On Wed, Jan 17, 2018 at 17:07:22 +0100, Jiri Denemark wrote: > On Wed, Jan 10, 2018 at 10:52:29 +0100, Pavel Hrdina wrote: > > On Tue, Jan 09, 2018 at 11:45:13PM +0100, Jiri Denemark wrote: > > > This is the libvirt's part of the changes related to CVE-2017-5715. The > > > new models can be used to pass the protective CPU features to guests. > > > But remember, the host CPU microcode, host kernel, QEMU, and libvirt all > > > need to be updated for this to be any useful. > > > > > > Based on a patch from Paolo Bonzini. > > > > > > See QEMU patches from Eduardo for more details: > > > https://patchew.org/QEMU/20180109154519.25634-1-ehabkost@xxxxxxxxxx/ > > > > I guess that you will wait with pushing until the QEMU patches are > > accepted and pushed as well. > > > > Reviewed-by: Pavel Hrdina <phrdina@xxxxxxxxxx> > > Thanks. All QEMU patches except for EPYC-IBPB CPU model are queued in > Eduardo's x86-next and a pull request is coming soon. I pushed the first > 16 patches, i.e., without EPYC-IBPB. The EPYC-IBPB model was included in the pull request sent by Eduardo. Pushing now. Jirka -- libvir-list mailing list libvir-list@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/libvir-list