From: Daniel P. Berrangé <berrange@redhat.com>
Date: Thu, 27 Nov 2025 13:59:52 +0000 (+0000)
Subject: news: document improved certs, host validate details & TDX fix
X-Git-Tag: v11.10.0~4
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=ad76c594501e9ff1d36e7fdae5a9b28a4a559f99;p=thirdparty%2Flibvirt.git

news: document improved certs, host validate details & TDX fix

Signed-off-by: Daniel P. Berrangé <berrange@redhat.com>
Reviewed-by: Jiri Denemark <jdenemar@redhat.com>
---

diff --git a/NEWS.rst b/NEWS.rst
index 412fd58e0c..879e9e8448 100644
--- a/NEWS.rst
+++ b/NEWS.rst
@@ -46,6 +46,17 @@ v11.10.0 (unreleased)
     Bhyve guests can now be configured to wait for a VNC connection before
     booting.
 
+  * remote: multiple certificate support
+
+    The remote daemon and client can be configured to load multiple x509
+    certificate identities. This facilitates a transition to certificates
+    supporting Post-Quantum Crytographic algorithms.
+
+  * tools: improved virt-host-validate output
+
+    The virt-host-validate tool will now report extra details when certain
+    checks pass.
+
 * **Bug fixes**
 
   * ch: Use correct domain definition in chDomainGetXMLDesc()
@@ -66,6 +77,12 @@ v11.10.0 (unreleased)
     fail with "guest CPU doesn't match specification: extra features: ht"
     error.
 
+  * qemu: fix incorrect reporting of the TDX launch security type
+
+    The TDX launch security type was incorrectly reported on all platforms
+    if the QEMU binary had it built-in. It is now limited to only platforms
+    with the TDX kernel feature available for use.
+
 
 v11.9.0 (2025-11-03)
 ====================