From ad76c594501e9ff1d36e7fdae5a9b28a4a559f99 Mon Sep 17 00:00:00 2001 From: =?utf8?q?Daniel=20P=2E=20Berrang=C3=A9?= Date: Thu, 27 Nov 2025 13:59:52 +0000 Subject: [PATCH] news: document improved certs, host validate details & TDX fix MIME-Version: 1.0 Content-Type: text/plain; charset=utf8 Content-Transfer-Encoding: 8bit Signed-off-by: Daniel P. Berrangé Reviewed-by: Jiri Denemark --- NEWS.rst | 17 +++++++++++++++++ 1 file changed, 17 insertions(+) diff --git a/NEWS.rst b/NEWS.rst index 412fd58e0c..879e9e8448 100644 --- a/NEWS.rst +++ b/NEWS.rst @@ -46,6 +46,17 @@ v11.10.0 (unreleased) Bhyve guests can now be configured to wait for a VNC connection before booting. + * remote: multiple certificate support + + The remote daemon and client can be configured to load multiple x509 + certificate identities. This facilitates a transition to certificates + supporting Post-Quantum Crytographic algorithms. + + * tools: improved virt-host-validate output + + The virt-host-validate tool will now report extra details when certain + checks pass. + * **Bug fixes** * ch: Use correct domain definition in chDomainGetXMLDesc() @@ -66,6 +77,12 @@ v11.10.0 (unreleased) fail with "guest CPU doesn't match specification: extra features: ht" error. + * qemu: fix incorrect reporting of the TDX launch security type + + The TDX launch security type was incorrectly reported on all platforms + if the QEMU binary had it built-in. It is now limited to only platforms + with the TDX kernel feature available for use. + v11.9.0 (2025-11-03) ==================== -- 2.47.3