On Tue, Jan 09, 2018 at 11:45:13PM +0100, Jiri Denemark wrote:
This is the libvirt's part of the changes related to
CVE-2017-5715. The
new models can be used to pass the protective CPU features to guests.
But remember, the host CPU microcode, host kernel, QEMU, and libvirt all
need to be updated for this to be any useful.
Based on a patch from Paolo Bonzini.
See QEMU patches from Eduardo for more details:
https://patchew.org/QEMU/20180109154519.25634-1-ehabkost@redhat.com/
I guess that you will wait with pushing until the QEMU patches are
accepted and pushed as well.
Reviewed-by: Pavel Hrdina <phrdina(a)redhat.com>