# changelog

author: Aaron Young <Aaron.Young@oracle.com> - 1:1.2-2.el7
changelog:
  - Change Image.c image load error to DEBUG_WARN from DEBUG_ERROR since it is normal for some images to fail to load if the associated hardware is not present. Such is the case with Ramfb. (Aaron Young)  [Orabug: 28868674] 
  - Fix AAVMF build. Pull in OpenSSL code (as is done for x86_64) (Aaron Young)  
  - Update AAVMF change log for version 1.2 (Aaron Young)


author: Aaron Young <Aaron.Young@oracle.com> - 1:1.2-5.el7
changelog:
  - Update spec file to remove 'modprobe kvm-intel' and remove --enable-kvm arg to ovmf_vars_generator so qemu will not require kvm kernel module. (Aaron Young)  
  - Update spec file to modprobe kvm_intel module prior to running qemu to enroll default keys. (Aaron Young)  
  - Enroll Oracle cert/key for OL secureboot support. (Aaron Young)


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.2 release for OL7 which includes the following fixed CVEs:
    {CVE-2017-5715} {CVE-2017-5731} {CVE-2017-5732} {CVE-2017-5733} {CVE-2017-5734} {CVE-2017-5735} {CVE-2017-5753} {CVE-2018-12178} {CVE-2018-12180} {CVE-2018-12181} {CVE-2018-3630}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.3 release for OL7 which includes the following fixed CVEs:
    {CVE-2018-12182} {CVE-2019-13224} {CVE-2019-13225} {CVE-2019-14553}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.4.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2019-14584} {CVE-2019-14562} {CVE-2019-11098} {CVE-2019-14559} {CVE-2019-14575} {CVE-2019-14559} {CVE-2019-14587} {CVE-2019-14558} {CVE-2019-14586} {CVE-2019-14563}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.5.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2021-23840} {CVE-2021-23841}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.5.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2021-23840} {CVE-2021-23841} {CVE-2021-38575}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.6.6 release for OL7 which includes the following fixed CVEs:
    {CVE-2019-14560}
  - Update to OpenSSL 1.1.1v which includes the following fixed CVEs:
    {CVE-2023-3817} {CVE-2023-3446} {CVE-2023-2650} {CVE-2023-0465} {CVE-2023-0466} {CVE-2023-0464} {CVE-2023-0286} {CVE-2023-0215} {CVE-2022-4450} {CVE-2022-4304} {CVE-2022-2097} {CVE-2022-2068} {CVE-2022-1292} {CVE-2022-0778} {CVE-2021-4160} {CVE-2021-3712} {CVE-2021-3711} {CVE-2021-3450} {CVE-2021-3449} {CVE-2021-23841} {CVE-2021-23840} {CVE-2020-1971} {CVE-2020-1967} {CVE-2019-1551} {CVE-2019-1563} {CVE-2019-1549} {CVE-2019-1547} {CVE-2019-1552} {CVE-2019-1543} {CVE-2018-0734} {CVE-2018-0735}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.7.0 release for OL7 which includes the following fixed CVEs:
    {CVE-2023-45229} {CVE-2023-45230} {CVE-2023-45231} {CVE-2023-45232} {CVE-2023-45233} {CVE-2023-45234} {CVE-2023-45235} {CVE-2022-36763} {CVE-2022-36764} {CVE-2022-36765}
  - Update to OpenSSL 3.0.10 which includes the following fixed CVEs:
    {CVE-2023-2975} {CVE-2023-1255} {CVE-2023-0401} {CVE-2023-0217} {CVE-2023-0216} {CVE-2023-0215} {CVE-2022-4203} {CVE-2022-3996} {CVE-2022-3602} {CVE-2022-3786} {CVE-2022-3358} {CVE-2022-2274} {CVE-2022-1473} {CVE-2022-1434} {CVE-2022-1343} {CVE-2021-4044} {CVE-2021-23839}


author: Aaron Young <aaron.young@oracle.com>
changelog:
  - Create new 1.7.1 release for OL7 which includes the following fixed CVEs:
  - EDK2: EDK2 contains a vulnerability when S3 sleep is activated where an Attacker may cause a Division-By-Zero due to a UNIT32 overflow via local access [Orabug: 36990130] {CVE-2024-1298}
  - EDK2: In the Linux kernel before 6.9, an untrusted hypervisor can inject virtual interrupt 29 (#VC) at any point in time and can trigger its handler. [Orabug: 36990244] {CVE-2024-25742}
  - EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990198] {CVE-2023-45236}
  - EDK2: EDK2’s Network Package is susceptible to a predictable TCP Initial Sequence Number. [Orabug: 36990210] {CVE-2023-45237}


author: Mark Kanda <mark.kanda@oracle.com> - 1.9.0-8.el7
changelog:
  - BUILDINFO: commit=e675fe8a552a76b30dce51f43800279a7c4357e3
  - Reconnect: recalculate the header digest when we re-queue after a reconnect


author: Stefan Berger - 0.8.5-1
changelog:
  - tpm2: NVMarshal: Handle index orderly RAM without 0-sized terminating node
  - tpm2: Initialize a whole OBJECT before using it


author: Wim ten Have <wim.ten.have@oracle.com> - 4.7.0-2.el7
changelog:
  - BUILDINFO: commit=e5b1a9fd903207e44ce6064240df0ef408d83862
  - qemu: xml2argv, argv2xml fixes for mem-lock and cpu-pm targetted guests (Wim ten Have)  
  - qemu: parse and apply domain mem-lock and cpu-pm if such applies (Wim ten Have)  
  - domain: add hypervisor features mem-lock and cpu-pm support for kvm (Wim ten Have)  
  - qemu: xml2argv, argv2xml fixes for kvm-hint-dedicated targetted guests (Wim ten Have)  
  - qemu: parse and apply domain kvm-hint-dedicated if such applies (Wim ten Have)  
  - domain: add hypervisor feature kvm-hint-dedicated support for kvm (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-6.el7
changelog:
  - qemu: Driver change adding private lock to auto-tune hugepages (Wim ten Have)
    [Orabug: 29809943]


author: Mark Kanda <mark.kanda@oracle.com> - 5.0.0-7.el7
changelog:
  - cpu_map: Define md-clear CPUID bit (Jiri Denemark)  [Orabug: 29874181]
    {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-8.el7
changelog:
  - api: disallow virDomainSaveImageGetXMLDesc on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10161}
  - domain: Define explicit flags for saved image xml (Eric Blake)  [Orabug: 29955742] 
  - api: disallow virDomainManagedSaveDefineXML on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10166}
  - api: disallow virConnectGetDomainCapabilities on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10167}
  - api: disallow virConnect*HypervisorCPU on read-only connections (Ján Tomko)  [Orabug: 29955742]  {CVE-2019-10168}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-9.el7
changelog:
  - qemu: remove cpuhostmask and cpuguestmask from virCaps structure (Wim ten
    Have)  [Orabug: 29956508]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-10.el7
changelog:
  - qemuxml2argvdata: Fix tests for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 29826947] 
  - qemu: Add SMT support to CPU packing (Wim ten Have)  [Orabug: 29826947] 
  - domain: Add support for SMT to auto vNUMA feature (Wim ten Have)  [Orabug: 29826947]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-11.el7
changelog:
  - qemu: Add hotplug support for vNUMA node topology (Wim ten Have)  
  - domain: correct vNUMA autopartition validation check (Wim ten Have)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-12.el7
changelog:
  - qemu: Driver change to support vNUMA setvcpus config change request (Wim ten Have)  [Orabug: 30030162] 
  - domain: Add vNUMA auto partition support for persistent domains (Wim ten Have)  [Orabug: 30030162]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-14.el7
changelog:
  - qemuxml2argvdata: Adjust a test for vNUMA nodes and threads per core match (Wim ten Have)  [Orabug: 30189275] 
  - qemu: Fix vNUMA hotplug request checking the node mapped cores. (Wim ten Have)  [Orabug: 30189275] 
  - libvirt: Add vNUMA online and hotplug rendered detail (Wim ten Have)  [Orabug: 30189275]


author: Menno Lageman <menno.lageman@oracle.com> - 5.0.0-15.el7
changelog:
  - qemu: ensure whole cores during hot(un)plug on Exadata (Menno Lageman)  [Orabug: 30239774] 
  - qemu: exadata KVM set vcpu granularity must be number of CPUs in core (Menno Lageman)  [Orabug: 30224846]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-16.el7
changelog:
  - libvirt: Add single node vNUMA forced configuration enhancement (Wim ten Have)  [Orabug: 30380799] 
  - libvirt: vNUMA auto partitioning can't downscale vcpus/vcpu sets. (Wim ten Have)  [Orabug: 29995967] 
  - qemuxml2argvdata: Adjust numa-interleave test. (Wim ten Have)  [Orabug: 30258966] 
  - qemu: Fix CPU topology less vNUMA rendered guests. (Wim ten Have)  [Orabug: 30258966] 
  - libvirt: Fix vNUMA online and hotplug render detail. (Wim ten Have)  [Orabug: 30258966]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-2.el7
changelog:
  - BUILDINFO: commit=568af469d4e54975e0ffdf61a8f7063c57cb77eb
  - domain: fix vNUMA auto partition pinning on imbalanced configurations (Wim ten Have)  [Orabug: 29503554] 
  - qemu: fix driver initialization SEGV under initial bootstrap (Wim ten Have)  [Orabug: 29502935]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-3.el7
changelog:
  - BUILDINFO: commit=b335d6fa26d61fc28159d39b0644240b4733ef4b
  - qemu: Fix nr_hugepages host auto-tuning computation (Wim ten Have)  [Orabug: 29625524] 
  - qemu: fix driver SEGV reaping existing guests (Wim ten Have)  [Orabug: 29655677]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-4.el7
changelog:
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.0.0-5.el7
changelog:
  - qemu: disable setmem change requests for vNUMA targets (Wim ten Have)  [Orabug: 29797366] 
  - domain: Disable memballoon memory configuration support for vNUMA guests (Wim ten Have)  [Orabug: 29797366] 
  - qemu: Driver change to target for vNUMA setmaxmem change request (Wim ten Have)  [Orabug: 29749852] 
  - domain: Add domain memory config support for vNUMA guests (Wim ten Have)  [Orabug: 29749852] 
  - logging: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - locking: restrict sockets to mode 0600 (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}
  - admin: reject clients unless their UID matches the current UID (Daniel P. Berrangé)  [Orabug: 29861433]  {CVE-2019-10132}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-4.el7
changelog:
  - build: skip copyright check for gnulib (Menno Lageman)  
  - Revert "network: pull global chain init into separate method" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: add more debugging of firewall chain creation" (Menno Lageman)  [Orabug: 30611188] 
  - Revert "network: delay global firewall setup if no networks are running" (Menno Lageman)  [Orabug: 30611188] 
  - qemu-submodule-init: Add Git submodule init script (Karl Heubaum)  [Orabug: 30796221]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-5.el7
changelog:
  - exadata: can not configure shared memory hosted disk devices for
    vhostmd.service (Menno Lageman)  [Orabug: 30598065]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-8.el7
changelog:
  - domain groups: End Of BETA (Wim ten Have)  
  - domaingroups: ExaData Domain Groups POC (Wim ten Have)  
  - domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)  
  - tests: add various tests to exercise vNUMA host partitioning (Wim ten Have)  [Orabug: 29720293] 
  - qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have)  [Orabug: 29720293] 
  - XML definitions for guest vNUMA and parsing routines (Wim ten Have)  [Orabug: 29720293] 
  - Revert "exadata: can not configure shared memory hosted disk devices for vhostmd.service" (Menno Lageman)  
  - qemu: Forcibly mknod() even if it exists (Michal Prívozník)


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-9.el7
changelog:
  - vNUMA: distinguish standard and vNUMA memory 'setmaxmem' operations (Wim ten
    Have)  [Orabug: 30894536]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-10.el7
changelog:
  - domain groups: refresh dgbase depending host capabilities before rendering the cpuguestmask (Wim ten Have)  [Orabug: 30987361] 
  - conf: domain group validation errors should print correct group info (Menno Lageman)  [Orabug: 30988428] 
  - qemu: reserve hugepages when memoryBacking when live attaching memory (Wim ten Have)  [Orabug: 30985510] 
  - domain groups: avoid virDomainGroupInit if exadataConfig is disabled (Wim ten Have)  [Orabug: 30985907]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-11.el7
changelog:
  - domain groups: Add functionality to control NUMA node alignment (Wim ten Have)  [Orabug: 30988105] 
  - domain groups: A rename should always update active and config domain definitions (Wim ten Have)  [Orabug: 30999730]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-12.el7
changelog:
  - libvirt: vNUMA automatic host paritioning allows erroneous vcpu settings (Wim ten Have)  [Orabug: 31050313] 
  - remote: do not stop libvirtd after period of inactivity (Menno Lageman)  [Orabug: 31003707] 
  - remote: do not use socket activation by default (Menno Lageman)  [Orabug: 31003707] 
  - qemu driver: handle targetNode under memory hot-plug operations (Wim ten Have)  [Orabug: 31009716] 
  - domain groups: refresh dgbase host capabilities prior to defining a new group (Wim ten Have)  [Orabug: 31026069] 
  - domain groups: Always cleanup system.slice controlled hugepage reservations (Wim ten Have)  [Orabug: 31025853] 
  - domain groups: Enable DGs upon fresh groups arrival (Wim ten Have)  [Orabug: 31021247] 
  - domain groups: Skip undefined domain groups when validating lists (Wim ten Have)  [Orabug: 31030117]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-13.el7
changelog:
  - domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have)  [Orabug: 31145304] 
  - qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman)  
  - build: Fix qemu-submodule-init syntax-check issue (Wim ten Have)  
  - libvirt: Fix various introduced Fedora/RHEL build violations (Wim ten Have)  [Orabug: 31143337] 
  - qemu: don't hold both jobs for suspend (Jonathon Jongsma)  [Orabug: 31073098]  {CVE-2019-20485}
  - domain groups: qemu driver error refers to pCPUs instead of vCPUs (Wim ten Have)  [Orabug: 31075757] 
  - node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (Jiang Kun)  [Orabug: 31070337]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-14.el7
changelog:
  - vmx: make 'fileName' optional for CD-ROMs (Pino Toscano)  [Orabug: 31350200] 
  - vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino Toscano)  [Orabug: 31350200] 
  - domain group: Fix a potential SEGV while restoring guest domains (Wim ten Have)  [Orabug: 31285615] 
  - cpu_map: Distinguish Cascadelake-Server from Skylake-Server (Jiri Denemark)  [Orabug: 31214897] 
  - cpu_map: Add more -noTSX x86 CPU models (Christian Ehrhardt)  [Orabug: 31214897] 
  - qemuDomainGetStatsIOThread: Don't leak array with 0 iothreads (Peter Krempa)  [Orabug: 31251756]  {CVE-2020-12430}


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-16.el7
changelog:
  - qemu: format 'x-aw-bits' on intel-iommu command line (Menno Lageman)  
  - qemu: format address wdith on intel-iommu command line (Menno Lageman)  
  - conf: add address width attribute to iommu (Menno Lageman)  
  - tests: add tests for host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31354547] 
  - qemu: support host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31374547] 
  - storage: Fix daemon crash on lookup storagepool by targetpath (Yi Li)  [Orabug: 31439483]  {CVE-2020-10703}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-17.el7
changelog:
  - qemu: Fix cpu boundary checks when starting or configuring guest domains. (Wim ten Have)  [Orabug: 31469231] 
  - libvirt: Allocate max possible CPUs for QEMU to prepare guest memory (Wim ten Have)  [Orabug: 31064560]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-19.el7
changelog:
  - qemu: Verify use of hugepages when releasing its acquired status (Wim ten
    Have)  [Orabug: 31839035]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-20.el7
changelog:
  - qemu: remove use of qemuDomainObjBeginJobWithAgent() (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold monitor and agent job when setting time (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't hold a monitor and agent job for reboot (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: don't take agent and monitor job for shutdown (Jonathon Jongsma)  [Orabug: 31990187]  {CVE-2019-20485}
  - qemu: agent: set ifname to NULL after freeing (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: require write acl for guest agent in virDomainInterfaceAddresses (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: add support for filtering @acls by uint params (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - rpc: gendispatch: handle empty flags (Ján Tomko)  [Orabug: 31964426]  {CVE-2020-25637}
  - qemu: blockcopy: Fix conditions when virStorageSource should be initialized (Peter Krempa)  [Orabug: 31517934] 
  - qemu: blockcopy: Report error on image format detection failure (Peter Krempa)  [Orabug: 31517934]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-21.el7
changelog:
  - exadata: Fix the validation when defining domain groups (Wim ten Have)  [Orabug: 32085856] 
  - Revert "qemu: don't take agent and monitor job for shutdown" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold a monitor and agent job for reboot" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: don't hold monitor and agent job when setting time" (Menno Lageman)  [Orabug: 32080283] 
  - Revert "qemu: remove use of qemuDomainObjBeginJobWithAgent()" (Menno Lageman)  [Orabug: 32080283] 
  - qemu: improve error message when guest vcpu count exceeds domain group limit (Menno Lageman)  [Orabug: 31985111] 
  - qemu: Autonomous hugepage acquisition for 2-MiB and 1-GiB guest memoryBacking. (Wim ten Have)  
  - qemu: Fix a qemuMemReleaseHostHugepages state error (Wim ten Have)  [Orabug: 32069203] 
  - qemu: avoid guest CPU process handling if exadataConfig is disabled (Wim ten Have)  [Orabug: 32053696] 
  - domain_conf: Relax SCSI addr used check (Michal Prívozník)  [Orabug: 31386162] 
  - domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (Michal Prívozník)  [Orabug: 31386162]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-22.el7
changelog:
  - build: add dependency to help patch tooling (Menno Lageman)  [Orabug: 32284540] 
  - Exadata: fix active guest dgroup-delete requests (Wim ten Have)  [Orabug: 32095306] 
  - Exadata: fix a rogue Domain Groups dgroup-undefine flaw (Wim ten Have)  [Orabug: 31945084]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-23.el7
changelog:
  - util: remove unneeded cleanup labels (Wim ten Have)  [Orabug: 32399255] 
  - virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (Wim ten Have)  [Orabug: 32379098]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-24.el7
changelog:
  - exadata: Add configurable libvirtd mlockall support (Wim ten Have)  [Orabug: 32479237] 
  - exadata: hint a configurable number of memory init threads to qemu (Wim ten Have)  [Orabug: 32460334] 
  - Exadata: domain group should allow for asymmetric creation (Wim ten Have)  [Orabug: 32060622]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-26.el7
changelog:
  - exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have)  [Orabug: 32537538] 
  - exadata: Fix CPU Packing when out of pCPUs (Wim ten Have)  [Orabug: 32527311]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-27.el7
changelog:
  - Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten
    Have)  [Orabug: 32561685]


author: Joe Jin <joe.jin@oracle.com> - 5.7.0-28.el7
changelog:
  - qemu_capabilities: Rework domain caps cache (Michal Prívozník)  [Orabug: 32664432] 
  - tests: fix virArchFromHost() redefine error (Joe Jin)  [Orabug: 32664432] 
  - qemu: cache host arch separately from virCapsPtr (Daniel P. Berrangé)  [Orabug: 32664432] 
  - cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Prívozník)  [Orabug: 32664432] 
  - virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemu: Add test data for the new <slice> element (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add support for slices of type 'storage' (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Add cases for creating image overlays on top of disks with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Properly format storage slice into backing store strings (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store nodenames of slice in status XML (Peter Krempa)  [Orabug: 32164351] 
  - conf: Implement support for <slices> of disk source (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document the new <slices> sub-element of disk's <source> (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: forbid creation of storage sources with <slice> (Peter Krempa)  [Orabug: 32164351] 
  - qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa)  [Orabug: 32164351] 
  - qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa)  [Orabug: 32164351] 
  - util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa)  [Orabug: 32164351] 
  - docs: formatdomain: Close <source> on one of disk examples (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor formatting of node names into status XML (Peter Krempa)  [Orabug: 32164351] 
  - tests: virstorage: Add test cases for "json:" pseudo-URI without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa)  [Orabug: 32164351] 
  - virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa)  [Orabug: 32164351] 
  - qemu: enable blockdev support (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build the 'pflash' drives via -machine (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Introduce helper to convert <loader> into virStorageSource (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Extract formatting of -drive for pflash (Peter Krempa)  [Orabug: 32164351] 
  - qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: qapi: Add support for command features (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa)  [Orabug: 32164351] 
  - docs: Document support for obeying <backingStore> of <disk> on input (Peter Krempa)  [Orabug: 32164351] 
  - conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa)  [Orabug: 32164351] 
  - domaincaps: Store domain capability features in an array (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domcaps: Initialize all features (Peter Krempa)  [Orabug: 32164351] 
  - domcaps: Add function for initializing domain caps as unsupported (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Extract formatting of the <features> subelement (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa)  [Orabug: 32164351] 
  - conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa)  [Orabug: 32164351] 
  - conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa)  [Orabug: 32164351] 
  - conf: turn virDomainMemtuneFormat void (Peter Krempa)  [Orabug: 32164351] 
  - conf: domain: Split up formatting of <memtune> and <memoryBacking> (Peter Krempa)  [Orabug: 32164351] 
  - conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa)  [Orabug: 32164351] 
  - conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa)  [Orabug: 32164351] 
  - qemu: caps: Make capability filler functions void (Peter Krempa)  [Orabug: 32164351] 
  - util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa)  [Orabug: 32164351] 
  - qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Use XML based disk bus convertor in error message (Peter Krempa)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStore (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStore member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Split out virStorageSourceNewFromChild (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Add externalDataStoreRaw member (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Fix backing format \0 check (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Use qcowXGetBackingStore directly (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Drop now unused isQCow2 argument (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: Check version to determine if qcow2 or not (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Fix check for empty backing file (Cole Robinson)  [Orabug: 32164351] 
  - storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson)  [Orabug: 32164351] 
  - qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Replace snapshot transaction action generator (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin)  [Orabug: 32164351] 
  - qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa)  [Orabug: 32164351] 
  - tests: add qemu capabilities data for qemu 4.2 (Peter Krempa)  [Orabug: 32164351] 
  - lxc: fix compile error (Joe Jin)  [Orabug: 32164351] 
  - qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa)  [Orabug: 32164351] 
  - qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa)  [Orabug: 32164351] 
  - qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa)  [Orabug: 32164351] 
  - qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong)  [Orabug: 32164351] 
  - qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong)  [Orabug: 32164351] 
  - qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Prívozník)  [Orabug: 32164351] 
  - Revert "qemu: add socket datagram capability" (Michal Prívozník)  [Orabug: 32164351] 
  - tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa)  [Orabug: 32164351] 
  - snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia)  [Orabug: 32164351] 
  - qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: Fix regression in snapshot-revert (Eric Blake)  [Orabug: 32164351] 
  - lib: Define and use autofree for virConfPtr (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOUNREF() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Use more of VIR_AUTOFREE() (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Prívozník)  [Orabug: 32164351] 
  - virhostdev: Don't unref @pcidevs twice (Michal Prívozník)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza)  [Orabug: 32164351] 
  - remote: fix UNIX socket path being incorrectly built for libvirtd (eater)  [Orabug: 32164351] 
  - lib: Grab write lock when modifying list of domains (Michal Prívozník)  [Orabug: 32164351] 
  - qemu: reset VM id after external devices stop (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: add dbus-vmstate capability (Marc-André Lureau)  [Orabug: 32164351] 
  - tests: fix xml2xml tpm-emulator.xml test (Marc-André Lureau)  [Orabug: 32164351] 
  - qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Add -blockdev support for external snapshots (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Save status and config XMLs only on success (Peter Krempa)  [Orabug: 32164351] 
  - qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa)  [Orabug: 32164351] 
  - qemu: driver: Fix shallow non-reuse block copy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Prevent storage causing too much nested XML (Peter Krempa)  [Orabug: 32164351] 
  - qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa)  [Orabug: 32164351] 
  - qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa)  [Orabug: 32164351] 
  - qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark)  [Orabug: 32164351] 
  - qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa)  [Orabug: 32164351] 
  - tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa)  [Orabug: 32164351] 
  - qemu: block: Use correct type when creating image size JSON entries (Peter Krempa)  [Orabug: 32164351] 
  - Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have)  [Orabug: 32708041] 
  - virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)  
  - virt-admin: Introduce command srv-update-tls (Zhang Bo)  [Orabug: 32768102] 
  - admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102] 
  - tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo)  [Orabug: 32768102] 
  - virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo)  [Orabug: 32768102]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-29.el7
changelog:
  - qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have)  [Orabug: 32355455] 
  - qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa)  [Orabug: 33151464] 
  - qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa)  [Orabug: 33151464] 
  - qemu: Tell secdrivers which images are top parent (Michal Prívozník)  [Orabug: 33086913] 
  - security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Prívozník)  [Orabug: 33086913]


author: Menno Lageman <menno.lageman@oracle.com> - 5.7.0-30.el7
changelog:
  - qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa)  [Orabug: 33086913] 
  - qemu: Don't set NVRAM label when creating it (Michal Prívozník)  [Orabug: 33319048] 
  - qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have)  [Orabug: 33368490]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-31.el7
changelog:
  - qemu: Do not latch guestCPUs when guests hotplug with active domain groups
    (Wim ten Have)  [Orabug: 33440015]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-32.el7
changelog:
  - qemu: Validate config->exadata before reaping guests (Wim ten Have)  [Orabug: 33763967] 
  - qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have)  [Orabug: 33268059] 
  - qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have)  [Orabug: 33268059] 
  - qemu: Label restore path outside of secdriver transactions (Michal Prívozník)  [Orabug: 33351242] 
  - security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Prívozník)  [Orabug: 33351242]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-33.el7
changelog:
  - qemu: refresh vNUMA/SMT pinning. (Wim ten Have)  [Orabug: 34083505] 
  - qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have)  [Orabug: 34023508] 
  - nwfilter: fix crash when counting number of network filters (Daniel P. Berrangé)  [Orabug: 33973639]  {CVE-2022-0897}


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-34.el7
changelog:
  - qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa)  [Orabug: 33091019] 
  - qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa)  [Orabug: 33091019] 
  - qemu: blockjob: Store 'flags' for all the block job types (Peter Krempa)  [Orabug: 33091019] 
  - qemu: blockjob: Store 'jobflags' with block job data (Peter Krempa)  [Orabug: 33091019] 
  - util: json: Introduce virJSONValueArrayConcat (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Add 'granularity' parameter for block-dirty-bitmap-add (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa)  [Orabug: 33091019] 
  - qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: enable the snapshot image deletion feature (Pavel Mores)  [Orabug: 33091019] 
  - qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores)  [Orabug: 33091019] 
  - qemu: checkpoint: fix NULL dereference at create time (Cole Robinson)  [Orabug: 33091019] 
  - qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa)  [Orabug: 33091019] 
  - util: consolidate on one free callback for hash data (Daniel P. Berrangé)  [Orabug: 33091019] 
  - conf: stop using hash key when free'ing hash entries (Daniel P. Berrangé)  [Orabug: 33091019] 
  - qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Fix rollback and access to unlocked 'vm' when deleting checkpoints (Peter Krempa)  [Orabug: 33091019] 
  - qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Split out checkpoint creation code (Peter Krempa)  [Orabug: 33091019] 
  - qemu: block: Don't query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa)  [Orabug: 33091019] 
  - qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Introduce virHashHasEntry (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Add new constructor 'virHashNew' (Peter Krempa)  [Orabug: 33091019] 
  - util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa)  [Orabug: 33091019] 
  - conf: Introduce virDomainDiskByTarget (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Don't update current checkpoint until we are done (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa)  [Orabug: 33091019] 
  - qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa)  [Orabug: 33091019] 
  - qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa)  [Orabug: 33091019] 
  - qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa)  [Orabug: 33091019] 
  - qemu: checkpoint: Don't forbid checkpoint when VM is marked for autodestroy (Peter Krempa)  [Orabug: 33091019] 
  - Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have)  [Orabug: 34256070] 
  - qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang)  [Orabug: 34210159]  {CVE-2021-3975}
  - libvirt: Fix Auto host partitioning threads under single-socket hosts (Wim ten Have)  [Orabug: 34153152]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-35.el7
changelog:
  - util: add virNetDevGetPhysPortName (Moshe Levi)  [Orabug: 34329649] 
  - util: Add phys_port_name support on virPCIGetNetName (Dmytro Linkin)  [Orabug: 34329649]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-36.el7
changelog:
  - conf: virNetDevSupportsBandwidth: move into the C file (Wim ten Have)  [Orabug: 34510458] 
  - util: Netdev fixes for phys_port_id to get the ifname of a VF (Wim ten Have)  [Orabug: 34417160] 
  - qemuProcessStop: Don't try to remove QoS on already removed TAP (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Fix 'burst' value passed to ovs-vsctl (Michal Prívozník)  [Orabug: 34206752] 
  - util: Avoid null pointer dereference when setting QoS on OVS (Jiri Denemark)  [Orabug: 34206752] 
  - virnetdevopenvswitch: unify calculation of ovs and tc (zhangjl02)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Fix qos cleaning residual on multi interfaces (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Introduce virNetDevOpenvswitchInterfaceClearTxQos and virNetDevOpenvswitchInterfaceClearRxQos (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Extract common code block to a single function (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Extract conversion parameters between virNetDevBandwidth and ovs (Jinsheng Zhang)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Add vmuuid notes on virNetDevOpenvswitchInterfaceSetQos (Jinsheng Zhang)  [Orabug: 34206752] 
  - qemu: interface: check and use ovs command to set qos of ovs managed port (zhangjl02)  [Orabug: 34206752] 
  - qemu: interface: remove setting noqueue for ovs port (zhangjl02)  [Orabug: 34206752] 
  - virDomain: interface: add virNetDevOpenvswitchInterfaceSetQos and virNetDevOpenvswitchInterfaceClearQos (zhangjl02)  [Orabug: 34206752] 
  - virDomain: interface: add virDomainNetDefIsOvsport (zhangjl02)  [Orabug: 34206752] 
  - openvswitch: don't delete existing OVS port prior to recreating same port (Laine Stump)  [Orabug: 34206752] 
  - virnetdev: move virNetDevSetRootQDisc to virnetdevbandwidth (Pavel Hrdina)  [Orabug: 34206752] 
  - virnetdevbandwidth: Don't generate burst outside of boundaries (Michal Prívozník)  [Orabug: 34206752] 
  - qemu_hotplug: Don't dereference NULL pointer @newb in qemuDomainChangeNet() (Michal Prívozník)  [Orabug: 34206752] 
  - qemu: Restore default root qdisc when QoS is cleared out (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdevopenvswitch: Simplify OVS_VSCTL cmd creation (Michal Prívozník)  [Orabug: 34206752] 
  - qemu: Set noqueue qdisc for TAP devices (Michal Prívozník)  [Orabug: 34206752] 
  - virnetdev: Introduce virNetDevSetRootQDisc() (Michal Prívozník)  [Orabug: 34206752] 
  - syntax-check: Don't forbid curly braces around single line condition body (Peter Krempa)  [Orabug: 34206752] 
  - src: util: rename some program macros (Pavel Hrdina)  [Orabug: 34206752] 
  - conf: rename virNetDevSupportBandwidth to virNetDevSupportsBandwidth (Ján Tomko)  [Orabug: 34206752] 
  - qemu: do not revert to NULL bandwidth (Ján Tomko)  [Orabug: 34206752] 
  - conf: return a const from virDomainNetGetActualVirtPortProfile (Laine Stump)  [Orabug: 34206752] 
  - qemu: move runtime netdev validation into a separate function (Laine Stump)  [Orabug: 34206752] 
  - conf: make arg to virDomainNetGetActualVirtPortProfile() a const (Laine Stump)  [Orabug: 34206752]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-37.el7
changelog:
  - vNUMA: Auto adjust 'maxvcpus' for vCORE placement (Wim ten Have)  [Orabug: 34670399] 
  - qemu: support kvm-poll-control performance hint (Wim ten Have)  [Orabug: 34695476] 
  - qemu: fix EFI nvram removal on domain undefine (Pavel Mores)  [Orabug: 34543837] 
  - util: keep the pidfile locked (Marc-André Lureau)  [Orabug: 34500172] 
  - qemuProcessStartManagedPRDaemon: Don't pass -f pidfile to the daemon (Michal Prívozník)  [Orabug: 34500172] 
  - virCommand: Actually acquire pidfile instead of just writing it (Michal Prívozník)  [Orabug: 34500172] 
  - qemu: Don't explicitly remove pidfile after virPidFileForceCleanupPath() (Michal Prívozník)  [Orabug: 34500172] 
  - virPipeImpl: Don't overwrite error (Peter Krempa)  [Orabug: 34500172] 
  - src: introduce a wrapper for the pipe2() system call (Daniel P. Berrangé)  [Orabug: 34500172]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-38.el7
changelog:
  - qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla)  [Orabug: 34826758] 
  - security: fix SELinux label generation logic (Daniel P. Berrangé)  [Orabug: 34773029]  {CVE-2021-3631}
  - spec: Require iproute-tc dependency for OL7 also (Shaleen Bathla)  [Orabug: 34724925] 
  - qemu: Set default qdisc before setting bandwidth (Michal Prívozník)  [Orabug: 34724925] 
  - qemu: Taint cpu host-passthrough only after migration (Cole Robinson)  [Orabug: 34724925]


author: Wim ten Have <wim.ten.have@oracle.com> - 5.7.0-40.el7
changelog:
  - build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have)  [Orabug: 35289777] 
  - util: Make virFileClose() quiet on success (Andrea Bolognani)  [Orabug: 35090886]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-41.el7
changelog:
  - qemu_monitor: Add defensive protection on mon->msg (Wim ten Have)  [Orabug: 35699260] 
  - vircpi: Add PCIe 5.0 and 6.0 link speeds (Michal Prívozník)  [Orabug: 35496776] 
  - qemuProcessSetupVcpusVnuma: add NULL check for def->cpu (Shaleen Bathla)  [Orabug: 35332038]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-42.el7
changelog:
  - Document CVEs as fixed (Karl Heubaum) {CVE-2023-2700}
  - Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364474] {CVE-2024-1441}
  - libvirt-<module>: Check caller-provided buffers to be NULL with size > 0 (Erik Skultety) [Orabug: 36364474]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-43.el7
changelog:
  - qemu_firmware: don't error out for unknown firmware features (Pavel Hrdina) [Orabug: 36931914]
  - cfg.mk: ignore buildrpm directory for syntax checks (Shaleen Bathla)
  - qemu_process: Postpone vcpu re-pinning after vcpuinfo refresh from qemu (Shaleen Bathla) [Orabug: 36588995]


author: Karl Heubaum <karl.heubaum@oracle.com> - 5.7.0-34.el7
changelog:
  - libvirt-python.spec: Bump "Obsoletes" version number for libvirt-python (Karl
    Heubaum)  [Orabug: 34185868]


author: Cole Robinson <crobinso@redhat.com> - 2:2.9.0-0.1-rc2
changelog:
  - Rebase to qemu-2.9.0-rc2
  - Add Obsoletes for or32-or1k rename (bz 1435016)
  - spec: Pull in vga and pxe roms for ppc64 (bz 1431403)


author: Karl Heubaum <karl.heubaum@oracle.com> - 12:2.9.0-4.el7
changelog:
  - BUILDINFO: commit=d37985d34c05a57385563402bc8d85e81557904d
  - multiboot: Use header names when displaying fields (Jack Schwartz)  
  - multiboot: Remove unused variables from multiboot.c (Jack Schwartz)  
  - multiboot: bss_end_addr can be zero (Jack Schwartz)  
  - multiboot: validate multiboot header address values (Prasad J Pandit)   {CVE-2017-14167}
  - numa: Allow setting NUMA distance for different NUMA nodes (He Chen)  
  - Tool to get guest registers via one tool (Mark Kanda)  
  - hw/vfio: improve error message when cannot init vfio event notifiers (Jim Quigley)  
  - IDE: test flush on empty CDROM (Kevin Wolf)  
  - IDE: Do not flush empty CDROM drives (Stefan Hajnoczi)   {CVE-2017-12809}
  - vga: stop passing pointers to vga_draw_line* functions (Gerd Hoffmann)   {CVE-2017-13672}
  - vga: fix display update region calculation (split screen) (Gerd Hoffmann)   {CVE-2017-13673}
  - vga: fix display update region calculation (Gerd Hoffmann)  
  - vmsvga: fix vmsvga_update_display (Gerd Hoffmann)  
  - g364fb: make display updates thread safe (Gerd Hoffmann)  
  - exynos: make display updates thread safe (Gerd Hoffmann)  
  - framebuffer: make display updates thread safe (Gerd Hoffmann)  
  - vga: make display updates thread safe. (Gerd Hoffmann)  
  - memory: add support getting and using a dirty bitmap copy. (Gerd Hoffmann)  
  - vga: add vga_scanline_invalidated helper (Gerd Hoffmann)  
  - bitmap: add bitmap_copy_and_clear_atomic (Gerd Hoffmann)  
  - virtio-scsi: Unset hotplug handler when unrealize (Mark Kanda)  
  - slirp: fix clearing ifq_so from pending packets (Jack Schwartz)   {CVE-2017-13711}
  - coroutine-lock: do not touch coroutine after another one has been entered (Mark Kanda)  
  - 9pfs: local: forbid client access to metadata (CVE-2017-7493) (Greg Kurz)   {CVE-2017-7493}
  - audio: release capture buffers (Gerd Hoffmann)   {CVE-2017-8309}
  - input: limit kbd queue depth (Gerd Hoffmann)   {CVE-2017-8379}
  - qemu.spec: Enable GlusterFS support (Karl Heubaum)  
  - sockets: Handle race condition between binds to the same port (Knut Omang)  
  - sockets: factor out create_fast_reuse_socket (Knut Omang)  
  - tests: Add test-listen - a stress test for QEMU socket listen (Knut Omang)


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-10.el7
changelog:
  - BUILDINFO: commit=ac5b439adae91b38d839320e7de2cdca060e9cc1
  - block: Fix NULL dereference on empty drive error (Kevin Wolf)  
  - Revert "IDE: Do not flush empty CDROM drives" (Stefan Hajnoczi)  
  - block: test blk_aio_flush() with blk->root == NULL (Kevin Wolf)  
  - block: add BlockBackend->in_flight counter (Stefan Hajnoczi)  
  - block: extract AIO_WAIT_WHILE() from BlockDriverState (Stefan Hajnoczi)  
  - aio: rename aio_context_in_iothread() to in_aio_context_home_thread() (Stefan Hajnoczi)  
  - qemu: 9pfs: use g_malloc0 to allocate space for xattr (Prasad J Pandit)   {CVE-2017-15038}
  - qemu.spec: Add dependency for libiscsi 1.9.0-8 (Mark Kanda)  
  - vga: fix region calculation (Gerd Hoffmann)   {CVE-2018-7858}
  - qemu.spec: Enable coroutine pool and vhost-vsock (Karl Heubaum)  
  - i386: Add support for SPEC_CTRL MSR (Paolo Bonzini)   {CVE-2017-5715}
  - intel-iommu: Extend address width to 48 bits (Prasad Singamsetty)  
  - intel-iommu: Redefine macros to enable supporting 48 bit address width (Prasad Singamsetty)  
  - vga: check the validation of memory addr when draw text (linzhecheng)   {CVE-2018-5683} {CVE-2018-5683}
  - osdep: Fix ROUND_UP(64-bit, 32-bit) (Eric Blake)   {CVE-2017-18043}
  - qemu.spec: Enable 9p virtual filesystem. (Karl Heubaum)  
  - i386: Add EPYC-IBPB CPU model (Eduardo Habkost)   {CVE-2017-5715}
  - i386: Add new -IBRS versions of Intel CPU models (Eduardo Habkost)   {CVE-2017-5715} {CVE-2017-5715}
  - i386: Add FEAT_8000_0008_EBX CPUID feature word (Eduardo Habkost)   {CVE-2017-5715}
  - i386: Add spec-ctrl CPUID bit (Eduardo Habkost)   {CVE-2017-5715}
  - target/i386: add clflushopt to "Skylake-Server" cpu model (Haozhong Zhang)  
  - x86/cpu: Enable new SSE/AVX/AVX512 cpu features (Yang Zhong)  
  - target-i386: adds PV_TLB_FLUSH CPUID feature bit (Wanpeng Li)  
  - target-i386/cpu: Add new EPYC CPU model (Brijesh Singh)  
  - i386: add Skylake-Server cpu model (Boqun Feng (Intel))  
  - ui: mix misleading comments & return types of VNC I/O helper methods (Daniel P. Berrange)  
  - ui: add trace events related to VNC client throttling (Daniel P. Berrange)  
  - ui: place a hard cap on VNC server output buffer size (Daniel P. Berrange)   {CVE-2017-15124} {CVE-2017-15124}


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-11.1.el7
changelog:
  - i386: Define the Virt SSBD MSR and handling of it (CVE-2018-3639) (Konrad Rzeszutek Wilk)  [Orabug: 28110449]  {CVE-2018-3639}
  - i386: define the AMD 'virt-ssbd' CPUID feature bit (CVE-2018-3639) (Konrad Rzeszutek Wilk)  [Orabug: 28110449]  {CVE-2018-3639}
  - i386: define the 'ssbd' CPUID feature bit (CVE-2018-3639) (Daniel P. Berrangé)  [Orabug: 28110449]  {CVE-2018-3639}


author: Karl Heubaum <karl.heubaum@oracle.com> - 12:2.9.0-17.el7
changelog:
  - i386: Remove generic SMT thread check (Babu Moger)  [Orabug: 28676425] 
  - pc: Fix typo on PC_COMPAT_2_12 (Eduardo Habkost)  [Orabug: 28676425] 
  - i386: Enable TOPOEXT feature on AMD EPYC CPU (Babu Moger)  [Orabug: 28676425] 
  - net: ignore packet size greater than INT_MAX (Jason Wang)  [Orabug: 28762625]  {CVE-2018-17963}
  - pcnet: fix possible buffer overflow (Jason Wang)  [Orabug: 28762617]  {CVE-2018-17962}
  - rtl8139: fix possible out of bound access (Jason Wang)  [Orabug: 28762613]  {CVE-2018-17958}
  - ne2000: fix possible out of bound access in ne2000_receive (Jason Wang)  [Orabug: 28733338]  {CVE-2018-10839}
  - seccomp: set the seccomp filter to all threads (Marc-André Lureau)  [Orabug: 28576303]  {CVE-2018-15746}
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit to virtio_net (Venu Busireddy)  [Orabug: 28497003] 
  - virtio-net: use 64-bit values for feature flags (Jason Baron)  [Orabug: 28497003] 
  - qga: check bytes count read by guest-file-read (Prasad J Pandit)  [Orabug: 28312939]  {CVE-2018-12617}
  - CVE-2017-2630: Qemu: nbd: oob stack write in client routine drop_sync (Mark Kanda)  [Orabug: 28424694]  {CVE-2017-2630}
  - CVE-2017-2633: Qemu: VNC: memory corruption due to unchecked resolution limit (Mark Kanda)  [Orabug: 28424697]  {CVE-2017-2633}
  - CVE-2017-7471: Qemu: 9p: virtfs allows guest to change filesystem attributes (Mark Kanda)  [Orabug: 28407849]  {CVE-2017-7471}
  - slirp: correct size computation while concatenating mbuf (Prasad J Pandit)  [Orabug: 28263244]  {CVE-2018-11806}


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-18.el7
changelog:
  - i386: Clean up cache CPUID code (Eduardo Habkost)  [Orabug: 28855262] 
  - i386: Add support for CPUID_8000_001E for AMD (Babu Moger)  [Orabug: 28855262] 
  - i386: Initialize cache information for EPYC family processors (Babu Moger)  [Orabug: 28855262] 
  - i386: Add cache information in X86CPUDefinition (Babu Moger)  [Orabug: 28855262] 
  - i386: Populate AMD Processor Cache Information for cpuid 0x8000001D (Babu Moger)  [Orabug: 28855262] 
  - i386: Add new property to control cache info (Babu Moger)  [Orabug: 28855262] 
  - i386: Helpers to encode cache information consistently (Eduardo Habkost)  [Orabug: 28855262] 
  - vfio-pci: add FAILOVER_PRIMARY_CHANGED event to shorten downtime during failover (Si-Wei Liu)  [Orabug: 28833460] 
  - virtio_net: Add support for "Data Path Switching" during Live Migration. (Venu Busireddy)  [Orabug: 28732905]


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-19.el7
changelog:
  - lsi53c895a: convert to trace-events (Mark Cave-Ayland)  [Orabug: 28205376] 
  - lsi: Reselection needed to remove pending commands from queue (George Kennedy)  [Orabug: 28626490] 
  - lsi53c895a: check message length value is valid (Prasad J Pandit)  [Orabug: 28873208]  {CVE-2018-18849}
  - 9p: fix QEMU crash when renaming files (Greg Kurz)  [Orabug: 28971701]  {CVE-2018-19489}
  - 9p: take write lock on fid path updates (CVE-2018-19364) (Greg Kurz)  [Orabug: 28949917]  {CVE-2018-19364}
  - nvme: fix out-of-bounds access to the CMB (Paolo Bonzini)  [Orabug: 28885514]  {CVE-2018-16847}
  - x86/cpu: Enable CLDEMOTE(Demote Cache Line) cpu feature (Jingqi Liu)  [Orabug: 28985301] 
  - i386: Define AMD's no SSB mitigation needed. (Konrad Rzeszutek Wilk)  [Orabug: 28951578] 
  - i386: define the AMD 'amd-ssbd' CPUID feature bit (Konrad Rzeszutek Wilk)  [Orabug: 28951578] 
  - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu)  [Orabug: 28897545] 
  - hw/i386: Fix IVHD entry length for AMD IOMMU (Jan Kiszka)  [Orabug: 28891184] 
  - kvm: x86: Fix kvm_arch_fixup_msi_route for remap-less case (Jan Kiszka)  [Orabug: 28891188] 
  - i386: Add new model of Cascadelake-Server (Tao Xu)  [Orabug: 28886306] 
  - i386: Add Intel Processor Trace feature support (Chao Peng)  [Orabug: 28886306] 
  - i386: Add PKU on Skylake-Server CPU model (Tao Xu)


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-20.el7
changelog:
  - Change tls-priority to NORMAL (Mark Kanda)  
  - slirp: check data length while emulating ident function (Prasad J Pandit)  [Orabug: 29260313]  {CVE-2019-6778}
  - Document CVEs associated with nonexistent code as fixed (Mark Kanda)  [Orabug: 29228241]  {CVE-2018-16867} {CVE-2018-20123} {CVE-2018-20124} {CVE-2018-20125} {CVE-2018-20126} {CVE-2018-20191} {CVE-2018-20216}
  - usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann)  [Orabug: 29055379]  {CVE-2018-16872}
  - i386: Add "stibp" flag name (Eduardo Habkost)  [Orabug: 29114820]


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.9.0-21.el7
changelog:
  - x86: Add mds feature (Karl Heubaum)  
  - e1000: Never increment the RX undersize count register (Chris Kenna)  
  - i386: Add some MSR based features on Cascadelake-Server CPU model (Tao Xu)  [Orabug: 29643540] 
  - i386: Update stepping of Cascadelake-Server (Tao Xu)  [Orabug: 29643540] 
  - kvm: Use KVM_GET_MSR_INDEX_LIST for MSR_IA32_ARCH_CAPABILITIES support (Bandan Das)  [Orabug: 29643540] 
  - x86: define a new MSR based feature word -- FEATURE_WORDS_ARCH_CAPABILITIES (Robert Hoo)  [Orabug: 29643540] 
  - x86: Data structure changes to support MSR based features (Robert Hoo)  [Orabug: 29643540] 
  - kvm: Add support to KVM_GET_MSR_FEATURE_INDEX_LIST and KVM_GET_MSRS system ioctl (Robert Hoo)  [Orabug: 29643540] 
  - i386: Add CPUID bit and feature words for IA32_ARCH_CAPABILITIES MSR (Robert Hoo)  [Orabug: 29643540] 
  - i386: Add new MSR indices for IA32_PRED_CMD and IA32_ARCH_CAPABILITIES (Robert Hoo)  [Orabug: 29643540] 
  - update Linux headers to 4.16-rc5 (Paolo Bonzini)  [Orabug: 29643540] 
  - linux-headers: update (Cornelia Huck)  [Orabug: 29643540] 
  - linux-headers: update to 4.15-rc1 (Eric Auger)  [Orabug: 29643540] 
  - linux-headers: sync against v4.14-rc1 (Alexey Perevalov)  [Orabug: 29643540] 
  - linux header sync against v4.13-rc1 (Christian Borntraeger)  [Orabug: 29643540] 
  - linux-headers: update to 4.13-rc0 (Christian Borntraeger)  [Orabug: 29643540] 
  - parfait: --disable-avx2 no longer needed by rpmbuild (Liam Merwick)  [Orabug: 28733157] 
  - parfait: deal with parfait returning non-zero return value (Liam Merwick)  [Orabug: 28733157] 
  - parfait: use nproc to choose default number of threads (Liam Merwick)  [Orabug: 28733157] 
  - parfait: provide option to upload results (Liam Merwick)  [Orabug: 28733157] 
  - parfait: disable misaligned-access check (Liam Merwick)  [Orabug: 28733157] 
  - parfait: Run static analysis when --with parfait specified (Liam Merwick)  [Orabug: 28733157] 
  - parfait: add buildrpm/parfait-qemu.conf (Liam Merwick)  [Orabug: 28733157] 
  - device_tree.c: Don't use load_image() (Peter Maydell)  [Orabug: 29546331]  {CVE-2018-20815}
  - slirp: check sscanf result when emulating ident (William Bowling)  [Orabug: 29501785]  {CVE-2019-9824}
  - i2c-ddc: fix oob read (Gerd Hoffmann)  [Orabug: 29377317]  {CVE-2019-3812}


author: Mark Kanda <mark.kanda@oracle.com> - 12:2.11.1-2.el7
changelog:
  - hw/acpi-build: build SRAT memory affinity structures for DIMM devices (Haozhong Zhang)  [Orabug: 27509753] 
  - qmp: distinguish PC-DIMM and NVDIMM in MemoryDeviceInfoList (Haozhong Zhang)  [Orabug: 27509753] 
  - pc-dimm: make qmp_pc_dimm_device_list() sort devices by address (Haozhong Zhang)  [Orabug: 27509753] 
  - nvdimm: add a macro for property "label-size" (Haozhong Zhang)  [Orabug: 27509753] 
  - nvdimm: add 'unarmed' option (Haozhong Zhang)  [Orabug: 27509753] 
  - block: Fix NULL dereference on empty drive error (Kevin Wolf)  [Orabug: 27832106] 
  - Revert "IDE: Do not flush empty CDROM drives" (Stefan Hajnoczi)  [Orabug: 27832106] 
  - block: test blk_aio_flush() with blk->root == NULL (Kevin Wolf)  [Orabug: 27832106] 
  - block: add BlockBackend->in_flight counter (Stefan Hajnoczi)  [Orabug: 27832106] 
  - block: extract AIO_WAIT_WHILE() from BlockDriverState (Stefan Hajnoczi)  [Orabug: 27832106] 
  - aio: rename aio_context_in_iothread() to in_aio_context_home_thread() (Stefan Hajnoczi)  [Orabug: 27832106] 
  - qemu.spec: Add dependency for libiscsi 1.9.0-8 (Mark Kanda)  [Orabug: 27832300] 
  - multiboot.c: Document as fixed against CVE-2018-7550 (Jack Schwartz)  [Orabug: 27832332]  {CVE-2018-7550}
  - CVE-2017-18030: cirrus_invalidate_region() lets priv guest user cause DoS (Mark Kanda)  [Orabug: 27832319]  {CVE-2017-18030}
  - vga: fix region calculation (Gerd Hoffmann)  [Orabug: 27832309]  {CVE-2018-7858}
  - keymap: use glib hash for kbd_layout_t (Gerd Hoffmann)  [Orabug: 27663795] 
  - qemu.spec: Enable coroutine pool and vhost-vsock (Karl Heubaum)  [Orabug: 27832337]


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.0.0-1.el7
changelog:
  - net: ignore packet size greater than INT_MAX (Jason Wang)  [Orabug: 28763782]  {CVE-2018-17963}
  - pcnet: fix possible buffer overflow (Jason Wang)  [Orabug: 28763774]  {CVE-2018-17962}
  - rtl8139: fix possible out of bound access (Jason Wang)  [Orabug: 28763765]  {CVE-2018-17958}
  - ne2000: fix possible out of bound access in ne2000_receive (Jason Wang)  [Orabug: 28763758]  {CVE-2018-10839}
  - seccomp: set the seccomp filter to all threads (Marc-André Lureau)  [Orabug: 28763748]  {CVE-2018-15746}
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit to virtio_net (Sridhar Samudrala)  [Orabug: 28763724] 
  - kvm: add call to qemu_add_opts() for -overcommit option (Prasad Singamsetty)  
  - Document various CVEs as fixed (Mark Kanda)  [Orabug: 28763710]  {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-18043} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858}
  - qemu.spec: Initial qemu.spec (Mark Kanda)  
  - virtio-pci: Set subsystem vendor ID to Oracle (Mark Kanda)  
  - qemu_regdump.py: Initial qemu_regdump.py (Mark Kanda)  
  - qmp-regdump: Initial qmp-regdump (Mark Kanda)  
  - bridge.conf: Initial bridge.conf (Mark Kanda)  
  - kvm.conf: Initial kvm.conf (Mark Kanda)  
  - 80-kvm.rules: Initial 80-kvm.rules (Mark Kanda)  
  - Update version for v3.0.0 release (Peter Maydell)  
  - Update version for v3.0.0-rc4 release (Peter Maydell)  
  - virtio-gpu: fix crashes upon warm reboot with vga mode (Marc-André Lureau)  
  - slirp: Correct size check in m_inc() (Peter Maydell)  
  - target/xtensa/cpu: Set owner of memory region in xtensa_cpu_initfn (Thomas Huth)  
  - hw/intc/arm_gicv3_common: Move gicd shift bug handling to gicv3_post_load (Peter Maydell)  
  - hw/intc/arm_gicv3_common: Move post_load hooks to top-level VMSD (Peter Maydell)  
  - target/arm: Add dummy needed functions to M profile vmstate subsections (Peter Maydell)  
  - hw/intc/arm_gicv3_common: Combine duplicate .subsections in vmstate_gicv3_cpu (Peter Maydell)  
  - hw/intc/arm_gicv3_common: Give no-migration-shift-bug subsection a needed function (Peter Maydell)  
  - tcg/optimize: Do not skip default processing of dup_vec (Richard Henderson)  
  - tests/acpi: update tables after memory hotplug changes (Michael S. Tsirkin)  
  - pc: acpi: fix memory hotplug regression by reducing stub SRAT entry size (Igor Mammedov)  
  - tests/acpi-test: update ACPI tables test blobs (Dou Liyang)  
  - hw/acpi-build: Add a check for memory-less NUMA nodes (Dou Liyang)  
  - vhost: check region type before casting (Tiwei Bie)  
  - sam460ex: Fix PCI interrupts with multiple devices (BALATON Zoltan)  
  - hw/misc/macio: Fix device introspection problems in macio devices (Thomas Huth)  
  - Update version for v3.0.0-rc3 release (Peter Maydell)  
  - monitor: temporary fix for dead-lock on event recursion (Marc-André Lureau)  
  - linux-user: ppc64: don't use volatile register during safe_syscall (Shivaprasad G Bhat)  
  - tests: add check_invalid_maps to test-mmap (Alex Bennée)  
  - linux-user/mmap.c: handle invalid len maps correctly (Alex Bennée)  
  - s390x/sclp: fix maxram calculation (Christian Borntraeger)  
  - target/arm: Remove duplicate 'host' entry in '-cpu ?' output (Philippe Mathieu-Daudé)  
  - hw/misc/tz-mpc: Zero the LUT on initialization, not just reset (Peter Maydell)  
  - hw/arm/iotkit: Fix IRQ number for timer1 (Peter Maydell)  
  - armv7m_nvic: Fix m-security subsection name (Peter Maydell)  
  - hw/arm/sysbus-fdt: Fix assertion in copy_properties_from_host() (Geert Uytterhoeven)  
  - arm/smmuv3: Fix missing VMSD terminator (Dr. David Alan Gilbert)  
  - qemu-iotests: Test query-blockstats with -drive and -blockdev (Kevin Wolf)  
  - block/qapi: Include anonymous BBs in query-blockstats (Kevin Wolf)  
  - block/qapi: Add 'qdev' field to query-blockstats result (Kevin Wolf)  
  - file-posix: Fix write_zeroes with unmap on block devices (Kevin Wolf)  
  - block: Fix documentation for BDRV_REQ_MAY_UNMAP (Kevin Wolf)  
  - iotests: Add test for 'qemu-img convert -C' compatibility (Fam Zheng)  
  - qemu-img: Add -C option for convert with copy offloading (Fam Zheng)  
  - Revert "qemu-img: Document copy offloading implications with -S and -c" (Fam Zheng)  
  - iotests: Don't lock /dev/null in 226 (Fam Zheng)  
  - docs: Describe using images in writing iotests (Fam Zheng)  
  - file-posix: Handle EINTR in preallocation=full write (Fam Zheng)  
  - qcow2: A grammar fix in conflicting cache sizing error message (Leonid Bloch)  
  - qcow: fix a reference leak (KONRAD Frederic)  
  - backends/cryptodev: remove dead code (Jay Zhou)  
  - timer: remove replay clock probe in deadline calculation (Pavel Dovgalyuk)  
  - i386: implement MSR_SMI_COUNT for TCG (Paolo Bonzini)  
  - i386: do not migrate MSR_SMI_COUNT on machine types <2.12 (Paolo Bonzini)  
  - qstring: Move qstring_from_substr()'s @end one to the right (Markus Armbruster)  
  - qstring: Assert size calculations don't overflow (Markus Armbruster)  
  - qstring: Fix qstring_from_substr() not to provoke int overflow (liujunjie)  
  - Update version for v3.0.0-rc2 release (Peter Maydell)  
  - tests: fix TLS handshake failure with TLS 1.3 (Daniel P. Berrangé)  
  - tests: use error_abort in places expecting errors (Daniel P. Berrangé)  
  - tests: don't silence error reporting for all tests (Daniel P. Berrangé)  
  - tests: call qcrypto_init instead of gnutls_global_init (Daniel P. Berrangé)  
  - migration: fix duplicate initialization for expected_downtime and cleanup_bh (Lidong Chen)  
  - tests: only update last_byte when at the edge (Peter Xu)  
  - migration: disallow recovery for release-ram (Peter Xu)  
  - migration: update recv bitmap only on dest vm (Peter Xu)  
  - audio/hda: Fix migration (Dr. David Alan Gilbert)  
  - migrate: Fix cancelling state warning (Dr. David Alan Gilbert)  
  - migration: fix potential overflow in multifd send (Peter Xu)  
  - block/file-posix: add bdrv_attach_aio_context callback for host dev and cdrom (Nishanth Aravamudan)  
  - tests/tcg: remove runcom test (Alex Bennée)  
  - docker: perform basic binfmt_misc validation in docker.py (Alex Bennée)  
  - docker: ignore distro versioning of debootstrap (Alex Bennée)  
  - docker: add commentary to debian-bootstrap.docker (Alex Bennée)  
  - docker: Update debootstrap script after Debian migration from Alioth to Salsa (Philippe Mathieu-Daudé)  
  - docker: report hint when docker.py check fails (Alex Bennée)  
  - docker: drop QEMU_TARGET check, fallback in EXECUTABLE not set (Alex Bennée)  
  - docker: add expansion for docker-test-FOO to Makefile.include (Alex Bennée)  
  - docker: add test-unit runner (Alex Bennée)  
  - docker: Makefile.include don't include partial images (Alex Bennée)  
  - docker: gracefully skip check_qemu (Alex Bennée)  
  - docker: move make check into check_qemu helper (Alex Bennée)  
  - docker: split configure_qemu from build_qemu (Alex Bennée)  
  - docker: fail more gracefully on docker.py check (Alex Bennée)  
  - docker: par down QEMU_CONFIGURE_OPTS in debian-tricore-cross (Alex Bennée)  
  - docker: base debian-tricore on qemu:debian9 (Alex Bennée)  
  - tests/.gitignore: don't ignore docker tests (Alex Bennée)  
  - target/arm: Escalate to correct HardFault when AIRCR.BFHFNMINS is set (Peter Maydell)  
  - hw/intc/arm_gicv3: Check correct HCR_EL2 bit when routing IRQ (Peter Maydell)  
  - ui/cocoa.m: prevent stuck command key when going into full screen mode (John Arbuckle)  
  - qga: process_event() simplification and leak fix (Marc-André Lureau)  
  - qga-win: Handle fstrim for OSes lower than Win8 (Sameeh Jubran)  
  - tcg/i386: Mark xmm registers call-clobbered (Richard Henderson)  
  - i386: Rename enum CacheType members (Eduardo Habkost)  
  - block/vvfat: Disable debug message by default (Thomas Huth)  
  - iotests: Disallow compat=0.10 in 223 (Max Reitz)  
  - iotest: Fix filtering order in 226 (Max Reitz)  
  - iotests: remove LUKS support from test 226 (John Snow)  
  - qemu-img: avoid overflow of min_sparse parameter (Peter Lieven)  
  - block: Fix typos in comments (found by codespell) (Stefan Weil)  
  - qemu-iotests: Use host_device instead of file in 149 (Kevin Wolf)  
  - hw/intc/exynos4210_gic: Turn instance_init into realize function (Thomas Huth)  
  - hw/arm/spitz: Move problematic nand_init() code to realize function (Thomas Huth)  
  - target/arm: Correctly handle overlapping small MPU regions (Peter Maydell)  
  - hw/sd/bcm2835_sdhost: Fix PIO mode writes (Guenter Roeck)  
  - hw/microblaze/xlnx-zynqmp-pmu: Fix introspection problem in 'xlnx, zynqmp-pmu-soc' (Thomas Huth)  
  - monitor: Fix unsafe sharing of @cur_mon among threads (Peter Xu)  
  - qapi: Make 'allow-oob' optional in SchemaInfoCommand (Markus Armbruster)  
  - po: Don't include comments with location (Stefan Weil)  
  - linux-user/ppc: Implement swapcontext syscall (Richard Henderson)  
  - linux-user: fix ELF load alignment error (Laurent Vivier)  
  - tap: fix memory leak on success to create a tap device (Yunjian Wang)  
  - e1000e: Prevent MSI/MSI-X storms (Jan Kiszka)  
  - tcg/aarch64: limit mul_vec size (Alex Bennée)  
  - spike: Fix crash when introspecting the device (Alistair Francis)  
  - riscv_hart: Fix crash when introspecting the device (Alistair Francis)  
  - virt: Fix crash when introspecting the device (Alistair Francis)  
  - sifive_u: Fix crash when introspecting the device (Alistair Francis)  
  - sifive_e: Fix crash when introspecting the device (Alistair Francis)  
  - tracing: Use double-dash spelling for trace option (Yaowei Bai)  
  - throttle-groups: fix hang when group member leaves (Stefan Hajnoczi)  
  - s390x/cpumodel: fix segmentation fault when baselining models (David Hildenbrand)  
  - Update version for v3.0.0-rc1 release (Peter Maydell)  
  - Document command line options with single dash (BALATON Zoltan)  
  - opts: remove redundant check for NULL parameter (Daniel P. Berrangé)  
  - i386: only parse the initrd_filename once for multiboot modules (Daniel P. Berrangé)  
  - i386: fix regression parsing multiboot initrd modules (Daniel P. Berrangé)  
  - hw/arm/xlnx-zynqmp: Fix crash when introspecting the "xlnx, zynqmp" device (Thomas Huth)  
  - hw/display/xlnx_dp: Move problematic code from instance_init to realize (Paolo Bonzini)  
  - hw/arm/stm32f205_soc: Fix introspection problem with 'stm32f205-soc' device (Thomas Huth)  
  - hw/arm/allwinner-a10: Fix introspection problem with 'allwinner-a10' (Thomas Huth)  
  - hw/*/realview: Fix introspection problem with 'realview_mpcore' & 'realview_gic' (Thomas Huth)  
  - hw/cpu/arm11mpcore: Fix introspection problem with 'arm11mpcore_priv' (Thomas Huth)  
  - hw/arm/fsl-imx31: Fix introspection problem with the "fsl, imx31" device (Thomas Huth)  
  - hw/arm/fsl-imx25: Fix introspection problem with the "fsl, imx25" device (Thomas Huth)  
  - hw/arm/fsl-imx7: Fix introspection problems with the "fsl, imx7" device (Thomas Huth)  
  - hw/arm/fsl-imx6: Fix introspection problems with the "fsl, imx6" device (Thomas Huth)  
  - hw/cpu/a9mpcore: Fix introspection problems with the "a9mpcore_priv" device (Thomas Huth)  
  - hw/arm/msf2-soc: Fix introspection problem with the "msf2-soc" device (Thomas Huth)  
  - hw/cpu/a15mpcore: Fix introspection problem with the a15mpcore_priv device (Thomas Huth)  
  - hw/arm/armv7: Fix crash when introspecting the "iotkit" device (Thomas Huth)  
  - hw/arm/bcm2836: Fix crash with device_add bcm2837 on unsupported machines (Thomas Huth)  
  - hw/core/sysbus: Add a function for creating and attaching an object (Thomas Huth)  
  - qom/object: Add a new function object_initialize_child() (Thomas Huth)  
  - qga: fix file descriptor leak (Paolo Bonzini)  
  - qga: fix 'driver' leak in guest-get-fsinfo (Marc-André Lureau)  
  - accel/tcg: Assert that tlb fill gave us a valid TLB entry (Peter Maydell)  
  - accel/tcg: Use correct test when looking in victim TLB for code (Peter Maydell)  
  - bcm2835_aux: Swap RX and TX interrupt assignments (Guenter Roeck)  
  - hw/arm/bcm2836: Mark the bcm2836 / bcm2837 devices with user_creatable = false (Thomas Huth)  
  - hw/intc/arm_gic: Fix handling of GICD_ITARGETSR (Peter Maydell)  
  - hw/intc/arm_gic: Check interrupt number in gic_deactivate_irq() (Peter Maydell)  
  - aspeed: Implement write-1-{set, clear} for AST2500 strapping (Andrew Jeffery)  
  - target/arm: Fix LD1W and LDFF1W (scalar plus vector) (Richard Henderson)  
  - virtio-scsi: fix hotplug ->reset() vs event race (Stefan Hajnoczi)  
  - qdev: add HotplugHandler->post_plug() callback (Stefan Hajnoczi)  
  - hw/char/serial: retry write if EAGAIN (Marc-André Lureau)  
  - PC Chipset: Improve serial divisor calculation (Calvin Lee)  
  - vhost-user-test: added proper TestServer *dest initialization in test_migrate() (Emanuele Giuseppe Esposito)  
  - hyperv: ensure VP index equal to QEMU cpu_index (Roman Kagan)  
  - hyperv: rename vcpu_id to vp_index (Roman Kagan)  
  - accel: Fix typo and grammar in comment (Stefan Weil)  
  - dump: add kernel_gs_base to QEMU CPU state (Viktor Prutyanov)  
  - monitor: Fix tracepoint crash on JSON syntax error (Markus Armbruster)  
  - MAINTAINERS: New section "Incompatible changes", copy libvir-list (Markus Armbruster)  
  - qemu-doc: Move appendix "Deprecated features" to its own file (Markus Armbruster)  
  - cli qmp: Mark --preconfig, exit-preconfig experimental (Markus Armbruster)  
  - qapi: Do not expose "allow-preconfig" in query-qmp-schema (Markus Armbruster)  
  - sm501: Fix warning about unreachable code (BALATON Zoltan)  
  - sam460ex: Correct use after free error (BALATON Zoltan)  
  - etsec: fix IRQ (un)masking (Michael Davidsaver)  
  - ppc/xics: fix ICP reset path (Greg Kurz)  
  - spapr: Correct inverted test in spapr_pc_dimm_node() (David Gibson)  
  - sm501: Update screen on frame buffer address change (BALATON Zoltan)  
  - Zero out the host's `msg_control` buffer (Jonas Schievink)  
  - linux-user: fix mmap_find_vma_reserved() (Laurent Vivier)  
  - linux-user: convert remaining fcntl() to safe_fcntl() (Laurent Vivier)  
  - linux-user: ppc64: use the correct values for F_*LK64s (Shivaprasad G Bhat)  
  - docs: Grammar and spelling fixes (Ville Skyttä)  
  - qemu-img: align result of is_allocated_sectors (Peter Lieven)  
  - scsi-disk: Block Device Characteristics emulation fix (Daniel Henrique Barboza)  
  - iotests: add test 226 for file driver types (John Snow)  
  - file-posix: specify expected filetypes (John Snow)  
  - iotests: nbd: Stop qemu-nbd before remaking image (Fam Zheng)  
  - iotests: 153: Fix dead code (Fam Zheng)  
  - ui/cocoa.m: replace scrollingDeltaY with deltaY (John Arbuckle)  
  - seccomp: allow sched_setscheduler() with SCHED_IDLE policy (Marc-André Lureau)  
  - vfio/pci: do not set the PCIDevice 'has_rom' attribute (Cédric Le Goater)  
  - monitor: fix double-free of request error (Marc-André Lureau)  
  - error: Remove NULL checks on error_propagate() calls (Philippe Mathieu-Daudé)  
  - s390x/storage attributes: fix CMMA_BLOCK_SIZE usage (Claudio Imbrenda)


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.0.0-2.el7
changelog:
  - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu)  [Orabug: 29011784] 
  - vfio-pci: add FAILOVER_PRIMARY_CHANGED event to shorten downtime during failover (Si-Wei Liu)  [Orabug: 29011776] 
  - virtio_net: Add support for "Data Path Switching" during Live Migration. (Venu Busireddy)  [Orabug: 28732921] 
  - parfait: Run static analysis when --with parfait specified (Liam Merwick)  [Orabug: 28625099] 
  - parfait: add buildrpm/parfait-qemu.conf (Liam Merwick)  [Orabug: 28625099] 
  - configure: Provide option to explicitly disable AVX2 (Liam Merwick)  [Orabug: 28625099] 
  - lsi53c895a: convert to trace-events (Mark Cave-Ayland)  [Orabug: 29011792] 
  - lsi: Reselection needed to remove pending commands from queue (George Kennedy)  [Orabug: 28626593] 
  - lsi53c895a: check message length value is valid (Prasad J Pandit)  [Orabug: 28873239]  {CVE-2018-18849}
  - 9p: fix QEMU crash when renaming files (Greg Kurz)  [Orabug: 28971710]  {CVE-2018-19489}
  - 9p: take write lock on fid path updates (CVE-2018-19364) (Greg Kurz)  [Orabug: 28957033]  {CVE-2018-19364}
  - nvme: fix out-of-bounds access to the CMB (Paolo Bonzini)  [Orabug: 28885521]  {CVE-2018-16847}
  - kvm: x86: Fix kvm_arch_fixup_msi_route for remap-less case (Jan Kiszka)  [Orabug: 28891193] 
  - i386: Add new model of Cascadelake-Server (Tao Xu)  [Orabug: 28886460] 
  - i386: Add PKU on Skylake-Server CPU model (Tao Xu)  [Orabug: 28886461]


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.0.0-3.el7
changelog:
  - monitor: guard iothread access by mon->use_io_thread (Wolfgang Bumiller)  [Orabug: 29046045] 
  - monitor: delay monitor iothread creation (Wolfgang Bumiller)  [Orabug: 29010480] 
  - Revert "qmp: isolate responses into io thread" (Marc-André Lureau)  [Orabug: 29010480] 
  - usb-mtp: outlaw slashes in filenames (Gerd Hoffmann)  [Orabug: 29037012]  {CVE-2018-16867}


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.0.0-4.el7
changelog:
  - usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann)  [Orabug: 29056673]  {CVE-2018-16872}
  - pvrdma: add uar_read routine (Prasad J Pandit)   {CVE-2018-20191}
  - pvrdma: release ring object in case of an error (Prasad J Pandit)  [Orabug: 29171822]  {CVE-2018-20126}
  - pvrdma: check number of pages when creating rings (Prasad J Pandit)  [Orabug: 29171821]  {CVE-2018-20125}
  - pvrdma: check return value from pvrdma_idx_ring_has_ routines (Prasad J Pandit)  [Orabug: 29171820]  {CVE-2018-20216}
  - rdma: remove unused VENDOR_ERR_NO_SGE macro (Prasad J Pandit)  [Orabug: 29121181]  {CVE-2018-20124}
  - rdma: check num_sge does not exceed MAX_SGE (Prasad J Pandit)  [Orabug: 29121181]  {CVE-2018-20124}
  - i386: Add "stibp" flag name (Eduardo Habkost)  [Orabug: 29114828] 
  - i386: Add some MSR based features on Cascadelake-Server CPU model (Tao Xu)  [Orabug: 29029615] 
  - i386: Update stepping of Cascadelake-Server (Tao Xu)  [Orabug: 29029615] 
  - kvm: Use KVM_GET_MSR_INDEX_LIST for MSR_IA32_ARCH_CAPABILITIES support (Bandan Das)  [Orabug: 29029615] 
  - x86: define a new MSR based feature word -- FEATURE_WORDS_ARCH_CAPABILITIES (Robert Hoo)  [Orabug: 29029615] 
  - x86: Data structure changes to support MSR based features (Robert Hoo)  [Orabug: 29029615] 
  - kvm: Add support to KVM_GET_MSR_FEATURE_INDEX_LIST and KVM_GET_MSRS system ioctl (Robert Hoo)  [Orabug: 29029615] 
  - i386: Add CPUID bit and feature words for IA32_ARCH_CAPABILITIES MSR (Robert Hoo)  [Orabug: 29029615] 
  - i386: Add new MSR indices for IA32_PRED_CMD and IA32_ARCH_CAPABILITIES (Robert Hoo)  [Orabug: 29029615] 
  - Fix compilation issue: 'qapi_event_send_failover_primary_changed' not declared (Mark Kanda)  [Orabug: 29121163] 
  - lsi_scsi: add support for PPR Extended Message (George Kennedy)  [Orabug: 28879117]


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.1.0-1.el7
changelog:
  - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized
  - vfio-pci: emit FAILOVER_PRIMARY_CHANGED event on guest behalf when unrealized (Si-Wei Liu)  [Orabug: 29216696] 
  - vfio-pci: add FAILOVER_PRIMARY_CHANGED event to shorten downtime during failover (Si-Wei Liu)  [Orabug: 29216701] 
  - virtio_net: Add support for "Data Path Switching" during Live Migration. (Venu Busireddy)  [Orabug: 29216704] 
  - virtio_net: Introduce VIRTIO_NET_F_STANDBY feature bit to virtio_net (Sridhar Samudrala)  [Orabug: 29216714] 
  - i386: Add some MSR based features on Cascadelake-Server CPU model (Tao Xu)  [Orabug: 29216681] 
  - i386: Update stepping of Cascadelake-Server (Tao Xu)  [Orabug: 29216681] 
  - usb-mtp: use O_NOFOLLOW and O_CLOEXEC. (Gerd Hoffmann)  [Orabug: 29216656]  {CVE-2018-16872}
  - pvrdma: add uar_read routine (Prasad J Pandit)  [Orabug: 29216658]  {CVE-2018-20191}
  - pvrdma: release ring object in case of an error (Prasad J Pandit)  [Orabug: 29216659]  {CVE-2018-20126}
  - pvrdma: check number of pages when creating rings (Prasad J Pandit)  [Orabug: 29216666]  {CVE-2018-20125}
  - pvrdma: check return value from pvrdma_idx_ring_has_ routines (Prasad J Pandit)  [Orabug: 29216672]  {CVE-2018-20216}
  - rdma: remove unused VENDOR_ERR_NO_SGE macro (Prasad J Pandit)  [Orabug: 29216678]  {CVE-2018-20124}
  - rdma: check num_sge does not exceed MAX_SGE (Prasad J Pandit)  [Orabug: 29216678]  {CVE-2018-20124}
  - i386: Add "stibp" flag name (Eduardo Habkost)  
  - parfait: Run static analysis when --with parfait specified (Liam Merwick)  [Orabug: 29216688] 
  - parfait: add buildrpm/parfait-qemu.conf (Liam Merwick)  [Orabug: 29216688] 
  - Document various CVEs as fixed (Mark Kanda)  [Orabug: 29212424]  {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-18043} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2018-10839} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-15746} {CVE-2018-16847} {CVE-2018-16867} {CVE-2018-17958} {CVE-2018-17962} {CVE-2018-17963} {CVE-2018-18849} {CVE-2018-19364} {CVE-2018-19489} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858}
  - qemu.spec: Initial qemu.spec (Mark Kanda)  
  - virtio-pci: Set subsystem vendor ID to Oracle (Mark Kanda)  
  - qemu_regdump.py: Initial qemu_regdump.py (Mark Kanda)  
  - qmp-regdump: Initial qmp-regdump (Mark Kanda)  
  - bridge.conf: Initial bridge.conf (Mark Kanda)  
  - kvm.conf: Initial kvm.conf (Mark Kanda)  
  - 80-kvm.rules: Initial 80-kvm.rules (Mark Kanda)


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.1.0-2.el7
changelog:
  - x86: Add mds feature (Karl Heubaum)  
  - e1000: Never increment the RX undersize count register (Chris Kenna)  
  - qemu.spec: audioflags set but never passed to configure script (Liam Merwick)  [Orabug: 29715562] 
  - parfait: deal with parfait returning non-zero return value (Liam Merwick)  [Orabug: 29715548] 
  - parfait: use nproc to choose default number of threads (Liam Merwick)  [Orabug: 29715548] 
  - parfait: provide option to upload results (Liam Merwick)  [Orabug: 29715548] 
  - parfait: disable misaligned-access check (Liam Merwick)  [Orabug: 29715548] 
  - Document CVE-2019-8934 and CVE-2019-5008 as fixed (Mark Kanda)  [Orabug: 29715605]  {CVE-2019-5008} {CVE-2019-8934}
  - device_tree.c: Don't use load_image() (Peter Maydell)  [Orabug: 29715527]  {CVE-2018-20815}
  - slirp: check sscanf result when emulating ident (William Bowling)  [Orabug: 29715525]  {CVE-2019-9824}
  - i2c-ddc: fix oob read (Gerd Hoffmann)  [Orabug: 29715520]  {CVE-2019-3812}
  - scsi-generic: avoid possible out-of-bounds access to r->buf (Paolo Bonzini)  [Orabug: 29259700]  {CVE-2019-6501}
  - slirp: check data length while emulating ident function (Prasad J Pandit)  [Orabug: 29715755]  {CVE-2019-6778}


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.1.0-3.el7
changelog:
  - x86: Document CVE-2018-12126 CVE-2018-12130 CVE-2018-12127 CVE-2019-11091 as
    fixed (Mark Kanda)  [Orabug: 29744956]  {CVE-2018-12126} {CVE-2018-12127}
    {CVE-2018-12130} {CVE-2019-11091}


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.1.0-4.el7
changelog:
  - kvm: i386: halt poll control MSR support (Marcelo Tosatti)  [Orabug: 29933278] 
  - Document CVEs as fixed: CVE-2017-9524, CVE-2017-6058, CVE-2017-5931 (Mark Kanda)  [Orabug: 29886908]  {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-9524}
  - pvrdma: release device resources in case of an error (Prasad J Pandit)  [Orabug: 29056678]  {CVE-2018-20123}
  - qxl: check release info object (Prasad J Pandit)  [Orabug: 29886906]  {CVE-2019-12155}
  - target/i386: add MDS-NO feature (Paolo Bonzini)  [Orabug: 29820428]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}
  - docs: recommend use of md-clear feature on all Intel CPUs (Daniel P. Berrangé)  [Orabug: 29820428]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}
  - target/i386: define md-clear bit (Paolo Bonzini)  [Orabug: 29820428]  {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2019-11091}
  - pvh: block migration if booting using PVH (Liam Merwick)  [Orabug: 29796676] 
  - hw/i386/pc: run the multiboot loader before the PVH loader (Stefano Garzarella)  [Orabug: 29796676] 
  - optionrom/pvh: load initrd from fw_cfg (Stefano Garzarella)  [Orabug: 29796676] 
  - hw/i386/pc: use PVH option rom (Stefano Garzarella)  [Orabug: 29796676] 
  - qemu.spec: add pvh.bin to %files (Liam Merwick)  [Orabug: 29796676] 
  - optionrom: add new PVH option rom (Stefano Garzarella)  [Orabug: 29796676] 
  - linuxboot_dma: move common functions in a new header (Stefano Garzarella)  [Orabug: 29796676] 
  - linuxboot_dma: remove duplicate definitions of FW_CFG (Stefano Garzarella)  [Orabug: 29796676] 
  - pvh: load initrd and expose it through fw_cfg (Stefano Garzarella)  [Orabug: 29796676] 
  - pvh: Boot uncompressed kernel using direct boot ABI (Liam Merwick)  [Orabug: 29796676] 
  - pvh: Add x86/HVM direct boot ABI header file (Liam Merwick)  [Orabug: 29796676] 
  - elf-ops.h: Add get_elf_note_type() (Liam Merwick)  [Orabug: 29796676] 
  - elf: Add optional function ptr to load_elf() to parse ELF notes (Liam Merwick)  [Orabug: 29796676]


author: Mark Kanda <mark.kanda@oracle.com> - 15:3.1.0-5.el7
changelog:
  - Only enable the halt poll control MSR if it is supported by the host (Mark
    Kanda)  [Orabug: 29946722]


author: Karl Heubaum <karl.heubaum@oracle.com> - 15:3.1.0-6.el7
changelog:
  - qemu.spec: Remove "BuildRequires: kernel" (Karl Heubaum)  [Orabug: 30858754] 
  - target/i386: add support for MSR_IA32_TSX_CTRL (Paolo Bonzini)  [Orabug: 30652327] 
  - iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (Felipe Franciosi)  [Orabug: 30807256]  {CVE-2020-1711}
  - scsi: lsi: exit infinite loop while executing script (CVE-2019-12068) (Paolo Bonzini)  [Orabug: 30351703]  {CVE-2019-12068}
  - lsi: use enum type for s->waiting (Sven Schnelle)   {CVE-2019-12068}
  - json: Fix % handling when not interpolating (Christophe Fergeau)  [Orabug: 30640103] 
  - qemu.spec: enable have_curl in spec (Dongli Zhang)  [Orabug: 30640103] 
  - Fix heap overflow in ip_reass on big packet input (Samuel Thibault)  [Orabug: 30229916]  {CVE-2019-14378}
  - Make poll_control_msr default 1 (Mark Kanda)  
  - Remove redundant check for host support of halt polling (Mark Kanda)  [Orabug: 30240121] 
  - Enable '-Werror' compiler flag (Mark Kanda)  [Orabug: 30213025] 
  - qemu-submodule-init: Add Git submodule init script (Karl Heubaum)  [Orabug: 30729551]


author: Karl Heubaum <karl.heubaum@oracle.com> - 15:4.2.1-1.el7
changelog:
  - hw/sd/sdcard: Do not switch to ReceivingData if address is invalid (Philippe Mathieu-Daudé)  [Orabug: 31414336]  {CVE-2020-13253}
  - hw/sd/sdcard: Update coding style to make checkpatch.pl happy (Philippe Mathieu-Daudé)  [Orabug: 31414336] 
  - hw/sd/sdcard: Do not allow invalid SD card sizes (Philippe Mathieu-Daudé)  [Orabug: 31414336]  {CVE-2020-13253}
  - hw/sd/sdcard: Simplify realize() a bit (Philippe Mathieu-Daudé)  [Orabug: 31414336] 
  - hw/sd/sdcard: Restrict Class 6 commands to SCSD cards (Philippe Mathieu-Daudé)  [Orabug: 31414336] 
  - libslirp: Update to v4.3.1 to fix CVE-2020-10756 (Karl Heubaum)  [Orabug: 31604999]  {CVE-2020-10756}
  - Document CVEs as fixed 2/2 (Karl Heubaum)  [Orabug: 30618035]  {CVE-2017-18043} {CVE-2018-10839} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-15746} {CVE-2018-16847} {CVE-2018-16867} {CVE-2018-17958} {CVE-2018-17962} {CVE-2018-17963} {CVE-2018-18849} {CVE-2018-19364} {CVE-2018-19489} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858} {CVE-2019-12068} {CVE-2019-15034} {CVE-2019-15890} {CVE-2019-20382} {CVE-2020-10702} {CVE-2020-10761} {CVE-2020-11102} {CVE-2020-11869} {CVE-2020-13361} {CVE-2020-13765} {CVE-2020-13800} {CVE-2020-1711} {CVE-2020-1983} {CVE-2020-8608}
  - Document CVEs as fixed 1/2 (Karl Heubaum)  [Orabug: 30618035]  {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2017-9524} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-16872} {CVE-2018-20123} {CVE-2018-20124} {CVE-2018-20125} {CVE-2018-20126} {CVE-2018-20191} {CVE-2018-20216} {CVE-2018-20815} {CVE-2019-11091} {CVE-2019-12155} {CVE-2019-14378} {CVE-2019-3812} {CVE-2019-5008} {CVE-2019-6501} {CVE-2019-6778} {CVE-2019-8934} {CVE-2019-9824}
  - qemu-kvm.spec: Add .spec file for OL8 (Karl Heubaum)  [Orabug: 30618035] 
  - qemu.spec: Add .spec file for OL7 (Karl Heubaum)  [Orabug: 30618035] 
  - qemu-submodule-init: Add Git submodule init script (Karl Heubaum)  [Orabug: 30618035] 
  - vhost.conf: Initial vhost.conf (Karl Heubaum)  [Orabug: 30618035] 
  - parfait: Add buildrpm/parfait-qemu.conf (Karl Heubaum)  [Orabug: 30618035] 
  - virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum)  [Orabug: 30618035] 
  - qemu_regdump.py: Initial qemu_regdump.py (Karl Heubaum)  [Orabug: 30618035] 
  - qmp-regdump: Initial qmp-regdump (Karl Heubaum)  [Orabug: 30618035] 
  - bridge.conf: Initial bridge.conf (Karl Heubaum)  [Orabug: 30618035] 
  - kvm.conf: Initial kvm.conf (Karl Heubaum)  [Orabug: 30618035] 
  - 80-kvm.rules: Initial 80-kvm.rules (Karl Heubaum)  [Orabug: 30618035] 
  - exec: set map length to zero when returning NULL (Prasad J Pandit)  [Orabug: 31439733]  {CVE-2020-13659}
  - megasas: use unsigned type for reply_queue_head and check index (Prasad J Pandit)  [Orabug: 31414338]  {CVE-2020-13362}
  - memory: Revert "memory: accept mismatching sizes in memory_region_access_valid" (Michael S. Tsirkin)  [Orabug: 31439736] [Orabug: 31452202]  {CVE-2020-13754} {CVE-2020-13791}


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-2.el7
changelog:
  - hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() (Mauro Matteo Cascella)  [Orabug: 31667649]  {CVE-2020-15863}
  - hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() (Mauro Matteo Cascella)  [Orabug: 31737809]  {CVE-2020-16092}
  - migration: fix memory leak in qmp_migrate_set_parameters (Zheng Chuan)  [Orabug: 31806256] 
  - virtio-net: fix removal of failover device (Juan Quintela)  [Orabug: 31806255] 
  - pvpanic: implement crashloaded event handling (Zhenwei Pi)  [Orabug: 31677154] 
  - pvpanic: introduce crashloaded for pvpanic (Zhenwei Pi)  [Orabug: 31677154]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-3.el7
changelog:
  - qemu-kvm.spec: Install block storage module RPMs by default (Karl Heubaum)  [Orabug: 31943789] 
  - qemu-kvm.spec: Enable block-ssh module RPM (Karl Heubaum)  [Orabug: 31943763] 
  - hw: usb: hcd-ohci: check for processed TD before retire (Prasad J Pandit)  [Orabug: 31901690]  {CVE-2020-25625}
  - hw: usb: hcd-ohci: check len and frame_number variables (Prasad J Pandit)  [Orabug: 31901690]  {CVE-2020-25625}
  - hw: ehci: check return value of 'usb_packet_map' (Li Qiang)  [Orabug: 31901649]  {CVE-2020-25084}
  - hw: xhci: check return value of 'usb_packet_map' (Li Qiang)  [Orabug: 31901649]  {CVE-2020-25084}
  - qemu.spec: Enable '-Werror' for OL7 builds (Mark Kanda)  [Orabug: 31922718] 
  - usb: fix setup_len init (CVE-2020-14364) (Gerd Hoffmann)  [Orabug: 31848849]  {CVE-2020-14364}
  - Document CVE-2020-12829 and CVE-2020-14415 as fixed (Mark Kanda)  [Orabug: 31855502] [Orabug: 31855427]  {CVE-2020-12829} {CVE-2020-14415}


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-4.el7
changelog:
  - Document CVE-2020-25723 as fixed (Mark Kanda)  [Orabug: 32222397]  {CVE-2020-25084} {CVE-2020-25723}
  - hw/net/e1000e: advance desc_offset in case of null descriptor (Prasad J Pandit)  [Orabug: 32217517]  {CVE-2020-28916}
  - i386: Add 2nd Generation AMD EPYC processors (Moger, Babu)  [Orabug: 32217570] 
  - libslirp: Update version to include CVE fixes (Mark Kanda)  [Orabug: 32208456] [Orabug: 32208462]  {CVE-2020-29129} {CVE-2020-29130}
  - Document CVE-2020-25624 as fixed (Mark Kanda)  [Orabug: 32212527]  {CVE-2020-25624} {CVE-2020-25625}
  - pvpanic: Advertise the PVPANIC_CRASHLOADED event support (Paolo Bonzini)  [Orabug: 32102853] 
  - ati: check x y display parameter values (Prasad J Pandit)  [Orabug: 32108251]  {CVE-2020-27616}
  - Add AArch64 support for QMP regdump tool and sosreport plugin (Mark Kanda)  [Orabug: 32080658] 
  - Add qemu_regdump sosreport plugin support for '-mon' QMP sockets (Mark Kanda)  
  - migration/dirtyrate: present dirty rate only when querying the rate has completed (Chuan Zheng)  
  - migration/dirtyrate: record start_time and calc_time while at the measuring state (Chuan Zheng)  
  - migration/dirtyrate: Add trace_calls to make it easier to debug (Chuan Zheng)  
  - migration/dirtyrate: Implement qmp_cal_dirty_rate()/qmp_get_dirty_rate() function (Chuan Zheng)  
  - migration/dirtyrate: Implement calculate_dirtyrate() function (Chuan Zheng)  
  - migration/dirtyrate: Implement set_sample_page_period() and is_sample_period_valid() (Chuan Zheng)  
  - migration/dirtyrate: skip sampling ramblock with size below MIN_RAMBLOCK_SIZE (Chuan Zheng)  
  - migration/dirtyrate: Compare page hash results for recorded sampled page (Chuan Zheng)  
  - migration/dirtyrate: Record hash results for each sampled page (Chuan Zheng)  
  - migration/dirtyrate: move RAMBLOCK_FOREACH_MIGRATABLE into ram.h (Chuan Zheng)  
  - migration/dirtyrate: Add dirtyrate statistics series functions (Chuan Zheng)  
  - migration/dirtyrate: Add RamblockDirtyInfo to store sampled page info (Chuan Zheng)  
  - migration/dirtyrate: add DirtyRateStatus to denote calculation status (Chuan Zheng)  
  - migration/dirtyrate: setup up query-dirtyrate framwork (Chuan Zheng)  
  - ram_addr: Split RAMBlock definition (Juan Quintela)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-5.el7
changelog:
  - qemu.spec: use --tls-priority=NORMAL for OL7 (Elena Ufimtseva)  
  - hostmem: fix default "prealloc-threads" count (Mark Kanda)  [Orabug: 32472127] 
  - hostmem: introduce "prealloc-threads" property (Igor Mammedov)  
  - qom: introduce object_register_sugar_prop (Paolo Bonzini)  
  - migration/multifd: Do error_free after migrate_set_error to avoid memleaks (Pan Nengyuan)  
  - multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration (Chuan Zheng)  
  - migration/multifd: fix hangup with TLS-Multifd due to blocking handshake (Chuan Zheng)  
  - migration/tls: add trace points for multifd-tls (Chuan Zheng)  
  - migration/tls: add support for multifd tls-handshake (Chuan Zheng)  
  - migration/tls: extract cleanup function for common-use (Chuan Zheng)  
  - migration/multifd: fix memleaks in multifd_new_send_channel_async (Pan Nengyuan)  
  - migration/multifd: fix nullptr access in multifd_send_terminate_threads (Zhimin Feng)  
  - migration/tls: add tls_hostname into MultiFDSendParams (Chuan Zheng)  
  - migration/tls: extract migration_tls_client_create for common-use (Chuan Zheng)  
  - migration/tls: save hostname into MigrationState (Chuan Zheng)  
  - tests/qtest: add a test case for pvpanic-pci (Mihai Carabas)  
  - pvpanic : update pvpanic spec document (Mihai Carabas)  
  - hw/misc/pvpanic: add PCI interface support (Mihai Carabas)  
  - hw/misc/pvpanic: split-out generic and bus dependent code (Mihai Carabas)  
  - 9pfs: Fully restart unreclaim loop (CVE-2021-20181) (Greg Kurz)  [Orabug: 32441198]  {CVE-2021-20181}
  - ide: atapi: check logical block address and read size (CVE-2020-29443) (Prasad J Pandit)  [Orabug: 32393835]  {CVE-2020-29443}
  - Document CVE-2019-20808 as fixed (Mark Kanda)  [Orabug: 32339196]  {CVE-2019-20808}
  - block/iscsi:fix heap-buffer-overflow in iscsi_aio_ioctl_cb (Chen Qun)  [Orabug: 32339207]  {CVE-2020-11947}
  - net: remove an assert call in eth_get_gso_type (Prasad J Pandit)  [Orabug: 32102583]  {CVE-2020-27617}
  - nvdimm: honor -object memory-backend-file, readonly=on option (Stefan Hajnoczi)  [Orabug: 32265408] 
  - hostmem-file: add readonly=on|off option (Stefan Hajnoczi)  [Orabug: 32265408] 
  - memory: add readonly support to memory_region_init_ram_from_file() (Stefan Hajnoczi)  [Orabug: 32265408]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-6.el7
changelog:
  - i386/pc: Keep PCI 64-bit hole within usable IOVA space (Joao Martins)  
  - pc/cmos: Adjust CMOS above 4G memory size according to 1Tb boundary (Joao Martins)  
  - i386/pc: Round up the hotpluggable memory within valid IOVA ranges (Joao Martins)  
  - i386/pc: Account IOVA reserved ranges above 4G boundary (Joao Martins)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-7.el7
changelog:
  - arm/virt: Add memory hot remove support (Mihai Carabas)  [Orabug: 32643506] 
  - i386/pc: consolidate usable iova iteration (Joao Martins)  
  - i386/acpi: fix SRAT ranges in accordance to usable IOVA (Joao Martins)  
  - migration: increase listening socket backlog (Elena Ufimtseva)  [Orabug: 32792545] 
  - multifd: Make multifd_save_setup() get an Error parameter (Juan Quintela)  
  - multifd: Make multifd_load_setup() get an Error parameter (Juan Quintela)  
  - migration: fix maybe-uninitialized warning (Marc-André Lureau)  
  - migration: Fix the re-run check of the migrate-incoming command (Yury Kotov)  
  - multifd: Initialize local variable (Juan Quintela)  
  - multifd: Be consistent about using uint64_t (Juan Quintela)  
  - Bug #1829242 correction. (Alexey Romko)  
  - migration/multifd: fix destroyed mutex access in terminating multifd threads (Jiahui Cen)  
  - migration/multifd: fix nullptr access in terminating multifd threads (Jiahui Cen)  
  - migration/multifd: not use multifd during postcopy (Wei Yang)  
  - migration/multifd: clean pages after filling packet (Wei Yang)  
  - migration: Make sure that we don't call write() in case of error (Juan Quintela)  
  - migration: fix multifd_send_pages() next channel (Laurent Vivier)  
  - migration/multifd: bypass uuid check for initial packet (Elena Ufimtseva)  [Orabug: 32610480] 
  - migration/tls: add error handling in multifd_tls_handshake_thread (Hao Wang)  
  - migration/tls: fix inverted semantics in multifd_channel_connect (Hao Wang)  
  - migration/multifd: do not access uninitialized multifd_recv_state (Elena Ufimtseva)  [Orabug: 32795384] 
  - io/channel-tls.c: make qio_channel_tls_shutdown thread-safe (Lukas Straub)  
  - qemu.spec: Enable qemu-guest-agent RPM for OL7 (Karl Heubaum)  [Orabug: 32415543] 
  - virtio-net: Set mac address to hardware if the peer is vdpa (Cindy Lu)  
  - net: Add vhost-vdpa in show_netdevs() (Cindy Lu)  
  - vhost-vdpa: Add qemu_close in vhost_vdpa_cleanup (Cindy Lu)  
  - hw/virtio/vhost-vdpa: Fix Coverity CID 1432864 (Philippe Mathieu-Daudé)  
  - vhost-vdpa: negotiate VIRTIO_NET_F_STATUS with driver (Si-Wei Liu)  
  - configure: Fix build dependencies with vhost-vdpa. (Laurent Vivier)  
  - configure: simplify vhost condition with Kconfig (Marc-André Lureau)  
  - vhost-vdpa: add trace-events (Laurent Vivier)  
  - dma/pl330: Fix qemu_hexdump() usage in pl330.c (Mark Kanda)  
  - util/hexdump: introduce qemu_hexdump_line() (Laurent Vivier)  
  - util/hexdump: Reorder qemu_hexdump() arguments (Philippe Mathieu-Daudé)  
  - util/hexdump: Convert to take a void pointer argument (Philippe Mathieu-Daudé)  
  - net/colo-compare.c: Only hexdump packets if tracing is enabled (Lukas Straub)  
  - vhost-vdpa: batch updating IOTLB mappings (Jason Wang)  
  - vhost: switch to use IOTLB v2 format (Jason Wang)  
  - vhost-vdpa: remove useless variable (Laurent Vivier)  
  - virtio: vdpa: omit check return of g_malloc (Li Qiang)  
  - vhost-vdpa: fix indentation in vdpa_ops (Stefano Garzarella)  
  - virtio-net: check the existence of peer before accessing vDPA config (Jason Wang)  
  - virtio-pci: fix wrong index in virtio_pci_queue_enabled (Yuri Benditovich)  
  - virtio-pci: fix virtio_pci_queue_enabled() (Laurent Vivier)  
  - vhost-vdpa :Fix Coverity CID 1430270 / CID 1420267 (Cindy Lu)  
  - vhost-vdpa: fix the compile issue without kvm (Cindy Lu)  
  - vhost-vdpa: introduce vhost-vdpa net client (Cindy Lu)  
  - vhost-vdpa: introduce vhost-vdpa backend (Cindy Lu)  
  - linux headers: sync to 5.9-rc4 (Jason Wang)  
  - Linux headers: update (Cornelia Huck)  
  - virtio-net: fix rsc_ext compat handling (Cornelia Huck)  
  - linux-headers: update against Linux 5.7-rc3 (Cornelia Huck)  
  - virtiofsd: Pull in kernel's fuse.h (Dr. David Alan Gilbert)  
  - linux-headers: Update (Bharata B Rao)  
  - vhost_net: introduce set_config & get_config (Cindy Lu)  
  - vhost: implement vhost_force_iommu method (Cindy Lu)  
  - vhost: introduce new VhostOps vhost_force_iommu (Cindy Lu)  
  - vhost: implement vhost_vq_get_addr method (Cindy Lu)  
  - vhost: introduce new VhostOps vhost_vq_get_addr (Cindy Lu)  
  - vhost: implement vhost_dev_start method (Cindy Lu)  
  - vhost: introduce new VhostOps vhost_dev_start (Cindy Lu)  
  - vhost: check the existence of vhost_set_iotlb_callback (Jason Wang)  
  - virtio-pci: implement queue_enabled method (Jason Wang)  
  - virtio-bus: introduce queue_enabled method (Jason Wang)  
  - vhost_net: use the function qemu_get_peer (Cindy Lu)  
  - net: introduce qemu_get_peer (Cindy Lu)  
  - vhost: correctly turn on VIRTIO_F_IOMMU_PLATFORM (Jason Wang)  
  - imx7-ccm: add digprog mmio write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - tz-ppc: add dummy read/write methods (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - spapr_pci: add spapr msi read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - nvram: add nrf51_soc flash read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - prep: add ppc-parity write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - vfio: add quirk device write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - pci-host: designware: add pcie-msi read method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - hw/pci-host: add pci-intack write method (Prasad J Pandit)  [Orabug: 31576552]  {CVE-2020-15469}
  - oslib-posix: initialize backend memory objects in parallel (Mark Kanda)  [Orabug: 32555402] 
  - oslib-posix: refactor memory prealloc threads (Mark Kanda)  [Orabug: 32555402] 
  - oslib-posix: take lock before qemu_cond_broadcast (Bauerchen)  [Orabug: 32555402] 
  - oslib-posix: initialize mutex and condition variable (Paolo Bonzini)  [Orabug: 32555402] 
  - mem-prealloc: optimize large guest startup (bauerchen)  [Orabug: 32555402] 
  - i386: Add the support for AMD EPYC 3rd generation processors (Babu Moger)  
  - acpi: cpuhp: document CPHP_GET_CPU_ID_CMD command (Igor Mammedov)  
  - acpi: cpuhp: add CPHP_GET_CPU_ID_CMD command (Igor Mammedov)  
  - acpi: cpuhp: spec: add typical usecases (Igor Mammedov)  
  - acpi: cpuhp: spec: clarify store into 'Command data' when 'Command field' == 0 (Igor Mammedov)  
  - acpi: cpuhp: spec: fix 'Command data' description (Igor Mammedov)  
  - acpi: cpuhp: spec: clarify 'CPU selector' register usage and endianness (Igor Mammedov)  
  - acpi: cpuhp: introduce 'Command data 2' field (Igor Mammedov)  
  - x86: ich9: let firmware negotiate 'CPU hot-unplug with SMI' feature (Igor Mammedov)  
  - x86: ich9: factor out "guest_cpu_hotplug_features" (Igor Mammedov)  
  - x86: acpi: let the firmware handle pending "CPU remove" events in SMM (Igor Mammedov)  
  - x86: acpi: introduce AcpiPmInfo::smi_on_cpu_unplug (Igor Mammedov)  
  - acpi: cpuhp: introduce 'firmware performs eject' status/control bits (Igor Mammedov)  
  - x68: acpi: trigger SMI before sending hotplug Notify event to OSPM (Igor Mammedov)  
  - x86: acpi: introduce the PCI0.SMI0 ACPI device (Igor Mammedov)  
  - x86: acpi: introduce AcpiPmInfo::smi_on_cpuhp (Igor Mammedov)  
  - x86: ich9: expose "smi_negotiated_features" as a QOM property (Igor Mammedov)  
  - tests: acpi: mark to be changed tables in bios-tables-test-allowed-diff (Igor Mammedov)  
  - acpi: add aml_land() and aml_break() primitives (Igor Mammedov)  
  - x86: cpuhp: refuse cpu hot-unplug request earlier if not supported (Igor Mammedov)  
  - x86: cpuhp: prevent guest crash on CPU hotplug when broadcast SMI is in use (Igor Mammedov)  
  - x86: lpc9: let firmware negotiate 'CPU hotplug with SMI' features (Igor Mammedov)  
  - q35: implement 128K SMRAM at default SMBASE address (Igor Mammedov)  
  - hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daudé)  [Orabug: 32470471]  {CVE-2021-20221}
  - memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini)  [Orabug: 32252673]  {CVE-2020-27821}
  - hw/sd/sdhci: Fix DMA Transfer Block Size field (Philippe Mathieu-Daudé)  [Orabug: 32613470]  {CVE-2021-3409}


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-9.el7
changelog:
  - Revert "oslib-posix: refactor memory prealloc threads" (Mark Kanda)  [Orabug: 32903662] 
  - Revert "oslib-posix: initialize backend memory objects in parallel" (Mark Kanda)  [Orabug: 32903662]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-10.el7
changelog:
  - e1000: fail early for evil descriptor (Jason Wang)  [Orabug: 32560552]  {CVE-2021-20257}
  - Document CVE-2020-27661 as fixed (Mark Kanda)  [Orabug: 32960200]  {CVE-2020-27661}
  - block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)  
  - block: Fix blk->in_flight during blk_wait_while_drained() (Kevin Wolf)  
  - block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)  
  - block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-11.el7
changelog:
  - pvrdma: Fix the ring init error flow (CVE-2021-3608) (Marcel Apfelbaum)  [Orabug: 33120142]  {CVE-2021-3608}
  - pvrdma: Ensure correct input on ring init (CVE-2021-3607) (Marcel Apfelbaum)  [Orabug: 33120146]  {CVE-2021-3607}
  - hw/rdma: Fix possible mremap overflow in the pvrdma device (CVE-2021-3582) (Marcel Apfelbaum)  [Orabug: 33120084]  {CVE-2021-3582}
  - vhost-user-gpu: reorder free calls. (Gerd Hoffmann)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: abstract vg_cleanup_mapping_iov (Li Qiang)  [Orabug: 32950716]  {CVE-2021-3546}
  - vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (CVE-2021-3546) (Li Qiang)  [Orabug: 32950716]  {CVE-2021-3546}
  - vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (CVE-2021-3544) (Li Qiang)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (CVE-2021-3544) (Li Qiang)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (CVE-2021-3544) (Li Qiang)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: fix memory leak in vg_resource_attach_backing (CVE-2021-3544) (Li Qiang)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (CVE-2021-3544) (Li Qiang)  [Orabug: 32950701]  {CVE-2021-3544}
  - vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (CVE-2021-3545) (Li Qiang)  [Orabug: 32950708]  {CVE-2021-3545}
  - usb: limit combined packets to 1 MiB (CVE-2021-3527) (Gerd Hoffmann)  [Orabug: 32842778]  {CVE-2021-3527}
  - usb/redir: avoid dynamic stack allocation (CVE-2021-3527) (Gerd Hoffmann)  [Orabug: 32842778]  {CVE-2021-3527}
  - mptsas: Remove unused MPTSASState 'pending' field (CVE-2021-3392) (Michael Tokarev)  [Orabug: 32470463]  {CVE-2021-3392}


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-12.el7
changelog:
  - hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)  
  - pcie: expire pending delete (Gerd Hoffmann)  [Orabug: 33450706] 
  - pcie: fast unplug when slot power is off (Gerd Hoffmann)  [Orabug: 33450706] 
  - pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann)  [Orabug: 33450706] 
  - pcie: add power indicator blink check (Gerd Hoffmann)  [Orabug: 33450706] 
  - pcie: implement slot power control for pcie root ports (Gerd Hoffmann)  [Orabug: 33450706] 
  - pci: implement power state (Gerd Hoffmann)  [Orabug: 33450706] 
  - hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova)  [Orabug: 33450706] 
  - hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova)  [Orabug: 33450706] 
  - hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova)  [Orabug: 33450706] 
  - pcie_root_port: Add hotplug disabling option (Julia Suvorova)  [Orabug: 33450706] 
  - qdev-monitor: Forbid repeated device_del (Julia Suvorova)  [Orabug: 33450706] 
  - i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)  
  - uas: add stream number sanity checks. (Gerd Hoffmann)  [Orabug: 33280793]  {CVE-2021-3713}
  - usbredir: fix free call (Gerd Hoffmann)  [Orabug: 33198441]  {CVE-2021-3682}
  - hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella)  [Orabug: 33548490]  {CVE-2021-3930}
  - e1000: fix tx re-entrancy problem (Jon Maloy)  [Orabug: 32560552]  {CVE-2021-20257}
  - Update libslirp to v4.6.1 (Marc-André Lureau)  [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420]  {CVE-2020-10756} {CVE-2020-1983} {CVE-2020-29129} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
  - virtio-net-pci: Don't use "efi-virtio.rom" on AArch64 (Mark Kanda)  
  - MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)  
  - target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)  
  - ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)  
  - KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)  
  - ACPI: Record the Generic Error Status Block address (Dongjiu Geng)  
  - ACPI: Build Hardware Error Source Table (Dongjiu Geng)  
  - ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)  
  - docs: APEI GHES generation and CPER record description (Dongjiu Geng)  
  - hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)  
  - acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)  
  - block/curl: HTTP header field names are case insensitive (David Edmondson)  [Orabug: 33287589] 
  - block/curl: HTTP header fields allow whitespace around values (David Edmondson)  [Orabug: 33287589]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-12.1.el7
changelog:
  - Update slirp to address various CVEs (Mark Kanda)  [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420]  {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
  - Revert "Update libslirp to v4.6.1" (Mark Kanda)  [Orabug: 33607100]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-14.el7
changelog:
  - scsi: fix sense code for EREMOTEIO (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi: move host_status handling into SCSI drivers (Hannes Reinecke)  [Orabug: 33537443] 
  - scsi: inline sg_io_sense_from_errno() into the callers. (Hannes Reinecke)  [Orabug: 33537443] 
  - scsi-generic: do not snoop the output of failed commands (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke)  [Orabug: 33537443] 
  - scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke)  [Orabug: 33537443] 
  - scsi: drop 'result' argument from command_complete callback (Hannes Reinecke)  [Orabug: 33537443] 
  - scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi: introduce scsi_sense_from_errno() (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini)  [Orabug: 33537443] 
  - scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini)  [Orabug: 33537443]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-15.el7
changelog:
  - Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda)  [Orabug: 33719302] [Orabug: 33754145]  {CVE-2021-3947} {CVE-2021-4158}
  - hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daudé)  [Orabug: 32439466]  {CVE-2021-20196}
  - hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daudé)  [Orabug: 32439466]  {CVE-2021-20196}
  - net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit)  [Orabug: 32559476]  {CVE-2021-20203}
  - lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov)  [Orabug: 32560540]  {CVE-2021-3416}
  - pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov)  [Orabug: 32560540]  {CVE-2021-3416}
  - rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov)  [Orabug: 32560540]  {CVE-2021-3416}
  - tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang)  [Orabug: 32560540]  {CVE-2021-3416}
  - sungem: switch to use qemu_receive_packet() for loopback (Jason Wang)  [Orabug: 32560540]  {CVE-2021-3416}
  - dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang)  [Orabug: 32560540]  {CVE-2021-3416}
  - e1000: switch to use qemu_receive_packet() for loopback (Jason Wang)  [Orabug: 32560540]  {CVE-2021-3416}
  - net: introduce qemu_receive_packet() (Jason Wang)  [Orabug: 32560540]  {CVE-2021-3416}
  - target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (David Edmondson)  
  - target/i386: Observe XSAVE state area offsets (David Edmondson)  
  - target/i386: Make x86_ext_save_areas visible outside cpu.c (David Edmondson)  
  - target/i386: Pass buffer and length to XSAVE helper (David Edmondson)  
  - target/i386: Clarify the padding requirements of X86XSaveArea (David Edmondson)  
  - target/i386: Consolidate the X86XSaveArea offset checks (David Edmondson)  
  - target/i386: Declare constants for XSAVE offsets (David Edmondson)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-16.el7
changelog:
  - Document CVE-2021-4145 as fixed (Mark Kanda)  [Orabug: 33791496]  {CVE-2021-4145}
  - migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson)  
  - migration: Introduce ram_transferred_add() (David Edmondson)  
  - ACPI ERST: specification for ERST support (Eric DeVolder)  
  - ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)  
  - ACPI ERST: bios-tables-test testcase (Eric DeVolder)  
  - ACPI ERST: qtest for ERST (Eric DeVolder)  
  - ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)  
  - ACPI ERST: build the ACPI ERST table (Eric DeVolder)  
  - ACPI ERST: support for ACPI ERST feature (Eric DeVolder)  
  - ACPI ERST: header file for ERST (Eric DeVolder)  
  - ACPI ERST: PCI device_id for ERST (Eric DeVolder)  
  - ACPI ERST: bios-tables-test.c steps 1 and 2 (Eric DeVolder)  
  - ACPI: cleanup bios-tables-test state (Eric DeVolder)  
  - KVM: x86: believe what KVM says about WAITPKG (Paolo Bonzini)  [Orabug: 33832295] 
  - cputlb: destroy CPUTLB with tlb_destroy (Emilio G. Cota)  [Orabug: 33428107]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-17.el7
changelog:
  - arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin)  
  - arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo)  
  - arm/acpi: fix PCI _PRT definition (Heyi Guo)  
  - docs: fix references to docs/devel/atomics.rst (Stefano Garzarella)  [Orabug: 33659123] 
  - rcu: do not mention atomic_mb_read/set in documentation (Paolo Bonzini)  [Orabug: 33659123] 
  - atomics: update documentation (Paolo Bonzini)  [Orabug: 33659123] 
  - atomics: convert to reStructuredText (Paolo Bonzini)  [Orabug: 33659123] 
  - async: use explicit memory barriers (Paolo Bonzini)  [Orabug: 33659123] 
  - aio-wait: delegate polling of main AioContext if BQL not held (Paolo Bonzini)  [Orabug: 33659123] 
  - qapi: Add '@allow-write-only-overlay' feature for 'blockdev-snapshot' (Peter Krempa)  [Orabug: 33888021] 
  - iotests: Add iothread cases to 155 (Kevin Wolf)  [Orabug: 33888021] 
  - block: Fix cross-AioContext blockdev-snapshot (Kevin Wolf)  [Orabug: 33888021] 
  - iotests: Test mirror with temporarily disabled target backing file (Kevin Wolf)  [Orabug: 33888021] 
  - iotests: Fix run_job() with use_log=False (Kevin Wolf)  [Orabug: 33888021] 
  - block: Relax restrictions for blockdev-snapshot (Kevin Wolf)  [Orabug: 33888021] 
  - block: Make bdrv_get_cumulative_perm() public (Kevin Wolf)  [Orabug: 33888021] 
  - iotests: Use complete_and_wait() in 155 (Max Reitz)  [Orabug: 33888021] 
  - iotests: Support job-complete in run_job() (Kevin Wolf)  [Orabug: 33888021] 
  - linux-headers: update again to 5.8 (Paolo Bonzini)  [Orabug: 34022218] 
  - virtio-net: fix map leaking on error during receive (Jason Wang)  [Orabug: 33941879]  {CVE-2022-26353}
  - vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella)  [Orabug: 33941844]  {CVE-2022-26354}
  - virtio-net: fix use after unmap/free for sg (Jason Wang)  [Orabug: 33972912]  {CVE-2021-3748}
  - migration: Report the error returned when save_live_iterate fails (David Edmondson)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-18.el7
changelog:
  - block: introduce max_hw_iov for use in scsi-generic (Paolo Bonzini)  [Orabug: 33785156] 
  - file-posix: try BLKSECTGET on block devices too, do not round to power of 2 (Paolo Bonzini)  [Orabug: 33785156] 
  - block: add max_hw_transfer to BlockLimits (Paolo Bonzini)  [Orabug: 33785156] 
  - block-backend: align max_transfer to request alignment (Paolo Bonzini)  [Orabug: 33785156] 
  - osdep: provide ROUND_DOWN macro (Paolo Bonzini)  [Orabug: 33785156] 
  - scsi-generic: pass max_segments via max_iov field in BlockLimits (Paolo Bonzini)  [Orabug: 33785156] 
  - file-posix: fix max_iov for /dev/sg devices (Paolo Bonzini)  [Orabug: 33785156] 
  - display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella)  [Orabug: 34049511]  {CVE-2021-4207}
  - ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella)  [Orabug: 34049509]  {CVE-2021-4206}
  - hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507) (Philippe Mathieu-Daudé)  [Orabug: 32860387]  {CVE-2021-3507}
  - pc: q35: Bump max_cpus to 512 (Suravee Suthikulpanit)  [Orabug: 34314249] 
  - tests/qtest: fix pvpanic-pci-test (Mark Kanda)  [Orabug: 34284763] 
  - libqos: pci-pc: use 32-bit write for EJ register (Paolo Bonzini)  [Orabug: 34284758] 
  - libqos: usb-hcd-ehci: use 32-bit write for config register (Paolo Bonzini)  [Orabug: 34284768] 
  - target/i386/kvm: Fix disabling MPX on "-cpu host" with MPX-capable host (Maciej S. Szmigiero)  [Orabug: 33528615] 
  - i386: Mask SVM features if nested SVM is disabled (Eduardo Habkost)  [Orabug: 33860224] 
  - ide: Cap LBA28 capacity announcement to 2^28-1 (Samuel Thibault)  [Orabug: 25327652] 
  - tests/acpi: update expected arm/virt tables (Mark Kanda)  [Orabug: 34132842]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-19.el7
changelog:
  - virtio-net: handle zero mac for a vdpa peer (Cindy Lu)  [Orabug: 34137522] 
  - virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu)  [Orabug: 34137522] 
  - vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu)  [Orabug: 34137522] 
  - vhost-vdpa: backend feature should set only once (Si-Wei Liu)  [Orabug: 34137522] 
  - vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu)  [Orabug: 34137522] 
  - vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu)  [Orabug: 34137522] 
  - virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu)  [Orabug: 34137522] 
  - virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu)  [Orabug: 34137522] 
  - virtio: fix the condition for iommu_platform not supported (Halil Pasic)  [Orabug: 34137522] 
  - vdpa: Make ncs autofree (Eugenio Pérez)  [Orabug: 34137522] 
  - vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier)  [Orabug: 34137522] 
  - hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier)  [Orabug: 34137522] 
  - vhost-vdpa: stick to -errno error return convention (Roman Kagan)  [Orabug: 34137522] 
  - vdpa: Add dummy receive callback (Eugenio Pérez)  [Orabug: 34137522] 
  - vdpa: Check for existence of opts.vhostdev (Eugenio Pérez)  [Orabug: 34137522] 
  - vhost: Fix last vq queue index of devices with no cvq (Eugenio Pérez)  [Orabug: 34137522] 
  - vhost: Rename last_index to vq_index_end (Eugenio Pérez)  [Orabug: 34137522] 
  - net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella)  [Orabug: 34137522] 
  - vhost-vdpa: multiqueue support (Jason Wang)  [Orabug: 34137522] 
  - virtio-net: vhost control virtqueue support (Jason Wang)  [Orabug: 34137522] 
  - vhost: record the last virtqueue index for the virtio device (Jason Wang)  [Orabug: 34137522] 
  - virtio-net: use "queue_pairs" instead of "queues" when possible (Jason Wang)  [Orabug: 34137522] 
  - vhost-net: control virtqueue support (Jason Wang)  [Orabug: 34137522] 
  - net: introduce control client (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: prepare for the multiqueue support (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: classify one time request (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang)  [Orabug: 34137522] 
  - vdpa: Check for iova range at mappings changes (Eugenio Pérez)  [Orabug: 34137522] 
  - vdpa: Add vhost_vdpa_section_end (Eugenio Pérez)  [Orabug: 34137522] 
  - net/vhost-vdpa: Fix device compatibility check (Kevin Wolf)  [Orabug: 34137522] 
  - net/vhost-user: Fix device compatibility check (Kevin Wolf)  [Orabug: 34137522] 
  - net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf)  [Orabug: 34137522] 
  - vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang)  [Orabug: 34137522] 
  - vhost_net: do not assume nvqs is always 2 (Jason Wang)  [Orabug: 34137522] 
  - vhost: use unsigned int for nvqs (Jason Wang)  [Orabug: 34137522] 
  - vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: remove unused variable "acked_features" (Jason Wang)  [Orabug: 34137522] 
  - vhost: correctly detect the enabling IOMMU (Jason Wang)  [Orabug: 34137522] 
  - virtio-pci: implement iommu_enabled() (Jason Wang)  [Orabug: 34137522] 
  - virtio-bus: introduce iommu_enabled() (Jason Wang)  [Orabug: 34137522] 
  - hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu)  [Orabug: 34137522] 
  - vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Pérez)  [Orabug: 34137522] 
  - vhost-vdpa: remove the unused vhost_vdpa_get_acked_features() (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: don't initialize backend_features (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: map virtqueue notification area if possible (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: skip ram device from the IOTLB mapping (Jason Wang)  [Orabug: 34137522] 
  - vhost-vdpa: Remove redundant declaration of address_space_memory (Xie Yongji)  [Orabug: 34137522] 
  - virtio: Fail if iommu_platform is requested, but unsupported (Kevin Wolf)  [Orabug: 34137522] 
  - vhost-vdpa: Make vhost_vdpa_get_device_id() static (Zenghui Yu)  [Orabug: 34137522] 
  - Update linux headers to 5.11-rc2 (Eric Farman)  [Orabug: 34137522] 
  - linux-headers: update against 5.10-rc1 (Matthew Rosato)  [Orabug: 34137522] 
  - linux headers: sync to 5.9-rc7 (Andrew Jones)  [Orabug: 34137522]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-20.el7
changelog:
  - vl: Add an -action option to override MCE handling (Mark Kanda)  [Orabug: 34538907] 
  - vl: Add an -action option specifying response to guest events (Alejandro Jimenez)  [Orabug: 34538907] 
  - qmp: generalize watchdog-set-action to -no-reboot/-no-shutdown (Alejandro Jimenez)  [Orabug: 34538907]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-21.el7
changelog:
  - qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda)  [Orabug: 34680062] 
  - qmp-regdump: Require python3 on OL8 (Mark Kanda)  [Orabug: 34672256] 
  - iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda)  [Orabug: 34447388] 
  - block: Set the name of BlockBackend if possible (Annie Li)  [Orabug: 34447388] 
  - acpi: Update _DSM method in expected files (Mark Kanda)  [Orabug: 34616322] 
  - acpi/gpex: Fix cca attribute check for pxb device (Xingang Wang)  [Orabug: 34616322] 
  - acpi: Enable pxb unit-test for ARM virt machine (Jiahui Cen)  [Orabug: 34616322] 
  - Kconfig: Compile PXB for ARM_VIRT (Jiahui Cen)  [Orabug: 34616322] 
  - acpi/gpex: Exclude pxb's resources from PCI0 (Jiahui Cen)  [Orabug: 34616322] 
  - acpi/gpex: Inform os to keep firmware resource map (Jiahui Cen)  [Orabug: 34616322] 
  - acpi: Add addr offset in build_crs (Jiahui Cen)  [Orabug: 34616322] 
  - unit-test: Add testcase for pxb (Yubo Miao)  [Orabug: 34616322] 
  - acpi: Align the size to 128k (Yubo Miao)  [Orabug: 34616322] 
  - acpi/gpex: Build tables for pxb (Yubo Miao)  [Orabug: 34616322] 
  - acpi: Extract crs build form acpi_build.c (Yubo Miao)  [Orabug: 34616322] 
  - hw/arm/virt: Write extra pci roots into fw_cfg (Jiahui Cen)  [Orabug: 34616322] 
  - fw_cfg: Refactor extra pci roots addition (Jiahui Cen)  [Orabug: 34616322] 
  - acpi/gpex: Extract two APIs from acpi_dsdt_add_pci (Yubo Miao)  [Orabug: 34616322] 
  - arm: use acpi_dsdt_add_gpex (Gerd Hoffmann)  [Orabug: 34616322] 
  - acpi: add acpi_dsdt_add_gpex (Gerd Hoffmann)  [Orabug: 34616322] 
  - acpi: Allow DSDT acpi table changes (Jiahui Cen)  [Orabug: 34616322] 
  - move MemMapEntry (Gerd Hoffmann)  [Orabug: 34616322] 
  - scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella)  [Orabug: 34353672]  {CVE-2022-0216}
  - scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella)  [Orabug: 34353672]  {CVE-2022-0216}
  - tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daudé)  [Orabug: 34353672]  {CVE-2022-0216}
  - hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daudé)  [Orabug: 34353672]  {CVE-2022-0216}
  - vfio: defer to commit kvm irq routing when enable msi/msix (Longpeng (Mike))  [Orabug: 34419422] 
  - vfio: simplify the failure path in vfio_msi_enable (Longpeng (Mike))  [Orabug: 34419422] 
  - vfio: move re-enabling INTX out of the common helper (Longpeng (Mike))  [Orabug: 34419422] 
  - vfio: simplify the conditional statements in vfio_msi_enable (Longpeng (Mike))  [Orabug: 34419422] 
  - kvm/msi: do explicit commit when adding msi routes (Longpeng (Mike))  [Orabug: 34419422] 
  - kvm-irqchip: introduce new API to support route change (Longpeng (Mike))  [Orabug: 34419422] 
  - event_notifier: handle initialization failure better (Maxim Levitsky)  [Orabug: 34419422] 
  - qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda)  [Orabug: 34510460]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-22.el7
changelog:
  - Revert "block: Set the name of BlockBackend if possible" (Joe Jin)  [Orabug: 34841102] 
  - Revert "iotests: Adjust 186.out to account for 'null' node-name" (Joe Jin)  [Orabug: 34841102]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-23.el7
changelog:
  - hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daudé)  [Orabug: 33930374]  {CVE-2021-3638}
  - tests/acpi: virt: update ACPI MADT and FADT binaries (Miguel Luis)  
  - acpi: arm/virt: madt: bump to revision 4 accordingly to ACPI 6.0 Errata A (Miguel Luis)  
  - acpi: arm/virt: madt: use build_append_int_noprefix() API to compose MADT table (Igor Mammedov)  
  - acpi: madt: arm/x86: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov)  
  - hw/arm/virt-acpi-build:Remove dead assignment in build_madt() (Chen Qun)  
  - acpi: build_fadt: adapt FADT table names (Miguel Luis)  
  - acpi: fadt: support revision 6.0 of the ACPI specification (Miguel Luis)  
  - tests/acpi: virt: allow acpi MADT and FADT changes (Miguel Luis)  
  - Document CVE-2022-1050 and CVE-2022-3165 (Mark Kanda)  [Orabug: 34132133] [Orabug: 34713999]  {CVE-2022-1050} {CVE-2022-3165}
  - hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt)  [Orabug: 34779472]  {CVE-2022-4172}
  - vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu)  
  - net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)  
  - vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)  
  - virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events (Venu Busireddy)  [Orabug: 33649154] 
  - hw/acpi/aml-build: Improve scalability of PPTT generation (Yanan Wang)  
  - tests/data/acpi/virt: update empty file for PPTT (Miguel Luis)  
  - hw/arm/virt-acpi-build: Generate PPTT table (Yanan Wang)  
  - tests/data/acpi/virt: Add an empty expected file for PPTT (Yanan Wang)  
  - hw/acpi/aml-build: Add PPTT table (Andrew Jones)  
  - hw/acpi/aml-build: Add Processor hierarchy node structure (Yanan Wang)  
  - machine: Add SMP Sockets in CpuTopology (Babu Moger)  
  - bios-tables-test: generate table for virt/DBG2 (Miguel Luis)  
  - hw/arm/virt_acpi_build: Generate DBG2 table (Eric Auger)  
  - tests/acpi: Add void table for virt/DBG2 bios-tables-test (Eric Auger)  
  - tests/acpi: virt: update ACPI GTDT binaries (Miguel Luis)  [Orabug: 34711916] 
  - acpi: arm/virt: build_gtdt: fix invalid 64-bit physical addresses (Miguel Luis)  [Orabug: 34711916] 
  - tests/acpi: virt: allow acpi GTDT changes (Miguel Luis)  [Orabug: 34711916] 
  - acpi: fix OEM ID/OEM Table ID padding (Igor Mammedov)  [Orabug: 34711916] 
  - acpi: arm/virt: build_gtdt: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov)  [Orabug: 34711916] 
  - acpi: add helper routines to initialize ACPI tables (Igor Mammedov)  [Orabug: 34711916] 
  - acpi: declare the default assignable value for the ACPI table header (Miguel Luis)  [Orabug: 34711916]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-24.el7
changelog:
  - Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug
    events" (Mark Kanda)  [Orabug: 34905939]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-25.el7
changelog:
  - target/i386/kvm: get and put AMD pmu registers (Dongli Zhang)  [Orabug: 34641255] 
  - i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan)  [Orabug: 34859902] 
  - memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi)  [Orabug: 34538900] 
  - virtio-blk: Fix clean up of host notifiers for single MR transaction. (Mark Mielke)  [Orabug: 34538900] 
  - virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz)  [Orabug: 34538900] 
  - virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz)  [Orabug: 34538900] 
  - virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz)  [Orabug: 34538900] 
  - virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz)  [Orabug: 34538900] 
  - event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz)  [Orabug: 34538900] 
  - virtio-scsi: don't process IO on fenced dataplane (Maxim Levitsky)  [Orabug: 34538900] 
  - virtio-scsi: don't uninitialize queues that we didn't initialize (Maxim Levitsky)  [Orabug: 34538900] 
  - hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-26.el7
changelog:
  - migration: check magic value for deciding the mapping of channels (manish.mishra)  [Orabug: 34735462] 
  - io: Add support for MSG_PEEK for socket channel (manish.mishra)  [Orabug: 34735462] 
  - migration: Move channel setup out of postcopy_try_recover() (Peter Xu)  [Orabug: 34735462] 
  - vdpa: commit all host notifier MRs in a single MR transaction (Longpeng (Mike))  [Orabug: 35252234] 
  - vhost: configure all host notifiers in a single MR transaction (Longpeng (Mike))  [Orabug: 35252234] 
  - vhost: simplify vhost_dev_enable_notifiers (Longpeng (Mike))  [Orabug: 35252234] 
  - pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li)  [Orabug: 35055290] 
  - qga/win32: Use rundll for VSS installation (Konstantin Kostiuk)  [Orabug: 35206108]  {CVE-2023-0664}
  - qga/win32: Remove change action from MSI installer (Konstantin Kostiuk)  [Orabug: 35206108]  {CVE-2023-0664}
  - hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daudé)  [Orabug: 34846087]  {CVE-2022-4144}
  - hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daudé)  [Orabug: 34846087]  {CVE-2022-4144}
  - hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daudé)  [Orabug: 34846087]  {CVE-2022-4144}
  - hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daudé)  [Orabug: 34846087]  {CVE-2022-4144}
  - hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daudé)  [Orabug: 34846087]  {CVE-2022-4144}
  - virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez)  [Orabug: 35060530] 
  - virtio-blk: Refactor the code that processes queued requests (Sergio Lopez)  [Orabug: 35060530] 
  - hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse)  [Orabug: 35219223] 
  - modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage)  [Orabug: 34867783] 
  - qemu.spec: Add post-install script for block storage modules (Siddhi Katage)  [Orabug: 34867783] 
  - qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage)  [Orabug: 34867783] 
  - module: increase dirs array size by one (Bruce Rogers)  [Orabug: 34867783] 
  - modules: load modules from versioned /var/run dir (Christian Ehrhardt)  [Orabug: 34867783] 
  - blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu)  [Orabug: 35118668]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-27.el7
changelog:
  - hw/arm/virt: Add nvdimm hotplug support (Shameer Kolothum)  [Orabug: 35505663] 
  - hw/arm/virt: Add nvdimm hot-plug infrastructure (Kwangwoo Lee)  [Orabug: 35505663] 
  - nvdimm: Use configurable ACPI IO base and size (Kwangwoo Lee)  [Orabug: 35505663] 
  - target/i386: define a new MSR based feature word - FEAT_PERF_CAPABILITIES (Like Xu)  [Orabug: 35370615]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-27.1.el7
changelog:
  - kvm: Atomic memslot updates (David Hildenbrand)  [Orabug: 35719844] 
  - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito)  [Orabug: 35719844] 
  - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito)  [Orabug: 35719844] 
  - KVM: Use a big lock to replace per-kml slots_lock (Peter Xu)  [Orabug: 35719844]


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-28.el7
changelog:
  - virtio-crypto: verify src&dst buffer length for sym request (Zhenwei Pi)  [Orabug: 35724113]  {CVE-2023-3180}
  - hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth)  [Orabug: 35724112]  {CVE-2023-0330}
  - kvm: Atomic memslot updates (David Hildenbrand)  [Orabug: 35719844] 
  - KVM: keep track of running ioctls (Emanuele Giuseppe Esposito)  [Orabug: 35719844] 
  - accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito)  [Orabug: 35719844] 
  - KVM: Use a big lock to replace per-kml slots_lock (Peter Xu)  [Orabug: 35719844] 
  - pcie: don't set link state active if the slot is empty (Laurent Vivier)  [Orabug: 35707933] 
  - vhost-vdpa: do not cleanup the vdpa/vhost-net structures if peer nic is present (Ani Sinha)  [Orabug: 35662850]  {CVE-2023-3301}


author: Mark Kanda <mark.kanda@oracle.com> - 15:4.2.1-24.el7
changelog:
  - Revert "virtio-scsi: Send "REPORTED LUNS CHANGED" sense data upon disk hotplug events" (Mark Kanda)  [Orabug: 34905939]


author: Mark Kanda <mark.kanda@oracle.com> - 4.2.1-32.el7
changelog:
  - Document CVEs as fixed (Mark Kanda) [Orabug: 36455470] [Orabug: 36455480] [Orabug: 36455529] [Orabug: 36455489] [Orabug: 36455500] [Orabug: 36455512] [Orabug: 36455520] {CVE-2023-4135} {CVE-2023-3255} {CVE-2023-6683} {CVE-2023-40360} {CVE-2023-42467} {CVE-2024-26327} {CVE-2024-24474}
  - hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35250119] {CVE-2023-1544}
  - hw/pflash_cfi01: allow smaller backing devices in postload_update_cb() (Mark Kanda) [Orabug: 36378764]
  - hw/block/pflash: Check return value of blk_pwrite() (Mansour Ahmadi) [Orabug: 36378764]
  - net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 36421467] {CVE-2023-3019}
  - net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 36421467] {CVE-2023-3019}
  - lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 36425307] {CVE-2021-3750}
  - memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
  - util/async: add a human-readable name to BHs for debugging (Stefan Hajnoczi) [Orabug: 36425307] {CVE-2021-3750}
  - io: remove io watch if TLS channel is closed during handshake (Daniel Berrangé) [Orabug: 35595204] {CVE-2023-3354}
  - tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 36327659] {CVE-2023-5088}
  - hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 36327659] {CVE-2023-5088}
  - accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025) (Alex Bennée) [Orabug: 36327651] {CVE-2020-24165}
  - physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35886091]
  - qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
  - aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
  - edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
  - qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35886091]
  - qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35886091]
  - qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35886091]
  - aio_wait_kick: add missing memory barrier (Emanuele Giuseppe Esposito) [Orabug: 35886091]
  - hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35876036]
  - hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35876036]
  - hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35876036]
  - machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35876036]
  - machine: move dies from X86MachineState to CpuTopology (Paolo Bonzini) [Orabug: 35876036]
  - machine: move SMP initialization from vl.c (Paolo Bonzini) [Orabug: 35876036]
  - machine: move UP defaults to class_base_init (Paolo Bonzini) [Orabug: 35876036]


author: Mark Kanda <mark.kanda@oracle.com> - 4.2.1-34.el7
changelog:
  - multifd: fix the multifd initialization (Elena Ufimtseva) [Orabug: 36598610]
  - hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36604206]
  - scsi: make io_timeout configurable (Hannes Reinecke) [Orabug: 36604206]
  - target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607762]


author: Mark Kanda <mark.kanda@oracle.com> - 4.2.1-35.el7
changelog:
  - hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37096901]
  - hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37096901]
  - hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (Philippe Mathieu-Daudé) [Orabug: 36659053] {CVE-2024-3447}


author: Karl Heubaum <karl.heubaum@oracle.com> - 15:4.1.1-2.el7
changelog:
  - Document CVE-2020-13765 as fixed (Karl Heubaum)  [Orabug: 31463250]  {CVE-2020-13765}
  - kvm: Reallocate dirty_bmap when we change a slot (Dr. David Alan Gilbert)  [Orabug: 31076399] 
  - kvm: split too big memory section on several memslots (Igor Mammedov)  [Orabug: 31076399] 
  - target/i386: do not set unsupported VMX secondary execution controls (Vitaly Kuznetsov)  [Orabug: 31463710] 
  - target/i386: add VMX definitions (Paolo Bonzini)  [Orabug: 31463710] 
  - ati-vga: check mm_index before recursive call (CVE-2020-13800) (Prasad J Pandit)  [Orabug: 31452206]  {CVE-2020-13800}
  - es1370: check total frame count against current frame (Prasad J Pandit)  [Orabug: 31463235]  {CVE-2020-13361}
  - ati-vga: Fix checks in ati_2d_blt() to avoid crash (BALATON Zoltan)  [Orabug: 31238432]  {CVE-2020-11869}
  - libslirp: Update to stable-4.2 to fix CVE-2020-1983 (Karl Heubaum)  [Orabug: 31241227]  {CVE-2020-1983}
  - Document CVEs as fixed (Karl Heubaum)   {CVE-2019-12068} {CVE-2019-15034}
  - libslirp: Update to version 4.2.0 to fix CVEs (Karl Heubaum)  [Orabug: 30274592] [Orabug: 30869830]  {CVE-2019-15890} {CVE-2020-8608}
  - target/i386: add support for MSR_IA32_TSX_CTRL (Paolo Bonzini)  [Orabug: 31124041] 
  - qemu-img: Add --target-is-zero to convert (David Edmondson)  
  - vnc: fix memory leak when vnc disconnect (Li Qiang)  [Orabug: 30996427]  {CVE-2019-20382}
  - iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (Felipe Franciosi)  [Orabug: 31124035]  {CVE-2020-1711}
  - qemu.spec: Remove "BuildRequires: kernel" (Karl Heubaum)  [Orabug: 31124047]


author: Karl Heubaum <karl.heubaum@oracle.com> - 15:4.1.1-3.el7
changelog:
  - buildrpm/spec files: Don't package elf2dmp (Karl Heubaum)  [Orabug: 31657424] 
  - qemu-kvm.spec: Enable the block-curl package (Karl Heubaum)  [Orabug: 31657424] 
  - qemu.spec: enable have_curl in spec (Dongli Zhang)  [Orabug: 31657424]


author: Patrick Colp <patrick.colp@oracle.com> - 0.3.4-2.el7
changelog:
  - swtpm: Add a function to query the mtime of the NVRAM file (Patrick Colp)  
  - Allow storing/loading the PCR event log state blob to/from a file (David Edmondson)  
  - Allow storing the PCR values state blob to a file (David Edmondson)  
  - Allow the PCR event log blob to be set (David Edmondson)  
  - Allow the current PCR event log blob to be queried (David Edmondson)  
  - Allow the current PCR values blob to be queried (David Edmondson)


author: Patrick Colp <patrick.colp@oracle.com> - 0.3.4-3.el7
changelog:
  - samples: Do not follow symlinks on logfile (CVE-2020-28407) (Patrick Colp)   {CVE-2020-28407}
  - swtpm_setup: Do no follow symlink on logfile (CVE-2020-28407) (Patrick Colp)   {CVE-2020-28407}
  - swtpm: Use open() (not fopen()) when accessing statefile (CVE-2020-28407) (Stefan Berger)   {CVE-2020-28407}
  - swtpm: Write state files atomically using file renaming (Stefan Berger)   {CVE-2020-28407}
  - swtpm: Switch to open() from fopen() for the pidfile (CVE-2020-28407) (Stefan Berger)   {CVE-2020-28407}
  - swtpm: Do not follow symlinks when opening lockfile (CVE-2020-28407) (Stefan Berger)   {CVE-2020-28407}
  - swtpm_cert: Switch to open() from fopen() for writing certificate (Stefan Berger)  [Orabug: 32739904]  {CVE-2020-28407}


author: Patrick Colp <patrick.colp@oracle.com> - 0.3.4-5.el7
changelog:
  - swtpm: Check header size indicator against expected size (CID 375869) (Stefan
    Berger)  [Orabug: 33876933]  {CVE-2022-23645}


author: Richard W.M. Jones <rjones@redhat.com> - 0.5-17
changelog:
  - Remove ldconfig
    https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/thread/SU3LJVDZ7LUSJGZR5MS72BMRAFP3PQQL/


author: Richard W.M. Jones <rjones@redhat.com> - 1.0-2
changelog:
  - Upstream version 1.0.
  - Remove patches, since all included 1.0.
  - Add patches since 1.0.
  - Fix Source0 URL, hosted on github.
  - Remove old Source1 and Source2, not used.


author: Wim ten Have <wim.ten.have@oracle.com> - 1.5.0-2.el7
changelog:
  - BUILDINFO: commit=3178e25b189b86defb1cb34d5ce21bb464131bd7
  - virt-manager: buildrpm changes for OL7u4 build v1.5.0


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-3.el7
changelog:
  - BUILDINFO: commit=f56741560d32633d2421b7ccd227e2f718e5bfe3
  - virtinst: add KVM features kvm_cpu_pm, kv_mem_lock, and kvm_hint_dedicated (Menno Lageman)  
  - virtinst: add --exadata option (Menno Lageman)  
  - virtinst: add --vnuma autopartition option (Menno Lageman)


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-4.el7
changelog:
  - virtinst: configure devices for Exadata guests (Menno Lageman)  
  - virt-manager: change 'new-vm' defaults to more sane values (Menno Lageman)  [Orabug: 28892829]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-6.el7
changelog:
  - virtinst: test for NUMA should not use /proc/sys/kernel/numa_balancing (Menno Lageman)  [Orabug: 29054217] 
  - virtinst: --vnuma option no longer creates a vNUMA config (Menno Lageman)  [Orabug: 29044985]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-11.el7
changelog:
  - virtinst: support >= 1 TB guests on Exadata (Menno Lageman)  [Orabug: 29683989] 
  - virtinst: switch to 'virtio-scsi' for Exadata (Menno Lageman)  [Orabug: 29660043]


author: Wim ten Have <wim.ten.have@oracle.com> - 1.5.0-13.el7
changelog:
  - virtinst: Invariant TSC feature on large guests can't be migrated. (Wim ten
    Have)  [Orabug: 29797342]


author: Wim ten Have <wim.ten.have@oracle.com> - 1.5.0-14.el7
changelog:
  - virtinst: add qemu extended args for large guests unconditionally (Wim ten
    Have)  [Orabug: 29919946]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-15.el7
changelog:
  - tests: fix missing '<rng model="virtio" .../>' (Menno Lageman)  [Orabug: 29947518] 
  - tests: fix missing '<model type="e1000"/>' (Menno Lageman)  [Orabug: 29947518] 
  - virtinst: set virtio-scsi queues to number of vcpus (Menno Lageman)  [Orabug: 29947518] 
  - virtinst: allow setting the number of queues for controllers (Menno Lageman)  [Orabug: 29947518]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-16.el7
changelog:
  - virtinst: Exadata: don't add target node on non-NUMA systems (Menno Lageman)  [Orabug: 30284679] 
  - If user renames guest in VM details page before installation starts there is no need to rename NVRAM file as well. (Pavel Hrdina)  [Orabug: 29954660] 
  - virtinst: require at least 2 threads per NUMA node for Exadata (Menno Lageman)  [Orabug: 30081399]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-19.el7
changelog:
  - virtinst: stop configuring the IOMMU through qemu:commandline (Menno Lageman)  
  - virtinst: add support for configuring the IOMMU (Menno Lageman)  
  - virtinst: don't set CPU features with qemu:commandline (Menno Lageman)  [Orabug: 31374547] 
  - virtinst: add support for host-phys-bits KVM feature (Menno Lageman)  [Orabug: 31374547] 
  - virt-install: Add two more pcie-root-port slots to the Exadata machine template (Wim ten Have)  [Orabug: 31080601]


author: Menno Lageman <menno.lageman@oracle.com> - 1.5.0-20.el7
changelog:
  - virtinst: stop configuring target.node for the expander bus on Exadata (Menno
    Lageman)  [Orabug: 31793077]


author: Karl Heubaum <karl.heubaum@oracle.com> - 1.5.0-22.el7
changelog:
  - virt-manager.spec: Switch libvirt-python dependency to python2-libvirt (Karl
    Heubaum)  [Orabug: 34120046]


