Signed-off-by: Andrea Bolognani <abolo...@redhat.com> --- NEWS.rst | 10 ++++++++++ 1 file changed, 10 insertions(+)
diff --git a/NEWS.rst b/NEWS.rst index 4625a838f8..577e1502b5 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -41,6 +41,16 @@ v9.1.0 (unreleased) allowing installation of a modular daemon configuration without the traditional monolithic libvirtd. + * qemu: Make firmware selection persistent + + Up until now, firmware autoselection has been performed at domain startup + time: as a result, changes to the JSON firmware descriptors present on the + system could have translated to a different firmware being chosen for + subsequent startups of the same domain, potentially rendering it unbootable + or lowering the security guarantees. Firmware selection now happens once, + when the domain is defined, and its results are stored in the domain XML + to be reused, unchanged, for all subsequent boots. + * **Bug fixes** * QEMU: iTCO watchdog made operational -- 2.39.1