [virsh cmd] Error message is not clear for commands blkiotune and schedinfo
• BZ - 1025407 - autoport='yes' doesn't skip over ports in use with IPv6
• BZ - 1027076 - Fail to start lxc with disabled selinux due to the existed empty /selinux
• BZ - 1029266 - Error message is not clear for command nwfilter-define under non-root user.
• BZ - 1029732 - Libvirt can not update/modify queues value of interface element using update-device command
• BZ - 1032363 - document need to pass image name for block backed disks with --disk-only
• BZ - 1033398 - Nodedev-destroy commands both doc and error message when destroy HBA are not clear
• BZ - 1033704 - domain xml: libvirt should take defaultMode value into account when discarding <channel ... mode='MODE'/> entries
• BZ - 1035128 - Stable guest ABI doesn't check redirected usb device
• BZ - 1035966 - Start autostarted virtual networks in background
• BZ - 1041569 - [NFR] libvirt: Returning the allocation watermark for all the images opened for writing during block-commit
• BZ - 1043735 - virsh command domiftune bound parameter checking error
• BZ - 1046192 - Can't set the timer base as localtime once localtime is used in the variable attribute.
• BZ - 1047818 - VFs can not be listed by net-dumpxml directly after starting the hostdev network
• BZ - 1052114 - guest fail to start with permission denied error when with gluster volume
• BZ - 1056902 - virsh attach-interface/detach-interface mishandles inactive configuration on device hot(un)plug commands
• BZ - 1062142 - live snapshot merge (commit) of the active layer
• BZ - 1064770 - Fail to update floor attribute of QoS using updateDeviceFlags
• BZ - 1066280 - Fail to restore guest from the save file while set the static selinux lable for the guest and set the relabel='no' in the guest's xml
• BZ - 1066894 - Implement for libvirt guest's xml for security label
• BZ - 1067338 - Mem leak while start a guest with a character followed
• BZ - 1069784 - block commit/pull support for disks using libgfapi volumes
• BZ - 1070680 - cpu-stats boundary value problem
• BZ - 1071095 - Libvirt report incorrect error message when parsing invalid value of CTRL_IP_LEARNING in nwfilter
• BZ - 1072141 - "pool-list --type gluster" list other types pool
• BZ - 1072292 - Libvirt report incorrect message when starting domain with nwfilter whose chain priority is greater than its filter rule priority
• BZ - 1072653 - vol-upload should change the volume target format type after uploading a different format file to it
• BZ - 1072677 - Incorrect error message when hot-plugging interface with an inexistence nwfilter
• BZ - 1073368 - [libvirt] can create live snapshot of passthrough device (iSCSI LUN or block device)
• BZ - 1075290 - gluster option is not showed in virsh --version=long
• BZ - 1075299 - Failed to get the vol-name by giving volume path in gluster pool.
• BZ - 1075543 - Libvirt does not terminate when DHCP snooping is being used
• BZ - 1076098 - [RFE] allow setting video ram size (vgamem_mb) for qemu vga cards.
• BZ - 1076725 - libvirt: Multi-node NUMA policy assignment
• BZ - 1076957 - Expose huge pages information through libvirt API
• BZ - 1076959 - Expose host hardware support for I/O virtualization via libvirt API
• BZ - 1076960 - Expose interface speed and link information via API
• BZ - 1076962 - Expose PCIe BW and lane information through API
• BZ - 1076989 - Enable complex memory requirements for virtual machines
• BZ - 1077009 - It shouldn't be permitted to change the uuid of a nwfilter
• BZ - 1077572 - Python setInterfaceParameters function is broken
• BZ - 1078590 - use of tls with libvirt.so can leave zombie processes
• BZ - 1079162 - The guest will be destroyed abnormally while revert the guest's snapshot which took in "pmsuspended" status
• BZ - 1079173 - libvirt can not do vol-download for gluster pool volume
• BZ - 1080859 - [Snapshot Doc] In snapshot-create-as manual page, supported snapshot type should be no, internal and external
• BZ - 1081461 - Dropped guest network connection during migration (before it finished)
• BZ - 1081881 - Fail to start guest with 2 displays mixed with port allocated automatically and fixed port.
• BZ - 1081932 - the return value of API virNodeDevice.listCaps() is not correct
• BZ - 1082124 - RHEL7 libvirt vs older qemu: unable to execute QEMU command 'qom-get': The command qom-get has not been found
• BZ - 1082521 - The sg disk is not really shared within 2 guests
• BZ - 1083345 - The --memspec parameters "snapshot=no" doesn't work when creating internal disk snapshot
• BZ - 1084360 - [doc] Document behavior of --reuse-external (VIR_DOMAIN_SNAPSHOT_CREATE_REUSE_EXT)
• BZ - 1085706 - virsh numatune should forbid to accept int as parameter values
• BZ - 1085769 - [Stroage][vol-clone] Volume was cloned successfully when passing an non-existing pool
• BZ - 1086121 - Improve the error message when failed to restore a guest with a not availabe disk with startupPolicy='optional'
• BZ - 1086704 - Don't allow aio=native without cache=none
• BZ - 1087104 - [Storage][vol-download] virsh cmd vol-download works with option offset and length by passing a negative integer
• BZ - 1088667 - [storage] some volume related virsh commands work when the passed volume is not one volume of the passed pool
• BZ - 1088787 - Libvirt should clean up socket file on destroyed domain with UNIX character device
• BZ - 1088864 - nwfilter deadlock
• BZ - 1088901 - Fail to do external disk-only snapshot when guest use FC storage
• BZ - 1089179 - The error is inaccurate when create snapshot with memspec snapshot=external and diskspec snapshot=no
• BZ - 1091866 - volume is disappered after vol-wipe with logical type pool
• BZ - 1092253 - Improve the error message when blockpull with a wrong base path
• BZ - 1092363 - [RHEL7] Virsh cmd maxvcpus returns 255 for kvm type, but the maximum number of vcpus supported by kvm is 160.
• BZ - 1093127 - RFE: report NUMA node locality for PCI devices
• BZ - 1095035 - [RHEL7][Storage]The "lazy_refcounts" feature was missing in the xml printed by vol-dumpxml for a qcow3 disk in a native gluster pool
• BZ - 1095636 - SELinux prevent qemu from attaching tuntap queues
• BZ - 1097028 - Don't fail starting domain without cpu, cpuset and cpuacct cgroups controllers
• BZ - 1097503 - guest will be paused and can't resume when do external system checkpoint snapshot with wrong compression format
• BZ - 1097677 - libvirt loses track of hotplugged vcpus after daemon restart
• BZ - 1097968 - libvirt-python API baselineCPU doesn't generate exception
• BZ - 1098659 - libvirt binds only to ipv6
• BZ - 1099978 - Maintain relative path to backing file image during live merge (block-commit)
• BZ - 1100769 - blkiotune weight range should be (10, 1000)
• BZ - 1101059 - virsh vcpupin need accurate error message when --vcpu argument is negative
• BZ - 1101510 - no need to require iptables-ipv6
• BZ - 1101731 - Rebase libvirt to current upstream release
• BZ - 1101987 - Libvirt should report error when try to revert guest to external system checkpoint snapshot
• BZ - 1101999 - virt-xml-validate should pass when netfs pool xml with glusterfs backend
• BZ - 1102611 - The running guest will disappear while change the security_driver from "none" to "selinux"
• BZ - 1103245 - libvirt reset rtc interrupt backlog after guest-set-time
• BZ - 1104992 - Guest fail to start while disks use same no-exist source file even though with startupPolicy='optional'
• BZ - 1104993 - Garbage characters show in the output of pool-name with no-exist pool UUID
• BZ - 1105939 - Fail to start guest while disable the default security labeling
• BZ - 1108593 - Libvirtd will crash while start a guest which DAC's seclabel type='none' in guest's xml
• BZ - 1110198 - domblkinfo doesn't work when guest use glusterfs as source
• BZ - 1110212 - The error info is not correct when do blockcommit with --base and --top point to same source
• BZ - 1110673 - typo errors in man page VIRSH(1)
• BZ - 1111044 - capabilities mode hostdev shouldn't be added in KVM
• BZ - 1112939 - libvirt should prompt more readable error message while ide/sata bus disk do not support readonly
• BZ - 1113116 - [RFE] add API to query the stats of multiple VMs at once
• BZ - 1113332 - python bindings for graphics event have wrong value for address type
• BZ - 1113668 - libvirt failed to start a domain with unix+guestfwd channel
• BZ - 1113861 - The guest will disappear after restart the libvirtd service while set seclabel type='static' model='none' relabel='yes'/> in guest's xml.
• BZ - 1113868 - domxml-to-native fails for spice graphics with autoport='yes' when spice_tls is disabled
• BZ - 1115898 - [RFE] Add events for cputune and iotune change
• BZ - 1118710 - The error info is not accurate when do vol-wipe with volume based on gluster pool
• BZ - 1119206 - RFE: Multiple virtio-rng devices support
• BZ - 1119215 - Generate the redundant record in guest's xml while configure the same listen address in guest's xm
• BZ - 1119387 - The default behavor of abort block job with pivot flag isn't sync
• BZ - 1119592 - libvirt will report error after use pool-build in Non-root mode(qemu:///session)
• BZ - 1119784 - QMP: extend block events with error information
• BZ - 1121837 - numatune can use nodeset 0,^0 but can't edit xml like this
• BZ - 1121955 - virsh command takes long time to finish after set "log_level = 1" only
• BZ - 1122255 - 'virsh desc $dom blah' doesn't survive libvirtd restart
• BZ - 1122455 - libvirt should refuse to start domain with unsupported/useless min-guarantee element in qemu driver
• BZ - 1122973 - missing pci address for vga devices
• BZ - 1126329 - Libvirt should forbid using relative path to the new overaly snapshot image for external snapshots
• BZ - 1126721 - [Doc] Attribute name vlan-id should be vlanid in nwfilter xml docs
• BZ - 1126909 - Wrong block job type reported for active layer commit
• BZ - 1126991 - [libvirt] expose ivshmem
• BZ - 1128097 - Can't use domiftune --inbound 0 or --outbound 0 to clear inbound or outbound settings for a shut off guest
• BZ - 1128751 - <driver/> isn't always formated as it should be
• BZ - 1129207 - libvirtd will crash after do managedsave the same guest in the same time
• BZ - 1129372 - Failed to start domain with specified cputune after decreasing vcpu number
• BZ - 1129998 - numatune --mode can't work well
• BZ - 1130089 - Possible deadlock when the domain is destroyed on destination during migration
• BZ - 1130379 - [Doc]no manual about metadata command in virsh manual
• BZ - 1131306 - number range should be checked for the 4 new options of blkiotune
• BZ - 1131445 - Could not show process info for migration at once.
• BZ - 1131788 - blkdeviotune should can be used in session mode
• BZ - 1131811 - The iotune element will disappear from the guest's xml while set an invalid value
• BZ - 1131819 - Libvirtd crash while set blkdeviotune with the hotplug disk and specify the --config option
• BZ - 1131876 - The range for blkdeviotune was different in guest's xml and virsh command line
• BZ - 1131897 - virDomainSetMemoryFlags doesn't process flag VIR_DOMAIN_MEM_MAXIMUM for LXC
• BZ - 1132301 - Error msg is not right for option -k and -K against virsh command
• BZ - 1132305 - option -k and -K should point out range of reasonable values against virsh command
• BZ - 1132347 - Libvirt crash after defining/editing macvtap network pool with <address> elements
• BZ - 1134154 - snapshot's race condition
• BZ - 1134454 - pkg-config --libs contains cflags
• BZ - 1135169 - blockcopy job was cancel by "CTRL+C" while it show there still be one block job in background
• BZ - 1135339 - active commit will be cancelled by another commit
• BZ - 1135396 - Honor hugepage settings on UMA guest
• BZ - 1135431 - libvirt should pass "-enable-fips" to QEMU
• BZ - 1135955 - The usage for migrate's option --auto-converge missed in virsh man page
• BZ - 1136736 - Failed to remove libvirt-daemon-1.2.8-1.el7.x86_64 package
• BZ - 1138221 - Fail to managedsave while configure <cpu mode='host-model'> in the guest's xml
• BZ - 1138231 - Report better error when backing chain detection fails
• BZ - 1138487 - one of guest will be shut off when restart libvirtd while disable the default security labeling
• BZ - 1138545 - guest NUMA cannot start when automatic NUMA placement
• BZ - 1139567 - virsh cmd will hang when remove blockcopy file
• BZ - 1140085 - guest interface which use existing bridge source bridge will disappear after libvirtd restart
• BZ - 1140981 - Libvirt should post more accurate error when do blockpull with qemu-kvm
• BZ - 1140984 - sub-element in <disk>...</disk> change after create external disk snapshot
• BZ - 1141209 - Back port selected upstream Coverity resolutions since 1.2.8
• BZ - 1141621 - libvirtd will crashed after hot-plug a virtual NIC to a guest which use qemu-attach connect to libvirtd
• BZ - 1141732 - wrong QMP argument 'id' when detaching iscsi hostdev
• BZ - 1141943 - libvirtd crash when defining scsi storage pool
• BZ - 1142294 - libvirt should report error when failed to use domtime to set a guest time
• BZ - 1142693 - [RFE] Add a qemu resume hook that is able to preprocess the domain XML
• BZ - 1142722 - libvirtd dead while destroy one guest with block disk
• BZ - 1143780 - Deadlock on nwfilter when taking same concurrent jobs
• BZ - 1143955 - libvirtd crashed after running "virsh metadata --remove" command
• BZ - 1144303 - memory leak when starting a domain with cpu mode='host-model'
• BZ - 1144920 - libvirtd crashed after use qemu-monitor-event --regex to a running guest
• BZ - 1144922 - wrong backingStore info after blockpull and destroy/start guest
• BZ - 1145048 - freepages argument has wrong unit and range
• BZ - 1145050 - API virNodeGetFreePages need report specific error when node out of range
• BZ - 1146511 - Updating blkdeviotune for live domain doesn't survive restarting the libvirtd
• BZ - 1146550 - USB Redirection no longer works: Permission Denied
• BZ - 1146837 - Libvirtd crash when defining scsi pool with 'scsi_host' type adapter and parentaddr attribute
• BZ - 1147331 - [migration] Tunnelled migration failed
• BZ - 1147494 - libvirtd crashes when starting a domain with 0 cpu shares
• BZ - 1147584 - save/managedsave doesn't work with host-passthrough
• BZ - 1150322 - libvirt should recognize __com.redhat_change-backing-file for relative path preservation
• BZ - 1150505 - Domain is out of control from libvirt when running some concurrent define/undefine/start/destroy jobs rapidly
• BZ - 1151718 - Permission denied when create external snapshot for guest whose source file based on nfs
• BZ - 1151885 - libvirtd loses track of a running restored guest with host-passthrough cpu
• BZ - 1152382 - [NPIV] The volume in scsi pool appears only after refreshing pool
• BZ - 1155410 - An LXC domain without console dies soon after start
• BZ - 1155441 - forbid NIC offloads change on the fly using update-device
• BZ - 1155458 - libvirt can not save mode='client' of vhostuser interface to domain xml
• BZ - 1156288 - libvirtd crashed on disk snapshot with rdma glusterfs image
• BZ - 1156367 - network using host bridge gets a MAC on libvirt update
• BZ - 1158715 - A memory error report when use domstats
• BZ - 1159227 - lxc domain startup is slow
• BZ - 1159245 - repeated migration with NBD fails
• BZ - 1160084 - domfsfreeze and domfsthaw cannot work well when guest restart
• BZ - 1160212 - libvirt doesn't stop the NBD server after migration
• BZ - 1160565 - Libvirt should check if the parent defined in xml matches the wwn of vHBA when starting pool
• BZ - 1160926 - Destroying 'fc_host' pool the HBA is NOT destroyed when not using 'parent' attribute
• BZ - 1161024 - libvirtd crashes after device hot-unplug crashes qemu
• BZ - 1161124 - small memory leak in migration
• BZ - 1161358 - [ACL] polkit: wrong attribute name 'interface_mac' for network interface in the documentation
• BZ - 1161540 - kvm_init_vcpu failed for cpu hot-plugging in NUMA
• BZ - 1162097 - crash after attempted spice channel hotplug
• BZ - 1162208 - libvirtd occasionally crashes at the end of migration
• BZ - 1162915 - net-event should not report unsuccessful event
• BZ - 1162974 - external disk snapshot with fault glusterfs snapshot xml crash libvirtd
• BZ - 1163463 - use after free in callers of virNetDevLinkDump
• BZ - 1163953 - No way to turn off rdma-pin-all once it was turned on
• BZ - 1164528 - VM with a storage volume that contains a RBD volume in the backing chain fails to start
• BZ - 1166592 - Failed to create logical volume with specified xml
• BZ - 1167145 - networkMigrateStateFiles function does not work on xfs file system due to using unsupported t_type field
• BZ - 1167883 - Report job type in virDomainGetJobInfo
• BZ - 1168866 - "libvirtError: Unable to write to '/sys/fs/cgroup/cpuset/machine.slice/machine-qemu\x2dinstance\x2d00000002.scope/cpuset.mems': Device or resource busy"
• BZ - 1169409 - Libvirt will crash with segfault if you try to set non-existing nwfilter to network interface for live guest
• BZ - 1170484 - guest can not start when setting " vcpu placement='auto' "
• BZ - 1174053 - libvirtd crash when try to cold plug a network iscsi hostdev which guest already have a iscsi hostdev
• BZ - 1174090 - extra space will be added to xml when update a network
• BZ - 1174859 - missing support for -spice disable-agent-file-xfer qemu commandline option
• BZ - 1175234 - virDomainGetSchedulerParameters() fails with Unable to read from '/sys/fs/cgroup/cpu,cpuacct/machine.slice/machine-qemu\x2dMic2.scope/cpu.shares': No such file or directory
• BZ - 1175397 - memdev= option is not supported on rhel6 machine-types
• BZ - 1175668 - Attach a usb disk to guest failed.
• BZ - 1175709 - Unable to start guest with hugepages and strict numa pinning
• BZ - 1176176 - CVE-2014-8136 libvirt: local denial of service in qemu/qemu_driver.c
• BZ - 1177194 - Fail to Migrate with Bridged network, eth + macvtap ,with different interface name on two hosts
• BZ - 1180136 - Memory leak when parsing invalid network XML
• BZ - 1180574 - migration rhel7.1 -> rhel7.0 wont work if you set "ram" < 2*"vgamem" for QXL device
• BZ - 1181052 - update default vgamem size from 8 MiB to 16 MiB
• BZ - 1181157 - libvirtError: argument unsupported: QEMU driver does not support <metadata> element
• BZ - 1181408 - Libvirtd crash while hotplug the guest agent without target type for many times
• BZ - 1182448 - cpu features are not formatted in XML for host-model
• BZ - 1182486 - libvirtd crashed when updating a IPv6 <host> and a IPv4 <host> into a IPv4 <ip> element
• BZ - 1184431 - CVE-2015-0236 libvirt: missing ACL check for the VIR_DOMAIN_XML_SECURE flag in save images and snapshots objects

CVEs

• CVE-2015-0236
• CVE-2014-8136

References

• https://access.redhat.com/security/updates/classification/#low