libvirt-3.2.0-14.el7.9

The libvirt library contains a C API for managing and interacting with the virtualization capabilities of Linux and other operating systems. In addition, libvirt provides tools for remote management of virtualized systems.

This update fixes the following bugs:

* Previously, a race condition prevented libvirt from recognizing that all disks finished migrating. Consequently, when migrating a domain with its disks, the migration would not complete. With this release, libvirt properly checks that the disks finished migration. As a result, the migration completes. (BZ#1530129)

* Previously, immediately after QEMU finished sending migration data to the destination, libvirt advertised the migration as having completed in the migration statistics report. Consequently, management software may show that a migration completed even though the domain might fail to start on the destination. With this release, libvirt was patched to report that the migration completed only after the domain is running on the destination. Management software reacts properly to failed migrations. (BZ#1530130)

* Previously, libvirt did not set up symbolic links properly. Consequently, when a disk was hot-plugged, libvirt did not update the symbolic link and QEMU used the wrong file. With this update, the symbolic link is deleted and recreated on every hotplug. As a result, QEMU sees the correct file. (BZ#1532183)

* Previously, libvirt did not report certain host CPU models with the -IBRS suffix after applying all security patches for CVE-2017-5715. Consequently, the incorrect CPU model could falsely indicate that the host was not yet secured. With this release, libvirt correctly adds the -IBRS suffix to all updated hosts. (BZ#1533418)

Users of libvirt are advised to upgrade to these updated packages, which fix these bugs. After installing the updated packages, libvirtd will be restarted automatically.

CVE-2017-5715
Systems with microprocessors utilizing speculative execution and
indirect branch prediction may allow unauthorized disclosure of
information to an attacker with local user access via a side-channel
analysis.