Signed-off-by: Andrea Bolognani <abolo...@redhat.com>
---
 NEWS.rst | 10 ++++++++++
 1 file changed, 10 insertions(+)

diff --git a/NEWS.rst b/NEWS.rst
index 4625a838f8..577e1502b5 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -41,6 +41,16 @@ v9.1.0 (unreleased)
     allowing installation of a modular daemon configuration without the
     traditional monolithic libvirtd.
 
+  * qemu: Make firmware selection persistent
+
+    Up until now, firmware autoselection has been performed at domain startup
+    time: as a result, changes to the JSON firmware descriptors present on the
+    system could have translated to a different firmware being chosen for
+    subsequent startups of the same domain, potentially rendering it unbootable
+    or lowering the security guarantees. Firmware selection now happens once,
+    when the domain is defined, and its results are stored in the domain XML
+    to be reused, unchanged, for all subsequent boots.
+
 * **Bug fixes**
 
   * QEMU: iTCO watchdog made operational
-- 
2.39.1

Reply via email to