ELSA-2024-12791

Описание

hivex [1.3.18-21]

• Bounds check for block exceeding page length (CVE-2021-3504) resolves: rhbz#1950501

[1.3.18]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.3.18]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.3.15-7]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[1.3.15-6]

• Drop hivex-static subpackage resolves: rhbz#1560207

[1.3.15-5]

• Rebuild for OCaml 4.07.0.

[1.3.15-4]

• Remove python2 support resolves: rhbz#1559086

[1.3.15-3]

• Add upstream patch to fix injection of LDFLAGS (RHBZ#1548536).

[1.3.15-2]

• Rebuild with new redhat-rpm-config/perl build flags

[1.3.15-1]

• New upstream version 1.3.15.

[1.3.14-15]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.3.14-14]

• Rebuilt for switch to libxcrypt

[1.3.14-13]

• F-28: rebuild for ruby25

[1.3.14-12]

• Fix string mutability.

[1.3.14-10]

• OCaml 4.06.0 rebuild.

[1.3.14-9]

• ocaml-hivex-devel should Require hivex-devel.

[1.3.14-8]

• OCaml 4.05.0 rebuild.

[1.3.14-7]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.3.14-6]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.3.14-5]

• OCaml 4.04.2 rebuild.

[1.3.14-4]

• Perl 5.26 rebuild

[1.3.14-3]

• Create python2 and python3 subpackages (RHBZ#1453189).

[1.3.14-2]

• OCaml 4.04.1 rebuild.

[1.3.14-1]

• New upstream version 1.3.14.
• Add GPG signature and mechanics for checking it.

[1.3.13-12]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.3.13-11]

• F-26: rebuild again for ruby24

[1.3.13-10]

• Rebuild for readline 7.x

[1.3.13-9]

• Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4

[1.3.13-8]

• Rebuild for OCaml 4.04.0.

[1.3.13-7]

• https://fedoraproject.org/wiki/Changes/Automatic_Provides_for_Python_RPM_Packages

[1.3.13-6]

• Perl 5.24 rebuild

[1.3.13-5]

• Explicitly BR rubygem(rdoc) RHBZ#1334753 and rubygem(json) RHBZ#1325022.

[1.3.13-4]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.3.13-3]

• Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.3

[1.3.13-2]

• New upstream version 1.3.13.
• Drop ancient 'Conflicts' rule.
• Drop Perl patch for setting INSTALLDIRS.
• Depend on pod2html, pod2man binaries explicitly.

[1.3.12-1]

• New upstream version 1.3.12.
• Drop patches which are now upstream.
• Use OCaml macros to test if OCaml native compiler is available.
• Use autoreconf --force option.

[1.3.11-13]

• Correcting the perl build time dependency list Switching to virtual perl()-style symbols Dropping unused dependencies and adding some new to fix the FTBFS

[1.3.11-12]

• OCaml 4.02.3 rebuild.

[1.3.11-11]

• ocaml-4.02.2 final rebuild.

[1.3.11-10]

• ocaml-4.02.2 rebuild.

[1.3.11-9]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.3.11-8]

• Perl 5.22 rebuild

[1.3.11-7]

• Move hivexregedit to perl-hivex subpackage, since otherwise hivex and hence libguestfs depends on perl (RHBZ#1194158).

[1.3.11-6]

• ocaml-4.02.1 rebuild.

[1.3.11-5]

• Rebuild for https://fedoraproject.org/wiki/Changes/Ruby_2.2

[1.3.11-4]

• Increase HIVEX_MAX_SUBKEYS.
• Don't leak errno E2BIG to callers.

[1.3.11-2]

• Pull in a couple of upstream fixes:
  • Fix memory leak in _hivex_get_children.
  • Increase HIVEX_MAX_VALUE_LEN.

[1.3.11-1]

• New upstream version 1.3.11.
• Python objects are now placed in a hivex/ subdirectory.

[1.3.10-12]

• Perl 5.20 rebuild

[1.3.10-11]

• ocaml-4.02.0 final rebuild.

[1.3.10-10]

• Perl 5.20 rebuild

[1.3.10-9]

• ocaml-4.02.0+rc1 rebuild.

[1.3.10-8]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.3.10-7]

• ocaml-4.02.0-0.8.git10e45753.fc22 rebuild.

[1.3.10-6]

• OCaml 4.02.0 beta rebuild.

[1.3.10-5]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.3.10-4]

• Remove the ruby(release) version. It is not needed.

[1.3.10-3]

• Rebuild to fix Ruby dependencies problem.

[1.3.10-2]

• Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.1

[1.3.10-1]

• New upstream version 1.3.10.
• Fix ruby test failures (RHBZ#1090407).

[1.3.9-2]

• New upstream version 1.3.9.
• Remove patches which are now upstream.

[1.3.8-4]

• OCaml 4.01.0 rebuild.

[1.3.8-3]

• Include various upstream patches to fix endianness problems on ppc64.

[1.3.8-2]

• Bump and rebuild, since ARM package still appears to depend on Perl 5.16.

[1.3.8-1]

• New upstream version 1.3.8.
• Fixes handling of keys which use ri-records, for both reading and writing (RHBZ#717583, RHBZ#987463).
• Remove upstream patch.
• Rebase dirs patch against new upstream sources.
• Rebase ruby patch against new upstream sources.
• Modernize the RPM spec file.
• Fix .gitignore.

[1.3.7-8]

• Perl 5.18 rebuild

[1.3.7-7]

• Rebuild for Ruby 2.0.0.
• Change ruby(abi) to ruby(release).

[1.3.7-6]

• Fix for latest Ruby in Rawhide. Fixes build failure identified by mass rebuild yesterday.
• Do not ignore error from running autoreconf.

[1.3.7-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_19_Mass_Rebuild

[1.3.7-2]

• Rebuild for OCaml 4.00.1.

[1:1.3.7-1]

• New upstream version 1.3.7.

[1.3.6-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.3.6-2]

• Perl 5.16 rebuild

[1:1.3.6-1]

• New upstream version 1.3.6.
• Enable Ocaml bindings on ppc64.

[1.3.5-9]

• Rebuild for OCaml 4.00.0.

[1.3.5-8]

• Perl 5.16 rebuild

[1:1.3.5-7]

• 'blobs' -> 'files' in the description.

[1:1.3.5-6]

• Bundled gnulib (RHBZ#821763).

[1:1.3.5-5]

• Don't need to rerun the generator (thanks Dan Horak).

[1:1.3.5-4]

• New upstream version 1.3.5.
• Remove upstream patch.
• Depend on automake etc. for the patch.

[1.3.3-8]

• ruby(abi) 1.9.1.

[1.3.3-7]

• Bump and rebuild for Ruby update.
• Add upstream patch to fix bindings for Ruby 1.9.
• Add non-upstream patch to pass --vendor flag to extconf.rb

[1.3.3-3]

• Rebuild for OCaml 3.12.1.

[1.3.3-2]

• Disable OCaml on ppc64.
• Ensure OCaml files are deleted when not packaged.

[1.3.3-1]

• New upstream version 1.3.3.
• Rebased gnulib to work around RHBZ#756981.
• Remove patches which are now upstream.

[1.3.2-3]

• New upstream version 1.3.2.
• Add upstream patch to fix building of hivexsh, hivexget.

[1.3.1-2]

• New upstream version 1.3.1.
• Remove patch, now upstream.
• Don't need hack for making an unversioned Python module.

[1.3.0-3]

• New upstream version 1.3.0.
• This version adds Ruby bindings, so there is a new subpackage 'ruby-hivex'.
• Add upstream patch to fix Ruby tests.
• Remove epoch macro in ruby-hivex dependency.

[1.2.8-1]

• New upstream version 1.2.8.
• Remove 4 upstream patches.

[1.2.7-9]

• Add upstream patch to fix Perl CCFLAGS for Perl 5.14 on i686.
• Enable 'make check'.

[1.2.7-6]

• i686 package is broken, experimentally rebuild it.

[1.2.7-5]

• Perl mass rebuild

[1.2.7-4]

• Perl 5.14 mass rebuild

[1.2.7-3]

• New upstream version 1.2.7.
• Removed patch which is now upstream.
• Add upstream patches to fix ocaml install rule.

[1.2.6-2]

• New upstream version 1.2.6.
• Removed patch which is now upstream.
• Add upstream patch to fix ocaml tests.

[1.2.5-2]

• Fix Python bindings on 32 bit arch with upstream patch.

[1.2.5-1]

• New upstream version 1.2.5.
• This version fixes a number of important memory issues found by valgrind and upgrading to this version is recommended for all users.
• Remove patch now upstream.

[1.2.4-7]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[1.2.4-6]

• Fix multilib conflicts in *.pyc and *.pyo files.
• Only install unversioned *.so file for Python bindings.

[1.2.4-4]

• Rebuild against OCaml 3.12.0.

[1.2.4-3]

• Backport upstream patch to fix segfault in Hivex.value_value binding.

[1.2.4-1]

• New upstream version 1.2.4.
• This adds Python bindings (python-hivex subpackage).
• Fix Source0.

[1.2.3-3]

• fix built with recent perl

[1.2.3-2]

• conditionalize ocaml support

[1.2.3-1]

• New upstream version 1.2.3.

[1.2.2-3]

• Create a hivex-static subpackage.

[1.2.2-2]

• Mass rebuild with perl-5.12.0

[1.2.2-1]

• New upstream version 1.2.2.

[1.2.1-1]

• New upstream version 1.2.1.
• Includes new tool for exporting and merging in regedit format.

[1.2.0-2]

• New upstream version 1.2.0.
• This includes OCaml and Perl bindings, so add these as subpackages.

[1.1.2-3]

• Missing Epoch in conflicts version fixed.

[1.1.2-2]

• Add Conflicts libguestfs <= 1.0.84.

[1.1.2-1]

• Initial Fedora RPM.

libguestfs libguestfs-winsupport [8.2]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[8.0-4]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[8.0-3]

• Fix for CVE-2019-9755 (heap-based buffer overflow leads to local root privilege escalation) resolves: rhbz#1698503

[8.0-2]

• Fix for ntfsclone crash (RHBZ#1601146).

[8.0-1]

• Rebase to 2017.3.23.
• Remove patches which are now upstream.
• Resynch with Fedora package.
• Enable all architectures for RHEL 8.

[7.2-2]

• Fix for handling guest filenames with invalid or incomplete multibyte or wide characters resolves: rhbz#1301593

[7.2-1]

• Rebase and rebuild for RHEL 7.2 resolves: rhbz#1240278

[7.1-6]

• Bump version and rebuild. related: rhbz#1221583

[7.1-5]

• Enable aarch64 architecture. resolves: rhbz#1221583

[7.1-4]

• Enable debuginfo support and stripping. resolves: rhbz#1100319

[7.1-3]

• Add patches from Fedora package which add fstrim support. resolves: rhbz#1100319

[7.1-2]

• New package for RHEL 7.1
• Rebase to ntfs-3g 2014.2.15 resolves: rhbz#1100319
• Change the package so it works with supermin5.
• Remove dependency on external FUSE.

[7.0-2]

• Resync against Rawhide package (ntfs-3g 2013.1.13).
• Drop HAL file since HAL is dead. resolves: rhbz#819939

[7.0-1]

• New package for RHEL 7 resolves: rhbz#819939
• Resync against Rawhide package.

[1.0-7]

• Disable debuginfo package. resolves: RHBZ#691555.

[1.0-6]

• Require libguestfs 1.7.17 (newer version in RHEL 6.1).
• Require febootstrap-supermin-helper instead of febootstrap resolves: RHBZ#670299.

[1.0-5]

• Make sure intermediate lib* directories are created in hostfiles (RHBZ#603429)

[1.0-4]

• Requires fuse-libs (RHBZ#599300).

[1.0-3]

• ExclusiveArch x86_64.

[1.0-2]

• Package Windows support for libguestfs.

libiscsi libnbd [1.2.2]

• Resolves: bz#1844296 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.2-1]

• New stable release 1.2.2.

[1.2.1-1]

• New stable release 1.2.1.

[1.2.0-1]

• New stable release 1.2.0.

[1.0.3-1]

• New upstream version 1.0.3.
• Contains fix for remote code execution vulnerability.
• Add new libnbd-security(3) man page.

[1.0.2-1]

• New upstream version 1.0.2.
• Remove patches which are upstream.
• Contains fix for NBD Protocol Downgrade Attack (CVE-2019-14842).
• Fix previous commit message.

[1.0.1-2]

• Add upstream patch to fix nbdsh (for nbdkit tests).
• Fix interop tests on slow machines.

[1.0.1-1]

• New stable version 1.0.1.

[1.0.0-1]

• New upstream version 1.0.0.

[0.9.9-2]

• Rebuilt for Python 3.8

[0.9.9-1]

• New upstream version 0.9.9.

[0.9.8-4]

• Fix nbdkit dependencies so we're actually running the tests.
• Add glib2-devel BR so we build the glib main loop example.
• Add upstream patch to fix test error: nbd_connect_unix: getlogin: No such device or address
• Fix test failure on 32 bit.

[0.9.8-3]

• Bump and rebuild to fix releng brokenness. https://lists.fedoraproject.org/archives/list/devel@lists.fedoraproject.org/message/2LIDI33G3IEIPYSCCIP6WWKNHY7XZJGQ/

[0.9.8-2]

• Rebuilt for Python 3.8

[0.9.8-1]

• New upstream version 0.9.8.
• Package the new nbd_*(3) man pages.

[0.9.7-1]

• New upstream version 0.9.7.
• Add libnbd-ocaml(3) man page.

[0.9.6-2]

• Add all upstream patches since 0.9.6 was released.
• Package the ocaml bindings into a subpackage.

[0.9.6-1]

• New upstream verison 0.9.6.

[0.1.9-1]

• New upstream version 0.1.9.

[0.1.8-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_31_Mass_Rebuild

[0.1.8-1]

• New upstream version 0.1.8.

[0.1.7-1]

• New upstream version 0.1.7.

[0.1.6-1]

• New upstream version 0.1.6.

[0.1.5-1]

• New upstream version 0.1.5.

[0.1.4-1]

• New upstream version 0.1.4.

[0.1.2-2]

• Enable libxml2 for NBD URI support.

[0.1.2-1]

• New upstream version 0.1.2.

[0.1.1-1]

• Fix license in man pages and examples.
• Add nbdsh(1) man page.
• Include the signature and keyring even if validation is disabled.
• Update devel subpackage license.
• Fix old FSF address in Python tests.
• Filter Python provides.
• Remove executable permission on the tar.gz.sig file.
• Initial release.

libvirt [5.7.0-44.el8]

• qemu: conf: Add configuration to tune vcpu unplug timeout (Partha Satapathy) [Orabug: 37111373]

[5.7.0-43.el8]

• qemu_firmware: don't error out for unknown firmware features (Pavel Hrdina) [Orabug: 36931914]
• qemu_process: Postpone vcpu re-pinning after vcpuinfo refresh from qemu (Shaleen Bathla) [Orabug: 36588995]

[5.7.0-42.el8]

• Document CVEs as fixed (Karl Heubaum) {CVE-2023-2700}
• Fix off-by-one error in udevListInterfacesByStatus (Martin Kletzander) [Orabug: 36364474] {CVE-2024-1441}
• libvirt-: Check caller-provided buffers to be NULL with size > 0 (Erik Skultety) [Orabug: 36364474]

[5.7.0-41.el8]

• qemu_monitor: Add defensive protection on mon->msg (Wim ten Have) [Orabug: 35699260]
• vircpi: Add PCIe 5.0 and 6.0 link speeds (Michal Privoznik) [Orabug: 35496776]
• qemuProcessSetupVcpusVnuma: add NULL check for def->cpu (Shaleen Bathla) [Orabug: 35332038]

[5.7.0-40.el8]

• build: change dependency to allow post install erasing of /usr/bin/nc (Wim ten Have) [Orabug: 35289777]
• util: Make virFileClose() quiet on success (Andrea Bolognani) [Orabug: 35090886]

[5.7.0-39.el8]

• exadata: update maxvcpus for vNUMA only (Shaleen Bathla) [Orabug: 34863357]

[5.7.0-38.el8]

• qemu: Don't report spurious errors from vCPU tid validation on hotunplug timeout (Shaleen Bathla) [Orabug: 34826758]
• security: fix SELinux label generation logic (Daniel P. Berrange) [Orabug: 34773029] {CVE-2021-3631}
• qemu: Set default qdisc before setting bandwidth (Michal Privoznik) [Orabug: 34724925]
• qemu: Taint cpu host-passthrough only after migration (Cole Robinson) [Orabug: 34724925]

[5.7.0-37.el8]

• vNUMA: Auto adjust 'maxvcpus' for vCORE placement (Wim ten Have) [Orabug: 34670399]
• qemu: support kvm-poll-control performance hint (Tim Wiederhake) [Orabug: 34695476]
• qemu: fix EFI nvram removal on domain undefine (Pavel Mores) [Orabug: 34543837]
• util: keep the pidfile locked (Marc-Andre Lureau) [Orabug: 34500172]
• qemuProcessStartManagedPRDaemon: Don't pass -f pidfile to the daemon (Michal Privoznik) [Orbug: 34500172]
• virCommand: Actually acquire pidfile instead of just writing it (Michal Privoznik) [Orbug: 34500172]
• qemu: Don't explicitly remove pidfile after virPidFileForceCleanupPath() (Michal Privoznik) [Orbug: 34500172]
• virPipeImpl: Don't overwrite error (Peter Krempa) [Orbug: 34500172]
• src: introduce a wrapper for the pipe2() system call (Daniel P. Berrange) [Orbug: 34500172]

[5.7.0-36.el8]

• util: Netdev fixes for phys_port_id to get the ifname of a VF (Wim ten Have) [Orabug: 34417160]
• qemuProcessStop: Don't try to remove QoS on already removed TAP (Michal Privoznik) [Orabug: 34206752]
• virnetdevopenvswitch: Fix 'burst' value passed to ovs-vsctl (Michal Privoznik) [Orabug: 34206752]
• util: Avoid null pointer dereference when setting QoS on OVS (Jiri Denemark) [Orabug: 34206752]
• virnetdevopenvswitch: unify calculation of ovs and tc (Jinsheng Zhang) [Orabug: 34206752]
• virnetdevopenvswitch: Fix qos cleaning residual on multi interfaces (Jinsheng Zhang) [Orabug: 34206752]
• virnetdevopenvswitch: Introduce virNetDevOpenvswitchInterfaceClearTxQos and virNetDevOpenvswitchInterfaceClearRxQos (Jinsheng Zhang) [Orabug: 34206752]
• virnetdevopenvswitch: Extract common code block to a single function (Jinsheng Zhang) [Orabug: 34206752]
• virnetdevopenvswitch: Extract conversion parameters between virNetDevBandwidth and ovs (Jinsheng Zhang) [Orabug: 34206752]
• virnetdevopenvswitch: Add vmuuid notes on virNetDevOpenvswitchInterfaceSetQos (Jinsheng Zhang) [Orabug: 34206752]
• qemu: interface: check and use ovs command to set qos of ovs managed port (Jinsheng Zhang) [Orabug: 34206752]
• qemu: interface: remove setting noqueue for ovs port (Jinsheng Zhang) [Orabug: 34206752]
• virDomain: interface: add virNetDevOpenvswitchInterfaceSetQos and virNetDevOpenvswitchInterfaceClearQos (Jinsheng Zhang) [Orabug: 34206752]
• virDomain: interface: add virDomainNetDefIsOvsport (Jinsheng Zhang) [Orabug: 34206752]
• openvswitch: don't delete existing OVS port prior to recreating same port (Laine Stump) [Orabug: 34206752]
• virnetdev: move virNetDevSetRootQDisc to virnetdevbandwidth (Pavel Hrdina) [Orabug: 34206752]
• virnetdevbandwidth: Don't generate burst outside of boundaries (Michal Privoznik) [Orabug: 34206752]
• qemu_hotplug: Don't dereference NULL pointer @newb in qemuDomainChangeNet() (Michal Privoznik) [Orabug: 34206752]
• qemu: Restore default root qdisc when QoS is cleared out (Michal Privoznik) [Orabug: 34206752]
• virnetdevopenvswitch: Simplify OVS_VSCTL cmd creation (Michal Privoznik) [Orabug: 34206752]
• qemu: Set noqueue qdisc for TAP devices (Michal Privoznik) [Orabug: 34206752]
• virnetdev: Introduce virNetDevSetRootQDisc() (Michal Privoznik) [Orabug: 34206752]
• syntax-check: Don't forbid curly braces around single line condition body (Peter Krempa) [Orabug: 34206752]
• src: util: rename some program macros (Pavel Hrdina) [Orabug: 34206752]
• conf: rename virNetDevSupportBandwidth to virNetDevSupportsBandwidth (Jan Tomko) [Orabug: 34206752]
• qemu: do not revert to NULL bandwidth (Jan Tomko) [Orabug: 34206752]
• conf: return a const from virDomainNetGetActualVirtPortProfile (Laine Stump) [Orabug: 34206752]
• qemu: move runtime netdev validation into a separate function (Laine Stump) [Orabug: 34206752]
• conf: make arg to virDomainNetGetActualVirtPortProfile() a const (Laine Stump) [Orabug: 34206752]

[5.7.0-35.el8]

• util: add virNetDevGetPhysPortName (Moshe Levi) [Orabug: 34329649]
• util: Add phys_port_name support on virPCIGetNetName (Dmytro Linkin) [Orabug: 34329649]

[5.7.0-34.el8]

• qemu: blockcopy: Allow late opening of the backing chain of a shallow copy (Peter Krempa) [Orabug: 33091019]
• qemu: capabilities: Introduce QEMU_CAPS_BLOCKDEV_SNAPSHOT_ALLOW_WRITE_ONLY (Peter Krempa) [Orabug: 33091019]
• qemuDomainBlockCopyCommon: Record updated flags to block job (Peter Krempa) [Orabug: 33091019]
• qemuDomainBlockPivot: Move check prior to executing the pivot steps (Peter Krempa) [Orabug: 33091019]
• qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33091019]
• qemuDomainBlockPivot: Copy bitmaps backing checkpoints for virDomainBlockCopy (Peter Krempa) [Orabug: 33091019]
• qemu: block: Introduce function to calculate bitmap handling for block-copy (Peter Krempa) [Orabug: 33091019]
• qemu: block: Add validator for bitmap chains accross backing chains (Peter Krempa) [Orabug: 33091019]
• qemu: blockjob: Store 'flags' for all the block job types (Peter Krempa) [Orabug: 33091019]
• qemu: blockjob: Store 'jobflags' with block job data (Peter Krempa) [Orabug: 33091019]
• util: json: Introduce virJSONValueArrayConcat (Peter Krempa) [Orabug: 33091019]
• qemu: block: Extract calls of qemuBlockGetNamedNodeData into a helper function (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Track and relabel images for bitmap merging (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Introduce support for deleting checkpoints accross snapshots (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Extract calculation of bitmap merging for checkpoint deletion (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Introduce helper to find checkpoint disk definition in parents (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: tolerate missing disks on checkpoint deletion (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Use disk definition directly when creating checkpoint (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: rename disk->chkdisk in qemuCheckpointAddActions (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: rename disk->chkdisk in qemuCheckpointDiscardBitmaps (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: split out checkpoint deletion bitmaps (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Store whether deleted checkpoint is current in a variable (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Extract and export rollback of checkpoint metadata storing (Peter Krempa) [Orabug: 33091019]
• qemu: block: Introduce qemuBlockNamedNodeDataGetBitmapByName (Peter Krempa) [Orabug: 33091019]
• qemu: snapshot: Propagate active bitmaps through external snapshots (Peter Krempa) [Orabug: 33091019]
• qemu: monitor: Add 'granularity' parameter for block-dirty-bitmap-add (Peter Krempa) [Orabug: 33091019]
• qemu: snapshot: Fold formatting of snapshot transaction into prepare func (Peter Krempa) [Orabug: 33091019]
• qemu: Check for explicit failure of qemuBlockSnapshotAddBlockdev (Peter Krempa) [Orabug: 33091019]
• qemu: monitor: Extract internals of qemuMonitorJSONBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
• qemu: monitor: Extract data about dirty-bimaps in qemuMonitorBlockGetNamedNodeData (Peter Krempa) [Orabug: 33091019]
• qemu: block: enable the snapshot image deletion feature (Pavel Mores) [Orabug: 33091019]
• qemu: block: propagate the delete flag to where it can actually be used (Pavel Mores) [Orabug: 33091019]
• qemu: checkpoint: fix NULL dereference at create time (Cole Robinson) [Orabug: 33091019]
• qemu: snapshot: Mark file becoming backingStore as read-only (Peter Krempa) [Orabug: 33091019]
• util: consolidate on one free callback for hash data (Daniel P. Berrange) [Orabug: 33091019]
• conf: stop using hash key when free'ing hash entries (Daniel P. Berrange) [Orabug: 33091019]
• qemu: checkpoint: Use qemuMonitorTransactionBitmapMergeSourceAddBitmap (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Fix rollback and access to unlocked 'vm' when deleting checkpoints (Peter Krempa) [Orabug: 33091019]
• qemu: snapshot: split out preparation of a snapshot with blockdev (Peter Krempa) [Orabug: 33091019]
• qemu: monitor: Add helper for generating data for block bitmap merging (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Extract finalizing steps of checkpoint creation (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Split out checkpoint creation code (Peter Krempa) [Orabug: 33091019]
• qemu: block: Don't query monitor in qemuBlockStorageSourceCreateDetectSize (Peter Krempa) [Orabug: 33091019]
• qemu: monitor: Introduce new interface to query-named-block-nodes (Peter Krempa) [Orabug: 33091019]
• util: hash: Introduce virHashHasEntry (Peter Krempa) [Orabug: 33091019]
• util: hash: Add new constructor 'virHashNew' (Peter Krempa) [Orabug: 33091019]
• util: hash: Add possibility to use simpler data free function in virHash (Peter Krempa) [Orabug: 33091019]
• conf: Introduce virDomainDiskByTarget (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Don't update current checkpoint until we are done (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Replace open-coded transaction action generators (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Refactor cleanup in qemuCheckpointCreateXML (Peter Krempa) [Orabug: 33091019]
• qemu: domain: Move checkpoint related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
• qemu: driver: Move checkpoint-related code to qemu_checkpoint.c (Peter Krempa) [Orabug: 33091019]
• qemu: Move, rename and export qemuDomObjFromDomain (Peter Krempa) [Orabug: 33091019]
• qemu: checkpoint: Don't forbid checkpoint when VM is marked for autodestroy (Peter Krempa) [Orabug: 33091019]
• Prepare to hotplug vNUMA targets for non-X86_64 guests (Wim ten Have) [Orabug: 34256070]
• qemu: Add missing lock in qemuProcessHandleMonitorEOF (Peng Liang) [Orabug: 34210159] {CVE-2021-3975}

[5.7.0-33.el8]

• qemu: refresh vNUMA/SMT pinning (Wim ten Have) [Orabug: 34083505]
• qemu driver: Check exadataConfig and packCPUs whenever vNUMA/SMT applies (Wim ten Have) [Orabug: 34023508]
• nwfilter: fix crash when counting number of network filters (Daniel P. Berrange) [Orabug: 33973639] {CVE-2022-0897}

[5.7.0-32.el8]

• qemu: Validate config->exadata before reaping guests (Wim ten Have) [Orabug: 33763967]
• qemu: Make vNUMA/SMT pCPU packing L3-cache aware on AMD/E4 (Wim ten Have) [Orabug: 33268059]
• qemu: work exadataConfig flags directly from the QEMUdriver structure (Wim ten Have) [Orabug: 33268059]
• qemu: Label restore path outside of secdriver transactions (Michal Privoznik) [Orabug: 33351242]
• security: Introduce virSecurityManagerDomainSetPathLabelRO (Michal Privoznik) [Orabug: 33351242]

[5.7.0-31.el8]

• qemu: Do not latch guestCPUs when guests hotplug with active domain groups (Wim ten Have) [Orabug: 33440015]

[5.7.0-30.el8]

• qemuDomainSnapshotDiskPrepareOne: Fix logic of relative backing store update (Peter Krempa) [Orabug: 33086913]
• qemu: Don't set NVRAM label when creating it (Michal Privoznik) [Orabug: 33319048]
• qemu: protect guestCPUs from drift under vcpu guest timeouts (Wim ten Have) [Orabug: 33368490]

[5.7.0-29.el8]

• qemu: vCORE distribution under vNUMA host partitioning should balance guests vCPU:pCPU pinning (Wim ten Have) [Orabug: 32355455]
• qemuDomainSnapshotDiskPrepareOne: Don't load the relative path with blockdev (Peter Krempa) [Orabug: 33151464]
• qemu: block: Support VIR_DOMAIN_BLOCK_COMMIT/PULL/REBASE_RELATIVE with blockdev (Peter Krempa) [Orabug: 33151464]
• qemu: Tell secdrivers which images are top parent (Michal Privoznik) [Orabug: 33086913]
• security: Introduce VIR_SECURITY_DOMAIN_IMAGE_PARENT_CHAIN_TOP flag (Michal Privoznik) [Orabug: 33086913]

[5.7.0-28.el8]

• qemu_capabilities: Rework domain caps cache (Michal Privoznik) [Orabug: 32664432]
• tests: fix virArchFromHost() redefine error (Joe Jin) [Orabug: 32664432]
• qemu: cache host arch separately from virCapsPtr (Daniel P. Berrange) [Orabug: 32664432]
• cpu.c: Check properly for virCapabilitiesGetNodeInfo() retval (Michal Privoznik) [Orabug: 32664432]
• virStorageSourceParseBackingJSONRaw: Parse 'offset' and 'size' attributes (Peter Krempa) [Orabug: 32164351]
• tests: qemu: Add test data for the new element (Peter Krempa) [Orabug: 32164351]
• qemu: Add support for slices of type 'storage' (Peter Krempa) [Orabug: 32164351]
• tests: qemublock: Add cases for creating image overlays on top of disks with (Peter Krempa) [Orabug: 32164351]
• qemu: block: Properly format storage slice into backing store strings (Peter Krempa) [Orabug: 32164351]
• qemu: domain: Store nodenames of slice in status XML (Peter Krempa) [Orabug: 32164351]
• conf: Implement support for of disk source (Peter Krempa) [Orabug: 32164351]
• docs: Document the new sub-element of disk's (Peter Krempa) [Orabug: 32164351]
• qemu: block: forbid creation of storage sources with (Peter Krempa) [Orabug: 32164351]
• qemuDomainValidateStorageSource: Reject unsupported slices (Peter Krempa) [Orabug: 32164351]
• qemuBlockStorageSourceGetFormatRawProps: format 'offset' and 'size' for slice (Peter Krempa) [Orabug: 32164351]
• util: virstoragefile: Add data structure for storing storage source slices (Peter Krempa) [Orabug: 32164351]
• tests: virstorage: Add test data for json specified raw image with offset/size (Peter Krempa) [Orabug: 32164351]
• docs: formatdomain: Close on one of disk examples (Peter Krempa) [Orabug: 32164351]
• qemu: domain: Refactor formatting of node names into status XML (Peter Krempa) [Orabug: 32164351]
• tests: virstorage: Add test cases for 'json:' pseudo-URI without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
• virStorageSourceParseBackingJSON: Prevent arbitrary nesting with format drivers (Peter Krempa) [Orabug: 32164351]
• virStorageSourceParseBackingJSON: Allow 'json:' pseudo URIs without 'file' wrapper (Peter Krempa) [Orabug: 32164351]
• virStorageSourceJSONDriverParser: annotate 'format' drivers (Peter Krempa) [Orabug: 32164351]
• virStorageSourceParseBackingJSON: Move deflattening of json: URIs out of recursion (Peter Krempa) [Orabug: 32164351]
• virStorageSourceParseBackingJSON: Pass around original backing file string (Peter Krempa) [Orabug: 32164351]
• qemu: enable blockdev support (Peter Krempa) [Orabug: 32164351]
• qemu: Instantiate pflash via -machine when using blockdev (Peter Krempa) [Orabug: 32164351]
• qemu: command: Build the 'pflash' drives via -machine (Peter Krempa) [Orabug: 32164351]
• qemu: command: Build -blockdev-s for backing of pflash (Peter Krempa) [Orabug: 32164351]
• qemu: domain: Introduce helper to convert into virStorageSource (Peter Krempa) [Orabug: 32164351]
• qemu: domain: Store virStorageSources representing pflash backing (Peter Krempa) [Orabug: 32164351]
• qemu: command: Extract formatting of -drive for pflash (Peter Krempa) [Orabug: 32164351]
• qemu: capabilities: Add detection of the 'savevm' fix for -blockdev (Peter Krempa) [Orabug: 32164351]
• qemu: qapi: Add support for command features (Peter Krempa) [Orabug: 32164351]
• qemu: caps: Add capability for dynamic 'auto-read-only' support for files (Peter Krempa) [Orabug: 32164351]
• tests: qemucapabilities: Refresh data for unreleased qemu-4.2 on x86_64 (Peter Krempa) [Orabug: 32164351]
• qemu: caps: Base support of 'backingStoreInput' domain feature on QEMU_CAPS_BLOCKDEV (Peter Krempa) [Orabug: 32164351]
• docs: Document support for obeying of on input (Peter Krempa) [Orabug: 32164351]
• conf: domcaps: Add 'backingStoreInput' domain capability (Peter Krempa) [Orabug: 32164351]
• qemu: domcaps: Simplify adding new domaincaps based on qemu caps (Peter Krempa) [Orabug: 32164351]
• domaincaps: Store domain capability features in an array (Peter Krempa) [Orabug: 32164351]
• qemu: domcaps: Initialize all features (Peter Krempa) [Orabug: 32164351]
• domcaps: Add function for initializing domain caps as unsupported (Peter Krempa) [Orabug: 32164351]
• conf: domaincaps: Use virXMLFormatElement in virDomainCapsFormatFeatures (Peter Krempa) [Orabug: 32164351]
• conf: domaincaps: Extract formatting of the subelement (Peter Krempa) [Orabug: 32164351]
• conf: domaincaps: Replace FORMAT_SINGLE macro by a function (Peter Krempa) [Orabug: 32164351]
• conf: capabilities: Modernize virCapabilitiesFormatMemoryBandwidth (Peter Krempa) [Orabug: 32164351]
• conf: caps: Modernize virCapabilitiesFormatCaches (Peter Krempa) [Orabug: 32164351]
• conf: turn virDomainMemtuneFormat void (Peter Krempa) [Orabug: 32164351]
• conf: domain: Split up formatting of and (Peter Krempa) [Orabug: 32164351]
• conf: Rename virDomainCapsFeature to virDomainProcessCapsFeature (Peter Krempa) [Orabug: 32164351]
• conf: storagecaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
• conf: domaincaps: Fix broken attempt at being const-correct (Peter Krempa) [Orabug: 32164351]
• qemu: caps: Make capability filler functions void (Peter Krempa) [Orabug: 32164351]
• util: buffer: Add init macro for automatically setting child XML indent (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Fix inactive external snapshots when backing chain is present (Peter Krempa) [Orabug: 32164351]
• qemu: blockjob: Transfer 'readonly' state of images after active layer block commit (Peter Krempa) [Orabug: 32164351]
• qemu: command: Use XML based disk bus convertor in error message (Peter Krempa) [Orabug: 32164351]
• storagefile: Fill in meta->externalDataStore (Cole Robinson) [Orabug: 32164351]
• storagefile: Add externalDataStore member (Cole Robinson) [Orabug: 32164351]
• storagefile: Split out virStorageSourceNewFromChild (Cole Robinson) [Orabug: 32164351]
• storagefile: Don't access backingStoreRaw directly in FromBackingRelative (Cole Robinson) [Orabug: 32164351]
• storagefile: Fill in meta->externalDataStoreRaw (Cole Robinson) [Orabug: 32164351]
• storagefile: Add externalDataStoreRaw member (Cole Robinson) [Orabug: 32164351]
• storagefile: Fix backing format \0 check (Cole Robinson) [Orabug: 32164351]
• storagefile: Rename qcow2GetExtensions 'format' argument (Cole Robinson) [Orabug: 32164351]
• storagefile: Rename qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
• storagefile: Push extension_end calc to qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
• storagefile: Push 'start' into qcow2GetBackingStoreFormat (Cole Robinson) [Orabug: 32164351]
• storagefile: Use qcowXGetBackingStore directly (Cole Robinson) [Orabug: 32164351]
• storagefile: Drop now unused isQCow2 argument (Cole Robinson) [Orabug: 32164351]
• storagefile: Check version to determine if qcow2 or not (Cole Robinson) [Orabug: 32164351]
• storagefile: qcow1: Let qcowXGetBackingStore fill in format (Cole Robinson) [Orabug: 32164351]
• storagefile: qcow1: Fix check for empty backing file (Cole Robinson) [Orabug: 32164351]
• storagefile: qcow1: Check for BACKING_STORE_OK (Cole Robinson) [Orabug: 32164351]
• qemu: snapshot: Don't update current snapshot until we're done (Peter Krempa) [Orabug: 32164351]
• qemu: block: Replace snapshot transaction action generator (Peter Krempa) [Orabug: 32164351]
• tests: qemumonitor: Add testing for the 'transaction' command and generators (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Add transaction generators for snapshot APIs (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Add transaction generators for dirty bitmap APIs (Peter Krempa) [Orabug: 32164351]
• tests: qemucapabilities: fix 4.2.0 qemucapabilities (Joe Jin) [Orabug: 32164351]
• qemu: checkpoint: Do ACL check prior to snapshot interlocking (Peter Krempa) [Orabug: 32164351]
• qemu: driver: Remove misplaced qemuDomainObjEndJob in qemuDomainCheckpointGetXMLDesc (Peter Krempa) [Orabug: 32164351]
• conf: Drop pointless 'domain' argument from virDomainSnapshotRedefinePrep (Peter Krempa) [Orabug: 32164351]
• conf: Drop pointless 'domain' argument from virDomainCheckpointRedefinePrep (Peter Krempa) [Orabug: 32164351]
• tests: qemucapabilities: Update caps of qemu-4.1 to released version (Peter Krempa) [Orabug: 32164351]
• tests: add qemu capabilities data for qemu 4.2 (Peter Krempa) [Orabug: 32164351]
• lxc: fix compile error (Joe Jin) [Orabug: 32164351]
• qemu: driver: Remove QEMU_ADD_BLOCK_PARAM_LL macro (Peter Krempa) [Orabug: 32164351]
• qemu: driver: Don't return anything from qemuDomainBlockStatsGatherTotals (Peter Krempa) [Orabug: 32164351]
• qemu: driver: Remove pointless macro QEMU_BLOCK_STAT_TOTAL (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Change fields in qemuBlockStats to 'unsigned' (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Refactor cleanup in qemuMonitorJSONGetAllBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Refactor cleanup in qemuMonitorJSONGetOneBlockStatsInfo (Peter Krempa) [Orabug: 32164351]
• qemu: monitor: Refactor cleanup in qemuMonitorJSONBlockStatsCollectData (Peter Krempa) [Orabug: 32164351]
• qemu: Remove stale comment for qemuDomainBlockStats (Peter Krempa) [Orabug: 32164351]
• qemu_blockjob: Remove secdriver metadata for whole backing chain on job completion (Michal Privoznik) [Orabug: 32164351]
• qemu: hotplug: Use VIR_AUTOFREE() instead VIR_FREE for strings (Daniel Henrique Barboza) [Orabug: 32164351]
• qemu: snapshot: Do ACL check prior to checkpoint interlocking (Peter Krempa) [Orabug: 32164351]
• qemuCheckDiskConfigAgainstDomain: Validate disk's SCSI address iff disk is SCSI (Xu Yandong) [Orabug: 32164351]
• qemuSharedDeviceEntryRemove: Free domain name before VIR_DELETE_ELEMENT (Xu Yandong) [Orabug: 32164351]
• qemu_capabilities: Temporarily disable dbus-vmstate capability (Michal Privoznik) [Orabug: 32164351]
• Revert 'qemu: add socket datagram capability' (Michal Privoznik) [Orabug: 32164351]
• tests: qemustatusxml2xml: Fix disk target mess (Peter Krempa) [Orabug: 32164351]
• snapshot: Store both config and live XML in the snapshot domain (Maxiwell S. Garcia) [Orabug: 32164351]
• qemu: formatting XML from domain def choosing the root name (Maxiwell S. Garcia) [Orabug: 32164351]
• qemu: Don't leak domain def when RevertToSnapshot fails (Jiri Denemark) [Orabug: 32164351]
• qemu: Fix regression in snapshot-revert (Eric Blake) [Orabug: 32164351]
• lib: Define and use autofree for virConfPtr (Michal Privoznik) [Orabug: 32164351]
• qemu_conf: Use more of VIR_AUTOUNREF() (Michal Privoznik) [Orabug: 32164351]
• qemu_conf: Use more of VIR_AUTOFREE() (Michal Privoznik) [Orabug: 32164351]
• qemu_conf: Drop a pair of needless 'cleanup' labels (Michal Privoznik) [Orabug: 32164351]
• virhostdev: Don't unref @pcidevs twice (Michal Privoznik) [Orabug: 32164351]
• qemu_conf.c: introduce qemuAddRemoveSharedDeviceInternal (Daniel Henrique Barboza) [Orabug: 32164351]
• qemu_conf.c: introduce qemuAddRemoveSharedDiskInternal (Daniel Henrique Barboza) [Orabug: 32164351]
• qemu_conf.c: introduce qemuAddRemoveSharedHostdevInternal (Daniel Henrique Barboza) [Orabug: 32164351]
• remote: fix UNIX socket path being incorrectly built for libvirtd (eater) [Orabug: 32164351]
• lib: Grab write lock when modifying list of domains (Michal Privoznik) [Orabug: 32164351]
• qemu: reset VM id after external devices stop (Marc-Andre Lureau) [Orabug: 32164351]
• qemu: add dbus-vmstate capability (Marc-Andre Lureau) [Orabug: 32164351]
• qemu: add socket datagram capability (Marc-Andre Lureau) [Orabug: 32164351]
• tests: fix xml2xml tpm-emulator.xml test (Marc-Andre Lureau) [Orabug: 32164351]
• qemu: migration: Switch to blockdev mode for non-shared storage migration (Peter Krempa) [Orabug: 32164351]
• qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopy (Peter Krempa) [Orabug: 32164351]
• qemu: migration: Refactor cleanup in qemuMigrationSrcNBDStorageCopyBlockdev (Peter Krempa) [Orabug: 32164351]
• qemu: Defer support checks for external active snapshots to blockdev code or qemu (Peter Krempa) [Orabug: 32164351]
• qemu: Add -blockdev support for external snapshots (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Skip overlay file creation/interogation if unsupported (Peter Krempa) [Orabug: 32164351]
• qemu: Merge use of 'reuse' flag in qemuDomainSnapshotDiskPrepareOne (Peter Krempa) [Orabug: 32164351]
• qemu: Disband qemuDomainSnapshotCreateSingleDiskActive (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Rename external disk snapshot handling functions (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Move error preservation to qemuDomainSnapshotDiskDataCleanup (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Save status and config XMLs only on success (Peter Krempa) [Orabug: 32164351]
• qemu: snapshot: Fix image lock handling when taking a snapshot (Peter Krempa) [Orabug: 32164351]
• qemu: driver: Fix shallow non-reuse block copy (Peter Krempa) [Orabug: 32164351]
• qemu: Explicitly pass backing store to qemuBuildStorageSourceChainAttachPrepareBlockdevTop (Peter Krempa) [Orabug: 32164351]
• qemu: block: explicitly pass backing store to qemuBlockStorageSourceAttachPrepareBlockdev (Peter Krempa) [Orabug: 32164351]
• qemu: command: Refactor qemuBuildStorageSourceChainAttachPrepareBlockdevInternal (Peter Krempa) [Orabug: 32164351]
• qemu: block: Explicitly specify backingStore when creating format layer props (Peter Krempa) [Orabug: 32164351]
• qemu: block: Unify conditions to format backing store of format node definition (Peter Krempa) [Orabug: 32164351]
• qemu: Prevent storage causing too much nested XML (Peter Krempa) [Orabug: 32164351]
• qemu: domain: Refactor cleanup in qemuDomainDetermineDiskChain (Peter Krempa) [Orabug: 32164351]
• qemu: hotplug: Setup disk throttling with blockdev (Peter Krempa) [Orabug: 32164351]
• qemu: hotplug: Use VIR_AUTOFREE in qemuDomainAttachDiskGeneric (Peter Krempa) [Orabug: 32164351]
• qemu: hotplug: Simplify cleanup in qemuDomainChangeMediaLegacy (Peter Krempa) [Orabug: 32164351]
• qemu: Fix qemuDomainObjTaint with virtlogd (Jiri Denemark) [Orabug: 32164351]
• qemu: monitor: Fix formatting of 'offset' in qemuMonitorJSONSaveMemory (Peter Krempa) [Orabug: 32164351]
• tests: qemublock: Use bigger numbers as dummy capacity/physical (Peter Krempa) [Orabug: 32164351]
• qemu: block: Use correct type when creating image size JSON entries (Peter Krempa) [Orabug: 32164351]
• Exadata: protect vNUMA/SMT from artificially injected faults (Wim ten Have) [Orabug: 32708041]
• virnetserver: fix some memory leaks in virNetTLSContextReloadForServer (Jin Yan)
• virt-admin: Introduce command srv-update-tls (Zhang Bo) [Orabug: 32768102]
• admin: Introduce virAdmServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]
• tls: Add a mutex lock on 'tlsCtxt' (Zhang Bo) [Orabug: 32768102]
• virnetserver: Introduce virNetServerUpdateTlsFiles (Zhang Bo) [Orabug: 32768102]

[5.7.0-27.el8]

• Exadata: protect libvirt hugepage acquisition from QEMU async init (Wim ten Have) [Orabug: 32561685]

[5.7.0-26.el8]

• exadata: Fix autonomous hugepage acquisition barrier hang (Wim ten Have) [Orabug: 32537538]
• exadata: Fix CPU Packing when out of pCPUs (Wim ten Have) [Orabug: 32527311]

[5.7.0-25.el8]

• exadata: force a host CPUs reserved pCPU threshold (Wim ten Have) [Orabug: 32516090]

[5.7.0-24.el8]

• exadata: Add configurable libvirtd mlockall support (Wim ten Have) [Orabug: 32479237]
• exadata: hint a configurable number of memory init threads to qemu (Wim ten Have) [Orabug: 32460334]
• Exadata: domain group should allow for asymmetric creation (Wim ten Have) [Orabug: 32060622]

[5.7.0-23.el8]

• util: remove unneeded cleanup labels (Wim ten Have) [Orabug: 32399255]
• virnuma: Don't work around numa_node_to_cpus() for non-existent nodes (Wim ten Have) [Orabug: 32379098]

[5.7.0-22.el8]

• build: add dependency to help patch tooling (Menno Lageman) [Orabug: 32284540]
• Exadata: fix active guest dgroup-delete requests (Wim ten Have) [Orabug: 32095306]
• Exadata: fix a rogue Domain Groups dgroup-undefine flaw (Wim ten Have) [Orabug: 31945084]

[2.7.0-21.el8]

• exadata: Fix the validation when defining domain groups (Wim ten Have) [Orabug: 32085856]
• qemu: improve error message when guest vcpu count exceeds domain group limit (Menno Lageman) [Orabug: 31985111]
• qemu: Autonomous hugepage acquisition for 2-MiB and 1-GiB guest memoryBacking (Wim ten Have)
• qemu: Fix a qemuMemReleaseHostHugepages state error (Wim ten Have) [Orabug: 32069203]
• qemu: avoid guest CPU process handling if exadataConfig is disabled (Wim ten Have) [Orabug: 32053696]
• domain_conf: Relax SCSI addr used check (Michal Privoznik) [Orabug: 31386162]
• domain_conf: Make virDomainDeviceFindSCSIController accept virDomainDeviceDriveAddress struct (Michal Privoznik) [Orabug: 31386162]
• qemu: remove use of qemuDomainObjBeginJobWithAgent() (Jonathon Jongsma) [Orabug: 31990187] {CVE-2019-20485}
• qemu: agent: set ifname to NULL after freeing (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}
• rpc: require write acl for guest agent in virDomainInterfaceAddresses (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}
• rpc: add support for filtering @acls by uint params (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}
• rpc: gendispatch: handle empty flags (Jan Tomko) [Orabug: 31964426] {CVE-2020-25637}

[5.7.0-19.el8]

• qemu: Verify use of hugepages when releasing its acquired status (Wim ten Have) [Orabug: 31839035]
• qemu: Autonomous hugepages acquisition and release (Wim ten Have) [Orabug: 31367986]

[5.7.0-17.el8]

• qemu: Fix cpu boundary checks when starting or configuring guest domains. (Wim ten Have) [Orabug: 31469231]
• libvirt: Allocate max possible CPUs for QEMU to prepare guest memory (Wim ten Have) [Orabug: 31064560]

[5.7.0-16.el8]

• qemu: format 'x-aw-bits' on intel-iommu command line (Menno Lageman)
• qemu: format address wdith on intel-iommu command line (Menno Lageman)
• conf: add address width attribute to iommu (Menno Lageman)
• tests: add tests for host-phys-bits KVM feature (Menno Lageman) [Orabug: 31354547]
• qemu: support host-phys-bits KVM feature (Menno Lageman) [Orabug: 31374547]
• storage: Fix daemon crash on lookup storagepool by targetpath (Yi Li) [Orabug: 31439483] {CVE-2020-10703}

[5.7.0-15.el8]

• qemu: Escape the qemu driver systemd DOT hoax (Wim ten Have) [Orabug: 31380815]

[5.7.0-14.el8]

• vmx: make 'fileName' optional for CD-ROMs (Pino Toscano) [Orabug: 31350200]
• vmx: shortcut earlier few 'ignore' cases in virVMXParseDisk() (Pino Toscano) [Orabug: 31350200]
• domain group: Fix a potential SEGV while restoring guest domains (Wim ten Have) [Orabug: 31285615]
• cpu_map: Distinguish Cascadelake-Server from Skylake-Server (Jiri Denemark) [Orabug: 31214897]
• cpu_map: Add more -noTSX x86 CPU models (Christian Ehrhardt) [Orabug: 31214897]
• qemuDomainGetStatsIOThread: Don't leak array with 0 iothreads (Peter Krempa) [Orabug: 31251756] {CVE-2020-12430}

[5.7.0-13.el8]

• domain groups: Fix multiple Domain Group vCPU administration flaws (Wim ten Have) [Orabug: 31145304]
• qemu: fix missing #if defined(ENABLE_EXADATA) (Menno Lageman)
• build: Fix qemu-submodule-init syntax-check issue (Wim ten Have)
• libvirt: Fix various introduced Fedora/RHEL build violations (Wim ten Have) [Orabug: 31143337]
• qemu: don't hold both jobs for suspend (Jonathon Jongsma) [Orabug: 31073098] {CVE-2019-20485}
• domain groups: qemu driver error refers to pCPUs instead of vCPUs (Wim ten Have) [Orabug: 31075757]
• node_device_conf: Don't leak @physical_function in virNodeDeviceGetPCISRIOVCaps (Jiang Kun) [Orabug: 31070337]

[5.7.0-12.el8]

• libvirt: vNUMA automatic host paritioning allows erroneous vcpu settings (Wim ten Have) [Orabug: 31050313]
• remote: do not stop libvirtd after period of inactivity (Menno Lageman) [Orabug: 31003707]
• remote: do not use socket activation by default (Menno Lageman) [Orabug: 31003707]
• qemu driver: handle targetNode under memory hot-plug operations (Wim ten Have) [Orabug: 31009716]
• domain groups: refresh dgbase host capabilities prior to defining a new group (Wim ten Have) [Orabug: 31026069]
• domain groups: Always cleanup system.slice controlled hugepage reservations (Wim ten Have) [Orabug: 31025853]
• domain groups: Enable DGs upon fresh groups arrival (Wim ten Have) [Orabug: 31021247]
• domain groups: Skip undefined domain groups when validating lists (Wim ten Have) [Orabug: 31030117]

[5.7.0-11.el8]

• domain groups: Add functionality to control NUMA node alignment (Wim ten Have) [Orabug: 30988105]
• domain groups: A rename should always update active and config domain definitions (Wim ten Have) [Orabug: 30999730]

[5.7.0-10.el8]

• domain groups: refresh dgbase depending host capabilities before rendering the cpuguestmask (Wim ten Have) [Orabug: 30987361]
• conf: domain group validation errors should print correct group info (Menno Lageman) [Orabug: 30988428]
• qemu: reserve hugepages when memoryBacking when live attaching memory (Wim ten Have) [Orabug: 30985510]
• domain groups: avoid virDomainGroupInit if exadataConfig is disabled (Wim ten Have) [Orabug: 30985907]

[5.7.0-9.el8]

• vNUMA: distinguish standard and vNUMA memory 'setmaxmem' operations (Wim ten Have) [Orabug: 30894536]

[5.7.0-8.el8]

• domain groups: End Of BETA (Wim ten Have)
• domaingroups: ExaData Domain Groups POC (Wim ten Have)
• domaingroup: preliminary virsh support for domain groups - drop #4 (Menno Lageman)
• tests: add various tests to exercise vNUMA host partitioning (Wim ten Have) [Orabug: 29720293]
• qemu: driver changes for new vNUMA Host and Nodeset partitioning (Wim ten Have) [Orabug: 29720293]
• XML definitions for guest vNUMA and parsing routines (Wim ten Have) [Orabug: 29720293]
• Revert 'exadata: can not configure shared memory hosted disk devices for vhostmd.service' (Menno Lageman)
• qemu: Forcibly mknod() even if it exists (Michal Privoznik)

[5.7.0-5.el8]

• exadata: can not configure shared memory hosted disk devices for vhostmd.service (Menno Lageman) [Orabug: 30598065]

[5.7.0-4.el8]

• build: skip copyright check for gnulib (Menno Lageman)
• Revert 'network: pull global chain init into separate method' (Menno Lageman) [Orabug: 30611188]
• Revert 'network: add more debugging of firewall chain creation' (Menno Lageman) [Orabug: 30611188]
• Revert 'network: delay global firewall setup if no networks are running' (Menno Lageman) [Orabug: 30611188]
• qemu-submodule-init: Add Git submodule init script (Karl Heubaum) [Orabug: 30796221]

[5.7.0-3.el8]

• Add VMware esx support (Menno Lageman) [Orabug: 30449929]

[5.7.0-2.el8]

• enable VMware hypervisor driver

libvirt-dbus [1.3.0]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.2.0-3]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[1.2.0-2]

• util: fix virtDBusUtilDecodeUUID (rhbz#1647823)

[1.2.0-1]

• Rebased to libvirt-dbus-1.2.0 (rhbz#1630196)

[1.0.0-1]

• Rebase from Fedora

libvirt-python [5.7.0-44.el8]

• Bump version number to 5.7.0-44 to match libvirt (Karl Heubaum)

[5.7.0-42.el8]

• Bump version number to 5.7.0-42 to match libvirt (Karl Heubaum)

[5.7.0-41.el8]

• Bump version number to 5.7.0-41 to match libvirt (Karl Heubaum)

[5.7.0-40.el8]

• Bump version number to 5.7.0-40 to match libvirt (Karl Heubaum)

[5.7.0-39.el8]

• Bump version number to 5.7.0-39 to match libvirt (Karl Heubaum)

[5.7.0-38.el8]

• Bump version number to 5.7.0-38 to match libvirt (Karl Heubaum)

[5.7.0-37.el8]

• Bump version number to 5.7.0-37 to match libvirt (Karl Heubaum)

[5.7.0-36.el8]

• Bump version number to 5.7.0-36 to match libvirt (Karl Heubaum)

[5.7.0-34.el8]

• libvirt-python.spec: Bump 'Obsoletes' version number for libvirt-python (Karl Heubaum) [Orabug: 34185868]

[5.7.0-1.el8]

• libvirt-python.spec: Add a .spec file for libvirt-python

nbdkit [1.16.2-4.0.1]

• Replace upstream references within the description tag

[1.16.2]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.16.2]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[1.4.2-5]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[1.4.2-4]

• Remove misguided LDFLAGS hack which removed server hardening. https://bugzilla.redhat.com/show_bug.cgi?id=1624149#c6 resolves: rhbz#1624149

[1.4.2-3]

• Use platform-python resolves: rhbz#1659159

[1.4.2-2]

• Add Enhanced Python error reporting resolves: rhbz#1614750.
• Use copy-patches.sh script.

[1.4.2-1]

• New stable version 1.4.2.

[1.4.1-3]

• Enable VDDK plugin on x86-64 only.

[1.4.1-1]

• New upstream version 1.4.1.
• Small refactorings in the spec file.

[1.4.0-1]

• New upstream version 1.4.0.
• New plugins: random, zero.
• New bash tab completion subpackage.
• Remove unused build dependencies.

[1.2.4-3]

• Add all upstream patches since 1.2.4 was released.

[1.2.4-2]

• Add all upstream patches since 1.2.4 was released.

[1.2.4-2]

• Disable plugins and filters that we do not want to ship in RHEL 8.

[1.2.4-1]

• New stable version 1.2.4.
• Remove upstream patches.
• Enable tarball signatures.
• Add upstream patch to fix tests when guestfish not available.

[1.2.3-1]

• New stable version 1.2.3.
• Add patch to work around libvirt problem with relative socket paths.
• Add patch to fix the xz plugin test with recent guestfish.

[1.2.2-1]

• New stable version 1.2.2.

[1.2.1-1]

• New stable version 1.2.1.

[1.2.0-1]

• Move to stable branch version 1.2.0.

[1.1.28-5]

• Escape macros in %changelog

[1.1.28-4]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[1.1.28-3]

• Switch to %ldconfig_scriptlets

[1.1.28-2]

• Run a simplified test suite on all arches.

[1.1.28-1]

• New upstream version 1.1.28.
• Add two new filters to nbdkit-basic-filters.

[1.1.27-2]

• Rebuilt for switch to libxcrypt

[1.1.27-1]

• New upstream version 1.1.27.
• Add new subpackage nbdkit-basic-filters containing new filters.

[1.1.26-2]

• Rebuild against updated Ruby.

[1.1.26-1]

• New upstream version 1.1.26.
• Add new pkg-config file and dependency.

[1.1.25-1]

• New upstream version 1.1.25.

[1.1.24-1]

• New upstream version 1.1.24.
• Add tar plugin (new subpackage nbdkit-plugin-tar).

[1.1.23-1]

• New upstream version 1.1.23.
• Add example4 plugin.
• Python3 tests require libguestfs so disable on s390x.

[1.1.22-1]

• New upstream version 1.1.22.
• Enable tests on Fedora.

[1.1.20-1]

• New upstream version 1.1.20.
• Add nbdkit-split-plugin to basic plugins.

[1.1.19-2]

• OCaml 4.06.0 rebuild.

[1.1.19-1]

• New upstream version 1.1.19.
• Combine all the simple plugins in %{name}-basic-plugins.
• Add memory and null plugins.
• Rename the example plugins subpackage.
• Use %license instead of %doc for license file.
• Remove patches now upstream.

[1.1.18-4]

• Fix Python 3 builds / RHEL macros (RHBZ#1404631).

[1.1.18-3]

• New upstream version 1.1.18.
• Add NBD forwarding plugin.
• Add libselinux-devel so that SELinux support is enabled in the daemon.
• Apply all patches from upstream since 1.1.18.

[1.1.16-2]

• New upstream version 1.1.16.
• Disable python3 plugin on RHEL/EPEL <= 7.
• Only ship on x86_64 in RHEL/EPEL <= 7.

[1.1.15-1]

• New upstream version 1.1.15.
• Enable TLS support.

[1.1.14-1]

• New upstream version 1.1.14.

[1.1.13-1]

• New upstream version 1.1.13.
• Remove patches which are all upstream.
• Remove grubby hack, should not be needed with modern supermin.

[1.1.12-13]

• Rebuild for OCaml 4.05.0.

[1.1.12-12]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[1.1.12-11]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.1.12-10]

• Rebuild for OCaml 4.04.2.

[1.1.12-9]

• Perl 5.26 rebuild

[1.1.12-8]

• Rebuild for OCaml 4.04.1.

[1.1.12-7]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.1.12-6]

• Rebuilt for https://fedoraproject.org/wiki/Changes/Ruby_2.4

[1.1.12-5]

• Rebuild for Python 3.6 update.

[1.1.12-4]

• Fix python3 subpackage so it really uses python3 (RHBZ#1404631).

[1.1.12-3]

• Rebuild for OCaml 4.04.0.

[1.1.12-2]

• Compile Python 2 and Python 3 versions of the plugin.

[1.1.12-1]

• New upstream version 1.1.12
• Enable Ruby plugin.
• Disable tests on Rawhide because libvirt is broken again (RHBZ#1344016).

[1.1.11-10]

• Add another upstream patch since 1.1.11.

[1.1.11-9]

• Add all patches upstream since 1.1.11 (fixes RHBZ#1336758).

[1.1.11-7]

• Perl 5.24 rebuild

[1.1.11-6]

• When tests fail, dump out test-suite.log so we can debug it.

[1.1.11-5]

• Don't run tests on x86, because kernel is broken there (https://bugzilla.redhat.com/show_bug.cgi?id=1302071)

[1.1.11-4]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.1.11-3]

• Add support for newstyle NBD protocol (RHBZ#1297100).

[1.1.11-1]

• New upstream version 1.1.11.

[1.1.10-3]

• OCaml 4.02.3 rebuild.

[1.1.10-2]

• Enable libguestfs plugin on aarch64.

[1.1.10-1]

• New upstream version.
• Enable now working OCaml plugin (requires OCaml >= 4.02.2).

[1.1.9-6]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.1.9-5]

• Perl 5.22 rebuild

[1.1.9-4]

• Enable debugging messages when running make check.

[1.1.9-3]

• Perl 5.22 rebuild

[1.1.9-2]

• New upstream version 1.1.9.
• Add the streaming plugin.
• Include fix for streaming plugin in 1.1.9.

[1.1.8-4]

• Rebuild for updated Perl in Rawhide.
• Workaround for broken libvirt (RHBZ#1138604).

[1.1.8-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[1.1.8-1]

• New upstream version 1.1.8.
• Add support for cURL, and new nbdkit-plugin-curl package.

[1.1.7-1]

• New upstream version 1.1.7.
• Remove patches which are now all upstream.

[1.1.6-5]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.1.6-4]

• libguestfs is available only on selected arches

[1.1.6-3]

• Backport some upstream patches, fixing a minor bug and adding more tests.
• Enable the tests since kernel bug is fixed.

[1.1.6-1]

• New upstream version 1.1.6.

[1.1.5-2]

• New upstream version 1.1.5.
• Enable the new Python plugin.
• Perl plugin man page moved to section 3.
• Perl now requires ExtUtils::Embed.

[1.1.4-1]

• New upstream version 1.1.4.
• Enable the new Perl plugin.

[1.1.3-1]

• New upstream version 1.1.3 which fixes some test problems.
• Disable tests because Rawhide kernel is broken (RHBZ#991808).
• Remove a single quote from description which confused emacs.
• Remove patch, now upstream.

[1.1.2-4]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.1.2-3]

• Fix segfault when IPv6 client is used (RHBZ#986601).

[1.1.2-2]

• New development version 1.1.2.
• Disable the tests on Fedora <= 18.

[1.1.1-1]

• New development version 1.1.1.
• Add libguestfs plugin.
• Run the test suite.

[1.0.0-4]

• Initial release.

netcf perl-Sys-Virt [4.5.0-5]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[4.5.0-4]

• Fix typed parameter memory handling (rhbz #1602346)
• Fix missing NWFilterBinding module (rhbz #1615841)

[4.5.0-3]

• Included BuildRequire: git to fix a building issue

[4.5.0-2]

• Fix typed parameter memory handling (rhbz#1602346)

[4.5.0-1]

• Update to 4.5.0 release

[4.4.0-2]

• Perl 5.28 rebuild

[4.2.0-1]

• Update to 4.2.0 release

[4.1.0-1]

• Update to 4.1.0 release

[4.0.0-3]

• Add build-require gcc

[4.0.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[4.0.0-1]

• Update to 4.0.0 release

[3.9.1-1]

• Update to 3.9.1 release

[3.9.0-1]

• Update to 3.9.0 release

[3.8.0-1]

• Update to 3.8.0 release

[3.7.0-1]

• Update to 3.7.0 release

[3.5.0-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[3.5.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[3.5.0-1]

• Update to 3.5.0 release

[3.4.0-2]

• Perl 5.26 rebuild

[3.4.0-1]

• Update to 3.4.0 release

[3.3.0-1]

• Update to 3.3.0 release

[3.2.0-1]

• Update to 3.2.0 release

[3.1.0-1]

• Update to 3.1.0 release

[3.0.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[3.0.0-1]

• Update to 3.0.0 release

[2.5.0-1]

• Update to 2.5.0 release

[2.4.0-1]

• Update to 2.4.0 release

[2.3.0-1]

• Update to 2.3.0 release

[2.2.0-1]

• Update to 2.2.0 release

[2.1.0-1]

• Update to 2.1.0 release

[2.0.0-1]

• Update to 2.0.0 release

[1.3.5-1]

• Update to 1.3.5 release

[1.3.4-2]

• Perl 5.24 rebuild

[1.3.4-1]

• Update to 1.3.4 release

[1.3.3-1]

• Update to 1.3.3 release

[1.3.2-1]

• Update to 1.3.2 release

[1.3.1-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.3.1-1]

• Update to 1.3.1 release

qemu-kvm [4.2.1-35.el8]

• hw/vfio/pci-quirks: Sanitize capability pointer (Alex Williamson) [Orabug: 37096901]
• hw/vfio/pci-quirks: Support alternate offset for GPUDirect Cliques (Alex Williamson) [Orabug: 37096901]
• hw/sd/sdhci: Do not update TRNMOD when Command Inhibit (DAT) is set (Philippe Mathieu-Daude) [Orabug: 36659053] {CVE-2024-3447}

[4.2.1-34.el8]

• multifd: fix the multifd initialization (Elena Ufimtseva) [Orabug: 36598610]
• hw/scsi/scsi-generic: Fix io_timeout property not applying (Lorenz Brun) [Orabug: 36604206]
• scsi: make io_timeout configurable (Hannes Reinecke) [Orabug: 36604206]
• target/i386/monitor: synchronize cpu state for lapic info (Dongli Zhang) [Orabug: 36607762]

[4.2.1-32.el8]

• Document CVEs as fixed (Mark Kanda) [Orabug: 36455470] [Orabug: 36455480] [Orabug: 36455529] [Orabug: 36455489] [Orabug: 36455500] [Orabug: 36455512] [Orabug: 36455520] {CVE-2023-4135} {CVE-2023-3255} {CVE-2023-6683} {CVE-2023-40360} {CVE-2023-42467} {CVE-2024-26327} {CVE-2024-24474}
• hw/pvrdma: Protect against buggy or malicious guest driver (Yuval Shaia) [Orabug: 35250119] {CVE-2023-1544}
• hw/pflash_cfi01: allow smaller backing devices in postload_update_cb() (Mark Kanda) [Orabug: 36378764]
• hw/block/pflash: Check return value of blk_pwrite() (Mansour Ahmadi) [Orabug: 36378764]
• net: Update MemReentrancyGuard for NIC (Akihiko Odaki) [Orabug: 36421467] {CVE-2023-3019}
• net: Provide MemReentrancyGuard * to qemu_new_nic() (Akihiko Odaki) [Orabug: 36421467] {CVE-2023-3019}
• lsi53c895a: disable reentrancy detection for MMIO region, too (Thomas Huth) [Orabug: 36425307] {CVE-2021-3750}
• memory: stricter checks prior to unsetting engaged_in_io (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• async: avoid use-after-free on re-entrancy guard (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• apic: disable reentrancy detection for apic-msi (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• raven: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• bcm2835_property: disable reentrancy detection for iomem (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• lsi53c895a: disable reentrancy detection for script RAM (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• hw: replace most qemu_bh_new calls with qemu_bh_new_guarded (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• checkpatch: add qemu_bh_new/aio_bh_new checks (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• async: Add an optional reentrancy guard to the BH API (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• memory: prevent dma-reentracy issues (Alexander Bulekov) [Orabug: 36425307] {CVE-2021-3750}
• util/async: add a human-readable name to BHs for debugging (Stefan Hajnoczi) [Orabug: 36425307] {CVE-2021-3750}
• io: remove io watch if TLS channel is closed during handshake (Daniel Berrange) [Orabug: 35595204] {CVE-2023-3354}
• tests/qtest: ahci-test: add test exposing reset issue with pending callback (Fiona Ebner) [Orabug: 36327659] {CVE-2023-5088}
• hw/ide: reset: cancel async DMA operation before resetting state (Fiona Ebner) [Orabug: 36327659] {CVE-2023-5088}
• accel/tcg: fix race in cpu_exec_step_atomic (bug 1863025) (Alex Bennee) [Orabug: 36327651] {CVE-2020-24165}
• physmem: add missing memory barrier (Paolo Bonzini) [Orabug: 35886091]
• qemu-coroutine-lock: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
• aio-wait: switch to smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
• edu: add smp_mb__after_rmw() (Paolo Bonzini) [Orabug: 35886091]
• qemu-thread-win32: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35886091]
• qemu-thread-posix: cleanup, fix, document QemuEvent (Paolo Bonzini) [Orabug: 35886091]
• qatomic: add smp_mb__before/after_rmw() (Paolo Bonzini) [Orabug: 35886091]
• aio_wait_kick: add missing memory barrier (Emanuele Giuseppe Esposito) [Orabug: 35886091]
• hw/smbios: Fix core count in type4 (Zhao Liu) [Orabug: 35876036]
• hw/smbios: Fix thread count in type4 (Zhao Liu) [Orabug: 35876036]
• hw/smbios: Fix smbios_smp_sockets caculation (Zhao Liu) [Orabug: 35876036]
• machine: Add helpers to get cores/threads per socket (Zhao Liu) [Orabug: 35876036]
• machine: move dies from X86MachineState to CpuTopology (Paolo Bonzini) [Orabug: 35876036]
• machine: move SMP initialization from vl.c (Paolo Bonzini) [Orabug: 35876036]
• machine: move UP defaults to class_base_init (Paolo Bonzini) [Orabug: 35876036]
• virtio-crypto: verify src&dst buffer length for sym request (zhenwei pi) [Orabug: 35724113] {CVE-2023-3180}
• hw/scsi/lsi53c895a: Fix reentrancy issues in the LSI controller (CVE-2023-0330) (Thomas Huth) [Orabug: 35724112] {CVE-2023-0330}

[4.2.1-27.1.el8]

• kvm: Atomic memslot updates (David Hildenbrand) [Orabug: 35719844]
• KVM: keep track of running ioctls (Emanuele Giuseppe Esposito) [Orabug: 35719844]
• accel: introduce accelerator blocker API (Emanuele Giuseppe Esposito) [Orabug: 35719844]
• KVM: Use a big lock to replace per-kml slots_lock (Peter Xu) [Orabug: 35719844]

[4.2.1-27.el8]

• hw/arm/virt: Add nvdimm hotplug support (Shameer Kolothum) [Orabug: 35505663]
• hw/arm/virt: Add nvdimm hot-plug infrastructure (Kwangwoo Lee) [Orabug: 35505663]
• nvdimm: Use configurable ACPI IO base and size (Kwangwoo Lee) [Orabug: 35505663]
• target/i386: define a new MSR based feature word - FEAT_PERF_CAPABILITIES (Like Xu) [Orabug: 35370615]

[4.2.1-26.el8]

• migration: check magic value for deciding the mapping of channels (Manish Mishra) [Orabug: 34735462]
• io: Add support for MSG_PEEK for socket channel (Manish Mishra) [Orabug: 34735462]
• migration: Move channel setup out of postcopy_try_recover() (Peter Xu) [Orabug: 34735462]
• vdpa: commit all host notifier MRs in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
• vhost: configure all host notifiers in a single MR transaction (Mike Longpeng) [Orabug: 35252234]
• vhost: simplify vhost_dev_enable_notifiers (Mike Longpeng) [Orabug: 35252234]
• pcie: Do not update hotplugged device power in RUN_STATE_INMIGRATE state (Annie Li) [Orabug: 35055290]
• qga/win32: Use rundll for VSS installation (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
• qga/win32: Remove change action from MSI installer (Konstantin Kostiuk) [Orabug: 35206108] {CVE-2023-0664}
• hw/display/qxl: Assert memory slot fits in preallocated MemoryRegion (Philippe Mathieu-Daude) [Orabug: 34846087]
• hw/display/qxl: Avoid buffer overrun in qxl_phys2virt (CVE-2022-4144) (Philippe Mathieu-Daude) [Orabug: 34846087] {CVE-2022-4144}
• hw/display/qxl: Pass requested buffer size to qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
• hw/display/qxl: Document qxl_phys2virt() (Philippe Mathieu-Daude) [Orabug: 34846087]
• hw/display/qxl: Have qxl_log_command Return early if no log_cmd handler (Philippe Mathieu-Daude) [Orabug: 34846087]
• virtio-blk: On restart, process queued requests in the proper context (Sergio Lopez) [Orabug: 35060530]
• virtio-blk: Refactor the code that processes queued requests (Sergio Lopez) [Orabug: 35060530]
• hw/intc/ioapic: Update KVM routes before redelivering IRQ, on RTE update (David Woodhouse) [Orabug: 35219223]
• modules: load modules from /var/run/qemu/ directory firstly (Siddhi Katage) [Orabug: 34867783]
• qemu.spec: Add post-install script for block storage modules (Siddhi Katage) [Orabug: 34867783]
• qemu.spec: Enable '-module-upgrades' for OL7 (Siddhi Katage) [Orabug: 34867783]
• module: increase dirs array size by one (Bruce Rogers) [Orabug: 34867783]
• modules: load modules from versioned /var/run dir (Christian Ehrhardt) [Orabug: 34867783]
• blockjob: Fix crash with IOthread when block commit after snapshot (Michael Qiu) [Orabug: 35118668]

[4.2.1-25.el8]

• target/i386/kvm: get and put AMD pmu registers (Dongli Zhang) [Orabug: 34641255]
• i386/kvm: fix a use-after-free when vcpu plug/unplug (Pan Nengyuan) [Orabug: 34859902]
• memory: batch allocate ioeventfds[] in address_space_update_ioeventfds() (Stefan Hajnoczi) [Orabug: 34538900]
• virtio-blk: Fix clean up of host notifiers for single MR transaction (Mark Mielke) [Orabug: 34538900]
• virtio-scsi: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
• virtio-scsi: Set host notifiers and callbacks separately (Greg Kurz) [Orabug: 34538900]
• virtio-blk: Configure all host notifiers in a single MR transaction (Greg Kurz) [Orabug: 34538900]
• virtio-blk: Fix rollback path in virtio_blk_data_plane_start() (Greg Kurz) [Orabug: 34538900]
• event_notifier: Set ->initialized earlier in event_notifier_init() (Greg Kurz) [Orabug: 34538900]
• virtio-scsi: don't process IO on fenced dataplane (Maxim Levitsky) [Orabug: 34538900]
• virtio-scsi: don't uninitialize queues that we didn't initialize (Maxim Levitsky) [Orabug: 34538900]
• hw/arm/virt: build SMBIOS 19 table (Mihai Carabas)

[4.2.1-24.el8]

• hw/display/ati_2d: Fix buffer overflow in ati_2d_blt (CVE-2021-3638) (Philippe Mathieu-Daude) [Orabug: 33930374] {CVE-2021-3638}
• tests/acpi: virt: update ACPI MADT and FADT binaries (Miguel Luis)
• acpi: arm/virt: madt: bump to revision 4 accordingly to ACPI 6.0 Errata A (Miguel Luis)
• acpi: arm/virt: madt: use build_append_int_noprefix() API to compose MADT table (Igor Mammedov)
• acpi: madt: arm/x86: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov)
• hw/arm/virt-acpi-build:Remove dead assignment in build_madt() (Chen Qun)
• acpi: build_fadt: adapt FADT table names (Miguel Luis)
• acpi: fadt: support revision 6.0 of the ACPI specification (Miguel Luis)
• tests/acpi: virt: allow acpi MADT and FADT changes (Miguel Luis)
• Document CVE-2022-3165 as not applicable (Mark Kanda) [Orabug: 34713999] {CVE-2022-3165}
• Document CVE-2022-1050 as not applicable (Mark Kanda) [Orabug: 34132133] {CVE-2022-1050}
• hw/acpi/erst.c: Fix memory handling issues (Christian A. Ehrhardt) [Orabug: 34779472] {CVE-2022-4172}
• vhost-vdpa: fix assert !virtio_net_get_subqueue(nc)->async_tx.elem in virtio_net_reset (Si-Wei Liu)
• net/vhost-vdpa.c: Fix clang compilation failure (Peter Maydell)
• vhost-vdpa: allow passing opened vhostfd to vhost-vdpa (Si-Wei Liu)
• hw/acpi/aml-build: Improve scalability of PPTT generation (Yanan Wang)
• tests/data/acpi/virt: update empty file for PPTT (Miguel Luis)
• hw/arm/virt-acpi-build: Generate PPTT table (Yanan Wang)
• tests/data/acpi/virt: Add an empty expected file for PPTT (Yanan Wang)
• hw/acpi/aml-build: Add PPTT table (Andrew Jones)
• hw/acpi/aml-build: Add Processor hierarchy node structure (Yanan Wang)
• machine: Add SMP Sockets in CpuTopology (Babu Moger)
• bios-tables-test: generate table for virt/DBG2 (Miguel Luis)
• hw/arm/virt_acpi_build: Generate DBG2 table (Eric Auger)
• tests/acpi: Add void table for virt/DBG2 bios-tables-test (Eric Auger)
• tests/acpi: virt: update ACPI GTDT binaries (Miguel Luis) [Orabug: 34711916]
• acpi: arm/virt: build_gtdt: fix invalid 64-bit physical addresses (Miguel Luis) [Orabug: 34711916]
• tests/acpi: virt: allow acpi GTDT changes (Miguel Luis) [Orabug: 34711916]
• acpi: fix OEM ID/OEM Table ID padding (Igor Mammedov) [Orabug: 34711916]
• acpi: arm/virt: build_gtdt: use acpi_table_begin()/acpi_table_end() instead of build_header() (Igor Mammedov) [Orabug: 34711916]
• acpi: add helper routines to initialize ACPI tables (Igor Mammedov) [Orabug: 34711916]
• acpi: declare the default assignable value for the ACPI table header (Miguel Luis) [Orabug: 34711916]

[4.2.1-22.el8]

• Revert 'block: Set the name of BlockBackend if possible' (Joe Jin) [Orabug: 34841102]
• Revert 'iotests: Adjust 186.out to account for 'null' node-name' (Joe Jin) [Orabug: 34841102]

[4.2.1-21.el8]

• qemu-kvm.spec: Fix the qemu-regdump sos report plugin path (Mark Kanda) [Orabug: 34680062]
• qmp-regdump: Require python3 on OL8 (Mark Kanda) [Orabug: 34672256]
• iotests: Adjust 186.out to account for 'null' node-name (Mark Kanda) [Orabug: 34447388]
• block: Set the name of BlockBackend if possible (Annie Li) [Orabug: 34447388]
• acpi: Update _DSM method in expected files (Mark Kanda) [Orabug: 34616322]
• acpi/gpex: Fix cca attribute check for pxb device (Xingang Wang) [Orabug: 34616322]
• acpi: Enable pxb unit-test for ARM virt machine (Jiahui Cen) [Orabug: 34616322]
• Kconfig: Compile PXB for ARM_VIRT (Jiahui Cen) [Orabug: 34616322]
• acpi/gpex: Exclude pxb's resources from PCI0 (Jiahui Cen) [Orabug: 34616322]
• acpi/gpex: Inform os to keep firmware resource map (Jiahui Cen) [Orabug: 34616322]
• acpi: Add addr offset in build_crs (Jiahui Cen) [Orabug: 34616322]
• unit-test: Add testcase for pxb (Yubo Miao) [Orabug: 34616322]
• acpi: Align the size to 128k (Yubo Miao) [Orabug: 34616322]
• acpi/gpex: Build tables for pxb (Yubo Miao) [Orabug: 34616322]
• acpi: Extract crs build form acpi_build.c (Yubo Miao) [Orabug: 34616322]
• hw/arm/virt: Write extra pci roots into fw_cfg (Jiahui Cen) [Orabug: 34616322]
• fw_cfg: Refactor extra pci roots addition (Jiahui Cen) [Orabug: 34616322]
• acpi/gpex: Extract two APIs from acpi_dsdt_add_pci (Yubo Miao) [Orabug: 34616322]
• arm: use acpi_dsdt_add_gpex (Gerd Hoffman) [Orabug: 34616322]
• acpi: add acpi_dsdt_add_gpex (Gerd Hoffman) [Orabug: 34616322]
• acpi: Allow DSDT acpi table changes (Jiahui Cen) [Orabug: 34616322]
• move MemMapEntry (Gerd Hoffman) [Orabug: 34616322]
• scsi/lsi53c895a: really fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
• scsi/lsi53c895a: fix use-after-free in lsi_do_msgout (CVE-2022-0216) (Mauro Matteo Cascella) [Orabug: 34353672] {CVE-2022-0216}
• tests/qtest: Add fuzz-lsi53c895a-test (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
• hw/scsi/lsi53c895a: Do not abort when DMA requested and no data queued (Philippe Mathieu-Daude) [Orabug: 34353672] {CVE-2022-0216}
• vfio: defer to commit kvm irq routing when enable msi/msix (Mike Longpeng) [Orabug: 34419422]
• vfio: simplify the failure path in vfio_msi_enable (Mike Longpeng) [Orabug: 34419422]
• vfio: move re-enabling INTX out of the common helper (Mike Longpeng) [Orabug: 34419422]
• vfio: simplify the conditional statements in vfio_msi_enable (Mike Longpeng) [Orabug: 34419422]
• kvm/msi: do explicit commit when adding msi routes (Mike Longpeng) [Orabug: 34419422]
• kvm-irqchip: introduce new API to support route change (Mike Longpeng) [Orabug: 34419422]
• event_notifier: handle initialization failure better (Maxim Levitsky) [Orabug: 34419422]
• qmp-regdump: use QMP command 'query-cpus-fast' (Mark Kanda) [Orabug: 34510460]

[4.2.1-20.el8]

• vl: Add an -action option to override MCE handling (Mark Kanda) [Orabug: 34538907]
• vl: Add an -action option specifying response to guest events (Alejandro Jimenez) [Orabug: 34538907]
• qmp: generalize watchdog-set-action to -no-reboot/-no-shutdown (Alejandro Jimenez) [Orabug: 34538907]

[4.2.1-19.el8]

• virtio-net: handle zero mac for a vdpa peer (Cindy Lu) [Orabug: 34137522]
• virtio-net: don't handle mq request in userspace handler for vhost-vdpa (Si-Wei Liu) [Orabug: 34137522]
• vhost-vdpa: change name and polarity for vhost_vdpa_one_time_request() (Si-Wei Liu) [Orabug: 34137522]
• vhost-vdpa: backend feature should set only once (Si-Wei Liu) [Orabug: 34137522]
• vhost-net: fix improper cleanup in vhost_net_start (Si-Wei Liu) [Orabug: 34137522]
• vhost-vdpa: fix improper cleanup in net_init_vhost_vdpa (Si-Wei Liu) [Orabug: 34137522]
• virtio-net: align ctrl_vq index for non-mq guest for vhost_vdpa (Si-Wei Liu) [Orabug: 34137522]
• virtio-net: setup vhost_dev and notifiers for cvq only when feature is negotiated (Si-Wei Liu) [Orabug: 34137522]
• virtio: fix the condition for iommu_platform not supported (Halil Pasic) [Orabug: 34137522]
• vdpa: Make ncs autofree (Eugenio Perez) [Orabug: 34137522]
• vhost-vdpa: make notifiers _init()/_uninit() symmetric (Laurent Vivier) [Orabug: 34137522]
• hw/virtio: vdpa: Fix leak of host-notifier memory-region (Laurent Vivier) [Orabug: 34137522]
• vhost-vdpa: stick to -errno error return convention (Roman Kagan) [Orabug: 34137522]
• vdpa: Add dummy receive callback (Eugenio Perez) [Orabug: 34137522]
• vdpa: Check for existence of opts.vhostdev (Eugenio Perez) [Orabug: 34137522]
• vhost: Fix last vq queue index of devices with no cvq (Eugenio Perez) [Orabug: 34137522]
• vhost: Rename last_index to vq_index_end (Eugenio Perez) [Orabug: 34137522]
• net/vhost-vdpa: fix memory leak in vhost_vdpa_get_max_queue_pairs() (Stefano Garzarella) [Orabug: 34137522]
• vhost-vdpa: multiqueue support (Jason Wang) [Orabug: 34137522]
• virtio-net: vhost control virtqueue support (Jason Wang) [Orabug: 34137522]
• vhost: record the last virtqueue index for the virtio device (Jason Wang) [Orabug: 34137522]
• virtio-net: use 'queue_pairs' instead of 'queues' when possible (Jason Wang) [Orabug: 34137522]
• vhost-net: control virtqueue support (Jason Wang) [Orabug: 34137522]
• net: introduce control client (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: let net_vhost_vdpa_init() returns NetClientState * (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: prepare for the multiqueue support (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: classify one time request (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: open device fd in net_init_vhost_vdpa() (Jason Wang) [Orabug: 34137522]
• vdpa: Check for iova range at mappings changes (Eugenio Perez) [Orabug: 34137522]
• vdpa: Add vhost_vdpa_section_end (Eugenio Perez) [Orabug: 34137522]
• net/vhost-vdpa: Fix device compatibility check (Kevin Wolf) [Orabug: 34137522]
• net/vhost-user: Fix device compatibility check (Kevin Wolf) [Orabug: 34137522]
• net: Introduce NetClientInfo.check_peer_type() (Kevin Wolf) [Orabug: 34137522]
• vhost-vdpa: remove the unncessary queue_index assignment (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: fix the wrong assertion in vhost_vdpa_init() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: tweak the error label in vhost_vdpa_add() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: fix leaking of vhost_net in vhost_vdpa_add() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: don't cleanup twice in vhost_vdpa_add() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: remove the unnecessary check in vhost_vdpa_add() (Jason Wang) [Orabug: 34137522]
• vhost_net: do not assume nvqs is always 2 (Jason Wang) [Orabug: 34137522]
• vhost: use unsigned int for nvqs (Jason Wang) [Orabug: 34137522]
• vhost_net: remove the meaningless assignment in vhost_net_start_one() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: correctly return err in vhost_vdpa_set_backend_cap() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: remove unused variable 'acked_features' (Jason Wang) [Orabug: 34137522]
• vhost: correctly detect the enabling IOMMU (Jason Wang) [Orabug: 34137522]
• virtio-pci: implement iommu_enabled() (Jason Wang) [Orabug: 34137522]
• virtio-bus: introduce iommu_enabled() (Jason Wang) [Orabug: 34137522]
• hw/virtio: Fix leak of host-notifier memory-region (Yajun Wu) [Orabug: 34137522]
• vhost-vdpa: Do not send empty IOTLB update batches (Eugenio Perez) [Orabug: 34137522]
• vhost-vdpa: remove the unused vhost_vdpa_get_acked_features() (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: don't initialize backend_features (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: map virtqueue notification area if possible (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: skip ram device from the IOTLB mapping (Jason Wang) [Orabug: 34137522]
• vhost-vdpa: Remove redundant declaration of address_space_memory (Xie Yongji) [Orabug: 34137522]
• virtio: Fail if iommu_platform is requested, but unsupported (Kevin Wolf) [Orabug: 34137522]
• vhost-vdpa: Make vhost_vdpa_get_device_id() static (Zenghui Yu) [Orabug: 34137522]
• Update linux headers to 5.11-rc2 (Eric Farman) [Orabug: 34137522]
• linux-headers: update against 5.10-rc1 (Matthew Rosato) [Orabug: 34137522]
• linux headers: sync to 5.9-rc7 (Andrew Jones) [Orabug: 34137522]

[4.2.1-18.el8]

• block: introduce max_hw_iov for use in scsi-generic (Paolo Bonzini) [Orabug: 33785156]
• file-posix: try BLKSECTGET on block devices too, do not round to power of 2 (Paolo Bonzini) [Orabug: 33785156]
• block: add max_hw_transfer to BlockLimits (Paolo Bonzini) [Orabug: 33785156]
• block-backend: align max_transfer to request alignment (Paolo Bonzini) [Orabug: 33785156]
• osdep: provide ROUND_DOWN macro (Paolo Bonzini) [Orabug: 33785156]
• scsi-generic: pass max_segments via max_iov field in BlockLimits (Paolo Bonzini) [Orabug: 33785156]
• file-posix: fix max_iov for /dev/sg devices (Paolo Bonzini) [Orabug: 33785156]
• display/qxl-render: fix race condition in qxl_cursor (CVE-2021-4207) (Mauro Matteo Cascella) [Orabug: 34049511] {CVE-2021-4207}
• ui/cursor: fix integer overflow in cursor_alloc (CVE-2021-4206) (Mauro Matteo Cascella) [Orabug: 34049509] {CVE-2021-4206}
• hw/block/fdc: Prevent end-of-track overrun (CVE-2021-3507) (Philippe Mathieu-Daude) [Orabug: 32860387] {CVE-2021-3507}
• pc: q35: Bump max_cpus to 512 (Suravee Suthikulpanit) [Orabug: 34314249]
• tests/qtest: fix pvpanic-pci-test (Mark Kanda) [Orabug: 34284763]
• libqos: pci-pc: use 32-bit write for EJ register (Paolo Bonzini) [Orabug: 34284758]
• libqos: usb-hcd-ehci: use 32-bit write for config register (Paolo Bonzini) [Orabug: 34284768]
• target/i386/kvm: Fix disabling MPX on '-cpu host' with MPX-capable host (Maciej S. Szmigiero) [Orabug: 33528615]
• i386: Mask SVM features if nested SVM is disabled (Eduardo Habkost) [Orabug: 33860224]
• ide: Cap LBA28 capacity announcement to 2^28-1 (Samuel Thibault) [Orabug: 25327652]
• tests/acpi: update expected arm/virt tables (Mark Kanda) [Orabug: 34132842]

[4.2.1-17.el8]

• arm/acpi: fix an out of spec _UID for PCI root (Michael S. Tsirkin)
• arm/acpi: fix duplicated _UID of PCI interrupt link devices (Heyi Guo)
• arm/acpi: fix PCI _PRT definition (Heyi Guo)
• docs: fix references to docs/devel/atomics.rst (Stefano Garzarella) [Orabug: 33659123]
• rcu: do not mention atomic_mb_read/set in documentation (Paolo Bonzini) [Orabug: 33659123]
• atomics: update documentation (Paolo Bonzini) [Orabug: 33659123]
• atomics: convert to reStructuredText (Paolo Bonzini) [Orabug: 33659123]
• async: use explicit memory barriers (Paolo Bonzini) [Orabug: 33659123]
• aio-wait: delegate polling of main AioContext if BQL not held (Paolo Bonzini) [Orabug: 33659123]
• qapi: Add '@allow-write-only-overlay' feature for 'blockdev-snapshot' (Peter Krempa) [Orabug: 33888021]
• iotests: Add iothread cases to 155 (Kevin Wolf) [Orabug: 33888021]
• block: Fix cross-AioContext blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
• iotests: Test mirror with temporarily disabled target backing file (Kevin Wolf) [Orabug: 33888021]
• iotests: Fix run_job() with use_log=False (Kevin Wolf) [Orabug: 33888021]
• block: Relax restrictions for blockdev-snapshot (Kevin Wolf) [Orabug: 33888021]
• block: Make bdrv_get_cumulative_perm() public (Kevin Wolf) [Orabug: 33888021]
• iotests: Use complete_and_wait() in 155 (Max Reitz) [Orabug: 33888021]
• iotests: Support job-complete in run_job() (Kevin Wolf) [Orabug: 33888021]
• linux-headers: update again to 5.8 (Paolo Bonzini) [Orabug: 34022218]
• virtio-net: fix map leaking on error during receive (Jason Wang) [Orabug: 33941879] {CVE-2022-26353}
• vhost-vsock: detach the virqueue element in case of error (Stefano Garzarella) [Orabug: 33941844] {CVE-2022-26354}
• virtio-net: fix use after unmap/free for sg (Jason Wang) [Orabug: 33972912] {CVE-2021-3748}
• migration: Report the error returned when save_live_iterate fails (David Edmondson)

[4.2.1-16.el8]

• Document CVE-2021-4145 as fixed (Mark Kanda) [Orabug: 33791496] {CVE-2021-4145}
• migration: Tally pre-copy, downtime and post-copy bytes independently (David Edmondson)
• migration: Introduce ram_transferred_add() (David Edmondson)
• ACPI ERST: specification for ERST support (Eric DeVolder)
• ACPI ERST: step 6 of bios-tables-test.c (Eric DeVolder)
• ACPI ERST: bios-tables-test testcase (Eric DeVolder)
• ACPI ERST: qtest for ERST (Eric DeVolder)
• ACPI ERST: create ACPI ERST table for pc/x86 machines (Eric DeVolder)
• ACPI ERST: build the ACPI ERST table (Eric DeVolder)
• ACPI ERST: support for ACPI ERST feature (Eric DeVolder)
• ACPI ERST: header file for ERST (Eric DeVolder)
• ACPI ERST: PCI device_id for ERST (Eric DeVolder)
• ACPI ERST: bios-tables-test.c steps 1 and 2 (Eric DeVolder)
• ACPI: cleanup bios-tables-test state (Eric DeVolder)
• KVM: x86: believe what KVM says about WAITPKG (Paolo Bonzini) [Orabug: 33832295]
• cputlb: destroy CPUTLB with tlb_destroy (Emilio G. Cota) [Orabug: 33428107]

[4.2.1-15.el8]

• qemu-kvm.spec: Add support for reading vmdk, vhdx, vpc, https, and ssh disk image formats from qemu-kvm (Karl Heubaum) [Orabug: 33741340]
• Document CVE-2021-4158 and CVE-2021-3947 as fixed (Mark Kanda) [Orabug: 33719302] [Orabug: 33754145] {CVE-2021-4158} {CVE-2021-3947}
• hw/block/fdc: Kludge missing floppy drive to fix CVE-2021-20196 (Philippe Mathieu-Daude) [Orabug: 32439466] {CVE-2021-20196}
• hw/block/fdc: Extract blk_create_empty_drive() (Philippe Mathieu-Daude) [Orabug: 32439466] {CVE-2021-20196}
• net: vmxnet3: validate configuration values during activate (CVE-2021-20203) (Prasad J Pandit) [Orabug: 32559476] {CVE-2021-20203}
• lan9118: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
• pcnet: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
• rtl8139: switch to use qemu_receive_packet() for loopback (Alexander Bulekov) [Orabug: 32560540] {CVE-2021-3416}
• tx_pkt: switch to use qemu_receive_packet_iov() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
• sungem: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
• dp8393x: switch to use qemu_receive_packet() for loopback packet (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
• e1000: switch to use qemu_receive_packet() for loopback (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
• net: introduce qemu_receive_packet() (Jason Wang) [Orabug: 32560540] {CVE-2021-3416}
• target/i386: Populate x86_ext_save_areas offsets using cpuid where possible (Paolo Bonzini)
• target/i386: Observe XSAVE state area offsets (Paolo Bonzini)
• target/i386: Make x86_ext_save_areas visible outside cpu.c (Paolo Bonzini)
• target/i386: Pass buffer and length to XSAVE helper (Paolo Bonzini)
• target/i386: Clarify the padding requirements of X86XSaveArea (Paolo Bonzini)
• target/i386: Consolidate the X86XSaveArea offset checks (Paolo Bonzini)
• target/i386: Declare constants for XSAVE offsets (Paolo Bonzini)

[4.2.1-14.el8]

• scsi: fix sense code for EREMOTEIO (Paolo Bonzini) [Orabug: 33537443]
• scsi: move host_status handling into SCSI drivers (Hannes Reinecke) [Orabug: 33537443]
• scsi: inline sg_io_sense_from_errno() into the callers (Hannes Reinecke) [Orabug: 33537443]
• scsi-generic: do not snoop the output of failed commands (Paolo Bonzini) [Orabug: 33537443]
• scsi: Add mapping for generic SCSI_HOST status to sense codes (Hannes Reinecke) [Orabug: 33537443]
• scsi: Rename linux-specific SG_ERR codes to generic SCSI_HOST error codes (Hannes Reinecke) [Orabug: 33537443]
• scsi: drop 'result' argument from command_complete callback (Hannes Reinecke) [Orabug: 33537443]
• scsi-disk: pass guest recoverable errors through even for rerror=stop (Paolo Bonzini) [Orabug: 33537443]
• scsi-disk: pass SCSI status to scsi_handle_rw_error (Paolo Bonzini) [Orabug: 33537443]
• scsi: introduce scsi_sense_from_errno() (Paolo Bonzini) [Orabug: 33537443]
• scsi-disk: do not complete requests early for rerror/werror=ignore (Paolo Bonzini) [Orabug: 33537443]
• scsi-disk: move scsi_handle_rw_error earlier (Paolo Bonzini) [Orabug: 33537443]
• scsi-disk: convert more errno values back to SCSI statuses (Paolo Bonzini) [Orabug: 33537443]

[4.2.1-13.el8]

• pcie: Do not set power state for some hot-plugged devices (Annie Li) [Orabug: 33642532]

[4.2.1-12.1.el8]

• Update slirp to address various CVEs (Mark Kanda) [Orabug: 32208456] [Orabug: 33014409] [Orabug: 33014414] [Orabug: 33014417] [Orabug: 33014420] {CVE-2020-29129} {CVE-2020-29130} {CVE-2021-3592} {CVE-2021-3593} {CVE-2021-3594} {CVE-2021-3595}
• hw/pflash_cfi01: Allow backing devices to be smaller than memory region (David Edmondson)
• pcie: expire pending delete (Gerd Hoffmann) [Orabug: 33450706]
• pcie: fast unplug when slot power is off (Gerd Hoffmann) [Orabug: 33450706]
• pcie: factor out pcie_cap_slot_unplug() (Gerd Hoffmann) [Orabug: 33450706]
• pcie: add power indicator blink check (Gerd Hoffmann) [Orabug: 33450706]
• pcie: implement slot power control for pcie root ports (Gerd Hoffmann) [Orabug: 33450706]
• pci: implement power state (Gerd Hoffmann) [Orabug: 33450706]
• hw/pci/pcie: Move hot plug capability check to pre_plug callback (Julia Suvorova) [Orabug: 33450706]
• hw/pci/pcie: Replace PCI_DEVICE() casts with existing variable (Julia Suvorova) [Orabug: 33450706]
• hw/pci/pcie: Forbid hot-plug if it's disabled on the slot (Julia Suvorova) [Orabug: 33450706]
• pcie_root_port: Add hotplug disabling option (Julia Suvorova) [Orabug: 33450706]
• qdev-monitor: Forbid repeated device_del (Julia Suvorova) [Orabug: 33450706]
• i386:acpi: Remove _HID from the SMBus ACPI entry (Corey Minyard)
• uas: add stream number sanity checks (Gerd Hoffmann) [Orabug: 33280793] {CVE-2021-3713}
• usbredir: fix free call (Gerd Hoffmann) [Orabug: 33198441] {CVE-2021-3682}
• hw/scsi/scsi-disk: MODE_PAGE_ALLS not allowed in MODE SELECT commands (Mauro Matteo Cascella) [Orabug: 33548490] {CVE-2021-3930}
• e1000: fix tx re-entrancy problem (Jon Maloy) [Orabug: 32560552] {CVE-2021-20257}
• virtio-net-pci: Don't use 'efi-virtio.rom' on AArch64 (Mark Kanda) [Orabug: 33537594]
• MAINTAINERS: Add ACPI/HEST/GHES entries (Dongjiu Geng)
• target-arm: kvm64: handle SIGBUS signal from kernel or KVM (Dongjiu Geng)
• ACPI: Record Generic Error Status Block(GESB) table (Dongjiu Geng)
• KVM: Move hwpoison page related functions into kvm-all.c (Dongjiu Geng)
• ACPI: Record the Generic Error Status Block address (Dongjiu Geng)
• ACPI: Build Hardware Error Source Table (Dongjiu Geng)
• ACPI: Build related register address fields via hardware error fw_cfg blob (Dongjiu Geng)
• docs: APEI GHES generation and CPER record description (Dongjiu Geng)
• hw/arm/virt: Introduce a RAS machine option (Dongjiu Geng)
• acpi: nvdimm: change NVDIMM_UUID_LE to a common macro (Dongjiu Geng)
• block/curl: HTTP header field names are case insensitive (David Edmondson) [Orabug: 33287589]
• block/curl: HTTP header fields allow whitespace around values (David Edmondson) [Orabug: 33287589]

[4.2.1-11.el8]

• trace: use STAP_SDT_V2 to work around symbol visibility (Stefan Hajnoczi) [Orabug: 33272428]

[4.2.1-11.el8]

• pvrdma: Fix the ring init error flow (Marcel Apfelbaum) [Orabug: 33120142] {CVE-2021-3608}
• pvrdma: Ensure correct input on ring init (Marcel Apfelbaum) [Orabug: 33120146] {CVE-2021-3607}
• hw/rdma: Fix possible mremap overflow in the pvrdma device (Marcel Apfelbaum) [Orabug: 33120084] {CVE-2021-3582}
• vhost-user-gpu: reorder free calls (Gerd Hoffmann) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: abstract vg_cleanup_mapping_iov (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
• vhost-user-gpu: fix OOB write in 'virgl_cmd_get_capset' (Li Qiang) [Orabug: 32950716] {CVE-2021-3546}
• vhost-user-gpu: fix memory leak in 'virgl_resource_attach_backing' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: fix memory leak in 'virgl_cmd_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: fix memory leak while calling 'vg_resource_unref' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: fix memory leak in vg_resource_attach_backing (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: fix resource leak in 'vg_resource_create_2d' (Li Qiang) [Orabug: 32950701] {CVE-2021-3544}
• vhost-user-gpu: fix memory disclosure in virgl_cmd_get_capset_info (Li Qiang) [Orabug: 32950708] {CVE-2021-3545}
• usb: limit combined packets to 1 MiB (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
• usb/redir: avoid dynamic stack allocation (Gerd Hoffmann) [Orabug: 32842778] {CVE-2021-3527}
• mptsas: Remove unused MPTSASState 'pending' field (Michael Tokarev) [Orabug: 32470463] {CVE-2021-3392}
• oslib-posix: initialize backend memory objects in parallel (Mark Kanda) [Orabug: 32555402]
• oslib-posix: refactor memory prealloc threads (Mark Kanda) [Orabug: 32555402]

[4.2.1-10.el8]

• e1000: fail early for evil descriptor (Jason Wang) [Orabug: 32560552] {CVE-2021-20257}
• Document CVE-2020-27661 as fixed (Mark Kanda) [Orabug: 32960200] {CVE-2020-27661}
• block: Avoid stale pointer dereference in blk_get_aio_context() (Greg Kurz)
• block: Fix blk->in_flight during blk_wait_while_drained() (Kevin Wolf)
• block: Increase BB.in_flight for coroutine and sync interfaces (Kevin Wolf)
• block-backend: Reorder flush/pdiscard function definitions (Kevin Wolf)
• i386/pc: let iterator handle regions below 4G (Joao Martins)
• arm/virt: Add memory hot remove support (Shameer Kolothum) [Orabug: 32643506]
• i386/pc: consolidate usable iova iteration (Joao Martins)
• i386/acpi: fix SRAT ranges in accordance to usable IOVA (Joao Martins)
• migration: increase listening socket backlog (Elena Ufimtseva)
• multifd: Make multifd_save_setup() get an Error parameter (Juan Quintela)
• multifd: Make multifd_load_setup() get an Error parameter (Juan Quintela)
• migration: fix maybe-uninitialized warning (Marc-Andre Lureau)
• migration: Fix the re-run check of the migrate-incoming command (Yury Kotov)
• multifd: Initialize local variable (Juan Quintela)
• multifd: Be consistent about using uint64_t (Juan Quintela)
• Bug #1829242 correction. (Alexey Romko)
• migration/multifd: fix destroyed mutex access in terminating multifd threads (Jiahui Cen)
• migration/multifd: fix nullptr access in terminating multifd threads (Jiahui Cen)
• migration/multifd: not use multifd during postcopy (Wei Yang)
• migration/multifd: clean pages after filling packet (Wei Yang)
• migration: Make sure that we don't call write() in case of error (Juan Quintela)
• migration: fix multifd_send_pages() next channel (Laurent Vivier)
• migration/multifd: bypass uuid check for initial packet (Elena Ufimtseva) [Orabug: 32610480]
• migration/tls: add error handling in multifd_tls_handshake_thread (Hao Wang)
• migration/tls: fix inverted semantics in multifd_channel_connect (Hao Wang)
• migration/multifd: do not access uninitialized multifd_recv_state (Elena Ufimtseva) [Orabug: 32795384]
• io/channel-tls.c: make qio_channel_tls_shutdown thread-safe (Lukas Straub)
• qemu.spec: Enable qemu-guest-agent RPM for OL7 (Karl Heubaum) [Orabug: 32415543]
• virtio-net: Set mac address to hardware if the peer is vdpa (Cindy Lu)
• net: Add vhost-vdpa in show_netdevs() (Cindy Lu)
• vhost-vdpa: Add qemu_close in vhost_vdpa_cleanup (Cindy Lu)
• hw/virtio/vhost-vdpa: Fix Coverity CID 1432864 (Philippe Mathieu-Daude)
• vhost-vdpa: negotiate VIRTIO_NET_F_STATUS with driver (Si-Wei Liu)
• configure: Fix build dependencies with vhost-vdpa. (Laurent Vivier)
• configure: simplify vhost condition with Kconfig (Marc-Andre Lureau)
• vhost-vdpa: add trace-events (Laurent Vivier)
• dma/pl330: Fix qemu_hexdump() usage in pl330.c (Mark Kanda)
• util/hexdump: introduce qemu_hexdump_line() (Laurent Vivier)
• util/hexdump: Reorder qemu_hexdump() arguments (Philippe Mathieu-Daude)
• util/hexdump: Convert to take a void pointer argument (Philippe Mathieu-Daude)
• net/colo-compare.c: Only hexdump packets if tracing is enabled (Lukas Straub)
• vhost-vdpa: batch updating IOTLB mappings (Jason Wang)
• vhost: switch to use IOTLB v2 format (Jason Wang)
• vhost-vdpa: remove useless variable (Laurent Vivier)
• virtio: vdpa: omit check return of g_malloc (Li Qiang)
• vhost-vdpa: fix indentation in vdpa_ops (Stefano Garzarella)
• virtio-net: check the existence of peer before accessing vDPA config (Jason Wang)
• virtio-pci: fix wrong index in virtio_pci_queue_enabled (Yuri Benditovich)
• virtio-pci: fix virtio_pci_queue_enabled() (Laurent Vivier)
• vhost-vdpa :Fix Coverity CID 1430270 / CID 1420267 (Cindy Lu)
• vhost-vdpa: fix the compile issue without kvm (Cindy Lu)
• vhost-vdpa: introduce vhost-vdpa net client (Cindy Lu)
• vhost-vdpa: introduce vhost-vdpa backend (Cindy Lu)
• linux headers: sync to 5.9-rc4 (Jason Wang)
• Linux headers: update (Cornelia Huck)
• virtio-net: fix rsc_ext compat handling (Cornelia Huck)
• linux-headers: update against Linux 5.7-rc3 (Cornelia Huck)
• linux-headers: update (Cornelia Huck)
• virtiofsd: Pull in kernel's fuse.h (Dr. David Alan Gilbert)
• linux-headers: Update (Bharata B Rao)
• linux-headers: Update (Greg Kurz)
• vhost_net: introduce set_config & get_config (Cindy Lu)
• vhost: implement vhost_force_iommu method (Cindy Lu)
• vhost: introduce new VhostOps vhost_force_iommu (Cindy Lu)
• vhost: implement vhost_vq_get_addr method (Cindy Lu)
• vhost: introduce new VhostOps vhost_vq_get_addr (Cindy Lu)
• vhost: implement vhost_dev_start method (Cindy Lu)
• vhost: introduce new VhostOps vhost_dev_start (Cindy Lu)
• vhost: check the existence of vhost_set_iotlb_callback (Jason Wang)
• virtio-pci: implement queue_enabled method (Jason Wang)
• virtio-bus: introduce queue_enabled method (Jason Wang)
• vhost_net: use the function qemu_get_peer (Cindy Lu)
• net: introduce qemu_get_peer (Cindy Lu)
• vhost: correctly turn on VIRTIO_F_IOMMU_PLATFORM (Jason Wang)
• imx7-ccm: add digprog mmio write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• tz-ppc: add dummy read/write methods (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• spapr_pci: add spapr msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• nvram: add nrf51_soc flash read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• prep: add ppc-parity write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• vfio: add quirk device write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• pci-host: designware: add pcie-msi read method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• hw/pci-host: add pci-intack write method (Prasad J Pandit) [Orabug: 31576552] {CVE-2020-15469}
• oslib-posix: take lock before qemu_cond_broadcast (Bauerchen) [Orabug: 32555402]
• oslib-posix: initialize mutex and condition variable (Paolo Bonzini) [Orabug: 32555402]
• mem-prealloc: optimize large guest startup (Bauerchen) [Orabug: 32555402]
• i386: Add the support for AMD EPYC 3rd generation processors (Babu Moger)
• acpi: cpuhp: document CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
• acpi: cpuhp: add CPHP_GET_CPU_ID_CMD command (Igor Mammedov)
• acpi: cpuhp: spec: add typical usecases (Igor Mammedov)
• acpi: cpuhp: spec: clarify store into 'Command data' when 'Command field' == 0 (Igor Mammedov)
• acpi: cpuhp: spec: fix 'Command data' description (Igor Mammedov)
• acpi: cpuhp: spec: clarify 'CPU selector' register usage and endianness (Igor Mammedov)
• acpi: cpuhp: introduce 'Command data 2' field (Igor Mammedov)
• x86: ich9: let firmware negotiate 'CPU hot-unplug with SMI' feature (Igor Mammedov)
• x86: ich9: factor out 'guest_cpu_hotplug_features' (Igor Mammedov)
• x86: acpi: let the firmware handle pending 'CPU remove' events in SMM (Igor Mammedov)
• x86: acpi: introduce AcpiPmInfo::smi_on_cpu_unplug (Igor Mammedov)
• acpi: cpuhp: introduce 'firmware performs eject' status/control bits (Igor Mammedov)
• x68: acpi: trigger SMI before sending hotplug Notify event to OSPM (Igor Mammedov)
• x86: acpi: introduce the PCI0.SMI0 ACPI device (Igor Mammedov)
• x86: acpi: introduce AcpiPmInfo::smi_on_cpuhp (Igor Mammedov)
• x86: ich9: expose 'smi_negotiated_features' as a QOM property (Igor Mammedov)
• tests: acpi: mark to be changed tables in bios-tables-test-allowed-diff (Igor Mammedov)
• acpi: add aml_land() and aml_break() primitives (Igor Mammedov)
• x86: cpuhp: refuse cpu hot-unplug request earlier if not supported (Igor Mammedov)
• x86: cpuhp: prevent guest crash on CPU hotplug when broadcast SMI is in use (Igor Mammedov)
• x86: lpc9: let firmware negotiate 'CPU hotplug with SMI' features (Igor Mammedov)
• q35: implement 128K SMRAM at default SMBASE address (Igor Mammedov)
• hw/intc/arm_gic: Fix interrupt ID in GICD_SGIR register (Philippe Mathieu-Daude) [Orabug: 32470471] {CVE-2021-20221}
• memory: clamp cached translation in case it points to an MMIO region (Paolo Bonzini) [Orabug: 32252673] {CVE-2020-27821}
• hw/sd/sdhci: Fix DMA Transfer Block Size field (Philippe Mathieu-Daude) [Orabug: 32613470] {CVE-2021-3409}

[4.2.1-6.el8]

• i386/pc: Keep PCI 64-bit hole within usable IOVA space (Joao Martins)
• pc/cmos: Adjust CMOS above 4G memory size according to 1Tb boundary (Joao Martins)
• i386/pc: Round up the hotpluggable memory within valid IOVA ranges (Joao Martins)
• i386/pc: Account IOVA reserved ranges above 4G boundary (Joao Martins)

[4.2.1-5.el8]

• hostmem: fix default 'prealloc-threads' count (Mark Kanda)
• hostmem: introduce 'prealloc-threads' property (Igor Mammedov)
• qom: introduce object_register_sugar_prop (Paolo Bonzini)
• migration/multifd: Do error_free after migrate_set_error to avoid memleaks (Pan Nengyuan)
• multifd/tls: fix memoryleak of the QIOChannelSocket object when cancelling migration (Chuan Zheng)
• migration/multifd: fix hangup with TLS-Multifd due to blocking handshake (Chuan Zheng)
• migration/tls: add trace points for multifd-tls (Chuan Zheng)
• migration/tls: add support for multifd tls-handshake (Chuan Zheng)
• migration/tls: extract cleanup function for common-use (Chuan Zheng)
• migration/multifd: fix memleaks in multifd_new_send_channel_async (Pan Nengyuan)
• migration/multifd: fix nullptr access in multifd_send_terminate_threads (Zhimin Feng)
• migration/tls: add tls_hostname into MultiFDSendParams (Chuan Zheng)
• migration/tls: extract migration_tls_client_create for common-use (Chuan Zheng)
• migration/tls: save hostname into MigrationState (Chuan Zheng)
• tests/qtest: add a test case for pvpanic-pci (Mihai Carabas)
• pvpanic : update pvpanic spec document (Mihai Carabas)
• hw/misc/pvpanic: add PCI interface support (Mihai Carabas)
• hw/misc/pvpanic: split-out generic and bus dependent code (Mihai Carabas)
• qemu-img: Add --target-is-zero to convert (David Edmondson)
• 9pfs: Fully restart unreclaim loop (CVE-2021-20181) (Greg Kurz) [Orabug: 32441198] {CVE-2021-20181}
• ide: atapi: check logical block address and read size (CVE-2020-29443) (Prasad J Pandit) [Orabug: 32393835] {CVE-2020-29443}
• Document CVE-2019-20808 as fixed (Mark Kanda) [Orabug: 32339196] {CVE-2019-20808}
• block/iscsi:fix heap-buffer-overflow in iscsi_aio_ioctl_cb (Chen Qun) [Orabug: 32339207] {CVE-2020-11947}
• net: remove an assert call in eth_get_gso_type (Prasad J Pandit) [Orabug: 32102583] {CVE-2020-27617}
• nvdimm: honor -object memory-backend-file, readonly=on option (Stefan Hajnoczi) [Orabug: 32265408]
• hostmem-file: add readonly=on|off option (Stefan Hajnoczi) [Orabug: 32265408]
• memory: add readonly support to memory_region_init_ram_from_file() (Stefan Hajnoczi) [Orabug: 32265408]

[4.2.1-4.el8]

• Document CVE-2020-25723 as fixed (Mark Kanda) [Orabug: 32222397] {CVE-2020-25723}
• hw/net/e1000e: advance desc_offset in case of null descriptor (Prasad J Pandit) [Orabug: 32217517] {CVE-2020-28916}
• i386: Add 2nd Generation AMD EPYC processors (Babu Moger) [Orabug: 32217570]
• libslirp: Update version to include CVE fixes (Mark Kanda) [Orabug: 32208456] [Orabug: 32208462] {CVE-2020-29129} {CVE-2020-29130}
• Document CVE-2020-25624 as fixed (Mark Kanda) [Orabug: 32212527] {CVE-2020-25624}
• pvpanic: Advertise the PVPANIC_CRASHLOADED event support (Paolo Bonzini) [Orabug: 32102853]
• ati: check x y display parameter values (Prasad J Pandit) [Orabug: 32108251] {CVE-2020-27616}
• Add AArch64 support for QMP regdump tool and sosreport plugin (Mark Kanda) [Orabug: 32080658]
• Add qemu_regdump sosreport plugin support for '-mon' QMP sockets (Mark Kanda)
• migration/dirtyrate: present dirty rate only when querying the rate has completed (Chuan Zheng)
• migration/dirtyrate: record start_time and calc_time while at the measuring state (Chuan Zheng)
• migration/dirtyrate: Add trace_calls to make it easier to debug (Chuan Zheng)
• migration/dirtyrate: Implement qmp_cal_dirty_rate()/qmp_get_dirty_rate() function (Chuan Zheng)
• migration/dirtyrate: Implement calculate_dirtyrate() function (Chuan Zheng)
• migration/dirtyrate: Implement set_sample_page_period() and is_sample_period_valid() (Chuan Zheng)
• migration/dirtyrate: skip sampling ramblock with size below MIN_RAMBLOCK_SIZE (Chuan Zheng)
• migration/dirtyrate: Compare page hash results for recorded sampled page (Chuan Zheng)
• migration/dirtyrate: Record hash results for each sampled page (Chuan Zheng)
• migration/dirtyrate: move RAMBLOCK_FOREACH_MIGRATABLE into ram.h (Chuan Zheng)
• migration/dirtyrate: Add dirtyrate statistics series functions (Chuan Zheng)
• migration/dirtyrate: Add RamblockDirtyInfo to store sampled page info (Chuan Zheng)
• migration/dirtyrate: add DirtyRateStatus to denote calculation status (Chuan Zheng)
• migration/dirtyrate: setup up query-dirtyrate framwork (Chuan Zheng)
• ram_addr: Split RAMBlock definition (Juan Quintela)

[4.2.1-3.el8]

• qemu-kvm.spec: Install block storage module RPMs by default (Karl Heubaum) [Orabug: 31943789]
• qemu-kvm.spec: Enable block-ssh module RPM (Karl Heubaum) [Orabug: 31943763]
• hw: usb: hcd-ohci: check for processed TD before retire (Prasad J Pandit) [Orabug: 31901690] {CVE-2020-25625}
• hw: usb: hcd-ohci: check len and frame_number variables (Prasad J Pandit) [Orabug: 31901690] {CVE-2020-25625}
• hw: ehci: check return value of 'usb_packet_map' (Li Qiang) [Orabug: 31901649] {CVE-2020-25084}
• hw: xhci: check return value of 'usb_packet_map' (Li Qiang) [Orabug: 31901649] {CVE-2020-25084}
• usb: fix setup_len init (CVE-2020-14364) (Gerd Hoffmann) [Orabug: 31848849] {CVE-2020-14364}
• Document CVE-2020-12829 and CVE-2020-14415 as fixed (Mark Kanda) [Orabug: 31855502] [Orabug: 31855427] {CVE-2020-12829} {CVE-2020-14415}

[4.2.1-2.el8]

• hw/net/xgmac: Fix buffer overflow in xgmac_enet_send() (Mauro Matteo Cascella) [Orabug: 31667649] {CVE-2020-15863}
• hw/net/net_tx_pkt: fix assertion failure in net_tx_pkt_add_raw_fragment() (Mauro Matteo Cascella) [Orabug: 31737809] {CVE-2020-16092}
• migration: fix memory leak in qmp_migrate_set_parameters (Zheng Chuan) [Orabug: 31806256]
• virtio-net: fix removal of failover device (Juan Quintela) [Orabug: 31806255]
• pvpanic: introduce crashloaded for pvpanic (zhenwei pi) [Orabug: 31677154]

[4.2.1-1.el8]

• hw/sd/sdcard: Do not switch to ReceivingData if address is invalid (Philippe Mathieu-Daude) [Orabug: 31414336] {CVE-2020-13253}
• hw/sd/sdcard: Update coding style to make checkpatch.pl happy (Philippe Mathieu-Daude) [Orabug: 31414336]
• hw/sd/sdcard: Do not allow invalid SD card sizes (Philippe Mathieu-Daude) [Orabug: 31414336] {CVE-2020-13253}
• hw/sd/sdcard: Simplify realize() a bit (Philippe Mathieu-Daude) [Orabug: 31414336]
• hw/sd/sdcard: Restrict Class 6 commands to SCSD cards (Philippe Mathieu-Daude) [Orabug: 31414336]
• libslirp: Update to v4.3.1 to fix CVE-2020-10756 (Karl Heubaum) [Orabug: 31604999] {CVE-2020-10756}
• Document CVEs as fixed 2/2 (Karl Heubaum) [Orabug: 30618035] {CVE-2017-18043} {CVE-2018-10839} {CVE-2018-11806} {CVE-2018-12617} {CVE-2018-15746} {CVE-2018-16847} {CVE-2018-16867} {CVE-2018-17958} {CVE-2018-17962} {CVE-2018-17963} {CVE-2018-18849} {CVE-2018-19364} {CVE-2018-19489} {CVE-2018-3639} {CVE-2018-5683} {CVE-2018-7550} {CVE-2018-7858} {CVE-2019-12068} {CVE-2019-15034} {CVE-2019-15890} {CVE-2019-20382} {CVE-2020-10702} {CVE-2020-10761} {CVE-2020-11102} {CVE-2020-11869} {CVE-2020-13361} {CVE-2020-13765} {CVE-2020-13800} {CVE-2020-1711} {CVE-2020-1983} {CVE-2020-8608}
• Document CVEs as fixed 1/2 (Karl Heubaum) [Orabug: 30618035] {CVE-2017-10806} {CVE-2017-11334} {CVE-2017-12809} {CVE-2017-13672} {CVE-2017-13673} {CVE-2017-13711} {CVE-2017-14167} {CVE-2017-15038} {CVE-2017-15119} {CVE-2017-15124} {CVE-2017-15268} {CVE-2017-15289} {CVE-2017-16845} {CVE-2017-17381} {CVE-2017-18030} {CVE-2017-2630} {CVE-2017-2633} {CVE-2017-5715} {CVE-2017-5753} {CVE-2017-5754} {CVE-2017-5931} {CVE-2017-6058} {CVE-2017-7471} {CVE-2017-7493} {CVE-2017-8112} {CVE-2017-8309} {CVE-2017-8379} {CVE-2017-8380} {CVE-2017-9503} {CVE-2017-9524} {CVE-2018-12126} {CVE-2018-12127} {CVE-2018-12130} {CVE-2018-16872} {CVE-2018-20123} {CVE-2018-20124} {CVE-2018-20125} {CVE-2018-20126} {CVE-2018-20191} {CVE-2018-20216} {CVE-2018-20815} {CVE-2019-11091} {CVE-2019-12155} {CVE-2019-14378} {CVE-2019-3812} {CVE-2019-5008} {CVE-2019-6501} {CVE-2019-6778} {CVE-2019-8934} {CVE-2019-9824}
• qemu-kvm.spec: Add .spec file for OL8 (Karl Heubaum) [Orabug: 30618035]
• qemu.spec: Add .spec file for OL7 (Karl Heubaum) [Orabug: 30618035]
• qemu-submodule-init: Add Git submodule init script (Karl Heubaum) [Orabug: 30618035]
• vhost.conf: Initial vhost.conf (Karl Heubaum) [Orabug: 30618035]
• parfait: Add buildrpm/parfait-qemu.conf (Karl Heubaum) [Orabug: 30618035]
• virtio: Set PCI subsystem vendor ID to Oracle (Karl Heubaum) [Orabug: 30618035]
• qemu_regdump.py: Initial qemu_regdump.py (Karl Heubaum) [Orabug: 30618035]
• qmp-regdump: Initial qmp-regdump (Karl Heubaum) [Orabug: 30618035]
• bridge.conf: Initial bridge.conf (Karl Heubaum) [Orabug: 30618035]
• kvm.conf: Initial kvm.conf (Karl Heubaum) [Orabug: 30618035]
• 80-kvm.rules: Initial 80-kvm.rules (Karl Heubaum) [Orabug: 30618035]
• exec: set map length to zero when returning NULL (Prasad J Pandit) [Orabug: 31439733] {CVE-2020-13659}
• megasas: use unsigned type for reply_queue_head and check index (Prasad J Pandit) [Orabug: 31414338] {CVE-2020-13362}
• memory: Revert 'memory: accept mismatching sizes in memory_region_access_valid' (Michael S. Tsirkin) [Orabug: 31439736] [Orabug: 31452202] {CVE-2020-13754} {CVE-2020-13791}

[4.1.1-3.el8]

• buildrpm/spec files: Don't package elf2dmp (Karl Heubaum) [Orabug: 31657424]
• qemu-kvm.spec: Enable the block-curl package (Karl Heubaum) [Orabug: 31657424]
• qemu.spec: enable have_curl in spec (Dongli Zhang) [Orabug: 31657424]

[4.1.1-2.el8]

• Document CVE-2020-13765 as fixed (Karl Heubaum) [Orabug: 31463250] {CVE-2020-13765}
• kvm: Reallocate dirty_bmap when we change a slot (Dr. David Alan Gilbert) [Orabug: 31076399]
• kvm: split too big memory section on several memslots (Igor Mammedov) [Orabug: 31076399]
• target/i386: do not set unsupported VMX secondary execution controls (Vitaly Kuznetsov) [Orabug: 31463710]
• target/i386: add VMX definitions (Paolo Bonzini) [Orabug: 31463710]
• ati-vga: check mm_index before recursive call (CVE-2020-13800) (Prasad J Pandit) [Orabug: 31452206] {CVE-2020-13800}
• es1370: check total frame count against current frame (Prasad J Pandit) [Orabug: 31463235] {CVE-2020-13361}
• ati-vga: Fix checks in ati_2d_blt() to avoid crash (BALATON Zoltan) [Orabug: 31238432] {CVE-2020-11869}
• libslirp: Update to stable-4.2 to fix CVE-2020-1983 (Karl Heubaum) [Orabug: 31241227] {CVE-2020-1983}
• Document CVEs as fixed (Karl Heubaum) {CVE-2019-12068} {CVE-2019-15034}
• libslirp: Update to version 4.2.0 to fix CVEs (Karl Heubaum) [Orabug: 30274592] [Orabug: 30869830] {CVE-2019-15890} {CVE-2020-8608}
• target/i386: add support for MSR_IA32_TSX_CTRL (Paolo Bonzini) [Orabug: 31124041]
• qemu-img: Add --target-is-zero to convert (David Edmondson)
• vnc: fix memory leak when vnc disconnect (Li Qiang) [Orabug: 30996427] {CVE-2019-20382}
• iscsi: Cap block count from GET LBA STATUS (CVE-2020-1711) (Felipe Franciosi) [Orabug: 31124035] {CVE-2020-1711}
• qemu.spec: Remove 'BuildRequires: kernel' (Karl Heubaum) [Orabug: 31124047]

seabios [1.16.0-3]

• seabios-virtio-blk-use-larger-default-request-size.patch [bz#2101787]
• Resolves: bz#2101787 ([rhel.8.7] Loading a kernel/initrd is sometimes very slow)

[1.16.0-2]

• seabios-shortcut-skip-unbootable-disks-optimitation.patch [bz#2073012]
• seabios-pci-refactor-the-pci_config_-functions.patch [bz#2083884]
• seabios-reset-force-standard-PCI-configuration-access.patch [bz#2083884]
• Resolves: bz#2073012 (Guest whose os is installed multiple disks but boot partition is installed on single disk can't boot into OS on RHEL 8 [rhel-8.7.0])
• Resolves: bz#2083884 (qemu reboot problem with seabios 1.16.0)

[1.16.0-1]

• Rebase to upstream 1.16 tag [bz#2066828]
• Resolves: bz#2066828 (rebase seabios to 1.16 release)

[1.15.0-1.el8]

• Rebase to 1.15 (bz#2018392)
• Resolves: bz#2018392

[1.15.0-1.el8]

• pci-reserve-resources-for-pcie-pci-bridge-to-fix-reg.patch [bz#2001921]
• pci: let firmware reserve IO for pcie-pci-bridge.patch [bz#2001921]
• Resolves: bz#2001921

[1.14.0-1.el8]

• Rebase to 1.14 (bz#1809772)
• Resolves: bz#1809772 (rebase seabios for RHEL AV-8.3.0)

[1.13.0-1.el8]

• Rebase to 1.13 (bz#1793377)
• Resolves: bz#1793377 (rebase seabios to 1.13)

[1.12.0-5.el8]

• seabios-add-get_keystroke_full-helper.patch [bz#1693031]
• seabios-bootmenu-add-support-for-more-than-9-entries.patch [bz#1693031]
• Resolves: bz#1693031 (On systems with more than 10 available boot devices, keys are uninintuitive)

[1.12.0-4.el8]

• seabios-tpm-Check-for-TPM-related-ACPI-tables-before-attempt.patch [bz#1705212]
• seabios-usb-ehci-Clear-pipe-token-on-pipe-reallocate.patch [bz#1705212]
• Resolves: bz#1705212 (Backport 1.12.1 patches to RHEL-AV 8.1.0)

[1.12.0-3.el8]

• seabios-rh-add-configs-for-ramfb-and-bochs-display.patch [bz#1724098]
• Resolves: bz#1724098 (enable device: bochs-display (seabios))

[1.12.0-1.el8]

• Rebase to 1.12.0 [bz#1666134]
• Resolves: bz#1666134 (Rebase seabios for RHEL-AV release in virt:8.0.0 stream)

[1.11.1-3.el8]

• Resolves: bz#1613465 (Fix seabios package)

[1.11.1-2.el8]

• Resolves: bz#1607349 (Serial Graphics Adapter show error seabios version)

[1.11.1-1.el8]

• Rebasing seabios 1.11.1

[1.11.0-2.el8]

• Syncronizing exploded tree with dist-git

[1.11.0-1.el8]

• Creating RHEL-8.0 initial branch based on 1.11.0
• Resolves: bz#1515300
• (Prepare seabios for RHEL-8.0)

[1.11.0-1]

• Rebased to version 1.11.0
• Add three patches from RHEL

[1.10.2-3]

• Disable cross-compilation on RHEL

[1.10.2-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[1.10.2-1]

• Rebased to version 1.10.2

[1.10.1-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[1.10.1-1]

• Rebased to version 1.10.1

[1.9.3-1]

• Rebased to version 1.9.3

[1.9.1-3]

• Include MPT Fusion driver, in preparation for QEMU 2.6
• Include XHCI and SD in 128k ROM, sacrifice bootsplash instead

[1.9.1-1]

• Rebased to version 1.9.1
• Fix incorrect UUID format in boot output (bz #1284259)

[1.9.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[1.9.0-1]

• Rebased to version 1.9.0

[1.8.2-1]

• Rebased to version 1.8.2

[1.8.1-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[1.8.1-1]

• Rebased to version 1.8.1

[1.8.0-1]

• Rebased to version 1.8.0
• Initial support for USB3 hubs
• Initial support for SD cards (on QEMU only)
• Initial support for transitioning to 32bit mode using SMIs (on QEMU TCG only)
• SeaVGABIOS improvements

[1.7.5.1-1]

• Update to seabios-1.7.5.1

[1.7.5-3]

• Fix PCI-e hotplug (bz #1115598)

[1.7.5-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[1.7.5-1]

• Rebased to version 1.7.5
• Support for obtaining SMBIOS tables directly from QEMU.
• XHCI USB controller fixes for real hardware
• seavgabios: New driver for 'coreboot native vga' support
• seavgabios: Improved detection of x86emu versions with incorrect emulation.
• Several bug fixes and code cleanups

[1.7.4-5]

• Fix booting FreeBSD VMs in virt-manager

[1.7.4-3]

• Build 256k bios images for qemu 2.0

[1.7.4-2]

• Fix kvm migration with empty virtio-scsi controller (bz #1032208)

[1.7.4-1]

• Rebased to version 1.7.4
• Support for obtaining ACPI tables directly from QEMU.
• Initial support for XHCI USB controllers (initially for QEMU only).
• Support for booting from 'pvscsi' devices on QEMU.
• Enhanced floppy driver - improved support for real hardware.
• coreboot cbmem console support.

[1.7.3.2-1]

• Update to 1.7.3.2 for qemu 1.7

[1.7.3.1-3]

• Fix pasto in CONFIG_DEBUG_LEVEL.

[1.7.3.1-2]

• Compile as all three of BIOS, CSM and CoreBoot payload.

[1.7.3.1-1]

• Rebased to version 1.7.3.1
• Fix USB EHCI detection that was broken in hlist conversion of PCIDevices.
• Fix bug in CBFS file walking with compressed files.
• acpi: sync FADT flags from PIIX4 to Q35

[1.7.3-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_20_Mass_Rebuild

[1.7.3-2]

• Install aml files for use by qemu

[1.7.3-1]

• Rebased to version 1.7.3
• Initial support for using SeaBIOS as a UEFI CSM
• Support for detecting and using ACPI reboot ports.
• Non-standard floppy sizes now work again with recent QEMU versions.
• Several bug fixes and code cleanups
• Again fix vgabios obsoletes (bz #981147)

[1.7.2.2-1]

• Update to seabios stable 1.7.2.2
• Obsolete vgabios (bz #967315)

[1.7.2-1]

• Rebased to version 1.7.2
• Support for ICH9 host chipset ('q35') on emulators
• Support for booting from LSI MegaRAID SAS controllers
• Support for using the ACPI PM timer on emulators
• Improved Geode VGA BIOS support.
• Several bug fixes

[1.7.1-4]

• Root seabios package is noarch too because it only contains docs

[1.7.1-3]

• Add seavgabios subpackage

[1.7.1-2]

• Build with cross compiler. Resolves: #866664.

[1.7.1-1]

• Rebased to version 1.7.1
• Initial support for booting from USB attached scsi (USB UAS) drives
• USB EHCI 64bit controller support
• USB MSC multi-LUN device support
• Support for booting from LSI SCSI controllers on emulators
• Support for booting from AMD PCscsi controllers on emulators

[1.7.0-4]

• Modernise and tidy up the RPM.
• Allow debug versions of SeaBIOS to be built easily.

[1.7.0-3]

• Enable S3/S4 support for guests (it's an F18 feature after all)

[1.7.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[1.7.0-1]

• Rebased to version 1.7.0
• Support for virtio-scsi
• Improved USB drive support
• Several USB controller bug fixes and improvements

[1.6.3-2]

• Fix bugs in booting from host (or redirected) USB pen drives

[1.6.3-1]

• Update to 1.6.3 upstream
• Add virtio-scsi

[0.6.2-4]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[0.6.2-3]

• Stop advertising S3 and S4 in DSDT (bz#741375)
• incdule iasl buildreq

[0.6.2-2]

• Fix QXL bug in 0.6.2

[0.6.2-1]

• Update to 0.6.2 upstream for a number of bugfixes

[0.6.1-1]

• Update to 0.6.1 upstream for a number of bugfixes

[0.6.0-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[0.6.0-1]

• Update seabios to latest stable so we can drop patches.

[0.5.1-2]

• Ugly hacks to make package noarch and available for arch that cannot build it.
• Disable useless debuginfo

[0.5.1-1]

• Update to 0.5.1 stable release
• Pick up patches required for current qemu

[0.5.1-0.1.20100108git669c991]

• Created initial package

sgabios supermin [5.1.19]

• Resolves: bz#1810193 (Upgrade components in virt:rhel module:stream for RHEL-8.3 release)

[5.1.19-9]

• Rebuild all virt packages to fix RHEL's upgrade path
• Resolves: rhbz#1695587 (Ensure modular RPM upgrade path)

[5.1.19-8]

• Pass CFLAGS & LDFLAGS to final supermin link resolves: rhbz#1624175

[5.1.19-7]

• Rebuild for OCaml 4.07.0.

[5.1.19-6]

• Drop dietlibc in RHEL 8 resolves: rhbz#1588067

[5.1.19-5]

• Bump release and rebuild.

[5.1.19-4]

• Reenable hardened build

[5.1.19-3]

• Fix bytes/string problems.

[5.1.19-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_28_Mass_Rebuild

[5.1.19-1]

• New upstream version 5.1.19.
• Remove all patches, now upstream.

[5.1.18-5]

• Rebuilt for RPM soname bump

[5.1.18-4]

• Fix supermin crash with truncated vmlinuz file (RHBZ#1477758).
• Include all upstream patches since 5.1.18.

[5.1.18-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Binutils_Mass_Rebuild

[5.1.18-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_27_Mass_Rebuild

[5.1.18-1]

• New upstream release 5.1.18.
• Fixes problem with creating incorrect symlinks (RHBZ#1470157).

[5.1.17-5]

• Enable dietlibc on aarch64 and POWER.

[5.1.17-4]

• Drop dependency on hawkey and versioned dependencies on dnf.

[5.1.17-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_26_Mass_Rebuild

[5.1.17-2]

• Rebuild for OCaml 4.04.0.

[5.1.17-1]

• New upstream release 5.1.17.
• Check signature on the tarball before unpacking it.
• Remove patches, all upstream.

[5.1.16-6]

• Switch to dietlibc on s390x

[5.1.16-5]

• Do not break the binary on interpreted builds (#1375213)

[5.1.16-4]

• Add all upstream patches since 5.1.16 was released.

[5.1.16-3]

• Add upstream patch for DAX / vNVDIMM support.

[5.1.16-2]

• New upstream version 5.1.16.
• Drop all patches since they are upstream.
• Depend on systemd-udev to work around RHBZ#1331012.

[5.1.15-2]

• Add all upstream patches since 5.1.15 was released.
• These should improve boot performance and initrd size.

[5.1.15-1]

• New upstream version 5.1.15.
• Remove all patches, since they are now included in this version.
• Enable dietlibc, remove glibc-static, xz-static, zlib-static.

[5.1.14-4]

• Add more patches since 5.1.14.

[5.1.14-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_24_Mass_Rebuild

[5.1.14-2]

• Add all patches since 5.1.14.

[5.1.14-1]

• New upstream version 5.1.14.
• Remove all patches - now upstream.

[5.1.13-4]

• Pull in all upstream patches since 5.1.13.
• Choose providers better (RHBZ#1266918).
• Use autopatch.
• Explicitly depend on pod2html.

[5.1.13-3]

• Bump version to rebuild against new RPM in Rawhide.

[5.1.13-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_23_Mass_Rebuild

[5.1.13-1]

• New upstream version 5.1.13.
• Remove patch, now upstream.

[5.1.12-11]

• Prefer 'dnf download' over 'yumdownloader' (again).
• BR grubby for the tests to work.

[5.1.12-9]

• Revert back to yumdownloader (RHBZ#1186948).

[5.1.12-8]

• Prefer 'dnf download' over 'yumdownloader'.

[5.1.12-7]

• Disable hardened build again. See RHBZ#1202091 RHBZ#1204162.

[5.1.12-6]

• Enable hardening flags by building the static 'init' specially before the main build.
• Use _smp_mflags.

[5.1.12-4]

• Add a -devel subpackage containing automated RPM dependency generator for supermin appliances.

[5.1.12-2]

• Disable hardened build as it breaks building the static 'init' binary.

[5.1.12-1]

• New upstream version 5.1.12.
• Includes ARM fix: lpae kernels can now be booted (RHBZ#1199733).

[5.1.11-2]

• Rebuild for xz-5.2.0 in Rawhide (RHBZ#1179252).

[5.1.11-1]

• New upstream version 5.1.11.

[5.1.10-2]

• Update to upstream commit d78c898c7e2bc5f12cbebef98b95a7908d9120f1.
• BR rpm-devel, since it is now used instead of invoking rpm.
• BR automake and autoconf, and run autoreconf (configure.ac is modified by the patches).

[5.1.10-1]

• New upstream version 5.1.10.
• Remove patch which is now included upstream.

[5.1.9-3]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_22_Mass_Rebuild

[5.1.9-2]

• Add upstream patch to avoid endless loop in Rawhide.

[5.1.9-1]

• New upstream version 5.1.9.
• Remove patches which are now upstream.

[5.1.8-9]

• Add Requires findutils (RHBZ#1113029).

[5.1.8-8]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_21_Mass_Rebuild

[5.1.8-7]

• Add patch to fix RPM handler when filenames may contain spaces.

[5.1.8-4]

• Skip execstack test on Fedora 20 (ARM only).

[5.1.8-3]

• BR xz-static & xz-devel packages, to support xz-compressed kernel modules.

[5.1.8-1]

• New upstream version 5.1.8.
• Remove patches which are now upstream.

[5.1.7-3]

• Add upstream patch which removes need to run execstack (RHBZ#1093261).

[5.1.7-2]

• Add patch to fix quoting around mke2fs parameter (RHBZ#1084960).

[5.1.7-1]

• New upstream version 5.1.7.
• Remove ppc64p7 patch which is now upstream.

[5.1.6-5]

• Requires tar, which is not installed in an @Core installation.

[5.1.6-4]

• Add upstream patch to fix supermin on ppc64p7.

[5.1.6-3]

• New upstream version 5.1.6.
• Fix tests.

[5.1.5-2]

• Disable execstack on aarch64. It comes from prelink which does not exist on aarch64.

[5.1.5-1]

• New upstream version 5.1.5.

[5.1.3-1]

• New upstream version 5.1.3.

[5.1.2-1]

• New upstream version 5.1.2.
• Fixes a serious bug in --build mode.

[5.1.1-1]

• New upstream version 5.1.1.
• Remove patch which is now upstream.

[5.1.0-3]

• Add BR yum-utils (for yumdownloader).
• Add upstream patch which stops duplicate packages appearing.

[5.1.0-2]

• New upstream version 5.1.0.
• Note this is effectively a rewrite, and is not completely compatible.
• There is no separate 'supermin-helper' subpackage any more.
• Requires rpm instead of yum.

[4.1.6-2]

• New upstream version 4.1.6.
• Should fix all autotools brokenness.
• Man pages are now all in section 1.
• Remove patch which is now upstream.
• +BR /usr/bin/execstack (from prelink).

[4.1.5-5]

• Rerun autoreconf to fix autotools brokenness.

[4.1.5-4]

• Why was prelink required? Remove it.

[4.1.5-3]

• correct Obsoletes version for febootstrap and febootstrap-supermin-helper

[4.1.5-2]

• (For ARM) Don't crash if SUPERMIN_DTB is set and --dtb not specified.

[4.1.5-1]

• New upstream version 4.1.5.
• Has (optionally) a new command line syntax.
• Supports device trees for ARM.

[4.1.4-1]

• New upstream version 4.1.4.
• Supports compressed cpio image files, experimentally.

[4.1.3-1]

• New upstream version 4.1.3.
• Remove patch which is now upstream.
• Add examples directory to documentation.

[4.1.2-2]

• Include upstream patch to get correct directory setgid/sticky bits in the appliance.

[4.1.2-1]

• New upstream version 4.1.2.
• Remove patch which is now upstream.

[4.1.1-2]

• Add upstream patch to ignore ghost non-regular files.
• This fixes builds on Fedora 20 because the filesystem package has been changed so /var/lock and /var/run are marked as ghost.

[4.1.1-1]

• New upstream version 4.1.1.
• The program has been renamed 'supermin' from 'febootstrap'.
• Obsolete, but don't Provide because supermin is not a compatible replacement.
• Use '_isa' to specify architecture of supermin-helper subpackage.

[1:3.21-2]

• Add upstream patch to drop supplemental groups (RHBZ#902476).
• Remove 'Group:' RPM headers which are no longer necessary.
• Remove some commented-out requirements.

[1:3.21-1]

• New upstream version 3.21.

[1:3.20-1]

• New upstream version 3.20.

[1:3.19-2]

• Work around brokenness in yum (RHBZ#850913).
• Remove defattr, no longer required.

[1:3.19-1]

• New upstream version 3.19.

[3.18-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_18_Mass_Rebuild

[3.18-1]

• New upstream version 3.18.
• This adds support for EPEL 5.

[3.17-1]

• New upstream version 3.17.

[3.16-1]

• New upstream version 3.16.

[3.15-1]

• New upstream version 3.15.
• This version includes root= support, needed for libguestfs with virtio-scsi.
• Remove upstream patch.

[3.14-6]

• For RHEL 7 only, add ExclusiveArch x86-64.

[3.14-5]

• Bundled gnulib (RHBZ#821752).

[3.14-4]

• Add back explicit dependencies for external programs.

[3.14-3]

• Drop ExclusiveArch as it's supported on all primary & secondary arches
• Cleanup spec and deps

[3.14-2]

• New upstream version 3.14.
• Add upstream patch to fix RHBZ#808421.

[3.13-4]

• e2fsprogs moved /sbin/mke2fs to /usr/sbin (thanks Eric Sandeen).

[3.13-2]

• Missing BR zlib-static.

[3.13-1]

• New upstream version 3.13.
• Remove upstream patch which is included in this version.

[3.12-5]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_17_Mass_Rebuild

[3.12-4]

• Depend on latest e2fsprogs (RHBZ#771310).

[3.12-2]

• Include upstream patch to work around Python stupidity.

[3.12-1]

• New upstream version 3.12.
• Remove upstream patch which is included in this version.

[3.11-2]

• Add upstream patch to fix febootstrap on non-Debian.

[3.11-1]

• New upstream version 3.11.

[3.10-1]

• New upstream version 3.10.

[3.9-1]

• New upstream version 3.9.

[3.8-1]

• New upstream version 3.8.

[3.7-1]

• New upstream version 3.7.

[3.6-1]

• New upstream version 3.6.
• This version no longer needs external insmod.static.

[3.5-1]

• New upstream version 3.5.
• Remove patch which is now upstream.

[3.4-2]

• Don't fail if objects are created in a symlinked dir (RHBZ#698089).

[3.4-1]

• New upstream version 3.4.
• febootstrap-supermin-helper Obsoletes older versions of febootstrap.

[3.3-5]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_15_Mass_Rebuild

[3.3-4]

• Split package into febootstrap (for building) and febootstrap-supermin-helper (for running). Note that febootstrap depends on febootstrap-supermin-helper, but you can install febootstrap-supermin-helper on its own.

[3.3-3]

• Clear executable stack flag on febootstrap-supermin-helper.

[3.3-2]

• add the ocaml's ExclusiveArch

[3.3-1]

• New upstream version 3.3.

[3.2-1]

• New upstream version 3.2.
• Remove upstream patches.

[3.1-5]

• Previous fix for RHBZ#654638 didn't work, fix it correctly.

[3.1-4]

• Properly ignore .*.hmac files (accidental reopening of RHBZ#654638).

[3.1-3]

• Uses yumdownloader at runtime, so require yum-utils.

[3.1-2]

• New upstream version 3.1.
• BR insmod.static.

[3.0-2]

• New upstream version 3.0 (note this is incompatible with 2.x).
• Fix upstream URLs.
• fakeroot, fakechroot no longer required.
• insmod.static is required at runtime (missing dependency from earlier).
• The only programs are 'febootstrap' and 'febootstrap-supermin-helper'.
• BR ocaml, ocaml-findlib-devel.
• No examples are provided with this version of febootstrap.

[2.11-1]

• New upstream version 2.11.
• Fixes 'ext2fs_mkdir .. No free space in directory' bug which affects libguestfs on rawhide.

[2.10-1]

• New upstream version 2.10.
• Adds -u and -g options to febootstrap-supermin-helper which are required by virt-v2v.

[2.9-1]

• New upstream version 2.9.
• Fixes directory ordering problem in febootstrap-supermin-helper.

[2.8-1]

• New upstream version 2.8.

[2.8-0.2]

• New pre-release version of 2.8.
  • Note this is based on 2.7 + mailing list patches.
• New BRs on mke2fs, libext2fs, glibc-static.

[2.7-2]

• New upstream version 2.7.
• febootstrap-supermin-helper shell script rewritten in C for speed.
• This package contains C code so it is no longer 'noarch'.
• MAKEDEV isn't required.

[2.6-1]

• New upstream release 2.6.
• Recheck package in rpmlint.

[2.5-2]

• New upstream release 2.5.
• Remove BR upx (not needed by upstream).
• Two more scripts / manpages.

[2.4-1]

• New upstream release 2.4.

[2.3-2]

• Rebuilt for https://fedoraproject.org/wiki/Fedora_12_Mass_Rebuild

[2.3-1]

• New upstream release 2.3.

[2.2-1]

• New upstream release 2.2.

[2.0-1]

• New upstream release 2.0.

[1.9-1]

• New upstream release 1.9.

[1.8-1]

• New upstream release 1.8.

[1.7-1]

• New upstream release 1.7.

[1.5-3]

• Configure script has (unnecessary) BuildRequires on fakeroot, fakechroot, yum.

[1.5-2]

• Initial build for Fedora.